Privacy Policy

Last updated: 20 August 2026

At Copeland Spirits Ltd (“Copeland Distillery”, “Copeland Spirits”, “we”, “us” or “our”), we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, purchase our products, contact us, enter one of our competitions or promotions, subscribe to our marketing communications, or otherwise interact with us.

For the purposes of applicable data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and, where applicable, the EU General Data Protection Regulation (“EU GDPR”), Copeland Spirits Ltd is the data controller responsible for your personal data.

Company number: NI635249
Registered address: Manor Street, Donaghadee, County Down, BT21 0HF, United Kingdom
Email: info@copelanddistillery.com
Telephone: 028 9162 4000

1. What personal data do we collect?

Depending on how you interact with us, we may collect the following categories of personal data:

• Your name and title;
• Contact details, such as email address, telephone number and postal address;
• Delivery and billing information;
• Information relating to products or services you purchase from us;
• Account or transaction information, where applicable;
• Your preferences, interests and marketing preferences;
• Information you provide when contacting us, entering competitions, promotions or surveys, or otherwise communicating with us;
• Information about your use of our website, including IP address, browser type, device information and website activity;
• Cookie and similar technology information, where applicable;
• Information required to verify age where this is necessary or appropriate for the sale or supply of our products;
• Any other personal information you voluntarily provide to us.

We do not intentionally collect special category personal data through this website unless there is a specific lawful reason for doing so.

2. How do we collect your personal data?

We may collect personal data:

• Directly from you when you purchase products, contact us, subscribe to communications, enter a competition or promotion, complete a form or otherwise interact with us;
• Automatically when you use our website, through cookies and similar technologies;
• From service providers who process information on our behalf;
• From third parties where this is lawful and necessary for our business operations.

Where we obtain personal data from a third party rather than directly from you, we will provide the privacy information required by applicable data protection law.

3. How do we use your personal data?

We may use your personal data for the following purposes:

Processing orders and providing services

We may use your personal data to:

• Process and fulfil orders;
• Arrange delivery of products;
• Process payments;
• Manage customer accounts, where applicable;
• Respond to enquiries and provide customer service;
• Deal with returns, refunds and complaints;
• Provide other products or services you have requested.

Operating and improving our website

We may use information about how visitors use our website to:

• Maintain and secure our website;
• Improve website functionality and performance;
• Understand how visitors use our website;
• Personalise aspects of your website experience where permitted;
• Diagnose technical problems and prevent fraud or misuse.

Where cookies or similar technologies require consent, we will obtain consent before using them.

Marketing and communications

Where permitted by applicable law, we may use your personal data to send information about our products, services, events, competitions, promotions and other news that we believe may be relevant to you.

Where consent is required, we will only send electronic marketing communications where you have provided valid consent.

You can withdraw your marketing consent at any time by using the unsubscribe facility in our marketing communications or by contacting us.

For UK marketing, we also comply with the Privacy and Electronic Communications Regulations (“PECR”), as applicable. Electronic marketing may require consent, subject to limited exceptions such as the applicable “soft opt-in” rules.

Competitions, promotions and events

Where you enter a competition, promotion or event, we may use your personal data to administer the competition or promotion, communicate with you, verify eligibility, provide prizes and meet our legal and regulatory obligations.

The specific terms and conditions of a competition or promotion may contain additional information about how your personal data will be used.

Legal and regulatory purposes

We may process personal data where necessary to:

• Comply with our legal and regulatory obligations;
• Prevent, detect and investigate fraud, crime or other unlawful activity;
• Protect our rights, property, customers, employees and business;
• Establish, exercise or defend legal claims;
• Respond to lawful requests from courts, regulators, law enforcement agencies or other authorities.

4. Our lawful bases for processing

We will only process your personal data where we have a lawful basis to do so under applicable data protection law.

Depending on the circumstances, our lawful bases may include:

Contract: where processing is necessary to enter into or perform a contract with you, such as processing and delivering an order.

Legal obligation: where processing is necessary for us to comply with a legal or regulatory obligation.

Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. Our legitimate interests may include operating and improving our business, website and services, administering customer relationships, preventing fraud and protecting our business.

Consent: where you have given us valid consent, for example for certain marketing communications or non-essential cookies and similar technologies.

Where we rely on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

We will not use one lawful basis as a substitute for another where the law requires consent.

5. Marketing

We take our responsibilities regarding direct marketing seriously.

Where required by law, we will obtain your consent before sending marketing communications by email, SMS or other electronic means. Consent must be freely given, specific, informed and based on a clear affirmative action.

You can unsubscribe from marketing communications at any time.

Please note that even where you have opted out of marketing, we may continue to send you non-marketing communications that are necessary, such as order confirmations, delivery information, service messages or information relating to transactions you have requested.

6. Third parties and service providers

We use selected third-party companies and service providers to help us operate our business and provide our website, products and services.

These third parties may process personal data on our behalf and may include:

• Website hosting and technology providers;
• E-commerce and payment service providers;
• Email and marketing communication providers;
• Customer relationship management providers;
• Website analytics and performance providers;
• Delivery and fulfilment providers;
• IT, cybersecurity and technical support providers;
• Professional advisers and insurers;
• Competition, event and promotional service providers.

Where a third party processes personal data on our behalf, we require it to process that data only in accordance with our instructions and to implement appropriate technical and organisational measures to protect it.

Where required by applicable law, we enter into appropriate data processing agreements with our processors.

For example, we may use Google services in connection with our website and business operations. Where Google or another provider processes personal data on our behalf, the applicable contractual and data protection safeguards will apply.

Some third parties may act as independent data controllers rather than processors. Where this is the case, their own privacy policies may also apply.

We do not sell your personal data.

7. Sharing your personal data

We may disclose personal data where reasonably necessary for the purposes described in this Privacy Policy.

This may include sharing information with:

• Payment providers;
• Delivery and fulfilment providers;
• Technology and website providers;
• Marketing and communications providers;
• Professional advisers;
• Regulators, government bodies, law enforcement agencies or courts where required or permitted by law;
• Prospective purchasers or investors in connection with a proposed sale, restructuring, merger or acquisition of our business, subject to appropriate confidentiality and legal safeguards.

We will only share personal data where we have a lawful basis for doing so.

8. International transfers

Some of our service providers may process personal data outside the United Kingdom or European Economic Area (“EEA”).

Where personal data is transferred internationally, we will ensure that the transfer is made in accordance with applicable data protection law.

Depending on the circumstances, this may include relying on:

• An adequacy decision made by the UK Government or European Commission, where applicable;
• The UK International Data Transfer Agreement or UK Addendum;
• EU Standard Contractual Clauses;
• Another legally recognised transfer mechanism or safeguard.

Where required, we will implement appropriate supplementary measures to protect personal data transferred internationally.

9. How long do we keep your personal data?

We will retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, regulatory and reporting requirements.

The appropriate retention period will depend on the nature of the information and why we process it.

For example:

• Transaction and financial records may need to be retained for statutory and accounting purposes;
• Customer service correspondence may be retained for an appropriate period to manage queries and resolve disputes;
• Marketing information will generally be retained while you remain subscribed, or until you withdraw consent where consent is the lawful basis, subject to any other lawful reason for retaining it;
• Information relating to competitions and promotions will generally be retained for as long as necessary to administer the relevant activity and deal with any resulting legal or regulatory requirements.

When personal data is no longer required, we will securely delete it or anonymise it.

10. Cookies and similar technologies

Our website may use cookies and similar technologies.

Some cookies are necessary for the website to function properly. Other cookies may be used for analytics, functionality, advertising or other purposes.

Where consent is required under applicable law, we will ask for your consent before placing or using non-essential cookies or similar technologies.

You can manage your cookie preferences through our cookie consent mechanism.

UK rules concerning cookies and similar technologies sit alongside UK data protection law and require appropriate information and, in many circumstances, consent.

Please see our Cookie Policy for further information about the cookies and similar technologies used on our website.

11. Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include appropriate access controls, security procedures, secure systems and contractual requirements imposed on relevant service providers.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

12. Your data protection rights

Depending on the circumstances and applicable law, you may have the following rights:

• Right of access: to request a copy of the personal data we hold about you;
• Right to rectification: to ask us to correct inaccurate or incomplete personal data;
• Right to erasure: to ask us to delete personal data in certain circumstances;
• Right to restriction: to ask us to restrict the processing of your personal data in certain circumstances;
• Right to object: to object to certain processing, including direct marketing;
• Right to data portability: in certain circumstances, to receive personal data you have provided to us in a structured, commonly used and machine-readable format;
• Right to withdraw consent: where we rely on consent, you may withdraw it at any time;
• Rights relating to automated decision-making: where applicable, you may have rights in relation to certain decisions made solely by automated means.

These rights are subject to certain legal exemptions and limitations.

If you wish to exercise any of these rights, please contact us using the details below.

13. Complaints

If you have concerns about the way we have handled your personal data, we encourage you to contact us first so that we can investigate and try to resolve the issue.

You also have the right to complain to the relevant data protection supervisory authority.

For individuals in the UK, the relevant supervisory authority is the Information Commissioner’s Office (ICO).

For individuals in the EEA, you may contact the data protection supervisory authority in your country of residence, place of work or where you believe an infringement has occurred.

14. Children’s privacy

Our website and services are not intended to knowingly collect personal data from children.

Where our products or services are subject to age restrictions, we may take appropriate measures to verify age or eligibility.

If you believe that a child has provided us with personal data without appropriate consent, please contact us.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or applicable legal requirements.

The latest version will always be published on this page with the date of the latest update.

We recommend that you review this Privacy Policy periodically.

16. Contact us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, withdraw consent or raise a privacy concern, please contact us:

Copeland Spirits Ltd
Manor Street
Donaghadee
County Down
BT21 0HF
United Kingdom

Email: info@copelanddistillery.com
Telephone: 028 9162 4000

Company number: NI635249

Privacy Policy last updated: 20 August 2026