Privacy Policy

1. Introduction

We are committed to protecting your privacy and keeping your personal data safe. This Privacy Policy explains how we collect, use, disclose, and retain personal data when you access or use our website (https://www.rockhousedrinks.co.uk, “the Website”).

By using the Website, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

Rock House Drinks

Contact email: info@rockhousedrinks.co.uk
We are the data controller responsible for your personal data under UK data protection law (the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018).

3. What data we collect

Because you mentioned there are no contact forms, the likely data we collect is limited. Examples:

Technical & usage data: e.g. your IP address, browser type, operating system, device identifiers, pages visited, time spent on pages, referring URL, and other similar analytics data (via Google Analytics or similar).
Cookies and tracking technologies: we may use cookies, web beacons, pixels, or similar technologies to collect information and to improve your experience on the site.
Log files: standard server logs capturing visitor requests, timestamps, etc.

We do not knowingly collect more sensitive personal data (such as health data, financial data, etc.) in the normal operation of the site (unless you later add new features).

4. Legal basis for processing

We rely on legitimate interests as the lawful basis to process your technical/usage data:

To operate and maintain the Website
To analyze usage so we can improve the Website
To monitor, detect and prevent security or misuse

Where applicable, we will ask for consent (forexample for non-essential cookies) and give you the ability to withdraw consent.

5. Use of data

We may use the data we collect for the following purposes:

To operate, optimize, and maintain the Website
To diagnose technical issues and fix bugs
To monitor the performance and usage of the Website
To provide aggregate reporting to ourselves about site traffic
To comply with legal obligations

We will not use your data for direct marketing to you (unless in the future you explicitly opt in) under this minimal setup.

6. Cookies & similar technologies

We use cookies and similar tracking technologies. A typical breakdown:

Strictly necessary cookies: needed for basic website functionality (navigation, page load, etc.).
Performance / analytics cookies: to collect data on how visitors use the site, which pages are visited, etc. (e.g. via Google Analytics).
Optional / non-essential cookies: these would only be set if you consent (for example, for marketing or third-party tracking).

You may refuse or disable cookies via your browser settings. Note: disabling some cookies may affect your ability to use parts of the Website properly.

7. Disclosure / sharing of data

We do not sell or rent your personal data to third parties. However, we may share or disclose data in the following circumstances:

Service providers: we may engage third-party service providers (e.g. hosting providers, analytics providers) who process data on our behalf. We ensure they are contractually bound to protect your data.
Legal obligations: if required by law, regulation, or legal process (e.g. court order, governmental request), or to enforce our rights.
Security or protection: if necessary to protect the rights, property, or safety of us, our users, or others.

We will only disclose the minimum data necessary for the purpose.

8. International / cross-border transfers

If any personal data is transferred outside of the UK (for example, if a third-party host or analytics provider processes data in another country), we will ensure appropriate safeguards are in place (e.g. standard contractual clauses, adequacy decisions) to protect your data to UK GDPR standards.

9. Data retention

We will retain personal data only as long as necessary for the purposes for which it was collected (or to meet legal, accounting, or reporting obligations).

For example, analytics data may be retained in aggregated or anonymised form indefinitely, but raw logs or IP addresses may be purged periodically (e.g. after a year or a defined timeframe).

10. Your rights

Under UK GDPR, you have various rights concerning your personal data, including:

Right to access: request a copy of personal data we hold about you
Right to rectification: request correction of inaccurate or incomplete data
Right to erasure (“right to be forgotten”): in certain circumstances request we delete your data
Right to restrict or object to processing: under certain conditions
Right to data portability: obtain data in a structured, machine-readable format (if applicable)
Right to withdraw consent: if we rely on your consent, you may withdraw it
Right to complain to a supervisory authority: in the UK, that is the Information Commissioner’s Office (ICO)

To exercise your rights, please contact us at hello@rockhousedrinks.com.

11. Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised access, or disclosure. This includes using SSL/TLS encryption for data in transit, restricting access to systems, regular security assessments, and ensuring service providers follow strict security procedures.

However, no method of electronic transmission or storage is 100% secure, so we cannot guarantee absolute security.

12. Children

Our Website is not directed to children under the age of 13 (or applicable minimum age). We do not knowingly collect personal data from children. If you believe a child has provided data to us, contact us and we will take steps to delete it.

13. Changes to this Privacy Policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of the policy. We encourage you to review this page periodically. Significant changes (e.g. new data collection features) may be notified more prominently.

14. Contact us

If you have questions, requests, or complaints about this Privacy Policy or how we handle your data, please contact:

Rock House Drinks
Email: info@rockhousedrinks.co.uk

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data has not been handled lawfully.

Last updated: 16.10.2025

Back to Home

Privacy Policy

Technical & usage data: e.g. your IP address, browser type, operating system, device identifiers, pages visited, time spent on pages, referring URL, and other similar analytics data (via Google Analytics or similar).

Cookies and tracking technologies: we may use cookies, web beacons, pixels, or similar technologies to collect information and to improve your experience on the site.

Log files: standard server logs capturing visitor requests, timestamps, etc.

We do not knowingly collect more sensitive personal data (such as health data, financial data, etc.) in the normal operation of the site (unless you later add new features). 4. Legal basis for processing We rely on legitimate interests as the lawful basis to process your technical/usage data:

To operate and maintain the Website

To analyze usage so we can improve the Website

To monitor, detect and prevent security or misuse

Where applicable, we will ask for consent (forexample for non-essential cookies) and give you the ability to withdraw consent. 5. Use of data We may use the data we collect for the following purposes:

To operate, optimize, and maintain the Website

To diagnose technical issues and fix bugs

To monitor the performance and usage of the Website

To provide aggregate reporting to ourselves about site traffic

To comply with legal obligations

We will not use your data for direct marketing to you (unless in the future you explicitly opt in) under this minimal setup. 6. Cookies & similar technologies We use cookies and similar tracking technologies. A typical breakdown:

Strictly necessary cookies: needed for basic website functionality (navigation, page load, etc.).

Performance / analytics cookies: to collect data on how visitors use the site, which pages are visited, etc. (e.g. via Google Analytics).

Optional / non-essential cookies: these would only be set if you consent (for example, for marketing or third-party tracking).

Service providers: we may engage third-party service providers (e.g. hosting providers, analytics providers) who process data on our behalf. We ensure they are contractually bound to protect your data.

Legal obligations: if required by law, regulation, or legal process (e.g. court order, governmental request), or to enforce our rights.

Security or protection: if necessary to protect the rights, property, or safety of us, our users, or others.

Right to access: request a copy of personal data we hold about you

Right to rectification: request correction of inaccurate or incomplete data

Right to erasure (“right to be forgotten”): in certain circumstances request we delete your data

Right to restrict or object to processing: under certain conditions

Right to data portability: obtain data in a structured, machine-readable format (if applicable)

Right to withdraw consent: if we rely on your consent, you may withdraw it

Right to complain to a supervisory authority: in the UK, that is the Information Commissioner’s Office (ICO)

We do not knowingly collect more sensitive personal data (such as health data, financial data, etc.) in the normal operation of the site (unless you later add new features).

4. Legal basis for processing

We rely on legitimate interests as the lawful basis to process your technical/usage data:

Where applicable, we will ask for consent (forexample for non-essential cookies) and give you the ability to withdraw consent.

5. Use of data

We may use the data we collect for the following purposes:

We will not use your data for direct marketing to you (unless in the future you explicitly opt in) under this minimal setup.

6. Cookies & similar technologies

We use cookies and similar tracking technologies. A typical breakdown: