Updated August 2024

Whisky Estate Pty Ltd (ACN 672262850) is dedicated to safeguarding your privacy as an online visitor to our website.

Whisky Estate Pty Ltd (ACN 672262850 is the controller of the personal information gathered through this website. We are responsible for your personal data, (referred to as ‘we,’ ‘us,’ or ‘our’ in this Privacy Policy).

As a global online business, we strive to comply with the Australian Privacy Principles outlined in The Privacy Act 1993 (Cth) and the General Data Protection Regulations (GDPR) to ensure your information is protected.

We use the information we collect about you to enhance the services and products we offer through our website and business.

By sharing your data with us, you confirm that you are over the age of 18.

This Privacy Policy, along with our Website Terms and Conditions, How to Sell, How to Buy, Shipping and Insurance, and Returns Policy, constitute the entire agreement between you and Whisky Estate Pty Ltd (ACN 672262850.

Contact Information

Our complete contact details are

Whisky Estate Pty Ltd (ACN 672262850).
info@whisky.estate
PO Box 308, Haberfield NSW 2045

It’s crucial that your information remains accurate and current. Please update your account details regularly or notify us of any changes to your personal information by emailing info@whisky.estate.

Personal Data

Personal information/data refers to any information that can identify an individual. It does not include data that is anonymised.

We may process the following types of personal data about you:

Communication Data.

Communication data includes any type of correspondence you send to us. This information may be sent through:

• The contact form on our website
• The subscriber form on our website
• Email, text, social media messaging
• Information that you post to our website for publication on the internet
• Social media posting or
• Through any other message, correspondence or form of communication that you send to us.

We process this data for the following purposes:

• Communicating with you
• Record keeping
• Establishing, pursuing, or defending legal claims

The legal basis for this processing is our legitimate interests, which include responding to communications, maintaining records, and establishing, pursuing, or defending legal claims.

Customer Data

Customer data includes any details you provide regarding purchases of goods and/or services, such as your name, title, billing address, delivery email address, phone number, contact details, purchase information, and credit card and bank details.

We process this information to:

• Supply the goods and/or services you have purchased 

• Maintain records of these transactions

The legal basis for this processing is either the performance of a contract between you and us or taking steps at your request to enter such a contract.

User Data

User information encompasses data on how you interact with our website and online services, as well as any content you post for publication on our website or through other online platforms.

We may collect, store, and use:

1. Information you provide when using our website services or that is generated during your use (including timing, frequency, and patterns of service use). 
2. Information related to a personal or business account on our website (such as name, email address, and date of birth). 
3. Information you share when giving feedback. 
4. Information you provide when updating your personal details or email preferences. 
5. Information you share when participating in surveys. 
6. Information you provide when interacting with our customer support. 
7. Information you post on our website for publication (including username, profile pictures, and post content). 
8. Any other personal information you choose to send to us.

Before disclosing another person’s personal information to us, you must obtain their consent for both the disclosure and the processing of that information in accordance with this policy.

We process this data to:

• Operate our website and deliver relevant content to you 
• Ensure the security of our website 
• Maintain backups of our website and databases 
• Manage the publication and administration of our website, online services, and business

The legal basis for this processing is our legitimate interests, which include effectively managing our website and business.

We will not share your personal information with any third party for their own or any other third party’s direct marketing purposes without your explicit consent.

Technical Data

Technical data includes information about your use of our website and online services, such as details of your visits, including your IP address, geographical location, browser type and version, operating system, referral source, duration of visit, page views, and navigation paths on the website. This data is sourced from our analytics tracking system.

We process this data to analyse your use of our website and online services, manage and safeguard our business and website, deliver relevant content and advertisements, and evaluate the impact of our advertising.

The legal basis for this processing is our legitimate interests, which include effectively managing and growing our website and business, as well as determining our marketing strategy.

Monetary transactions

All financial transactions on our website are currently managed through our payment services providers, Stripe and PayPal. This arrangement may change periodically.

We will provide information to our payment services provider only as necessary to process payments, issue refunds, and address complaints or queries related to payments and refunds.

All individual profile and company details are used solely for the purposes described above.

Information is provided to third-party suppliers only when required by law, for goods or services you have purchased, or to protect our copyright, trademarks, and other legal rights.

Marketing Data

Marketing data includes your preferences for receiving marketing communications from us and our third parties, as well as your communication preferences.

We process this data to:

• Send you our newsletter 
• Allow you to participate in promotions, such as competitions, prize draws, and giveaways 
• Deliver relevant website content and advertisements and assess the impact of this advertising.

The legal basis for this processing is our legitimate interests, which include analysing how customers use our products and services, developing them, growing our business, and shaping our marketing strategy.

We may use Customer, User, Technical, and Marketing Information/Data to:

• Deliver relevant website content and advertisements (including Meta, Google, YouTube and TikTok ads and other display ads) 
• Assess the effectiveness of the advertising we provide.

The legal basis for this processing is our legitimate interest in growing our business.

We may also use this data to send additional marketing communications. The legal basis for this is either your consent or our legitimate interest in growing our business.

Sensitive Data

We do not collect any Sensitive Data about you. Sensitive Data includes information about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health, genetic, and biometric data. Additionally, we do not collect information about criminal convictions or offenses.

Contractual duties

If we are required by law or by the terms of our contract to collect personal data and you do not provide it when requested, we may be unable to fulfill the contract (such as delivering goods or services to you).

If you do not provide the requested information, we may need to cancel the product or service you ordered. If this occurs, we will notify you at that time.

Employment of personal data

We will only use your personal data for the purpose it was collected or for purposes that are reasonably compatible if necessary. If we need to use your data for a new, unrelated purpose, we will inform you and explain the legal grounds for the processing.

We may process your personal information without your knowledge or consent if required or permitted by law.

Processes for collecting personal data

Gathering of your personal data

Cookies

We may automatically collect certain data from you while you use our website through cookies and similar technologies.

A “cookie” is a piece of information stored on your computer’s hard drive that tracks your movements on a website. This allows the website to offer tailored options based on your previous visit. Cookies can also be used to analyse traffic and for advertising and marketing purposes.

Cookies are nearly always used by websites and cause not harm to your system.

To check or change the types of cookies you accept, you can adjust your browser settings. You can block cookies at any time by activating the setting in your browser to refuse all or some cookies. By not blocking cookies and continuing to browse, you consent to their use. Please note that if you block all cookies, including essential ones, you may not be able to access certain parts or features of our site.

The role of cookies in our operations

We use cookies to monitor your use of our website. This helps us understand how you interact with the site and identify patterns in your usage. By doing so, we can develop and enhance our website, products, and services based on your needs and preferences.

Cookie types:

Session cookies: These are stored on your computer only during your web session and are automatically deleted when you close your browser. They typically store an anonymous session ID, allowing you to navigate the website without having to log in to each page. They do not collect any personal data from your computer.

Persistent cookies: A persistent cookie is saved as a file on your computer and remains there even after you close your web browser. This type of cookie can be read by the website that created it when you visit that site again. We use persistent cookies for Google Analytics.

Categories of cookies:

Strictly necessary cookies: These cookies are essential for the effective use of our website, such as when purchasing a product or service, and cannot be disabled. Without these cookies, certain services on our website cannot be provided. They do not collect information about you for marketing purposes or track your browsing history.

Performance cookies: These cookies help us monitor and enhance the performance of our website. They allow us to count visits, identify traffic sources, and determine which areas of the site are most popular.

Functionality cookies: These cookies enable our website to remember your choices and provide enhanced features. For example, they might allow us to deliver relevant news or updates related to the services you use. They can also facilitate requested services, such as viewing videos or commenting on blogs. The information collected by these cookies is typically made anonymous.

Please be aware that third parties who advertise on our website (such as advertising networks and external service providers like web traffic analysts) may also use cookies that we do not control. These cookies are likely to be analytical/performance cookies or targeting cookies.

Marketing Communications

Our legal basis for processing your personal data to send marketing communications is either your consent or our legitimate interest in growing our business.

We may send you marketing communications if:

• You have made a purchase or requested information about our goods or services, or
• You have agreed to receive marketing communications and have not opted out since then
• If you are a limited company, we may send you marketing emails without your consent. You can opt out of receiving marketing emails from us at any time.

Express consent

While it is unlikely that Whisky Estate will share your personal data with third parties for their own marketing purposes, if such a situation arises, we will seek your express consent first.

Opting out of promotional messages

You can request to stop receiving marketing messages from us or third parties at any time by:

• Following the opt-out links in any marketing messages sent to you, or
• Contacting Whisky Estate via email at info@whisky.estate

Please note that opting out of marketing communications does not affect personal data provided through other transactions, such as purchases, warranty registrations, returns, or replacements.

Disclosures of your Personal Data

We may need to share your personal data with the following parties:

• Service providers offering IT and system administration services
• Professional advisers, including lawyers, bankers, auditors, and insurers
• Government bodies requiring us to report processing activities
• Market researchers and analysts
• Marketing agencies we may engage occasionally
• Third parties to whom we sell, transfer, or merge parts of our business or assets

We require all third parties with whom we share your data to ensure its security and handle it in compliance with the law. These third parties are only permitted to process your personal data for specific purposes and according to our instructions.

International Transfers

We may transfer your data internationally to our preferred email marketing platform or CRM. This involves sending your information to countries outside your own for processing and storage.

When we transfer your personal data, we strive to ensure it is protected by implementing at least one of the following safeguards:

• For residents of the European Union, we will only transfer your data to countries approved by the European Commission as providing adequate protection for personal data.
• If we use certain service providers, we may employ specific contracts, codes of conduct, or certification mechanisms approved by the European Commission to ensure your data receives the same level of protection as it does in Europe.
• For US-based providers participating in the EU-US Privacy Shield, we may transfer data to them, as they have equivalent safeguards in place.

If none of these safeguards are available, we may seek your explicit consent for the specific transfer, which you can withdraw at any time.

Information Protection

We are committed to ensuring the security, integrity, and privacy of personal data submitted through our website, and we regularly update our security measures to reflect current technologies.

We will take reasonable technical and organisational steps to prevent the loss, misuse, or alteration of your personal data.

Please be aware that transmitting information or any type of data over the internet carries inherent security risks, and we cannot guarantee the security of data sent online.

We have procedures in place to address any suspected personal data breaches and will notify you and any relevant regulators if required by law.

Data Retention

We will retain your personal data only for as long as needed to fulfill the purposes for which it was collected, including meeting any legal, accounting, or reporting obligations.

For tax purposes, the law requires us to retain basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for five years after they cease to be customers.

In certain circumstances, we may remove identifying details from your data for research or statistical purposes, and in such cases, we may use this anonymised information indefinitely without further notice to you.

Your Legal Rights

Under data protection laws, you have several rights regarding your personal data, including the right to request access, correction, erasure, restriction, transfer, and to object to processing. You also have the right to data portability and, if the lawful basis for processing is consent, the right to withdraw your consent.

To exercise any of these rights, please email us at info@whisky.estate.

To respond to your request, we will need the following information:

• Your name and address
• Your contact telephone numbers

Accessing your personal data is free of charge. However, we may charge a fee if your request is clearly unfounded, repetitive, or excessive, or we may refuse to comply under such circumstances.

For security purposes, to ensure your data is not disclosed to unauthorised individuals, we may request additional information from you.

We aim to respond to all legitimate requests within 30 days. If the request is complex or if there are multiple requests, we will notify you if our response is likely to exceed 30 days.

If you have concerns about how we collect and use your data, please contact us first so we can address the issue promptly. You also have the right to lodge a complaint with the Office of the Australian Privacy Commissioner (https://www.oaic.gov.au), the Australian authority for data protection issues.

Privacy Policy Changes

To keep our privacy policy up-to-date, it is subject to change. We may modify this policy at any time at our discretion, and all changes will take effect immediately upon posting on our website.

Please check this policy periodically to stay informed about any updates.

You can instruct us at any time not to process your personal information for marketing purposes. Typically, you will either give your explicit consent for our use of your personal information for marketing or be given the option to opt out.

If you have any questions or concerns about our Privacy Policy or the use of your personal information, please email us at info@whisky.estate.