WHO WE ARE
Highland Park is owned by Highland Distillers Limited, a private limited company (registered in Scotland No. SC158731), and our registered office is at 100 Queen Street, Glasgow G1 3DN.
HOW WE PROTECT YOUR PERSONAL DATA
Highland Park is committed to keeping your personal data safe and secure and to protecting and respecting the privacy of your personal information. To prevent unauthorised access, maintain data accuracy and ensure the correct usage of your personal data, we monitor and adjust our procedures to safeguard and secure the personal data we collect online.
- what type of personal data we collect
- when we collect your personal data
- how we use your personal data
- our legal reasons for holding personal data
- who we share your personal data with
- how long we keep personal data for
- what rights and choices you have with regard to your personal data
WHAT TYPES OF PERSONAL DATA DO WE COLLECT ABOUT YOU?
We collect the following types of personal data:
• your name, age/date of birth (for age verification purposes only) and location
• your contact details (postal addresses including billing and delivery addresses) and contact telephone numbers
• details of orders you place through our online shop
• your payment card details, when you make a purchase or place an order with us
• your correspondence and communications with Highland Park
• personal data which you may have shared via a public platform (such as on our Facebook pages or Instagram feeds)
• your communication and marketing preferences
• your interests, preferences, feedback and survey responses
• your online browsing activities on our website
WHEN AND WHERE DO WE COLLECT YOUR PERSONAL DATA?
We collect your personal data when you:
- sign up to join our Inner Circle
- place an order for our products or merchandise from our online shop
- enter a ballot for the opportunity to purchase a Highland Park product
- make an online tour booking
- enter a competition related to Highland Park or one of our products (including merchandise)
- attend one of our events or visit one of our sites (distillery visitor centre and shop)
- contact us with any customer service enquiries
HOW DO WE USE YOUR PERSONAL DATA?
Highland Park (and trusted partners acting on our behalf) use your personal data:
- to provide you with information, products or services that you request from us, or which we feel may interest you (but only when you’ve given your consent to be contacted by us)
- to allow us to send you personalised communications based on your preferences and use of our products
- to verify your identity and your age
- for crime and fraud prevention, detection and related purposes
- to enable us to manage any customer service interactions with you
- to ensure that our web content is presented in the most efficient way for you and your computer
- to allow you to participate in interactive features on our website, when you choose to do so
- where we have a legal right or duty to use or disclose your information (for example, in relation to an investigation by a public authority or in a legal dispute)
WHAT IS OUR LEGAL REASON FOR HOLDING PERSONAL DATA?
Data protection laws require us to state our legal reason for processing your personal data. We need your consent to send you marketing communications about Highland Park and you can withdraw your consent to receive these communications at any time by using the unsubscribe button included in the communications we send you, or by contacting us at
We also collect and use your personal data because it is necessary for:
- the pursuit of ‘our legitimate interests’ (as set out below)
- the purposes of complying with our duties and exercising our rights under a contract for the sale of goods to a consumer
- compliance with our legal obligations
OUR LEGITIMATE INTERESTS
The normal legal basis for processing consumer data, is that it is necessary for Highland Park’s legitimate interests, including:
- selling and supplying goods to our consumers
- protecting our consumers, employees and other individuals and maintaining their safety, health and welfare
- promoting, marketing and advertising our products
- understanding our consumers’ behaviours, activities, preferences, and needs
- improving existing products and developing new products
- complying with our legal and regulatory obligations
- handling consumer contacts, queries, complaints or disputes
- preventing, investigating and detecting crime, fraud or anti-social behaviour, and prosecuting offenders
WHO DO WE SHARE YOUR PERSONAL DATA WITH?
To effectively fulfil our obligations to you, and to provide you with certain benefits, we use a number of trusted and reliable third parties to carry out functions that involve the processing of your personal data. These include IT, delivery and marketing service providers.
- When you order products from our online shop, we will share your details with our fulfilment partner (currently Mail Marketing UK Limited), who will process your orders as set out in our Terms and Conditions.
- We use marketing service providers and other third parties to administer services on our behalf, such as sending communications to you, administering any promotions or ballots that we run, and to provide the online booking system which allows you to book tours at our Distillery.
- Some of the third party service providers we use may be based outside the European Economic Area, but we will only transfer personal data to these service providers where we are satisfied that adequate levels of protection and security controls are in place to protect your personal data. We impose contractual obligations on service providers relating to data protection and security, which mean that they can only use your personal data to provide services to Highland Park or to you, and for no other purpose.
We may also share your details with Edrington’s group of subsidiary companies, who are involved in customer services and marketing activities related to Highland Park.
We may provide information to others (such as governmental or law enforcement agencies) in the good faith that such action is necessary to:
(i) enforce or apply our Terms and Conditions
(ii) comply with any legal claims raised against Highland Park
(iii) protect the rights, property or safety of Highland Park
(iv) protect the rights, property or safety of the public
If Highland Park become involved in a merger, acquisition, bankruptcy or other transaction involving the sale of some or all of our assets, user information (including personal information collected from you through your use of our website) could be included in the transferred assets. Should such an event occur, we will use reasonable means to notify you, either through email and/or a prominent notice on our website.
WHAT ARE YOUR RIGHTS?
You have a number of rights under the Data protection laws in relation to the way we process your personal data, namely:
• to access your data
• to have your data rectified if it is inaccurate or incomplete
• in certain circumstances, to have your data deleted or removed
• in certain circumstances, to restrict the processing of your data
• a right of data portability, namely to obtain and reuse your data for your own purposes across different services
• to object to direct marketing
• not to be subject to automated decision making (including profiling), where it produces a legal effect or a similarly significant effect on you
• to claim compensation for damages caused by a breach of the Data Protection Laws
If you wish to exercise any of these rights, please contact [email protected]
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We will not retain your personal data for longer than necessary for the purposes set out in this Policy. Different retention periods will apply to different types of data.
If you have any questions or concerns about the way in which your personal data is processed, please contact [email protected]
You have the right to complain about data protection matters to the Information Commissioner’s Office (ICO). The ICO is the UK’s independent body set up to uphold information rights. You can find out more about the ICO on its website (https://ico.org.uk/) or contact them by calling 0303 123 1113.
COOKIES AND HOW WE USE THEM
A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.
We use the following cookies:
Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
Analytical or performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
You can find more information about the individual cookies we use and the purposes for which we use them in the table below: