Introduction

Exeter Brewery Limited values your privacy and is committed to protecting your personal information. This Privacy Statement explains how we collect, use, and safeguard your data when you shop with us online. It also sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

When you use our website, we may collect the following information:

• Contact details: Name, email address, phone number, billing and shipping address.
• Payment information: Card details and transaction data (processed securely via thirdparty payment providers; we do not store full card details).
• Account information: Login credentials if you create an account.
• Technical data: IP address, browser type, device information, cookies, and analytics.

Lawful Bases for Processing

We process your personal data under the following lawful bases:

• Contract: To fulfill and deliver your orders.
• Legal obligation: To comply with tax, accounting, and regulatory requirements.
• Consent: For marketing communications, where you have opted in.
• Legitimate interests: To improve our website, products, and services, and to prevent fraud.

How We Use Your Information

We use your information to:

• Process and deliver your orders.
• Communicate with you about purchases, enquiries, or promotions (if you opt in).
• Improve our website, products, and services.
• Comply with legal and regulatory obligations.

Sharing Your Information

We do not sell your personal data. We may share information only with trusted third parties, such as:

• Payment processors (to securely handle transactions).
• Delivery partners (to ship your orders).
• IT and analytics providers (to maintain and improve our website).

Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction.

Your Rights

Under UK and EU data protection laws, you have the right to:

• Access the personal data we hold about you.
• Request corrections or updates.
• Request deletion of your data.
• Object to or restrict certain processing.
• Withdraw consent for marketing communications.
• Data portability (receive your data in a structured, machinereadable format).

To exercise these rights, please contact us at: enquiries@exeterbrewery.co.uk

Cookies

Our website uses cookies and similar technologies to enhance your shopping experience and analyze site traffic. You can manage cookie preferences through your browser settings.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined above or as required by law (e.g., tax and accounting obligations).

International Transfers

If we transfer personal data outside the UK/EU, we ensure appropriate safeguards are in place to protect your information, such as standard contractual clauses approved by the UK Information Commissioner’s Office (ICO).

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
https://ico.org.uk

Data Protection Enquiries

Exeter Brewery Limited does not appoint a formal Data Protection Officer. All data protection enquiries are handled directly by the brewery via email: enquiries@exeterbrewery.co.uk

Changes to This Statement

We may update this Privacy Statement from time to time. Any changes will be posted on this page with an updated revision date.

Contact Us

If you have questions or concerns about this Privacy Statement, please contact us at:
Exeter Brewery Limited
Cowley Bridge Road
Exeter EX4 4NX
Email: enquiries@exeterbrewery.co.uk

‍