Privacy and cookies policy
CROSSMYLOOF BREW PRIVACY POLICY
Last Updated: 05/01/26
Introduction
Crossmyloof Brew is committed to protecting your privacy and handling your personal information responsibly and transparently.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, place an order, subscribe to our newsletter, contact us or otherwise interact with us.
We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
Who We Are
Crossmyloof Brew is a UK-based supplier of homebrewing ingredients, brewing equipment, recipe kits and related products.
Email: cheers@crossmyloofbrew.co.uk
Website: www.crossmyloofbrew.co.uk
Information We Collect
We may collect:
Information You Provide
-
Name
-
Billing address
-
Delivery address
-
Email address
-
Telephone number
-
Account information
-
Order information
-
Product reviews
-
Customer service enquiries
Information Collected Automatically
-
IP address
-
Browser type
-
Device information
-
Website usage information
-
Referring website information
-
Cookie information
Marketing Information
-
Newsletter subscriptions
-
Marketing preferences
-
Competition and giveaway entries
How We Use Your Information
We use personal information to:
-
Process and deliver orders
-
Provide customer support
-
Manage customer accounts
-
Process refunds and returns
-
Improve website performance
-
Prevent fraud
-
Meet legal obligations
-
Send marketing communications where permitted
Legal Basis For Processing
We process data under the following lawful bases:
Contract
To fulfil orders and provide products and services.
Legal Obligation
To comply with accounting, tax and consumer protection laws.
Legitimate Interests
To improve our services, prevent fraud and maintain website security.
Consent
For marketing communications and non-essential cookies.
Sharing Your Information
We may share data with:
Delivery Providers
Including Royal Mail and other courier services.
Payment Providers
Secure payment processing providers.
Website Providers
Hosting, e-commerce and website support services.
Marketing Providers
Email marketing platforms used to manage newsletters and customer communications.
Professional Advisers
Accountants, insurers and legal advisers where necessary.
We never sell personal information.
International Transfers
Where service providers operate outside the UK, we ensure appropriate safeguards are in place to protect personal information.
Data Retention
We retain information only for as long as necessary.
Typical retention periods:
Order records: 6 years
Accounting records: 6 years
Customer enquiries: 2 years
Marketing consent records: Duration of consent plus 2 years
Website analytics data: Up to 26 months
Your Rights
You have the right to:
-
Access your personal data
-
Correct inaccurate information
-
Request deletion of information
-
Restrict processing
-
Object to processing
-
Request data portability
-
Withdraw consent at any time
Cookies
Our website uses cookies to improve functionality and analyse website performance.
Further details are available in our Cookie Policy.
Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss or misuse.
Complaints
If you have concerns regarding our use of your personal information, please contact us first.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Website: www.ico.org.uk
Changes To This Policy
We may update this Privacy Policy from time to time. Any updates will be published on this page.