Privacy Policy

Last updated: January 2026

1. Introduction

Driftwright & Cooper Ltd ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website at driftwright.co.uk or purchase our products.

We are registered in England and Wales. For data protection purposes, we are the data controller. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

Information you provide directly:

  • Name and contact details (email address, phone number, postal address)
  • Payment information (processed securely by our payment provider)
  • Age verification confirmation
  • Communications you send to us
  • Newsletter subscription preferences

Information collected automatically:

  • IP address and browser type
  • Pages visited and time spent on our website
  • Referring website addresses
  • Device information

3. How We Use Your Information

We use your personal data for the following purposes:

  • Order fulfilment: To process and deliver your orders
  • Legal compliance: To verify you are of legal drinking age (18+)
  • Communication: To respond to your enquiries and provide customer service
  • Marketing: To send newsletters and promotional materials (only with your consent)
  • Website improvement: To analyse how our website is used and improve user experience
  • Legal obligations: To comply with applicable laws and regulations

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

  • Contract: Processing necessary to fulfil orders and provide services you have requested
  • Consent: Where you have given explicit consent (e.g., marketing communications)
  • Legal obligation: Where we are required by law (e.g., age verification for alcohol sales)
  • Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights

5. Data Sharing

We may share your personal data with:

  • Payment processors: To securely process transactions
  • Delivery partners: To fulfil and deliver orders
  • Email service providers: To send transactional and marketing emails
  • Analytics providers: To understand website usage
  • Legal authorities: Where required by law

We do not sell your personal data to third parties. All third-party service providers are required to protect your data in accordance with applicable data protection laws.

6. Data Retention

We retain your personal data only for as long as necessary:

  • Order and transaction records: 7 years (for tax and legal purposes)
  • Marketing preferences: Until you withdraw consent
  • Website analytics: 26 months
  • Customer enquiries: 3 years after resolution

7. Your Rights

Under UK GDPR, you have the following rights:

  • Right of access: Request a copy of your personal data
  • Right to rectification: Request correction of inaccurate data
  • Right to erasure: Request deletion of your data ("right to be forgotten")
  • Right to restrict processing: Request limitation of how we use your data
  • Right to data portability: Request transfer of your data to another provider
  • Right to object: Object to processing based on legitimate interests or for marketing
  • Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at hello@driftwright.co.uk. We will respond within one month.

8. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. We use:

  • Essential cookies: Required for the website to function (e.g., age verification)
  • Analytics cookies: Help us understand how visitors use our site
  • Marketing cookies: Used to deliver relevant advertisements (only with consent)

You can manage cookie preferences through your browser settings.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (SSL/TLS), secure payment processing, and restricted access to personal data.

10. International Transfers

Your data is primarily stored and processed within the UK and European Economic Area. Where data is transferred outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via our website or email. The "Last updated" date at the top of this policy indicates when it was last revised.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Driftwright & Cooper Ltd
Email: hello@driftwright.co.uk

13. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Website: ico.org.uk
Helpline: 0303 123 1113