Privacy Policy.

Last updated: 7 September 2026

This policy explains what personal data JIWhiskey collects when you use this website or place an order, why we collect it, and what rights you have over it. JIWhiskey is the trading name of the business founded by Dougie Joyce. If you have any questions about this policy or your data, get in touch via our contact page.

The data we collect

We only collect what we need to run the shop, respond to enquiries and keep the site working. Depending on how you use the site, that may include:

• Contact form: your name, email address, and the content of your message.
• Newsletter sign-up: your email address.
• Orders: your name, delivery address, email address and order details, collected via our checkout provider, Square. Card and payment details are entered directly into Square's secure checkout and are never seen or stored by us.
• Technical data: standard web server logs (such as IP address and browser type) collected automatically by our hosting provider for security and performance purposes.

How we use it

• To process, fulfil and deliver your order, and to contact you about it.
• To respond to enquiries sent through the contact form.
• To send you our newsletter, if you've signed up for it. You can unsubscribe at any time.
• To verify age and comply with our legal obligations around the sale of alcohol.
• To keep the site secure and prevent fraud or abuse.

Our legal basis for processing

We process order and delivery data because it's necessary to fulfil a contract with you. We process enquiry and newsletter data on the basis of your consent, or our legitimate interest in responding to you. Where we're required to verify age or retain records for legal or tax reasons, we do so to comply with our legal obligations.

Who we share it with

We don't sell or rent your personal data. We share the minimum necessary with a small number of trusted service providers who help us run the site and fulfil orders:

• Square: processes payments and card details on our behalf.
• Resend: delivers transactional emails, such as order confirmations, contact form replies and newsletter sign-up confirmations.
• Cloudflare: hosts the website and handles standard technical/security logging.
• Couriers and delivery partners: receive your name and delivery address to get your order to you.

We only work with providers who are themselves bound to appropriate data protection standards. Some of these providers may process data outside the UK/EEA; where they do, they rely on their own appropriate safeguards (such as standard contractual clauses).

Cookies and local storage

We don't use advertising or analytics cookies, and we don't track you across other websites. The site does use a small amount of storage in your browser to make it work properly:

• Age verification: a temporary marker is stored for your browsing session once you confirm you're 18 or over, so you're not asked again on every page.
• Shopping cart: the contents of your cart are stored in your browser so it's remembered if you navigate around the site or close the tab.

Neither of these is used to identify or track you, and both stay on your own device. The site also loads fonts from Google Fonts, which may log your IP address as part of serving the font files.

How long we keep it

We keep order records for as long as required by UK tax and accounting law (normally six years). Contact form enquiries are kept only as long as needed to deal with your query. Newsletter email addresses are kept until you unsubscribe.

Your rights

Under UK data protection law, you have the right to:

• Ask what personal data we hold about you, and get a copy of it.
• Ask us to correct inaccurate data.
• Ask us to delete your data, where we're not required to keep it.
• Object to, or ask us to restrict, certain processing.
• Withdraw consent at any time, for anything we process on the basis of consent (such as the newsletter).

To exercise any of these rights, contact us via the contact page. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), if you think we've mishandled your data.

Age restriction

This is an age-restricted site for a product intended for adults aged 18 and over. It isn't directed at children, and we don't knowingly collect personal data from anyone under 18.

Security

We take reasonable technical and organisational steps to keep your data secure, including relying on providers such as Square and Cloudflare who maintain their own industry-standard security measures. No method of transmission or storage is ever completely secure, but we work to protect your data appropriately.

Changes to this policy

We may update this policy from time to time, for example if our processes or providers change. The date at the top of this page shows when it was last updated.

Contact us

For anything relating to this policy or your personal data, reach us via the contact page or by phone on 0161 399 8731.