Privacy Policy

Toll House Spirits Ltd

Last updated: 15 October 2026

1. Introduction

Toll House Spirits Ltd ("Toll House Spirits", "we", "us" or "our") operates this online store, including its related website, products, services and features (collectively, the "Services").

Our online store is powered by Shopify, which provides the e-commerce platform that enables us to sell our products.

We are committed to protecting your privacy and handling your personal information responsibly, transparently and securely in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable UK data protection legislation.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, how long we retain it and the rights you have regarding your information.

Data Controller

Toll House Spirits Ltd
Unit 18 Matthew Kerr Place
Arbroath
DD11 3AX
Scotland, United Kingdom

Email: john@tollhousespirits.co.uk
Telephone: 01241 493636

2. Personal Information We Collect

When you visit our website, create an account, place an order or communicate with us, we may collect the following information.

Personal and contact information

• Full name

• Email address

• Telephone number

• Billing and delivery addresses

Order and transaction information

• Products purchased

• Order history

• Payment confirmation and transaction references

• Delivery information

• Returns, refunds and customer service enquiries

Account information

• Account login details and preferences

• Saved addresses and account settings

Technical and website information

• IP address

• Browser type and device information

• Website usage and browsing activity

• Cookies and similar technologies

Marketing preferences

• Email marketing subscriptions

• Communication preferences

• Records of marketing consent and withdrawals

Age-verification information

As we sell alcoholic beverages, we may collect or process information necessary to verify that customers are legally permitted to purchase alcohol.

Depending on the verification process used, this may include confirmation of age eligibility or information provided to an authorised third-party age-verification service.

We will only collect and retain age-verification information that is necessary for the relevant purpose.

Customer service information

When you contact us about an order, delivery or complaint, we may retain correspondence, photographs of damaged products, order references and other relevant information.

3. How We Collect Information

We collect personal information through:

• Information you provide directly when placing an order, registering an account or contacting us.

• Information collected automatically when you browse or interact with our website.

• Shopify and other service providers involved in processing payments, fulfilling orders or operating our store.

• Delivery partners and payment providers where necessary to complete transactions or resolve enquiries.

• Marketing and analytics providers, where applicable and permitted by law.

4. How We Use Your Personal Information

We process personal information only where we have a valid lawful basis.

Purpose	Lawful Basis
Processing purchases, payments and orders	Performance of a contract
Delivering goods and managing returns	Performance of a contract
Providing customer support	Performance of a contract or legitimate interests, depending on the enquiry
Maintaining accounting and tax records	Legal obligation
Age verification and compliance with alcohol sales requirements	Legal obligation, where applicable
Detecting and preventing fraud	Legitimate interests or legal obligation, as applicable
Sending promotional emails	Consent or legitimate interests where the applicable electronic marketing rules permit
Personalising advertising	Consent where required
Website analytics and improvements	Legitimate interests or consent, depending on the activity and applicable rules
Establishing or defending legal claims	Legitimate interests or legal obligation, as applicable

Where we rely on legitimate interests, we consider those interests against your rights and freedoms.

Where we rely on consent, you may withdraw that consent at any time.

5. Alcohol Sales and Age Verification

Toll House Spirits sells alcoholic beverages and does not knowingly sell alcohol to anyone under the age of 18.

We may use appropriate age-verification procedures when customers place orders and when products are delivered.

Where necessary, information may be shared with authorised age-verification providers or delivery partners to confirm that alcohol is supplied only to eligible recipients.

We aim to minimise the personal information collected during verification and will not retain copies of identity documents unless there is a lawful and necessary reason to do so.

6. Payments and Order Processing

Our online store uses Shopify to facilitate purchases and manage orders.

Payment information is processed through the payment providers available at checkout.

Payment providers may process information necessary to authorise transactions, prevent fraud and complete payments.

Toll House Spirits does not ordinarily receive or store customers' full payment card details.

Payment providers process information in accordance with their applicable privacy notices and security requirements.

7. Marketing Communications

We may send promotional emails containing information about our products, brands, offers, events and other relevant news where permitted by law.

We will only send electronic marketing communications where we have a valid legal basis and comply with the Privacy and Electronic Communications Regulations (PECR).

Where consent is required, we will obtain it before sending marketing communications.

Where the existing-customer soft opt-in applies, we may send marketing relating to our own similar products or services, provided the applicable conditions are satisfied.

You can unsubscribe from marketing emails at any time using the unsubscribe link included in our messages or by contacting john@tollhousespirits.co.uk.

Unsubscribing from marketing will not prevent us from sending essential communications relating to your orders or account.

We will not automatically subscribe customers to marketing communications simply because they make a purchase.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to operate our online shop and improve the customer experience.

These may include:

Essential cookies

Required for functions such as shopping baskets, checkout, account security and website operation.

Analytics cookies

Used, where applicable, to understand website performance and how visitors interact with our store.

Marketing cookies

Used, where applicable, to measure advertising effectiveness or deliver relevant advertisements.

We will obtain consent for non-essential cookies and tracking technologies where required by law, subject to any applicable statutory exemptions.

Customers can manage their preferences through the cookie consent controls provided on our website.

You may also manage cookies through your browser settings, although disabling certain cookies may affect website functionality.

Details of the specific cookies and technologies used, their providers, purposes and retention periods will be made available through our website's cookie information or preference controls.

9. Sharing Personal Information

We may share personal information with trusted service providers where necessary to operate our business.

These may include:

• Shopify: To host and operate our online store.

• Payment providers: To securely process transactions.

• Delivery and courier companies: To fulfil and deliver orders.

• Age-verification providers: Where used to verify eligibility to purchase alcohol.

• IT and technical service providers: To maintain website security and functionality.

• Marketing and analytics providers: Where used and permitted by applicable law.

• Professional advisers: Including accountants, legal advisers and auditors.

• Regulatory authorities: Where disclosure is required by law.

We require service providers acting on our behalf to handle personal information appropriately and in accordance with applicable data protection requirements.

We do not sell customer contact lists to third-party businesses.

Where Shopify or advertising partners process personal information for their own purposes, their respective privacy notices and legal responsibilities may also apply.

10. Our Relationship with Shopify

Our store is hosted by Shopify, which processes personal information to provide and improve its e-commerce services.

Information submitted through our store may be processed by Shopify and its authorised service providers.

Shopify may also process information for certain enhanced services, depending on the features enabled on our store.

Where Shopify independently determines the purposes and means of particular processing activities, Shopify may act as a separate data controller.

You can find further information about Shopify's privacy practices at:

https://www.shopify.com/legal/privacy/app-users

Shopify also provides a privacy portal:

https://privacy.shopify.com/en

11. International Data Transfers

Some of our technology and service providers, including Shopify, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that appropriate legal safeguards are in place where required.

These may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, or other legally recognised transfer mechanisms.

12. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include:

• Secure e-commerce hosting

• Restricted access to customer information

• Appropriate account security controls

• Secure payment processing

• Staff access controls

• Appropriate management of third-party service providers

Although we take reasonable precautions, no method of electronic transmission or storage can be guaranteed to be completely secure.

13. How Long We Keep Your Information

We retain personal information only for as long as necessary for the purposes for which it was collected, including fulfilling orders, maintaining appropriate business records, meeting legal obligations and resolving disputes.

Retention periods depend on the type of information and applicable legal requirements.

For example:

• Order and accounting records: Retained for the applicable statutory accounting and tax retention periods.

• Customer account information: Retained while an account remains active and thereafter where necessary for legitimate business or legal purposes.

• Customer service correspondence: Retained for as long as reasonably necessary to resolve enquiries and related disputes.

• Marketing information: Retained while there is a valid basis for marketing, subject to unsubscribe requests and appropriate suppression records.

• Age-verification records: Retained only as long as necessary for the relevant verification, compliance or legal purpose.

• Cookie information: Retained in accordance with the applicable cookie settings and retention periods.

We periodically review the information we hold and securely delete or anonymise personal information when it is no longer required.

14. Your Data Protection Rights

Under UK data protection law, you may have the following rights:

Right of access

You may request a copy of the personal information we hold about you.

Right to rectification

You may request correction of inaccurate or incomplete information.

Right to erasure

You may request deletion of personal information where the applicable legal conditions are met.

Right to restrict processing

You may request that we restrict how certain information is processed.

Right to data portability

You may request certain information in a structured, commonly used and machine-readable format.

Right to object

You may object to processing based on legitimate interests and to the use of your personal information for direct marketing.

Right to withdraw consent

Where processing relies on consent, you may withdraw it at any time.

Rights relating to automated decision-making

You may have rights concerning certain decisions made solely through automated processing that produce legal or similarly significant effects.

These rights are subject to applicable legal conditions and exemptions.

To exercise your rights, please email john@tollhousespirits.co.uk.

We will normally respond to valid requests within one month, subject to any lawful extensions.

We may request reasonable information to verify your identity before fulfilling a request.

15. Children's Privacy

Our online store sells alcoholic beverages and is intended for adults aged 18 and over.

We do not knowingly collect personal information from children for the purpose of selling alcohol.

If we become aware that personal information has been collected from a child inappropriately, we will take appropriate steps to delete or otherwise handle that information in accordance with applicable law.

Parents or guardians who believe a child has provided personal information to us should contact john@tollhousespirits.co.uk.

16. Third-Party Websites

Our website may contain links to third-party websites, including brand websites, social media platforms and external services.

These websites operate independently and may have their own privacy policies.

We recommend reviewing their privacy notices before providing personal information.

We are not responsible for the privacy practices of third-party websites that we do not control.

17. Complaints

If you have concerns about how Toll House Spirits handles your personal information, please contact us in the first instance.

We will investigate your concerns and aim to resolve them promptly.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Information Commissioner's Office

Website: https://ico.org.uk

Telephone: 0303 123 1113

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our business, website functionality, legal obligations or data processing practices.

The latest version will be published on our website with an updated revision date.

Where required by law, we will provide additional notice of significant changes.

19. Contact Us

For any questions about this Privacy Policy or how your personal information is handled, please contact:

Toll House Spirits Ltd

Unit 18 Matthew Kerr Place
Arbroath
DD11 3AX
Scotland, United Kingdom

Email: john@tollhousespirits.co.uk
Telephone: 01241 493636

Toll House Spirits Ltd is the data controller for personal information processed for its own business purposes.

Last updated: 15 October 2026