Privacy & Cookie Policy

Privacy Policy

WHAT THIS POLICY COVERS

  • Introduction
  • Summary
  • How and what data we collect
  • How long data will be used for
  • Why we collect personal data
  • What our lawful data for collection personal data is
  • Who we share our data with
  • International transfers
  • Data security
  • Your rights
  • Marketing and Profiling
  • Beavertown Reward Privacy Policy

INTRODUCTION and IDENTIFYING the CONTROLLER of your personal data

The controller of your personal data is Beavertown Brewery Ltd.

If you have any questions about this privacy policy or our processing activities or you wish to withdraw your consent to receiving marketing communications from us at any time, we can be contacted as follows:

  • Mail: Beavertown Brewery Ltd, Unit 17 & 18 Lockwood Industrial Estate, Mill Mead Road, London, N17 9PQ, marked for the attention of “The e-commerce Team”
  • Email: webshop@beavertownbrewery.co.uk

Amongst other things, this privacy policy covers our processing of personal data in connection with your use of our website. It is important that you read this privacy policy together with our cookie policy and any terms of use that are presented to you. This privacy policy supplements the other policies and is not intended to override them.

SUMMARY and KEY POINTS you should be aware of

Personal data is any information about an individual from which that person can be identified. We may receive your personal data directly from you, or it may be publicly available.

We use data for various purposes, including to communicate and manage our relationship with you, protect our business, ensure we comply with laws and to run competitions and promotions. Transparency is important to us, so we would particularly like to highlight the following activities we conduct where we have a lawful basis:

  • We may use your data to create a profile of you. We may combine the data that you have provided to us with publicly available sources in order to better understand your interests. We want to build a profile of you so that we can send relevant communications and market to you more effectively
  • We may use your data to send you online targeted advertisements. Based on our profile of you, we may present you with adverts when you browse online. This involves asking a platform to show our adverts to a particular group of individuals
  • We may use your data to conduct analytics. For example, we may track how you respond to the emails we send you. We want to see if the email has bounced and, if not, whether you open our emails and/or click on any content; unsubscribe or mark the email as spam; share the information on social media or forward it to friends. This ensures that we can understand what really interests you and improve our approach to marketing so that you do not receive irrelevant or unwanted emails. It also allows us to use our resources efficiently

You have various rights regarding our use of your data.

HOW and WHAT data do we collect about you?

This privacy policy describes how we look after your personal data collected directly when you engage with us including when (i) you visit our website; (ii) you purchase our products from us; (iii) we communicate with you as part of our ongoing relationship, including where you contact us for customer support; (iv) you take part in a competition; and/or (v) you attend one of our events or an event that we sponsor; (“Engagement”).

We also collect information indirectly: (a) from social media platforms (e.g. Facebook, Instagram and LinkedIn) (“Social Media Platforms”) or 2nd party vendors (e.g. supermarkets and similar retailers) where you have purchased our products (together “Relevant Third Parties”). Any information we collect indirectly will be from a publicly available source or you will have consented to it being shared.

We collect different categories of information which we have grouped together as follows:

  • Identity Data – name, username, title, place and date of birth and personal characteristics including age and gender
  • Contact Data – email address, billing address, delivery address and telephone number
  • Financial Data – payment information including debit or credit card number and Paypal details
  • Profile Data – preferences, feedback, survey responses and interests including activities noted on Social Media Platforms (for example, your Facebook likes/groups) or collected from other Relevant Third Parties (See Annex 1 for more information on our profiling activities)
  • Technical and Usage Data – information about how you use our products and website including your IP address and details about the devices you use to access our website. Please review the cookie policy on our website for further information on this
  • Marketing and Communications Data – preferences in receiving marketing and communications from us and information in terms of engagement with email communications (See Annex 1 for more information on our marketing activities)
  • Location Data – GPS-based location information from your use of our website or Social Media Platforms via your smartphone(s), tablet(s) or other devices
  • Photo and Video Data - photos and/or video footage of you captured when you attend any events hosted or sponsored by us (your attention will be drawn to any photography or filming that is taking place, and your consent will be obtained where required)
  • Inferred Data – which is inferred or derived from the data we collect, for example inferences about your interests based on your Identity Data, Profile Data, Technical and Usage Data or Location Data

We also collect, use and share Anonymised Data such as statistical or demographic data which is not reasonably likely to reveal your identity (directly or indirectly). For example, we may receive aggregated usage data detailing the percentage of users accessing our website or visiting venues where we supply our products. If we combine or connect Anonymised Data with other data so that it can directly or indirectly identify you, the combined data is ‘personal data’ which will be used in accordance with this privacy policy.

We do not knowingly:

  • Process any Special Categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, information about your health or genetics and biometric data). Nor do we process any information about criminal convictions and offences
  • Collect personal data relating to children. We have age verification processes on our website to ensure we do not market our products or brands to anyone under the age of 1

How LONG will my personal data be used for?

The purposes of satisfying any legal, tax, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider any legal requirements, the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means.

In relation to our marketing activities specifically, your personal data will be processed until an opt-out / objection is received or consent is withdrawn as applicable.

WHY do we collect your personal data?

We may collect the above categories of personal data about you for the following purposes:

  • To administer our business and perform contracts with you
  • To communicate with you
  • To enable you to partake in a promotion and for prize fulfilment purposes
  • To market to you
  • To conduct market research
  • For analytical purposes
  • To maintain and optimise our website
  • To protect our business
  • To satisfy our legal and regulatory obligations and co-operate with regulators and government bodies
  • To defend and exercise our legal rights, including in relation to managing actual and potential claims

What is our LAWFUL BASIS for collecting your personal data?

Under data protection laws, we must have a lawful basis under which we process your personal data. We will only use your personal data for the purposes set out in section 5, unless we reasonably consider that we have another appropriate reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the lawful basis which allows us to do so.

If you provide us with your consent to processing either in connection with your use of our website, through a Social Media Platform or a Relevant Third Party, you can withdraw it at any time and we will stop the processing activities that were based on consent as a lawful basis. Please note we may still process the data if we have another lawful basis for processing (in most instances, this will be for a more limited purpose e.g. back-up storage or to record a withdrawal).

Where we need to collect personal data due to a legal or regulatory obligation, or for performance of a contract and you do not provide that data when requested, we may not be able to continue our Engagement with you or perform the contract we have or are trying to enter into with you (for example, to provide you with products or allow you to participate in competitions). We will notify you of this at the time.

WHO do we SHARE your personal data with?

We may share your personal data with external third parties which include:

  • Communications platform providers (i.e. vendors we use to send and manage email and SMS communications);
  • Marketing and advertising companies and media agencies for marketing and research purposes, and to provide promotion services, data on-boarding services, research and marketing strategy services;
  • Third party providers of Social Media Platforms (including Facebook, Instagram and LinkedIn);
  • Prize fulfilment agencies;
  • IT and system administration service providers (including data storage providers and data management platform providers);
  • Service providers such as solicitors, accountants. insurance companies and insurance claims managers, debt recovery agencies, payment processing companies and logistics companies;
  • Regulators, local authorities and government bodies, including the Police and HMRC, to comply with any legal or regulatory requirements or formal/informal investigations;
  • Courts, parties to litigation and professional advisers where we reasonably deem it necessary in connection with the establishment, exercise or defence of legal claims; and
  • A purchaser or parties interested in purchasing any part of our business (and professional advisors supporting on the transaction).

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. Where the third parties act as processors on our behalf, we only permit them to process your personal data for specified purposes and in line with our instructions.

International transfers

Third parties we share data with may be based outside the UK or the EEA. Whenever we transfer your personal data out of the UK or the EEA, we take steps to ensure that the same level of protection is afforded to it by ensuring one of the following safeguards is put in place:

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission and/or the UK Information Commissioner's Office; and
  • Where we use certain service providers, we may use specific contracts approved by the European Commission and/or the UK Information Commissioner's Office, which give personal data the same protection it has in Europe (or the United Kingdom).

How SECURE is my data?

We have put in place reasonable security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know - they are subject to a duty of confidentiality. Unfortunately, no transmission of information over the internet can be completely secure, and the security of information depends in part on the security of the computer you use to communicate with us and the security you use to protect account information and passwords. Please take care to protect this information.

Our website include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites, plug-ins or applications and are not responsible for their privacy statements. We encourage you to read the privacy policy of every website you visit and third-party service/application that you use.

What are my RIGHTS?

Under data protection laws, you have various rights which are set out below. The rights available to you depend on our reason for processing your personal data. You are not required to pay any charge for exercising your rights, although we may charge a reasonable fee if your request is unfounded, repetitive or excessive. We have one month to respond to you (unless you have made a number of requests or your request is complex, in which case we may take up to an extra two months to respond). Please note that, where we ask you for proof of identification, the one-month time limit does not begin until we have received this. If we require any clarification and/or further information on the scope of the request, the one-month deadline is paused until we receive that information.

  1. Right of access. You have the right to ask us for copies of your personal data. This right always applies. There are some exemptions, which means you may not always receive all the information we process. You can read more about this right here.
  2. Right to rectification. You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies. You can read more about this right here.
  3. Right to erasure. You have the right to ask us to erase your personal data in certain circumstances. You can read more about this right here.
  4. Right to restriction of processing. You have the right to ask us to restrict the processing of your information in certain circumstances. You can read more about this right here.
  5. Right to object to processing. You have the right to object to processing of your personal data where we are relying on a legitimate interest or conducting direct marketing. You can read more about this right here.
  6. Right to withdraw consent. Where we are relying on consent to process your personal data, you may withdraw it at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.
  7. Right to data portability. This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent. You can read more about this right here.

You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance using the details at the start of this policy.

MARKETING and PROFILING in more detail

Marketing

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.

  • We will only send direct electronic marketing (e.g. via emails or SMS or direct social media messages) where
  • we have your consent
  • you have solicited certain information (for example to receive one-off correspondence in relation to a competition/promotion you have entered or a festival that we are sponsoring)
  • you have purchased goods from us and you did not opt-out of receiving any marketing where this opportunity was provided to you

You can ask us to stop sending you direct marketing messages at any time by contacting us at webshop@beavertownbrewery.co.uk. Where you opt-out of receiving these marketing messages, we will no longer conduct any direct electronic marketing unless you opt-in again at a later point. Please note that where we have another lawful basis for processing, we will continue to process personal data for other purposes – for example, we may process information provided to us in connection with an Engagement on the basis of contract necessity.

You may also receive indirect marketing from us by way of online advertisements or general marketing communications from us. There are various methods we may use in order to indirectly market to you online, as follows: 

  1. Contextual advertising on particular types of websites - we buy space on these third party websites and our adverts are shown based on other content displayed on the page: it is not targeted to particular individuals
  2. Advertising to people signed up with an online platform (such as Facebook or Google) based on what the platform knows about them, e.g. we may ask Facebook to show a particular advert to people interested in beer living in Edinburgh or people interested in certain competitions / events (including festivals). This may involve use of ‘custom audiences’ where we send a list of hashed email addresses of our existing customers (including end consumers) to the online platform, and the online platform then matches these email addresses to users and presents our advertising to them. Hashing is a security measure whereby the information is turned into a code
  3. Identifying relevant groups of people who aren’t existing customers - we use data purchased from third parties (where you have consented to your data being shared) to identify relevant audiences who our adverts might be of interest to
  4. ‘Look-alike” / ‘Similar’ audiences, where either: (a) we use our “custom audiences” (see point 2 above) to find a group of people with similar characteristics to our existing customer base; or (b) as an expansion of the activities described in point 3, we ask third parties to present general social media adverts to individuals that they believe will like our products based on audience data within their platforms so that we reach the right audiences and ensure our marketing efforts are efficient. For the circumstances in (b), we would direct the third parties to target individuals in certain age categories and locations with certain interests. In each case, we only receive anonymised reporting (e.g. number of impressions) and you won’t receive direct marketing from us (e.g. SMS/e-mails) unless you have consented to that. In these circumstances, the platform and Relevant Third Parties act as a controller. Further information about how the platforms, including Facebook Ireland, process your personal data can be found in their respective privacy policies

Profiling

We may use your Identity Data, Contact Data, Profile Data, Technical and Usage Data, Marketing and Communications Data and Location Data, together with Inferred Data, to form a view on what we think you may want or what may be of interest to you and to understand your purchasing trends. We may also use data which has been collected from third parties to enrich the data we hold relating to you in order to build a fuller picture of what may be of interest to you. These profiling activities inform how we decide which brands, products, outlets and offers may be relevant to you. By building a profile of you, we can send you tailored communications and make personalised recommendations, inform you of special offers we think you will be interested in, and customise promotions & special offers that are most relevant to you across a variety of channels.

When you visit our website, you can use the cookie banner to accept or reject non-essential cookies, including advertising cookies. If you accept them, these cookies will record information about how you interact with our website and this information will then be used to serve you with relevant adverts on other sites based on the content that you have clicked on or interacted with. We may use information collected via cookies when you visit our website and aggregate this with information gathered via the website to understand your preferences/interests and ensure marketing/remarketing is relevant. Please see our relevant cookie policy on the website you browse when accepting cookies for more detail on this and how to control your preferences.

Please note that whilst we carry out the profiling activities described here, we do not carry out any automated decision-making processes which could have a legal or significant impact on you.

Beavertown Reward Privacy Policy

1. INTRODUCTION and IDENTIFYING the CONTROLLER of your personal data 

This Privacy Policy applies to BEAVERTOWN’S mobile application called BEAVERTOWN REWARD which is for use by consumers in the United Kingdom (the "App"). Beavertown Brewery Limited (“we, us or our) are the data controller in respect of the personal data that is collected and processed when you use the App.  

Personal data is any information about an individual from which that person can be identified.  

We respect your privacy, and we are committed to keeping your personal data secure and managing it in accordance with our legal responsibilities under applicable data protection laws. Please read this Privacy Policy carefully as it contains important information on our processing activities. 

If you have any questions, we can be contacted as follows: 

  • Mail: Unit 17 & 18 Lockwood Industrial Estate, Mill Mead Road, London, N17 9PQ, marked for the attention of the Privacy Officer; or 
  • Email: webshop@beavertownbrewery.co.uk

2. WHAT personal data we collect, what our LEGAL basis for processing your personal data is, and HOW we use your personal data 

A. Account Data 

Before you can use the App, you will need to provide the following personal data (“Account Data”) to create an account: 

  1. date of birth, to verify that you are of legal drinking age; 
  2. name; and 
  3. email address. 

Push notifications 

If you have enabled push notifications when downloading the App, we will send you push notifications with service-related content that may be of interest to you. If you have, in addition, consented to receiving marketing communications from us when signing up to use the App, we will send you push notifications with marketing-related content. If you no longer wish to receive any push-notifications, you can unsubscribe at any time by using the unsubscribe functionality in your phone settings which can also be accessed via the Preference Centre in the ‘Menu’ in the App.  

Lawful basis for processing: performance of a contract with you. 

Retention period: until we delete your account following receipt of a deletion request from you. 

B. Location Data 

When enabled in the App, your GPS-based location information is used to show you nearby venues where you can collect points in the App.  

Lawful basis for processing: consent. 

Retention period: depending on the choice you make when you download the App, data will only be processed when using the App or alternatively all the time i.e. continuously. 

C. Music Preference Data 

We will collect certain data from you regarding your musical preferences. This will allow us to recommend music events to which tickets may be redeemed against points you have collected.  

Lawful basis for processing: consent. 

Retention period: until we delete your account following receipt of a deletion request from you.  

D. Refer a Friend Data 

If you refer a friend to the App we will match your data with your friend whom you referred in order to apply bonus points to your account.   

Lawful basis for processing: necessary for our legitimate interest to grow the App and the Beavertown business.  

Retention period: until we delete your account following receipt of a deletion request from you, 

 E. App Performance, Analytics and Engagement Measurement Data 

We also collect certain performance, analytical and engagement information when you use the App (“App Performance, Analytics and Engagement Measurement Data”). Such data includes unique identifiers such as your device category, operating system, IMEI number, IP address and (subsequently) the country you are in. 

User interactions will also be tracked as part of App Performance, Analytics and Engagement Measurement Data to analyse and further enhance your activity within the App. To do so, we use techniques which reveal your geo-location or your network location. This data is used in the same way as cookies, e.g. to analyse and improve services. 

The information about your interactions with the App enables us to: 

  1. monitor and improve the stability, bugs and other technical information of the App; and 
  2. measure and gain insights on (i) App acquisition, such as downloads, App activation and which channels users are coming from; (ii) retention, i.e., do users continue to use the App; (iii) user engagement; (iv) uninstalls and churn rates; (v) opt-in rates on push notifications; and (vi) click-through rates. 

Lawful basis for processing: necessary for our legitimate interest to conduct and manage our business, to enable us to give you the best service and to protect, promote and grow our business. Where required, by privacy laws, consent. 

Retention Period: until we delete your account following receipt of a deletion request from you, or, when our lawful basis is consent, until consent is withdrawn. We may anonymise and retain some App Performance, Analytics and Measurement Data.  

F. Customer Service Data

If you have a question or other remark about the App, you can contact us at webshop@beavertownbrewery.co.ukWe will process your email address, your request, complaint or question, our response, and any other interaction with you (together “Customer Service Data”). 

Lawful basis for processing: Necessary for our legitimate interest to conduct and manage our business, to enable us to give you the best service and to protect, promote and grow our business. 

Retention period: until your request, complaint or question is resolved. we delete your account following receipt of a deletion request from you. 

G. Survey Data 

We may contact you to ask you to complete a survey about how we can improve the services we offer you, or to ask you for information on how we can improve our App or our engagements with you. 

Lawful basis for processing: Necessary for our legitimate interest in order to ensure we offer a good quality service, to improve the App and to protect, promote and grow our business. 

Retention period: until the survey feedback has fulfilled its intended purpose. 

H. Inferred Data 

This relates to data which is inferred or derived from the data we collect, for example inferences about your interests based on your Account Data, Push Notification settings, Music Preference Data, App Performance, Analytics and Engagement Measurement Data and Location Data. 

Lawful basis for processing: necessary for our legitimate interest to conduct and manage our business, to enable us to give you the best service and to protect, promote and grow our business. Where required, by privacy laws, consent. 

Retention period: until we delete your account following receipt of a deletion request from you or, when our lawful basis is consent, until an opt-out / objection is received, or consent is withdrawn as applicable. 

We will only use your personal data for the purposes above, unless we reasonably consider that we have another appropriate reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. 

I. Deletion 

You can delete your account at any time by navigating “Delete Account” in the main menu of the App.  

3. WHO do we share your personal data with? 

We may need to share personal data with third parties to help us provide our services and products to you and to run the App. These third parties are: 

  • service providers where this is needed to provide us with a service and to provide data analytics and data storage Bloomreach and Google Analytics; 
  • Interstate for the purpose of developing and maintaining the App; 
  • Planet Fans for the purpose of redeeming points for live music experiences;   
  • service providers that help us for research purposes; 
  • service providers such as solicitors and accountants; 
  • courts, parties to litigation and their professional advisers where we reasonably deem it necessary in connection with the establishment, exercise, or defence of legal claims;  
  • Law enforcement bodies in order to comply with a legal obligation or court order;  
  • a purchaser or parties interested in purchasing any part of our business (and professional advisors.  
  • Facebook for the purposes of authenticating users, enabling content sharing from the App to Facebook (and vice versa) and logging Facebook events in the App. 
  • Estimote beacon technology for the purpose of loggin time spent in participating outlets to earn points;   
  • Heroku for the purpose of storing points and redeeming points against Plat Fans events; and  
  • Twilio SendGrid for the purpose of communicating with you.  

 4. International transfers 

Third parties we share data with may be based outside the UK or the EEA. Whenever we transfer your personal data out of the UK or the EEA, we take steps to ensure that the same level of protection is afforded to it by ensuring one of the following safeguards is put in place: 

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission and/or the UK Information Commissioner’s Office.; and 
  • Where we use certain service providers, we may use specific contracts approved by the European Commission and/or the UK Information Commissioner’s Office, which give personal data the same protection it has in Europe (or the United Kingdom). 

 5. How SECURE is my personal data? 

We will take appropriate technical and organizational measures (‘TOMs’) to protect the personal data we process in connection with the App from misuse or accidental, unlawful, or unauthorised destruction, loss, alteration, disclosure, acquisition, or access. Such TOMs are consistent with applicable privacy and data security laws and regulations. However, no internet-based (mobile) application can be 100% secure and we cannot be held responsible for unauthorised or unintended access that is beyond our control. The App may contain links to other websites. We are not responsible for the privacy practices, content or security used by such other websites, which shall not be governed by this Privacy Policy. We advise you to always read the privacy policies carefully on these other websites.  

6. Social media 

You may choose to share information on the App via social media, such as i.e., Facebook, Instagram, Twitter, LinkedIn, and YouTube. This means that the information you share, with name and preferences, shall be visible to visitors of your personal social media pages. We advise you to carefully read the privacy policies of the social media parties, these are applicable to the processing of your personal data by such parties.  

7. How LONG will my personal data be used for? 

We will only retain your personal data to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. 

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. 

You can ask us to delete your App account including your personal data at any time in the ‘profile’ section in the App. We will complete the deletion process within fourteen working days of receipt of your request. 

We will take reasonable steps to destroy or de-identify personal data we process if it is no longer needed for the purposes set out above or after the expiration of the defined retention term. 

Further retention details for specific aspects of your personal data are noted in Clause 2. 

8. Cookies 

Some of the personal data referred to in this privacy policy is collected via the use of cookies and other cookie-like techniques including tracking pixels, Java scripts and tags. These techniques can be necessary to remember your account settings, language, and country, but also enable us to measure and analyse your behaviour within the App and to make our advertisements relevant to you and your interests. Where required, you will be asked for consent to the use of such techniques. For more information on what techniques, we use and how we use them, please review our separate Cookie Policy. 

9. Children's Privacy  

The App is not intended for use by individuals under the age of 18 (or the applicable legal drinking age). We do not knowingly collect personal data from individuals under the age of 18. 

10. What are my RIGHTS? 

Under data protection laws, you have various rights which are set out below. The rights available to you depend on our reason for processing your personal data. You are not required to pay any charge for exercising your rights, although we may charge a reasonable fee if your request is unfounded, repetitive, or excessive. We have one month to respond to you (unless you have made several requests or your request is complex, in which case we may take up to an extra two months to respond). Please note that, where we ask you for proof of identification, the one-month time limit does not begin until we have received this. If we require any clarification and/or further information on the scope of the request, the one-month deadline is paused until we receive that information. 

  1. Right of access. You have the right to ask us for copies of your Personal Data. This right always applies. There are some exemptions, which means you may not always receive all the information we process. 
  2. Right to rectification. You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies. 
  3. Right to erasure. You have the right to ask us to erase your Personal Data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it, or where you have successfully exercised your right to object to processing.  
  4. Right to restriction of processing. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it; 
  5. Right to object to processing. You have the right to object to processing of your Personal Data where we are relying on a legitimate interest or conducting direct marketing.  
  6. Right to withdraw consent. Where we are relying on consent to process your Personal Data, you may withdraw it at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent. 
  7. Right to data portability. This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another or give it to you. The right only applies if we are processing information based on your consent.  

      You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues: 

      Information Commissioner’s Office 

      Wycliffe House 
      Water Lane 
      Wilmslow 
      Cheshire 
      SK9 5AF 
      Helpline number: 0303 123 1113 
      ICO website: https://www.ico.org.uk 

      We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance using the details at the start of this policy. 

      11. Updates 

      We will keep this privacy policy under review and make updates from time to time. Any changes to this privacy policy will be posted in the App and to the extent reasonably possible, will be communicated to you. 

      This version was last updated in November 2023. 

      COOKIE POLICY

      WHAT THIS POLICY COVERS

      • What a cookie is
      • Cookies we use
      • What you can do if you do not agree to the cookie use
      • Concluding remarks

      We use cookies to give you a better online experience. If you have already indicated your cookie preferences in relation to this website (“Website”), you should still read the following policy to ensure you understand how we use cookies.

      In order to make full use of the Website, your computer, tablet or mobile phone will need to accept cookies. Accordingly, it is important that you know what cookies our Website uses and for what purposes.

      WHAT IS A COOKIE?

      Cookies are small text files containing small amounts of information which are downloaded and may be stored on your user device e.g. your computer (or other internet enabled devices, such as a smartphone or tablet). We may use similar techniques, such as pixels, GIFs, web beacons, device fingerprints, etc. For the sake of consistency, all these techniques combined will hereafter be referred to as ‘cookies’.

      This Cookie Policy provides you with information about the cookies we use and why. Sometimes a cookie ID or the information a cookie collects can be considered personal data. Our Privacy Policy sets out full details of the personal data we may collect and how we may use your personal information.

      COOKIES USED ON THE WEBSITE

      We use functional cookies to operate the Website (these are set by default). We’d also like to set optional functional, performance and targeting cookies. Full details of all of these cookies can be found in the drop down menus when you click “Preferences” on the cookie banner. By clicking “Accept” on the cookie banner, you give your consent to us placing and/or reading cookies.

      Some of these are session cookies that are temporary and allow us to link your actions during a browser session. Session cookies are erased when you close the browser. Other cookies are persistent cookies, which remain on your device for the period of time specified in the cookie. This Website uses cookies for the following purposes:

      • STRICLTLY NECESSARY COOKIES. These cookies are essential and help you navigate the Website and use its features. These cookies also help to support website security and basic functionality. These cookies cannot be disabled.
      • FUNCTIONAL COOKIES. These cookies enable the site to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our website. IF you do not allow these cookies then some or all of these services may not function properly.
      • PERFORMANCE COOKIES. Analytical cookies help us to understand the behaviour of our visitors and their usage of the Website. For instance, we can use these cookies to gain insight into how our visitors use our Website. This means we can find out what works and what does not. It allows us to continuously improve the Website and to measure how effective our advertising and communication is. Performance cookies also allow the Website to remember choices made and provide enhanced, more personal features. We also use technologies to track email engagement data (i.e. opens and clicks to understand when an email is opened, how many times it is opened, what device or devices are involved and rough physical location, deduced from the internet protocol (IP) address). Based on this information, we will adapt our marketing campaigns and communications to ensure our emails are relevant and of interest to you.
      • TARGETING COOKIES. Targeting cookies will remember your product and page preferences, and in general that you visited the Website. We strive to provide you with advertisements relevant to you and your interests on other online platforms based on your visits and surfing behaviour on our Website and other third party websites. Based on these interests, we develop a segmented profile and then adapt the content and the advertisements on our Website for various groups of customers. Third parties that set cookies via our Website may also try to find out what your interests are in this way, and this information may be used to present you with content or advertisements that appear more likely to be of interest to you on other, non-Beavertown websites. In this case, the information about your current Website visit may be combined with information from previous visits to websites other than ours. At the same time, these advertising cookies are also used to limit the number of times you see an advertisement as well as to help measure the effectiveness of advertisements. We also improve our marketing strategies by ‘matching’ advertising cookies collected about you with your profile on a Social Media Platform, so that we can show you marketing content which may be of interest to you (for example, by using Facebook Pixel). Even if no advertising cookies are used, please note that you may still be provided with advertisements on our Website; however, these advertisements will not be tailored to your interests. Third party social networks (e.g. Facebook, YouTube, Twitter, LinkedIn) may also place cookies. This enables you to share content of the Website on social networks. These third parties may use cookies for their own purposes. We have no influence over how these social media networks make use of your data. For more information regarding the cookies set by the social media networks please refer to their own privacy and cookie policies.

      CONTROL YOUR COOKIE SETTINGS

      You have the option to consent to our use of the different categories of cookies by clicking ‘Preferences’ in the cookie banner that is presented to you when you visit our Website.

      You can manage your cookie settings in your browser at any time. Please be aware that your browser settings may not offer you the same ease of use as the cookie preferences centre on our Website. If you simply disable all cookies in your browsers settings, you may find that certain sections or features of our Website will not work, because your browser may prevent us from setting functionally required cookies. The following links may assist you in managing your cookies settings, or you can use the 'Help' option in your internet browser for more details.

      • Internet Explorer/Microsoft Edge: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies / https://support.microsoft.com/en-us/windows/microsoft-edge-browsing-data-and-privacy-bb8174ba-9d73-dcf2-9b4a-c582b4e640dd
      • Mozilla Firefox: http://support.mozilla.com/en-US/kb/Cookies
      • Google Chrome: http://www.google.com/support/chrome/bin/answer.py?hl=en&answer=95647
      • Safari: http://support.apple.com/kb/PH5042
      • Opera: https://help.opera.com/en/latest/web-preferences/

      Please be aware that we do not currently make use of a technical solution that would enable us to respond to your browser’s ‘Do Not Track’ signals.

      CONCLUDING REMARKS

      We will keep this Cookie Policy under review and may make updates to it from time to time. Any changes to this Cookie Policy will be posted on our Website, and to the extent reasonably possible, will be communicated to you. You can consult this web page for the latest version.

      If you have any further questions and/or comments, please contact webshop@beavertownbrewery.co.uk.

      The most recent version of this Privacy and Cookie Policy is dated October 2023.