Privacy policy

Privacy Policy

Last updated: 29 September 2025

Who we are

Shanty Spirit Ltd (“Shanty Spirit”, “we”, “us”) is a company registered in England & Wales (No. 10751907). We operate this online store and website. We are the data controller of your personal data.

Our store is hosted and operated by Shopify. Shopify acts as our data processor for most store functions (for example checkout, payments and fraud prevention) and may act as an independent controller for certain enhanced platform features that help protect, grow and improve the Shopify services.

Contact us: contact@shantyspirit.com
 Postal address: Unit M, Arthur Bray Yard, 4 West Key Road, Poole, ENG, BH15 1HT, GB

Personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

  • Identity & Contact: name, title, date of birth (for age checks), billing/delivery address, email, phone.
  • Account: username, password, preferences.
  • Financial & Transactions: payment method, payment confirmations, order history, returns/exchanges.
  • Device & Usage: IP address, device/browser info, network identifiers, pages viewed, items browsed/added to basket; collected via cookies and similar tech (see Cookies & similar tech).
  • Communications: messages sent to us (e.g. customer support).
  • Marketing & Preferences: newsletter opt-ins/outs, campaign interactions.
  • Photographic/Video & UGC: CCTV from distillery visits, photos/videos from our events, and user-generated content you share with us or on social platforms in relation to our brand.

We collect data directly from you, automatically via our site/app and cookies, and from service providers/partners (e.g., payment, fulfilment, analytics, marketing), and occasionally at events/distillery visits.

How we use your data & lawful bases

We only use your personal data when the law allows. Our main purposes and lawful bases are:

Purpose

Examples

Lawful basis

Provide our services

Process orders, take payment, deliver goods, manage returns, provide customer support, operate your account

Contract (to perform our contract with you)

Security & fraud prevention

Authenticate users, detect/prevent fraudulent or malicious activity, platform safety

Legitimate interests (to protect our business and customers); Legal obligation

Communications

Service messages about orders, account or policy updates

Legitimate interests / Legal obligation

Marketing

Email/SMS/newsletter, promotions, competitions, event invitations

Consent (where required) or Legitimate interests with easy opt-out

Analytics & improvement

Understand site/app performance and improve our products, services and UX

Legitimate interests

Legal & compliance

Tax/record-keeping, responding to regulators/law enforcement

Legal obligation

Where we rely on consent, you can withdraw it at any time (see Your rights).

Marketing

If you opt in (or where permitted by law), we’ll send news, offers and event info. You can opt out at any time via the unsubscribe link in our emails or by contacting us at contact@shantyspirit.com. If you opt out of marketing, we may still send service messages (e.g., order confirmations).

Cookies & similar tech (including ads)

We use cookies and similar technologies to run our site (e.g., secure checkout), remember preferences and measure/improve performance. With your consent, we also use analytics and advertising cookies (e.g., Google/Meta) to show relevant content/ads and to understand campaign effectiveness.

  • Manage your choices any time via our Cookie banner / Preferences Centre.
  • See our Cookies Policy for full details of cookies used, purposes and retention.

Shopify settings: We align our cookie use with Shopify so non-essential cookies are not set until you consent (where required).

Our relationship with Shopify

Shopify processes your personal data to operate and improve the platform (for example providing secure checkout, fraud prevention and certain enhanced features that may combine insights across merchants). In some cases, Shopify acts as an independent controller of that processing.

If you use Shop/Shop Pay, you may also have controls or deletion options via Shopify’s tools: Shop/Shop Pay Information & Deletion.

Sharing your data

We share personal data with trusted service providers who help us run our business, under contracts that limit their use to our instructions, including: payment processors, ecommerce/fulfilment and shipping partners, IT/hosting and security, analytics and marketing partners, customer support providers, event and photography partners, fraud/credit agencies, professional advisers and auditors.

We may also share data:

  • Within our corporate group (if applicable);
  • For legal reasons (e.g., to regulators or law enforcement);
  • In a corporate transaction (e.g., sale, merger, reorganisation).
     We do not allow our processors to use your data for their own purposes.

International transfers

We and our processors (including Shopify) may transfer your personal data outside the UK/EEA. Where we do, we use appropriate safeguards such as the EU Standard Contractual Clauses with the UK Addendum/IDTA, or rely on an adequacy decision, as applicable.

Security

We take appropriate technical and organisational measures to protect your data. No security is perfect, and transmissions over the internet may not be fully secure. Please use unique, strong passwords and keep your account details confidential.

Retention

We keep personal data only as long as necessary for the purposes collected and to meet legal/accounting/reporting requirements. Examples:

  • Order and tax records: typically 6 years (UK) after the end of the financial year.
  • Marketing records/consents: until you opt out, plus a short period to maintain suppression/audit.
     When no longer needed, we delete or anonymise data.

Age restrictions & children

Our site is intended only for individuals over the legal drinking age in their country. We age-gate access. We do not knowingly collect data from anyone under that age, nor from children under 16 for “sell”/“share” purposes. If you believe a minor has provided data, contact contact@shantyspirit.com and we will delete it.

Your rights

Depending on where you live, you may have rights over your personal data, including to access, rectify, erase, restrict or object to processing, and to data portability. Where we rely on consent, you may withdraw it at any time.

How to exercise your rights

  • For data we control (orders, our marketing lists, events, offline data): email contact@shantyspirit.com.
  • For data Shopify controls (certain enhanced features and Shop/Shop Pay): use the Shopify Privacy Portal.
     We may need to verify your identity and we will respond within the time required by law.

UK/EEA complaints: You may lodge a complaint with your local authority or with the UK Information Commissioner’s Office (ICO): https://ico.org.uk. We encourage you to contact us first so we can try to resolve your concern.

Third-party links

Our site may link to third-party websites or services. Their privacy and security practices are not controlled by us; please review their policies.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or for legal/regulatory reasons. We will post the updated version here with a new “Last updated” date.

How to contact us

Questions, requests or complaints about this policy or our handling of your personal data:
 Email: contact@shantyspirit.com
 Address: Unit M, Arthur Bray Yard, 4 West Key Road, Poole, ENG, BH15 1HT, GB