Our contact details
Name: Lazy Ale Ltd, doing business as The Malt and Mardle
Address: 163 Magdalen Street, NR3 1NF
Last updated: 27/10/22
The type of personal information we collect
We currently collect and process the following information:
- Personal identifiers, contacts and characteristics (for example, name, age, phone/ mobile number)
- Payment information, including email address, billing address, shipping address, payment method, and payment card expiration date
- Transactional information, including purchase information
- Account information, including account username and password
- Technical information, including web performance stats using cookies, IP addresses, domain servers, types of computers accessing the website, types of web browsers used to access the Site, and your operating system
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- To fulfil your order of our products and ensure the correct collection or delivery of said products (personal identifiers)
- To bill you for your products purchased (personal identifiers and payment information)
- To investigate, apply and enforce our Terms and Conditions which protects you and our legitimate and legal business interests, e.g. age verification to adhere to alcohol licence laws (personal identifiers)
- To provide you with access to your information, for example, your order history (transactional information and account information)
- To provide customer service and communicate with you about any feedback, issues or queries you may have
- To send marketing newsletters about our products and services via email but only when you have opted into receiving them (personal identifiers)
- To make improvements to our website in order to improve your experience (technical information)
We also receive personal information indirectly, from the following sources in the following scenarios:
We use the information that you have given us in order to gather analytic insights with an aim to optimise and improve the performance of our website and your experience.
We also use third parties to process payments. These third parties are:
- Google Pay
- Apple Pay
- Stripe (which enables Apple Pay on the Web)
When processing payments, some of your data will be passed to the above third parties, including information required to process or support the payment, such as the purchase total and billing information. Woocommerce also saves your card details in our website’s checkout but this is optional when you tick the ‘save my card’ box.
The reason we share this payment data with third parties is to improve your experience of using our website, making it easier and faster for you to make a payment.
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
- (a) Your consent. You are able to remove your consent at any time. You can do this by contacting us at email@example.com
- (c) We have a legal obligation (in regards to age verification and alcohol licensing laws)
- (f) We have a legitimate interest
How we store your personal information
Your information is securely stored.
- We keep personal information which could have been collected from pending orders, failed orders and cancelled orders for 30 days. We will then dispose of this information by automatic deletion which is managed by Woocommerce.
- We keep personal information from completed orders for 90 days. We will then dispose of this information by automatically anonymising the personal information which is managed by Woocommerce.
- We keep account information for active account users indefinitely. However, if you have not logged into your account or placed an order with your account, therefore making it inactive, your account will be deleted automatically in three years. This is managed by Woocommerce.
- We keep personal information shared by you via email or our social media accounts (Instagram, Facebook and Tiktok) for one year. We then dispose of this information by manually deleting the messages containing the personal information.
- We keep technical information collected by Google Analytics for 26 months. We will then dispose of this information by automatic deletion which is managed by Google Analytics.
- We keep technical information collected by Jetpack indefinitely. However, Jetpack retains personal identifiers for only 28 days.
Your data protection rights
Under data protection law, you have rights including:
- Your right of access – You have the right to ask us for copies of your personal information.
- Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us via email at firstname.lastname@example.org or via post at 163 Magdalen Street, Norwich, United Kingdom, NR3 1NF if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at 163 Magdalen Street, Norwich, United Kingdom, NR3 1NF.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk