We promise to respect and protect your personal data.
Speyside Distillers Company Ltd is committed to respecting and protecting any personal information (data) that we collect and use. This is a brief statement outlining your privacy rights and how we embed these into our working practices.
We will process data strictly in accordance with the Data Protection Act 2018, (DPA) the General Data Protection Regulation (GDPR UK) and the Privacy and Electronic Communications Regulation 2003 (PECR) under our lawful reason of Legitimate Interest, which means that we will only use your data for the purposes it was collected for, and we will always give you the opportunity to op-out from any direct marketing we may send you in every instance. We will carry out a Legitimate Interest Assessment to ensure the validity of this processing reason for any new processes.
We will, under the legal basis of Consent, offer an opportunity for you to opt in to receive newsletters and marketing from us. If you choose to do this your information will not be shared with other organisations unless there is a legal requirement to do so. You can opt out of receiving marketing at any time and your information will be removed from use for this purpose.
The personal data we collect from you are such things as your name and address / business address which can identify you as an individual. We will only collect the minimum data we need for the purposes of your business with us and to satisfy any due diligence or good governance requirements in line with financial regulations and His Majesty’s Revenue and Customs duties.
We collect data from the start of our conversations with you, and throughout our business arrangements with each other. For example:
We will not divulge your personal data to any other organization or authority unless obliged to do so by law. We will only share personal data with other interested organisations and bodies with whom we have firm data sharing contracts which guarantee the security and privacy of your data which in some circumstances will be anonymized.
Our systems meet the requirements set out under The General Data Protection Regulations (2016), The Data Protection Act (2018) and The Private and Electronic Communications (EC Directive) Regulations (2003). We will minimise your data to eliminate any unnecessary duplication and we always ensure that the privacy of your information is paramount by conducting data privacy impact assessments as an integral part of designing new systems for data processing. Our staff are trained in data security and our policies and procedures help them to understand what is required under their obligations to us and their responsibilities to your data security under current data protection legislation.
We only hold your data for the period of time required to comply with the relevant legislation. Wherever possible the personal data held will be minimized and/or anonymized. If you remove your Consent to receive marketing information, we will remove any identifiable data we hold for this purpose within 5 working days.
The GDPR UK, gives you the right of access to your data by means of a Data Subject Access Request (DSAR). You may ask to see what personal data we hold and you have the right to ask us to rectify anything which is incorrect and in some circumstances the right to restrict or even erase it. You will also have the right to information about any automatic processing. Whilst we are more than happy to discuss your personal data with you on an informal basis you may exercise your data privacy rights by contacting our Managing Director. You also have the right to complain to the UK regulatory body the information Commissioners Office (ICO), who you can find at https://ico.org.uk.
For the purposes of Data Protection Legislation, we are the data controller of your information. Our Data Protection Policy is reviewed annually and is available on request. This Data Protection Privacy Statement is also reviewed annually.
Should you wish to contact someone regarding any aspect of this privacy statement, please email Patricia Dillon at info@speysidedistillers.co.uk. Alternatively our contact telephone number is 0141 221 3745.
Yes, we use cookies on our website. All cookies on our website apart from the essential ones which are strictly necessary to operate the site are disabled when you first log on and a banner invites you to switch no-essential cookies on if you wish. The cookies which we place on your hard disk give us statistical information on how well our website works in addition to anaylsying the site’s usage and recognizing you again when you re-visit it.