PRIVACY & COOKIE POLICy

Last updated: 29 September 2025

At Dark Art Distillery, we are committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible way. This policy explains what personal data we collect, how we use it, how we store it securely, and what your rights are under the UK GDPR and the Data Protection Act 2018.

1. Who we are

We are Dark Art Gin Ltd., trading as Dark Art Distillery, a company registered in Scotland. Our main purpose is to distil, rectify and blend spirits, and we also organise tours and events at our distillery.

Our website: www.darkartdistillery.com

If you have any questions about this policy, please contact us at:
info@darkartdistillery.com

2. What personal data we collect

We may collect and process the following types of personal data:

  • Identity Data – name

  • Contact Data – email address, phone number, postal address

  • Transaction Data – we do not retain or have access to your full payment card details; these are processed securely by our third-party payment providers.

  • Technical Data – IP address, browser type, operating system, device identifiers

  • Usage Data – website interactions, event bookings, purchases and preferences

  • Marketing Data – communication preferences, feedback, survey responses

3. How we collect your data

We collect your data when you:

  • Purchase goods or create an account

  • Visit our website or interact with our social media

  • Contact us via email or online forms

  • Subscribe to our newsletter

  • Use third-party services linked with our site (e.g. Checkfront Tour - Event Booking system, Mailchimp - newsletter subscription)

4. How we use your data

We use your data for the following purposes:

  • To process purchases, payments, and bookings

  • To manage tours, events, and customer enquiries

  • To send service updates and marketing communications (if you’ve opted in)

  • To improve our website, services, and customer experience

  • To comply with financial and legal obligations

We do not sell or rent your data to third parties.

5. Cookies and analytics

We use cookies to improve your experience. These include:

  • Necessary cookies – essential for website functionality

  • Performance/analytics cookies – e.g. Google Analytics

  • Advertising cookies – e.g. Facebook Pixel, Google Ads

You can manage cookie settings via your browser or through the cookie banner on our site.

6. Data retention

We retain personal data for no longer than necessary:

  • Purchases – 48 months

  • Newsletter data – until you unsubscribe

  • Enquiries – 12 months from final contact

  • Financial records – 6 years (as required by law)

We do not store or retain any payment card details when you purchase spirits, tickets, or book tours. All payments are processed securely by trusted third-party providers.

We securely delete or anonymise data when no longer needed.

7. How we keep your data secure

We take data protection seriously and use appropriate security measures including:

  • Secure servers

  • Data encryption

  • Limited access to authorised personnel only

  • Regular review of our security procedures

8. Your rights under UK data law

You have the following rights:

  • To access the personal data we hold about you

  • To correct or update inaccurate or incomplete data

  • To request erasure (‘the right to be forgotten’)

  • To object to or restrict certain types of data processing

  • To request data transfer to another service provider (data portability)

  • To withdraw consent where consent is the basis for processing

We will acknowledge all rights requests within one month, and respond without undue delay.

9. Complaints process

If you are unhappy with how we handle your personal data, you can contact us directly at info@darkartdistillery.com. We will:

  • Acknowledge your complaint within one month

  • Respond without undue delay

  • Keep you informed throughout the process

If you are not satisfied with our response, you can escalate the complaint to the Information Commissioner’s Office (ICO): www.ico.org.uk

10. Automated decision-making

In some cases, we may use automated systems (e.g. for tour booking confirmations or purchase alerts). Where these decisions significantly affect you:

  • We will ensure meaningful human involvement

  • We will inform you of the logic and potential impact

  • You have the right to challenge the decision and request a human review

We do not carry out automated profiling for behavioural targeting or credit decisions.

11. Third-party links

Our website may contain links to external sites. This policy does not cover how those third parties process your data. Please review their privacy policies separately.

12. Policy updates

We may update this policy from time to time. When we do, we will revise the “last updated” date at the top and notify you where appropriate.

Contact us
If you have questions about this policy or your data rights, please email us at: info@darkartdistillery.com