Grant's Privacy & Cookies Notice 

INTRODUCTION

We are committed to protecting your personal data; your privacy matters to us. That is why we have developed this Privacy and Cookies Notice to explain how we collect, use, share and store your personal information when you use this website, and to inform you about how we will look after that information. This includes any information you may provide us with when you sign up to keep in touch with us or take part in any competitions that we might run.

It is important that you take some time to read and familiarise yourself with this Notice, together with our website terms and conditions and any other privacy or fair processing notices that we may provide on specific occasions when we are collecting or processing personal data about you. This will help you to be fully aware of how and why we are using your information.

If you do not agree with any term in this policy, please do not use the website or submit any personal information to or through it.

1. Controller

William Grant & Sons Limited (Company Number SC131772) is the data controller responsible for your personal data.

Our registered address is:
The Glenfiddich Distillery
Dufftown
Banffshire
AB55 4DH

All references to "our", "us", "we" or "Company" within this policy are deemed to refer to William Grant & Sons Limited, its subsidiaries, affiliates and associates.

Grant’s is a brand owned by us and we own and operate www.grantswhisky.com.

2. Contact Details

Our contact details are:

William Grant & Sons Ltd
The Old Court House,
7 Parkshot,
Richmond
TW9 2RF

3. Changes to the privacy policy & your duty to inform us of changes

This Privacy Policy was last updated in May 2018; however we keep this policy under review. We will show any updates to it on this webpage. We recommend that you check this page regularly to ensure that you have read the most recent version.

Please note, it is important that the personal data we hold about you is accurate and current. Please keep us informed if personal data we hold about you changes during your relationship with us.

4. Third-Party Links

From time to time this website may include links to third-party websites, plug-ins, platforms and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third party websites and are not responsible for their privacy statements or for how they collect and use your personal information. When you leave our website, we strongly advise you to read the privacy notice of every website you visit before you submit any personal information to them.

5. Information we collect from you

Personal data or personal information means any information about an individual from which that person can be identified.

You must not provide us with your personal information if you are not of legal age to purchase alcohol in the jurisdiction in which you reside and (if different) in the jurisdiction in which you are accessing the website(s). We do not intend to collect personal information from any individuals under the legal purchase age, or to market alcoholic beverages to anyone under the legal purchase age. If we receive notice or believe that someone under the legal purchase age has provided us with personal information we will make every reasonable effort to remove such personal information from our files, or to flag such personal information and (to the extent permitted by law) retain it for the sole purpose of ensuring that it is no longer used.

The personal information we collect includes (a) information you provides to us; and (b) information we automatically collect or generate. We have set out below more details about these types of information:

(a)Information you provide to us these types of information might include:

- contact details (such as your name, postal addresses, phone numbers and e-mail addresses);

- demographic information (such as your age or age range and gender); online registration information (such as your password and other authentication information);

- payment information (such as your payment card details and billing address);

- information provided as part of online questionnaires (such as responses to customer satisfaction surveys or market research);

- competition entries or submissions; and

- in certain cases, your marketing preferences.

(b) Information we generate or automatically collect: these types of personal information may relate to your device (such as your PC, tablet or other mobile device) your use of our websites and apps, photographs and video recordings made by us or on our behalf and / or your personal preferences, interests or geographic location. Examples of these types of information might include:

- name and age (or predicted age range);

- information about your device, operating system, browser and IP address;

- unique identifiers associated with your device;

- details of web pages that you have visited;

- which products you have looked at online (including information about products you have searched for or viewed, purchased or added to an online shopping basket);

- how long you spend on certain areas of a website or app together with the date and time of your visit / usage;

- personal information contained within user generated content (such as blogs and social media postings);

- social media user name or ID;

- social media profile photos and other social media profile information (such as number of followers);

- photographs and video recordings

6. How we collect your information

We use different methods to collect your personal data including through direct interaction with you, for example when you:

a. visit and use our website;

b. contact us with an enquiry or other feedback;

c. enter any competition, promotion, prize draw or event that we run on this website;

d. fill in an online questionnaire (such as a customer satisfaction survey);

e. provide payment card details (such as when purchasing products from us);

f. register on a website or app or leave any reviews or comments;

g. inform us of your marketing preferences (these should be communicated to us via grantswhisky@grantswhisky.com);

h. communicate with us via social media websites, third party apps or similar technologies; and / or

i. attend events run by us or on our behalf.

We may also collect your personal data using automated interaction, for example when you browse or use our website we use cookies, and other similar technologies to collect information automatically from one or more of your devices associated with you. Cookies are explained more fully at section 8 below.

7. Information you post on public areas of our site and social media

Information that you post on or through any public areas of the website (such as chatrooms, bulletin boards or discussion forums) and on any social media pages that we operate is publicly available information. This means that it is generally accessible to, and may be collected by, others and may be used by them to send you unsolicited messages. We do not have control over if or how other people may use that information therefore you should use caution and ensure not to disclose personal information when using public web areas or social media. We will not be responsible for any postings that you make with personal information in them.

8. Cookies

We use cookies on this website. These allow us to give you the best possible experience on our website.

This section contains information on the following:

What are cookies?

- Why do we use cookies?

- What cookies do we use?

- How do I control cookies?

What are cookies?

Cookies are small text files that are placed on your computer by websites that you visit. They can't harm your computer.

If you’d like to read more about cookies, this website contains a lot of useful information that may be of interest: http://www.aboutcookies.org/default.aspx

Why do we use cookies?

We use cookies to distinguish you from other users of our website and to provide increased functionality on this site. This helps us improve your experience of the website(s) and to deliver a better and more personalised service.

We don't use cookies to collect personal information about you, but we do use encrypted information gathered from them to also:

a. estimate our audience size and usage pattern; and
b. recognise you when you return to the website(s).

So that you can make full use of the personalised features on our website(s), your computer, mobile phone or other device that you use to access the internet will need to accept cookies.

What cookies do we use?

Here's a list of the main cookies that may be sent to your device and what we use each cookie for. You can set your browser to reject cookies (see below for more information on how to do this), but if you do this, certain personalised features of our website(s) cannot be provided to you.

Cookie Name	Cookie Purpose	More Information
__utma __utmb __utmz __utmc _utm*	Google Analytics. These cookies are used to collect information about how visitors use our Website(s). The cookies collect information in an anonymous form, including the number of visitors to the Website(s), where visitors have come to the Website(s) from and the pages they visited.	Click here for an overview of privacy at Google
_ga _gid	Google Analytics uses these cookies to distinguish between users.
_dc_gt_UA*	Google Tag Manager. This cookie is used to help identify the visitors by either age, gender, or interests by DoubleClick - Google Tag Manager.	Click here for an overview of privacy at Google
alc_enc	Grant’s. This cookie is used for auto-login if you select “remember me” on the age gate.
country	Grant’s. This cookie keeps the user on the country website they selected on the age gate.
grants_live_consented	Grant's. This cookie shows that the user has passed the age gate and contains their date of birth and country.
language	Grant’s. This cookie stores your language preferences.
PastMember	Grant’s. This cookie identifies a user with a Grant’s account.
PHPSESSID	Grant's. PHP Session cookie that helps pass information across page changes.

To support our website(s) we may occasionally embed photos and video content from other third party websites such as Flickr and YouTube. Pages with this embedded content may present you with cookies from these websites. We do not control the distribution of these cookies and you should check the relevant third party website for more information about these.

How do I control cookies?

You may refuse to accept cookies from us by: (a) not opting in to the use of cookies by us on the landing page of the website(s); or (b) activating the setting on your browser which allows you to refuse the setting of cookies. Each web browser is different so check the ‘Help’ function of your particular browser to determine how to update your particular cookie settings. The website http://www.allaboutcookies.org contains step-by-step guides which can assist you in adjusting your browser settings.

To opt out of being tracked by Google Analytics across all websites visit tools.google.com/dlpage/gaoptout.

Please note that switching off cookies may reduce the functionality of (or prevent access to) certain websites.

9. How we use your personal data

We will only use your personal data when the law allows us to and it is fair for us to do so. Most commonly, we will use your personal data in the following ways:

a. Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; For example, this will be the basis upon which we collect information which is necessary for us to understand our markets and consumers, to promote our services and to operate our business effectively.
(This is the legal basis upon which we may process your personal data where it has been collected for the purposes listed in paragraph 10a, b, c, d, e, f, g, h, i, k, m, n, p and q below)

b. Where we need to perform a contract that we are about to enter into, or have entered into with you;
(This is the legal basis upon which we may process your personal data where it has been collected for the purposes listed in paragraph 10o below)

c. Where we need to comply with a legal or other regulatory obligation;
(This is the legal basis upon which we may process your personal data where it has been collected for the purposes listed in paragraph 10i, l and q below)

d. Where you have given us your consent that we do so, for example where you have given your consent to receive marketing or other information from us. Please note, you can withdraw your consent at any time by clicking on the “unsubscribe” link at the bottom of any marketing e-mail we send you.
(This is the legal basis upon which we may process your personal data where it has been collected for the purposes listed in paragraph 10j, n and q below)

10. The purposes for which we will use your personal data

We use your personal information to:

a. manage and improve this website so as to ensure that its content is presented in the most effective manner for you and for your computer and/or device;

b. respond to any enquiry or feedback from your and to implement any changes in response to that;

c. retain records of how we have dealt with feedback and / or complaints;

d. monitor the nature and trends of any complaints we receive;

e. allow you to participate in interactive features of the website(s), when you choose to do so;

f. manage any competitions, prize draws or promotions that you enter on this website;

g. administer any surveys that you complete on this website;

h. improve our products and services;

i. comply with legal obligations and protect against legal claims or liability;

j. send you marketing communications about Grant's whisky through channels such as e-mail and SMS about our products and services and those of our subsidiaries, affiliates and associates within the William Grant & Sons group of companies;

k. target online advertising;

l. authenticate and control access to parts of, or features of, our website (including relative to your age and location);

m. enable us to carry out marketing analysis of our products, services and campaigns;

n. provide specific services that you request from us, as well as to provide additional services that may be of interest;

o. maintain your accounts and manage transactions such as payment card transactions for any products that your order from us, or for the fulfilment of such transactions;

p. diagnose service or technology problems reported by our users or engineers in connection with the use of our websites.

q. to celebrate or promote our values, products, brands, partnerships, culture, people or business.

Please note that when you contact us, we may keep a copy of the resultant correspondence.

11. How do we store your personal information?

We will take all steps reasonably necessary to ensure the security of the personal information we collect and store about you. We will use all reasonable endeavours to protect your personal information from unauthorised disclosure and / or access, however unfortunately, the transmission of information via the internet is not completely secure and we have no control over the privacy of any communication while it is in transit to us. Although we will do our best to protect your personal information, we cannot guarantee the security of your information while it is being transmitted to our site. Accordingly, any transmission is at your own risk.

All information you provide to us is stored in secure managed servers and we will limit access to your personal data to those of our employees, agents, contractors and other third parties who have a business need to know. Any payment transactions are encrypted using SSL technology, and payment details are not kept following completion of the transaction. Where we have given you (or where you have chosen) a password which enables you to access certain parts of the website(s), you are responsible for keeping this password confidential. You will be responsible for controlling access to your account and for any activity under your account and password. We therefore ask you not to share your password with anyone. We will not be liable for any loss or damage where you have not complied with this obligation.

Where we are legally required to do so, we will notify you and any applicable data protection authority or other regulator should there be an actual or suspected personal data breach involving your personal information.

12. How long will you use my personal data for?

We will only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting obligations that we may have. We will only keep personal data for longer where there is a legal requirement for us to do so.

To determine how long we should keep your information for, we will consider the amount, type, and sensitivity of the personal information involved as well as the potential risk of harm if it is lost, or used or disclosed without authorisation. We will also consider the purposes for which we process your personal data and whether we can achieve those purposes through other means without the need to keep your data.

In some circumstances you can ask us to delete your data (see section 15 below for more information).

In some circumstances, we may also anonymise your personal data so that it can no longer be associated with you, for example for statistical purposes. Where we do this, we may use this information indefinitely without further notice to you.

13. Opting In

Sometimes, we will give you the option to choose whether you would like to receive information from us or not (e.g. by choosing to opt in to receiving emails from us with news about our brands or promotional offers). However, sometimes we will need to collect information from you by law or you will sometimes not have the option to opt out, such as when we are satisfying the obligations of a contract we have with you, or administering a transaction requested by you[, i.e. if you purchase products from us online]. In some circumstances, if you choose not to provide certain information, we may be unable to provide you with a certain service or product.

14. Sharing your personal data with others

We may share your personal information with any member of our group of companies – this includes any of our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

We may disclose your personal information to our suppliers, distributors (wholly or partly owned) and other contractors who are engaged by us to assist in the provision of products and services to you, including delivery of products ordered by you and the conduct of market research which you have agreed to participate in, as well as to other third parties if:

a. the third party has been appointed to perform certain functions on our behalf, (for example to administer any competitions, prize draws and promotions we run on this website; or to provide technical services in relation to this website; [or to provide technical or other services in relation to the processing of customer payments and orders; ]or to provide technical or other services in relation to the processing of your personal information for mailing or marketing purposes for our products or services, to which you have consented) and it needs access to your personal information to be able to properly perform their function;

b. we are under a duty to disclose or share your personal information in order to comply with any legal or regulatory obligation; or to protect the rights, property, or safety of the company, our customers, or consumers or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction;

c. we become involved in any merger or acquisition or other transaction involving the sale of all or part of our group companies’ business or assets, user information (including the personal information collected from you through your use of this website) may be included in the assets which are transferred to the new owner.

We use only carefully selected third parties to help us deliver our services and products to you and they are only allowed to use your personal information to deliver the services or products you have purchased, registered for or subscribed to. We do not allow them to use your personal data for their own purposes. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

We will never share any of your personal data with anybody outside of our group of companies for third party mailing or marketing purposes unless we have your consent to do so.

As a global business, we may sometimes need to transfer personal data to another country which is outside of the EEA. Where this is the case and your personal data in affected, we will ensure that an adequate level of protection is in place to protect your personal data.

15. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. This includes the right to:

- request access to your personal data

This enables you to receive a copy of the personal data we hold about you and to check that we are processing it lawfully

- request that inaccurate personal data be corrected

This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us

- request that your personal data be erased 

This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

- object to your personal data being processed or to request processing should be restricted

- Right to withdraw your consent to our processing of your personal information

No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of your other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

If you wish to exercise any of the rights set out above, or you have any concerns about how we process your information, please e-mail us at DataProtection@wgrant.com so that we can investigate and hopefully resolve your concerns.

If we are unable to satisfactorily deal with your concerns then you have the right to lodge a complaint with the appropriate data protection authority.

16. How to unsubscribe or withdraw your consent

Where we have collected your personal information based on your consent and we have no other lawful basis on which to continue processing your information, if you subsequently withdraw your consent we will delete your personal information.

You can withdraw your consent, change your preferences, or opt out from hearing further from us by letting us know using the contact details set out at section 2 of this Notice or by e-mailing us at grantswhisky@grantswhisky.com.

You can also ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you.

However please note, where you unsubscribe from receiving e-mailed marketing communications from us, we will keep a note of your e-mail address to make sure that we do not send you further e-mailed marketing communications in future.

Issue Date: May 2018