Privacy Policy

Last updated: January 2025

The Whisky Standard ('we', 'us', 'our') is the data controller responsible for personal data processed in connection with this website. For any data protection enquiry, please contact us via our contact page.

We collect only the personal data necessary to operate this website and to respond to enquiries. This may include:

• Information you provide voluntarily through our contact form (name, email address, subject and message).
• Cookie and analytics data, subject to your consent as described in our Cookie Policy.
• Technical information such as browser type and IP address, collected via essential cookies for security and site operation.

We process personal data under the lawful bases set out in UK GDPR Article 6:

• Consent (Article 6(1)(a)) — for non-essential cookies and analytics.
• Legitimate interests (Article 6(1)(f)) — for responding to enquiries and maintaining the security of the website.

Personal data is processed to respond to editorial enquiries, to maintain the security and integrity of the website, and, where you have consented, to understand aggregate usage of the site.

Where analytics services are used with your consent, they may include Google Analytics or an equivalent provider. Any such processor is subject to its own privacy terms. We do not sell personal data to third parties.

Under UK GDPR Articles 15 to 21, you have the following rights in respect of your personal data:

• Right of access (Article 15) — to obtain a copy of the personal data we hold about you.
• Right to rectification (Article 16) — to correct inaccurate personal data.
• Right to erasure (Article 17) — to request deletion of your personal data.
• Right to restrict processing (Article 18).
• Right to data portability (Article 20).
• Right to object (Article 21) — to object to processing based on legitimate interests.

To exercise any of these rights, please contact us via our contact page.

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the United Kingdom's supervisory authority for data protection, at any time. The ICO can be contacted via ico.org.uk.

Enquiries submitted via our contact form are retained for a period of twelve months and then deleted, unless a longer retention period is required for legitimate editorial or legal purposes.

This Privacy Policy is drafted in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.