Introduction

CannyCask Limited is committed to protecting your privacy and handling your personal information transparently, securely and responsibly.

This Privacy Policy explains how we collect, use, store and protect personal information when you use the CannyCask website, platform and services.

Information We Collect

We may collect the following information:

1. name;
2. email address;
3. telephone number;
4. postal address;
5. date of birth;
6. identity verification information;
7. payment and transaction information;
8. cask ownership information;
9. correspondence and communications;
10. IP address, browser information and device information; and
11. information collected through cookies and similar technologies.

How We Use Your Information

We use personal information to:

1. provide our services;
2. process purchases and ownership transfers;
3. complete identity and compliance checks;
4. communicate with customers;
5. maintain bonded warehouse ownership records;
6. administer Digital Delivery Orders (DDOs);
7. support DAV VERIFIED® verification processes;
8. comply with legal and regulatory obligations; and
9. improve our website, platform and services.

Legal Basis for Processing

We process personal information on one or more of the following legal bases:

1. contractual necessity;
2. legal obligation;
3. legitimate interests; and
4. consent, where required.

Data Sharing

We do not sell personal information.

We may share information with:

1. bonded warehouses and warehousekeepers;
2. identity verification providers;
3. compliance and screening providers;
4. payment providers;
5. professional advisers;
6. regulators, law enforcement agencies or government authorities where required; and
7. service providers supporting operation of the platform.

Information is shared only where reasonably necessary for operational, legal or regulatory purposes.

Data Retention

We retain information only for as long as reasonably necessary to:

1. provide our services;
2. maintain ownership and transaction records;
3. comply with legal obligations; and
4. resolve disputes or enforce agreements.

Retention periods may vary depending on the nature of the information and applicable legal requirements.

Your Rights

Subject to applicable law, you may have the right to:

1. access your personal information;
2. correct inaccurate information;
3. request deletion of information;
4. restrict processing;
5. object to processing;
6. withdraw consent where consent applies; and
7. request a copy of your information.

Requests may be submitted using the contact details below.

Security

CannyCask maintains appropriate technical and organisational measures designed to protect personal information from unauthorised access, disclosure, alteration or destruction.

No method of transmission or storage can be guaranteed to be completely secure.

International Transfers

Where information is transferred outside the United Kingdom, appropriate safeguards will be implemented where required by law.

Cookies

The CannyCask website uses cookies and similar technologies.

Further information is available in the CannyCask Cookie Policy.

Contact

For privacy-related enquiries, please contact:

support@cannycask.com

Complaints

If you are dissatisfied with how we handle your personal information, you may contact us using the details above.

You may also have the right to lodge a complaint with the relevant data protection authority.

Governing Law

This Privacy Policy shall be governed by the laws of Scotland.

Any dispute arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the Scottish courts.