ATLAS SPIRITS Ltd.
The privacy of our users is important to us and we take care to safeguard it.
This policy sets out how Atlas Spirits LTD (“we”) handle, store, and use your personal information.
Atlas Spirits Ltd, registered at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ (“we”) will keep your data safe, never sell your personal data and give you the decision about how your information is shared.
What information do we collect about you?
When you supply any personal information to us we have legal obligations towards you in the way we use that data.
We must collect information lawfully and fairly, that is, we must explain why we are collecting it, how we will use it; collect only the information needed and remove it in the event that the purpose has been met; and we will tell you if we want to pass the information on to anyone else.
We collect information about you when you register with us or place an order for products or services.
We also collect information when you voluntarily complete customer surveys, provide feedback and participate in competitions.
We may receive information about you from associate third parties, who you have given consent to.
The information we collect may include names, addresses, telephone numbers, email addresses, financial details, visual images and behaviour (e.g. how you use our websites).
How will we use the information about you?
We collect information about you to respond to your enquiries, process your order(s), manager your account(s) and, if you agree, to contact you about other products or services we think may be of interest to you.
In general, any information you provide to us will only be used by us. Your information will be disclosed where we are obliged by law.
Lawful bases for processing personal data
We process personal information to enable us to carry out our duties and specifically where:
- An individual has consented to the processing of their data for the specified purpose(s);
- Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party;
- Processing is necessary for compliance with a legal obligation to which the controller is subject.
How do we share your personal information?
Isle of Harris Distillers Ltd may need to share your personal information with other organisations.
Where such sharing is necessary, we will comply with the requirements of the GDPR on data sharing.
The types of organisations / groups that we may share personal data with are set out below:
- associates and representatives of the person whose personal data we are processing
- professional advisers and consultants
- services providers
- debt collection and tracing agencies
- police forces
- government departments
- financial organisations
- persons making an enquiry or complaint
- organisation subject to a complaint or assessment,
- prosecuting authorities, courts
- other ombudsman and regulatory authorities.
Your rights as a Data Subject
You have the following rights in relation to your personal information which you can exercise by sending an email or writing to the Data Protection Officer (DPO) (details in Questions & Concerns section below):
- Right to request access to your personal information and information relating to our use and processing of your personal information;
- Right to request that we restrict our use of your personal information;
- Right to receive your personal information in a structured commonly-used and machine-readable format or transmit the data directly to another Data Controller;
- Right to object to the processing of your personal information for certain purposes such as direct marketing and profiling;
- Right to request your personal information to be erased where it is no longer necessary for the purpose for which it was collected
- Right to withdraw your consent to the use of your personal information where the processing of your data is based on consent.
We will not make any decision about you using automated means only, and will notify you in writing if this position changes.
How long do we retain your personal information?
We will retain your personal information for no longer than necessary taking into account the following:
- The purpose(s) for which we are processing your personal information, such as whether it is necessary to continue to store that information in order to perform our obligation under a contract;
- Whether we have any legal obligation to continue to process your personal information such as any recordkeeping obligations imposed by an applicable law;
- Whether we have a business reason to continue to process your personal information;
How do we secure your personal information?
We take appropriate technical and organisational measures to secure your personal information and protect it against unauthorised or unlawful processing as well as against its accidental loss or destruction or damage including:
- Using secure servers to store your personal information;
- Using Secure Sockets Layer (SSL) software or other similar encryption technologies to encrypt confidential data in transit and at rest;
- Verifying the identity of individuals that access your personal information;
- Providing access to the minimum amount of personal data necessary, using appropriate restrictions and anonymisation/pseudonymisation whenever possible.
Transfer of your personal information to other countries
We may need to transfer your personal information to countries outside the European Economic Area (EEA) or to an international organisation from time to time. Where we transfer your personal information outside the EEA, we will ensure that the adequate safeguards are used to secure the data.
Questions and Concerns
If you have any questions or concerns regarding how we collect, handle, store or secure your personal information, contact our Data Protection Officer (DPO) using the details below: