Privacy Policy

Last updated: 24/04/2026

Cask & Malt respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, create an account, join our member-only area, place an order, or make an enquiry about our products.

This policy applies to the website:

https://casknmalt.co.uk/

1. Who we are

For the purposes of UK data protection law, the data controller is:

Cask & Malt
43 Grange Road
Stourbridge
West Midlands
DY9 7LG

Company No. 08618706
VAT No. GB 170 311 942

Telephone: 07597 101 200
Email: casknmalt@gmail.com

2. The personal information we collect

We may collect and process the following types of personal information:

Information you provide directly

This may include:

• your name;
• billing address;
• delivery address;
• email address;
• telephone number;
• company details, if applicable;
• account login details;
• order details;
• payment-related information;
• delivery instructions;
• messages sent through our contact form or by email;
• information provided in relation to private sales, member-only access, export enquiries or customer service queries.

Information collected when you use our website

When you visit our website, we may collect certain technical information, including:

• IP address;
• browser type and version;
• device type;
• operating system;
• pages visited;
• referring website or search engine;
• date and time of visit;
• cookie and tracking information.

Age-related information

As we sell alcoholic products, we may need to take reasonable steps to confirm that customers are legally old enough to purchase alcohol. We may process age-related information where necessary to comply with legal requirements, prevent underage sales, or assist with age-restricted delivery checks.

3. How we use your personal information

We use your personal information for the following purposes:

To process and fulfil orders

We use your information to:

• process your order;
• take payment;
• send order confirmations;
• arrange delivery;
• provide delivery updates;
• deal with returns, refunds, replacements or complaints;
• keep records of your purchase.

Our lawful basis for this processing is that it is necessary to perform our contract with you.

To manage customer accounts and member-only access

If you create an account or access member-only areas of the website, we use your information to:

• create and manage your account;
• allow you to log in securely;
• display order history;
• manage account preferences;
• restrict access to member-only products or content.

Our lawful basis is performance of a contract and, where relevant, our legitimate interest in managing access to restricted areas of the website.

To respond to enquiries

If you contact us by email, telephone or through the website, we use your information to respond to your enquiry and provide customer support.

Our lawful basis is our legitimate interest in responding to enquiries and providing good customer service.

To handle international and export enquiries

Where you enquire about or place an international order, we may use your information to:

• confirm whether we can ship to your country;
• calculate delivery options and costs;
• prepare export or customs documentation;
• provide information required by couriers, customs authorities or regulatory bodies;
• communicate with you about import duties, taxes, restrictions or delivery requirements.

Our lawful basis is performance of a contract, steps taken before entering into a contract, compliance with legal obligations, and our legitimate interest in fulfilling international customer enquiries.

To comply with legal and regulatory obligations

We may use your information to:

• comply with tax, accounting and VAT requirements;
• prevent fraud;
• comply with alcohol sales and age-restricted delivery requirements;
• respond to lawful requests from public authorities;
• keep appropriate business records.

Our lawful basis is compliance with legal obligations and, where appropriate, our legitimate interests.

To improve and protect our website

We may use technical information to:

• maintain website security;
• prevent fraud, spam or unauthorised access;
• understand how visitors use the website;
• fix errors and improve performance;
• monitor website reliability.

Our lawful basis is our legitimate interest in operating a secure, effective and reliable website.

Marketing

We may use your contact details to send marketing emails only where we have a lawful basis to do so. This may include your consent, or in some cases a “soft opt-in” where you have purchased from us and we are contacting you about similar products or services.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email, where available, or by contacting us directly.

We will not sell your personal data to third parties.

4. Payment information

Payments made through our website may be processed by third-party payment providers. We do not normally store your full card details on our own website.

Payment providers may process your personal data in accordance with their own privacy policies. This may include your name, billing address, email address, payment method, transaction reference and fraud prevention information.

Where payment services such as PayPal, card payment providers, Stripe, WooPayments or similar services are used, your data may be processed by those providers for payment processing, fraud prevention and compliance purposes.

5. Who we share your information with

We may share your personal information with trusted third parties where necessary to operate our business and provide our services. These may include:

• website hosting providers;
• website maintenance and security providers;
• WooCommerce and WordPress-related service providers;
• payment processors;
• couriers and delivery companies;
• age verification or fraud prevention providers, where used;
• customs agents, couriers and regulatory authorities for international shipments;
• accountants, bookkeepers and professional advisers;
• HMRC or other authorities where required by law;
• email service providers;
• analytics or cookie providers, where used.

We only share information where necessary and where there is a lawful basis to do so.

6. International orders and overseas transfers

If you place an international order or make an export enquiry, it may be necessary to share your personal information with couriers, postal services, customs authorities, tax authorities or delivery partners outside the UK.

This may include your name, address, telephone number, email address, order details and information required for customs declarations.

Where personal data is transferred outside the UK, we will take appropriate steps to ensure that it is protected in accordance with applicable data protection laws. This may include relying on adequacy regulations, standard contractual clauses, or other recognised safeguards where required.

Please note that international orders may also be subject to local import rules, taxes, duties and age restrictions in the destination country.

7. How long we keep your information

We will only keep your personal information for as long as necessary for the purposes for which it was collected.

As a general guide:

• order records are usually kept for up to 7 years for tax, accounting and legal purposes;
• customer account information is kept while your account remains active, unless you ask us to delete it and we are not legally required to keep it;
• enquiry information is kept for as long as needed to respond to your enquiry and maintain appropriate business records;
• marketing preferences are kept until you unsubscribe or ask us to remove them;
• website security logs may be kept for a limited period to help protect the website and investigate suspicious activity.

We may keep certain information for longer if required by law, to resolve disputes, or to protect our legal rights.

8. Cookies and similar technologies

Our website uses cookies and similar technologies.

Cookies are small files placed on your device that help the website work properly, improve your browsing experience, remember your preferences, and provide information about how the website is used.

We may use:

Strictly necessary cookies

These are required for the website to function. They may be used for shopping basket functionality, checkout, account login, security, fraud prevention and order processing.

Functional cookies

These help remember preferences or improve the way the website works.

Analytics cookies

These help us understand how visitors use the website, such as which pages are visited and how users move around the site.

Marketing cookies

These may be used to personalise content or measure the effectiveness of advertising, where applicable.
You can control cookies through your browser settings. Where required, we will ask for your consent before using non-essential cookies.
For more detailed information, please see our separate Cookie Policy, where available.

9. Contact forms and email enquiries

If you contact us using a form on the website or by email, we will use the information you provide to respond to your enquiry.

Please avoid sending sensitive personal information unless it is necessary for your enquiry.

10. Customer reviews

If our website allows customers to leave reviews, we may collect your name, email address, review content, rating, IP address and browser information to help verify reviews and prevent spam.

Reviews may be displayed publicly on the website. Please do not include personal information in a review that you do not want to be made public.

11. Security

We take reasonable steps to protect your personal information against loss, misuse, unauthorised access, disclosure, alteration or destruction.

However, no website, email system or online service can be guaranteed to be completely secure. You are responsible for keeping your account login details safe and confidential.

12. Your data protection rights

Under UK data protection law, you may have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your personal data;
• request restriction of processing;
• object to processing;
• request data portability;
• withdraw consent where processing is based on consent;
• complain to the Information Commissioner’s Office.

Some rights may be limited where we are required to keep information for legal, tax, accounting, fraud prevention or regulatory reasons.

To exercise your rights, please contact us at:

casknmalt@gmail.com

We may need to confirm your identity before responding to your request.

13. Complaints

If you have any concerns about how we use your personal information, please contact us first so that we can try to resolve the issue.

You also have the right to complain to the UK data protection regulator:

Information Commissioner’s Office
Website: ico.org.uk
Telephone: 0303 123 1113

14. Links to other websites

Our website may contain links to third-party websites, payment providers, delivery services or other external services.

We are not responsible for the privacy practices, content or security of third-party websites. You should read their privacy policies before providing personal information to them.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, legal obligations or the way we process personal information.

The latest version will always be published on this page. Where appropriate, we may notify customers of significant changes.