Privacy Policy

Effective date: 25 October 2026.

Who is responsible for your information?

Whisky Clan is operated by Creatos Media Ltd, a company registered in England and Wales (number 11621134), whose registered office is 102-105 Lichfield Street, Tamworth, United Kingdom, B79 7QB. Creatos Media Ltd is the controller of personal information used for the purposes described here. Contact info@whisky-clan.com with privacy questions or requests.

Competitions and giveaways

For promotions, we use entry details to administer participation, verify eligibility and contact winners. We collect delivery addresses from winners and minimise age-verification information. Prize photos and limited winner announcements are explained in the Competition and Giveaway Terms and the individual promotion. Marketing consent is separate from entry. Retention and any verification-provider details will be explained when information is collected.

Information we collect

We collect details you provide when ordering, creating an account, contacting us, subscribing or contributing to our community: for example your name, email, delivery and billing addresses, order details, messages, account information and marketing choices. Where a form asks for age or date of birth, this is information you provide through that form. Please do not send sensitive information that we do not need.

Our site and service providers may collect IP addresses, device/browser details, technical logs, referral information, page interactions and cookie or similar identifiers. Optional tracking depends on your choices and the services enabled. Payment services process payment credentials; we receive the transaction and payment-status information needed to manage your order. We also receive order and customer details from marketplaces where you buy from us, such as eBay, and delivery updates from fulfilment and shipping providers.

Why we use information

Orders and customer service: process purchases, arrange production/delivery, handle cancellations, returns and enquiries, and send service messages. Our basis is performance of a contract or steps you request before a contract.
Legal duties: maintain required tax/accounting records and respond to lawful regulatory requests. Our basis is compliance with legal obligations.
Security and business administration: prevent fraud, protect accounts, resolve disputes and maintain our services. We rely on our legitimate interests in running a secure business, balanced against your rights.
Newsletters and promotions: send marketing with your consent, or where a lawful existing-customer exception applies and you have been offered an opt-out. You can unsubscribe using the message link or contact us. Service messages are separate.
Optional analytics and advertising: where enabled, understand visits, measure campaigns and personalise advertising using consent where required. Optional tracking is described in our Cookie Policy and consent controls.

Information needed to fulfil an order is necessary for that contract. Without required delivery or payment information we may be unable to supply it. Marketing consent is optional.

Who receives information?

We share necessary information with Wix for website and shop services; Printful for producing, packing and fulfilling products and investigating problems; payment providers for processing payments and fraud checks; carriers for delivery; and service providers supporting customer communications, IT, accounting and legal advice. Authorities receive information when required by law. Some providers also act as independent controllers for their own legal or service purposes.

Marketplace purchases also involve the platform’s own privacy policy. If we begin selling through additional marketplaces, such as Amazon or Etsy, we will use customer information received from them to administer those sales and comply with their rules. A planned sales channel is not evidence that it currently receives your data.

Advertising and affiliate plans

We plan to work with advertising services, including Meta and Google, and affiliate networks. Before introducing new tracking or audience-matching activities, we will update this notice and consent information to identify the active services, data involved and choices available. These plans do not mean every named service is currently active. We will not use a purchase as automatic permission for all advertising uses.

International processing and retention

Our providers may process information outside the UK or your home country. Where required, transfers must use recognised adequacy arrangements or appropriate contractual safeguards, together with any necessary additional protections. Contact us for information about the safeguards relevant to your data.

We keep information for the purpose for which it is needed, considering tax/accounting duties, limitation periods, disputes and security needs. Order records may need to remain after an account is closed. We retain marketing preferences and a minimal suppression record where necessary to honour an unsubscribe. We delete or anonymise information when no longer required.

Your rights

Depending on applicable law and the circumstances, you may request access, correction, deletion, restriction or a portable copy of your information, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. You can object to direct marketing at any time. Rights have exceptions, including records we must legally retain. We may ask for proportionate information to verify your identity and will respond within the applicable legal timescale.

You may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, or to your local supervisory authority where applicable. We would welcome the opportunity to address a concern first.

Our whisky content is intended for adults of legal drinking age. If you believe a child has supplied personal information, contact us. We will review material changes to this policy and provide additional notice or obtain fresh consent where required.