Privacy Policy

Privacy Policy

Introduction

The Drinks Agency Ltd is committed to protecting the privacy of our customers and website visitors. This Privacy Policy explains how we collect, use, share, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The Drinks Agency Limited is the data controller for your personal data. We are registered in England and Wales, company number 10817422, and our address is 13 Montpellier Arcade, Cheltenham GL50 1SU.

Information We Collect

Personal Data You Provide: When you create an account, place an order, or contact us, we may collect:

Contact information (name, email address, postal address, phone number)

Billing address. Card payments are processed securely by our payment provider, Lightspeed Payments. We never see or store your full card number.

Purchase history

Marketing preferences

Information provided in surveys or feedback forms

Confirmation that you are 18 or over, where needed to sell alcohol or tobacco

Data Collected Automatically: We collect certain information automatically as you use our site:

IP address

Browser type and version

Device information

Pages visited and actions taken on our website

Cookies (small text files stored on your device, see the Cookies section below)

How We Use Your Information and Our Legal Basis

Processing Orders: To fulfil your orders, communicate about their status, and process payments. Legal basis: to perform our contract with you.

Customer Service: To answer your questions, resolve issues, and improve customer support. Legal basis: contract, and our legitimate interest in helping customers.

Personalised Marketing: With your consent, to send promotional offers, product recommendations, and updates tailored to your interests. You may withdraw consent at any time. Legal basis: consent.

Website Improvement: To analyse website usage, enhance user experience, and optimise our services. Legal basis: legitimate interests, and your consent for analytics cookies.

Security and Fraud Prevention: To protect our website, business, and customers from unauthorised access, fraudulent activities, and security threats. Legal basis: legitimate interests.

Legal Compliance: To comply with legal obligations, court orders, or to establish or defend legal claims. Legal basis: legal obligation.

Data Sharing

We share your information in limited circumstances:

Third-party Service Providers: We work with service providers to perform essential functions. They have access to data only as necessary for these purposes and are bound by confidentiality agreements. These include Lightspeed (our online store and payments), Royal Mail (delivery), Mailchimp (marketing emails, only if you have opted in) and Google (website analytics, shopping listings and, if you opt in after an order, customer review surveys).

Legal Requirements: We may disclose your data if required by law, to protect our rights, or in cases of suspected fraud or security issues.

Business Transfers: In the event of a merger, acquisition, or sale, your information may be transferred.

We never sell your personal data.

Data Security

We implement technical and organisational measures to safeguard your data, including encryption, firewalls, and access controls. However, no data transmission method is entirely secure.

Your Rights under UK Data Protection Law

Access: You can request a copy of the personal data we hold about you.Rectification: You can request correction of inaccurate or incomplete data.

Erasure ("Right to be Forgotten"): Under certain conditions, you can request deletion of your personal data.

Restriction of Processing: You may request that we limit how we process your data.

Data Portability: You have the right to receive your data in a structured, machine-readable format.

Objection: You may object to certain data processing activities, including direct marketing.

Withdrawing consent: where we rely on your consent, you can withdraw it at any time, for example by using the unsubscribe link in our emails.

We will respond to your request within one month.

Complaints: if you are unhappy with how we use your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

International Transfers

If service providers process your data outside the United Kingdom, we ensure appropriate safeguards are in place to protect your information, such as UK adequacy regulations or the UK International Data Transfer Agreement.

Data Retention

We retain your data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. In practice: order and payment records for 6 years for tax purposes; marketing data until you unsubscribe; account details until you ask us to close your account.

We use essential cookies to make our website and checkout work. We use analytics and marketing cookies only with your consent, which you can give or change using the cookie banner on our website. You can also delete or block cookies in your browser settings.

Children's Privacy

We do not sell to anyone under 18, and our website is not intended for children. We do not knowingly collect data from minors.

Changes to this Policy

We may update this policy periodically. The updated version will be posted on our website with the effective date indicated. Last updated: 9 October 2026

For questions or to exercise your rights, please contact us at one of the following:

cheers@drinksagency.com

13 Montpellier Arcade, Cheltenham GL50 1SU

+44 (0)1242 539032

Free Shipping on all orders this month >>>> FREEXMAS<<<<