Data Controller Information
The data controller responsible for your personal data is Drinks On Us, United Kingdom.
For all data protection enquiries, please contact us at hello@drinksonus.uk. We are committed to handling personal data transparently and in accordance with UK data protection law.
Legal Basis for Processing
We process personal data only where we have a valid lawful basis under UK GDPR:
- Consent — where you have given clear permission, for example to receive marketing communications.
- Contract — where processing is necessary to perform a contract or take steps at your request before entering into one.
- Legitimate interests — where processing is necessary for our business operations, such as responding to enquiries and maintaining website security, provided your rights are not overridden.
- Legal obligation — where we must process data to comply with applicable laws and regulations.
Data Subject Rights
As a data subject under UK GDPR, you have the following rights:
- Right of access — to obtain a copy of the personal data we hold about you.
- Right to rectification — to request correction of inaccurate or incomplete data.
- Right to erasure — to request deletion of your data in certain circumstances.
- Right to restrict processing — to limit how we use your data in certain situations.
- Right to object — to object to processing based on legitimate interests or for direct marketing.
- Right to data portability — to receive your data in a structured, machine-readable format where applicable.
- Right to withdraw consent — where processing is based on consent, without affecting the lawfulness of prior processing.
Data Storage
Personal data is stored on secure servers provided by our hosting and infrastructure partners. Data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
Enquiry and correspondence data is typically retained for up to two years from your last interaction, unless a longer period is required for an active campaign or legal obligation.
Security Measures
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for data transmitted through our Website.
- Access controls limiting who can view and process personal data.
- Use of reputable third-party providers with established security practices.
- Regular review of our data handling procedures and provider arrangements.
International Transfers
Some of our service providers may process data outside the United Kingdom. Where personal data is transferred internationally, we ensure appropriate safeguards are in place as required by UK GDPR.
This may include transfers to countries with an adequacy decision from the UK government, or the use of standard contractual clauses and other approved transfer mechanisms.
Contact Details
To exercise your data subject rights or raise a data protection concern, please email hello@drinksonus.uk. We aim to respond to all requests within one month.
Please provide sufficient information to help us identify you and understand your request. We may need to verify your identity before processing certain requests.
Complaints Process
If you are unhappy with how we have handled your personal data, we encourage you to contact us first so we can try to resolve the matter.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. Visit ico.org.uk or call 0303 123 1113 for more information.