Privacy Policy

1.1 Who we are

This Privacy Policy explains how Güt Beer Ltd (“Güt Beer”, “we”, “us” or “our”) collects, uses and protects your personal information when you visit www.gut.beer, place an order, or otherwise interact with us.

Güt Beer Ltd is a company registered in England and Wales, company number 16525533, with its registered office at Great Killough, Llantilio Crossenny, Abergavenny NP7 8SR. We are the “data controller” responsible for your personal data.

We are registered with the Information Commissioner’s Office (ICO), registration number C2020992.

If you have any questions about this policy or about how we handle your data, contact us at [email protected] or by post at the address above.

1.2 The information we collect

Depending on how you use our website, we may collect:

• Order and account information — your name, billing and delivery address, email address, telephone number, order history and any account log-in details.

• Payment information — payment card or other payment details. These are collected and processed directly by our payment provider Stripe; we do not store full card numbers ourselves.

• Age-verification information — confirmation that you are aged 18 or over, and, where required, information used to verify your age at the point of sale or on delivery.

• Communications — the content of messages you send us and our replies, including customer service and complaints correspondence.

• Marketing preferences — whether you have opted in to receive marketing, and your responses to it.

• Technical and usage data — your IP address, device and browser type, and how you use our website, collected through cookies and similar technologies (see our Cookie Policy).

We do not knowingly collect any “special category” data, and we do not collect data from anyone we know to be under 18.

1.3 How we use your information and our lawful bases

Under UK data protection law we must have a valid “lawful basis” for using your personal data. We rely on the following:

• To take and fulfil your order (process payment, arrange delivery, provide customer service) — because it is necessary to perform our contract with you.

• To verify that you are aged 18 or over and to comply with alcohol licensing and other laws — because it is necessary to comply with our legal obligations and in our legitimate interests in selling alcohol responsibly.

• To manage our business, keep records, prevent fraud and improve our products and website — in our legitimate interests, balanced against your rights.

• To send you marketing about our products — on the basis of your consent, or our legitimate interests where you are an existing customer and we tell you how to opt out (see section 1.7).

• To meet legal and regulatory requirements, such as tax, accounting and consumer-protection obligations — because it is necessary to comply with our legal obligations.

1.4 Who we share your information with

We share your personal data only where necessary, with:

• Payment providers Stripe who process your payment securely.

• Delivery and courier partners Royal Mail, DPD and Fedex who deliver your order and carry out age checks on delivery.

• Age-verification providers (if used) who help confirm your age.

• Technology and service providers The Site Doctor who host our website and Mailchimp who send our emails, provide analytics, or provide IT and customer-service support.

• Professional advisers such as accountants, lawyers and insurers.

• Government bodies, regulators and law enforcement where we are required to do so by law.

These organisations act as our “processors” and may only use your data on our instructions, or are separate controllers with their own obligations. We do not sell your personal data to anyone.

1.5 International transfers

We aim to keep your personal data within the UK. Where any of our providers process data outside the UK, we make sure appropriate safeguards are in place (such as UK “adequacy” regulations or the International Data Transfer Agreement) so that your data receives an equivalent level of protection.

1.6 How long we keep your data

We keep your personal data only for as long as necessary for the purposes described above. Order and transaction records are generally kept for six years to meet tax and accounting requirements. Marketing data is kept until you unsubscribe or ask us to delete it. Where data is no longer needed, we securely delete or anonymise it.

1.7 Marketing and how to opt out

If you have opted in, or are an existing customer, we may send you news, offers and information about our beers by email or other channels you have agreed to. You can opt out at any time by clicking “unsubscribe” in any marketing email, updating your account preferences, or emailing us at [email protected]. Opting out of marketing will not stop service messages about orders you have placed.

1.8 Cookies

Our website uses cookies and similar technologies. Please see our separate Cookie Policy for details of what we use and how to manage your preferences.

1.9 Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;

• ask us to correct inaccurate or incomplete data;

• ask us to delete your data in certain circumstances;

• ask us to restrict or object to our processing;

• request portability of data you have provided to us;

• withdraw consent at any time where we rely on consent; and

• complain to the ICO.

To exercise any of these rights, contact us at [email protected]. We will respond within one month. There is normally no charge.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk, by calling 0303 123 1113, or by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would, however, appreciate the chance to resolve your concerns first.

1.10 Data security

We use appropriate technical and organisational measures to keep your personal data secure and to prevent unauthorised access, loss or misuse. No online transmission is completely secure, but we take steps to protect your information and to notify you and the relevant authorities of any serious data breach where required.

1.11 Children

Our website and products are strictly for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

1.12 Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be posted on this page with the “last updated” date shown above.