Privacy Policy
Privacy Policy
Last updated: April 2026
This Privacy Policy explains how Rosemaund Farm Distillery Ltd (“we”, “our”, “us”) collects, uses, and protects your personal information when you visit our website, enter our ballots, purchase our products, or otherwise interact with us.
We are committed to safeguarding your privacy and complying with applicable data protection laws, including the UK GDPR and the Data Protection Act 2018.
Company details
Rosemaund Farm Distillery Ltd
Company number: 15892880
Registered address: Rosemaund Farm, Preston Wynne, Herefordshire, HR1 3PG
Email: hello@rosemaund.com
1. Information we collect
We may collect and process the following categories of personal data:
Identity & contact details
Name, email address, postal address, telephone number, mobile number, date of birth (for age verification)
Transaction data
Details of purchases, payments, billing, and delivery information
Ballot data
Ballot entry details, eligibility status, outcomes, and purchase allocation
Payment data
Payment details are processed securely via third-party providers (e.g. Stripe). We do not store full card details
Marketing preferences
Your preferences for receiving communications from us
Website usage data
IP address, browser type, device information, pages visited, and cookies
Event data
Information relating to bookings and attendance at events (e.g. Wild Kitchen)
2. How we use your information
We use your personal data for the following purposes:
- To administer whisky ballots and manage entries
- To process purchases, payments, and deliveries
- To communicate Ballot outcomes and order updates
- To provide customer support
- To send marketing communications where you have opted in
- To send SMS updates relating to ballot entries (if provided)
- To improve our website, services, and customer experience
- To detect fraud and prevent misuse of our systems
- To comply with legal obligations (including age verification and regulatory requirements)
You can opt out of marketing communications at any time by using the unsubscribe link or contacting us directly.
3. Lawful basis for processing
We rely on the following lawful bases:
- Contract — to fulfil orders and administer ballots
- Consent — for marketing communications
- Legal obligation — including alcohol sales compliance and tax records
- Legitimate interests — including fraud prevention, business improvement, and service optimisation
4. Sharing your information
We do not sell your personal data.
We may share your data with trusted third parties where necessary:
- Payment providers (e.g. Stripe) to process payments securely
- Delivery partners to fulfil orders
- Technology providers (e.g. Shopify, Klaviyo, analytics tools) to operate our website and communications
- Professional advisers (legal, financial, compliance)
- Regulatory authorities where required by law
All third parties are required to process your data securely and in accordance with applicable law.
5. Data retention
We retain personal data only for as long as necessary to:
- Fulfil the purposes outlined in this policy
- Comply with legal and regulatory obligations
- Resolve disputes and enforce agreements
Where possible, data is anonymised or securely deleted when no longer required.
6. Your rights
Under UK data protection law, you have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Restrict or object to processing
- Withdraw consent at any time
- Request data portability
To exercise your rights, contact: hello@rosemaund.com
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
7. Cookies & tracking
We use cookies and similar technologies to:
- Ensure the website functions correctly
- Understand how visitors use our site
- Improve performance and user experience
- Support marketing and advertising
You can manage cookie preferences through your browser settings.
8. Marketing communications
If you opt in, we may send you:
- Product releases and ballot notifications
- Event invitations
- Brand updates
We use email platforms (e.g. Klaviyo) and may use advertising platforms (e.g. Meta, Google) to deliver relevant content.
You can unsubscribe at any time.
9. Data security
We take appropriate technical and organisational measures to protect your data, including:
- Secure servers and encrypted connections
- Restricted access to personal data
- Use of trusted third-party providers
However, no system is completely secure, and we cannot guarantee absolute security.
10. International transfers
Some of our service providers may process data outside the UK.
Where this occurs, we ensure appropriate safeguards are in place (e.g. standard contractual clauses) to protect your data.
11. Changes to this policy
We may update this Privacy Policy from time to time.
Any updates will be published on this page with a revised “last updated” date.
12. Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact:
