PRIVACY POLICY

Please read before booking

Whisky Prestige Travel

This policy was last updated on 1st March 2021

We at Whisky Prestige Travel understand that your privacy and how your data is used is important to you. We will only collect and use personal data in ways that are described here, and in line with our statutory obligations and your rights under law.

About Whisky Prestige Travel

Whisky Prestige Travel is the trading name of sole trader, Mr Michael Milloy who acts as data controller.

Mailing address: 46 Longpark Place, LIVINGSTON, Scotland EH54 6TU

Email address: michael@whiskyprestige.co.uk

Telephone number: 07803 856449

What the privacy policy covers.

This privacy policy explains how we use your personal data: how it is collected, how it is held, and how it is processed. It also explains your rights under the law relating to your personal data.

Personal data definition

Personal data is defined by the General Data Protection Regulations (the “GDPR”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’.

Your rights

Under the Global Data Protection Regulations (“GDPR”), you have;

The right to be informed about our collection and use of your personal data, as outlined in this policy.
The right to access the personal data we hold about you.
The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete.
The right to be forgotten, i.e., the right to ask us to delete or otherwise dispose of any of your personal data,
The right to restrict or prevent the processing of your personal data.
The right to object to us using your personal data for a particular purpose.
The right to data portability. If you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to re-use with another service or business.
Rights relating to automated decision-making and profiling; however, we do not use your personal data in this way.

Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau.

If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office.

Data that we may collect about you.

We may collect some or all of the following personal data;

Name
Address
Telephone Number
Email Address
Date of Birth
Age
Gender
Lifestyle Information
Business Name
Job Title
Payment Information
Bank Details
Purchase History

Your personal data may also be obtained from the following third parties:

Facebook
Instagram
LinkedIn

We do not knowingly collect personal information from children under the age of 16.

How your data is used

GDPR stipulates we must always have a business requirement for any personal data that we collect and use. This may be because the data is necessary for the delivery of a contract with you, because you have consented to our use of your personal data, or because it is in our legitimate business interests to use it. Your personal data may be used for one of the following purposes:

Supplying our products and services to you. Your personal details are required in order for us to enter into a contract with you.
Personalising and tailoring our products and services for you.
Communicating with you. This may include responding to emails, online chat, video conferencing or telephone calls with you.
Supplying you with information by email, text message or post that you have requested. You may opt-out at any time by contacting us directly.

With your permission and/or where it is permitted by law, we may also use your personal data for marketing purposes, which may include contacting you by email or text message with information, news, and offers on our products and services. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003, and you will always have the opportunity to opt-out.

How long we hold data for

We will not keep your personal data for any longer than is necessary to meet our contractual obligations to you. Your personal data will therefore be retained as follows;

In relation to contracts, agreements and purchases you have entered into we hold data for no longer than seven years in line with our normal accountancy and record keeping practices
In relation to communications and marketing we hold data for no more than five years after your last communication with us.

You may withdraw consent at any time and data will be deleted as soon as possible thereafter and within 30 days of your request

Where data is stored

We will only store or transfer your personal data within the United Kingdom and the European Economic Area (the “EEA”). The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein. This means that your personal data will be fully protected under GDPR or to equivalent standards by law.

Is my personal data shared?

Except as otherwise stated in this Privacy Policy or in the data collection statements that will always be visible when we collect your information and where we give you the opportunity to select your preferences, we may release your data to external companies that we use to process orders, deliver services and marketing. In some cases, those third parties may require access to some or all of your personal data that we hold.

If any of your personal data is required by a third party, as described above, we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, our obligations, and the third party’s obligations,

In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.?

You can access your personal data

You can make a subject access request directly to us if you want to know what personal data we hold about you. All subject access requests should be made in writing to the email addresses provided.

There is normally no charge for a simple subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.

We will normally respond to your subject access request within 14 days and in most cases, not more than one month of receiving it. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request.

Changes to the policy

From time to time to comply with change of legislation or should our business processes change, we may update this policy.

Should these changes affect you or your data, we may notify you by sending an email to your last known email address or writing to your last known postal address to make you aware of the changes. Our dispatch of a communication to you will, in any event, constitute notification and any changes will be effective immediately or as detailed in that communication.

When is data collected?

We collect personal data when you;

Visit our website and/or sign-up to a mailing list.
Make an order or register for tours with us.
Use or view our website via your browser’s cookies.

We may also receive your data indirectly from our social media channels; Facebook, Instagram and LinkedIn.

How will we use and store your data for analytical purposes?

We will retain and evaluate information on your recent visits to our website and how you move around different sections of our website for analytical purposes to understand how people use our website so that we can make it more intuitive.

We will keep a record of the articles on our website that you have clicked on and use that information to target advertising that is relevant to your interests, which we have identified based on articles you have read

When we processes your order or participation in activities, we ask for your full name, date of birth, contact details and payment method- related data.

We may send your data to, and also use the resulting information from, credit reference agencies to prevent fraudulent purchases.

We specifically use Google Analytics software to understand better how you use our website. This includes IP addresses and anonymised data about what pages you visit, how long you spend on each page, how did you get to the site and what did you click while being on the site.

No personal data such as names, addresses, etc. are collected or stored during the Google Analytics process. Neither will we use this data to identify your location.

We need this anonymous data to make sure:
• This site is meeting the needs of our customers and improve our services
• Provide you with information that is relevant to you
• There are no security threats

If you have any questions or concerns regarding this policy, please make contact with Whisky Prestige Travel directly by email or phone.