Hogs Back Brewery are committed to protecting and respecting your privacy. Hogs Back Brewery does not release the information it collects to any third party for the purpose of market research and communications.
This policy applies to our customers, website visitors, consumers, distributors, our suppliers (and potential suppliers), personnel of such suppliers and contractors. It describes:
• the data identifying you that we collect;
• how we use this data;
• the legal basis upon which we process it;
• how it is stored.
The Policy is comprised of the following sections:
Section 1: Data collection
Section 2: Use of data
Section 3: Cookies
Section 4: Retention of personal data
Section 5: Your rights
Section 6: Marketing
Section 7: Transfers of data
Section 8: Security
Section 9: Third party websites
Section 11: Further questions or making a complaint
1. Data collection
You may give us your data in a number of ways including making a purchase from our online shop, signing up to receive emails from the brewery, following us on social media, entering a competition either online or at an event or by applying for a job at the brewery. Data will also be stored on you if you have booked onto a brewery tour or have joined the Tongham Tea Club or if this has been gifted to you.
The personal data which you give us may include:
(a) Your name;
(b) Address (Billing and delivery)
(c) E-mail address;
(d) Your telephone number;
(e) Account information;
(f) Your date of birth;
(g) Data provided when you correspond with us
If you are a visitor to our website, it may also include:
(a) Your behaviour on our website (for example, the pages that you click on);
(b) Payment Details;
(c) Order history
2. Use of data
We collect, use and store the personal data listed above for the following reasons:
(a) to allow you to access and use our website;
(b) to provide you with the information and services that you request from us;
(c) to ensure the security of our services, our website;
(d) to store information about your preferences, and to allow us to customise our website according to your individual interests;
(e) to recognise you when you return to our website;
(f) to enable you to participate in our competitions and promotions;
(g) to process orders which you place for goods or services from us; and
(h) for improvement and maintenance of our website and preparing reports or compiling statistics in order to improve our goods and services. Such details will be anonymised as far as is reasonably possible and you will not be identifiable from the data collected.
(i) to carry out statistical analysis and market research; and
(j) if you have consented or, otherwise, if it is in our legitimate interests, for business development and marketing purposes, to contact you (including by email or post) with information about our products and services which either you request, or which we feel will be of interest to you (including newsletters), but only where you have consented to this.
(k) For internal corporate reporting, business administration, ensuring adequate insurance coverage for our business, ensuring the security of company facilities, research and development, and to identify and implement business efficiencies.
(l) To comply with any procedures, laws and regulations which apply to us – this may include where we reasonably consider it is in our legitimate interests or the legitimate interests of others to comply, as well as where we are legally required to do so.
(m) If we use your photograph or video footage from an event, to amplify the event to a broader audience and for internal presentation purposes, where it is in our legitimate interests for marketing and business development purposes or where we have your consent.
4. Retention of personal data
We keep your personal data for no longer than necessary for the purposes for which the personal data is processed. The length of time we retain personal data for depends on the purposes for which we collect and use it and/or as required to comply with applicable laws and to establish, exercise or defend our legal rights. All data will be reviewed on a regular basis and removed from our records if considered no longer relevant for our purposes.
We are reliant on a number of 3rd party providers in order to provide our products and services. Where this is the case we will remain in control of the data and we will ensure that the 3rd parties comply with high security standards for the protection of your personal data:
- You have made an online purchase – Whether you have bought beer or merchandise through the website, your information (including contact details, Billing and Delivery Address, email address and phone number) is stored online with our e-commerce provider WooCommerce. Banking details are securely processed using Stripe and are not accessible to any members of staff.
- You have booked a Brewery Tour – You will have given your information (including contact details and billing information) when making your purchase and this has been processed by the online tour booking platform Checkfront. Banking details are securely processed using Stripe and are not accessible to any members of staff.
- You are a member of the Tongham Tea Club – You will have given your information (including contact details, Billing and Delivery Address, email address and phone number) when paying online so will also be stored with WooCommerce. In addition, it is stored by Hogs Back Brewery in a password protected spreadsheet which is regularly monitored and updated as information which is no longer required to be stored is deleted.
- You have agreed to receive marketing information and offers from Hogs Back Brewery – Your name and email address is all that is required to receive our emails. Those details are sent securely to Campaign Monitor, a web programme which stores and monitors subscribers information. We then work with our design agency, Sneek, to put together newsletters, offer emails and special invites for Tongham Tea Club Members and also to monitor individuals responses to newsletters so we can make our messages more focussed on customer needs.
- You follow or have interacted with us on any of our social media platforms (Facebook, Twitter, Instagram) – A record will exist on our online accounts if you have messaged Hogs Back Brewery on any channel and may be used to target future promotions to you.
5. Your rights
You have certain rights in relation to your personal data. You have the right to request that we:
(a) Right of Access. You have the right at any time to ask us for a copy of the data that we hold about you and how it is used.
(b) Right of Correction or Completion. If the data that we have collected is inaccurate you have the right to update it.
(c) Right of Erasure. In certain circumstances, you have the right to request that Information we hold about you is erased. This usually applies if the data is no longer necessary for the purpose that it was collected for, or you withdraw your consent for its processing and request its erasure.
(d) Right to Object to or Restrict Processing. If you wish to challenge our need to process your data on legitimate interest grounds or if you wish to withdraw your consent.
(e) Right of Data Portability. You have a right to request that we transfer your data to another data processor.
We will consider all such requests and provide our response within a reasonable period (and in any event any time period required by applicable law). Please note, however, that certain personal data may be exempt from such requests in certain circumstances. If an exception applies, we will tell you this when responding to your request. We may request you provide us with information necessary to confirm your identity before responding to any request you make.
If you would like further information in relation to these or would like to exercise any of them, please contact us by email at firstname.lastname@example.org at any time.
(a) We may collect and use your personal data for undertaking marketing by email, telephone and post.
(b) We may send you certain marketing communications (including electronic marketing communications to existing customers) if it is in our legitimate interests to do so for marketing and business development purposes.
We will however always obtain your consent to direct marketing communications where we are required to do so by law.
If you wish to stop receiving marketing communications, you can contact us by email at email@example.com at any time or click ‘unsubscribe’ on any communications you have received.
7. Transfer of Data
(a) Hogs Back Brewery is committed to protecting personal data from loss, misuse, disclosure, alteration, unauthorised access, unavailability and destruction and takes all reasonable precautions to safeguard the confidentiality of personal data, including through use of appropriate organisational and technical measures. Organisational and technical measures include physical access controls to our premises, staff training, and locking physical files in filing cabinets, the use of encryption, passwords for access to our systems and use of anti-virus software.
(b) In the course of provision of your personal data to us, your personal data may be transferred over the internet. Although we make every effort to protect the personal data which you provide to us, the transmission of information over the internet is not completely secure. As such, you acknowledge and accept that we cannot guarantee the security of your personal data transmitted to our website and that any such transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to prevent unauthorised access to it.
(c) Where we have given you (or where you have chosen) a password which enables you to access your online account, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
9. Further questions or making a complaint
If you have any queries or complaints about our collection, use or storage of your personal data, or if you wish to exercise any of your rights in relation to your personal data, please contact firstname.lastname@example.org. We will investigate and attempt to resolve any such complaint or dispute regarding the use or disclosure of your personal data
You may also make a complaint to the data protection authority, the Information Commissioner’s Office (ICO) whose contact details are as follows:
Information Commissioner’s Office
If you are unsure which data protection authority to contact, please contact email@example.com who will advise you.