Privacy & Cookies

Contact Details

Compass Box Whisky Company
9 Power Road 

Tel: +44 (0)20 8995 0899 
Fax: +44 (0)20 8742 1948

Privacy Policy

We at Compass Box Delicious Whisky Ltd (company number SC205193) take your privacy very seriously and are committed to protecting your personal data. If you wish to contact us regarding this privacy policy, please see the contact details above. Compass Box is the data controller and our registered address is 4th Floor 115 George Street, Edinburgh, EH2 4JN.

This privacy policy (together with the cookie declaration) sets out the basis on which any personal data we collect from you, or that you provide to us, including through your use of our website ( (the “Website”), will be processed by us.

This privacy policy does not apply to websites that you may be able to access via links on the Website and/or activities offered by third parties. We are not responsible for the collection or use of your personal data from these third-party websites. Please ensure you review any relevant policies.

Topics covered:

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

Data We Collect From You Or About You And Our
Sources Of That Data

We will collect, use, store and transfer the following data about you:

  1. Data you give us. You may give us data about you:
  2. Data we collect about you. We will collect the following personal data about you:
  3. Data we collect from or are provided by third parties. We may be given or collect personal data about you by / from third parties such as:

We also collect, use and share “Aggregated Data” such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your technical usage data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

Purpose And Legal Basis For Processing Your Personal Data

We will use the personal data held about you for the purposes stated below:


Purpose of Processing

Type of personal data

Legal basis for processing

To manage our relationship with you, including:

  • dealing with any enquiries, correspondence, concerns or complaints you have raised with us;
  • notifying you about changes to our terms and conditions and privacy policy; or
  • where you interact with our social media channels.

Your name, email address and country of residence (and if you are based in the US also the state of residence) and/or social media identifier, and your opinion and information about any concerns or issues you have raised.

Legitimate interest – to enable us to keep our records updated and to better understand our customers and those engaging with us.

To enable you to partake in a prize draw, competition or complete a survey.

Your name, email address and address details.

Performance of a contract.

To enable you to register your support to our statement of beliefs.

Your name and, if you would like to share them with us, your postcode and email address.


Legitimate interest – to allow us to lobby EU and UK regulators to change applicable law.
Performance of a contract – to allow us to keep you updated on the progress we make if you have asked us to.

As part of our efforts to keep the Website safe and secure.

The technical information mentioned above.

Legitimate interest – to improve and ensure the safety of the Website.

To compile reports (which do not personally identify you) about the use of the Website.

The technical information mentioned above.

Legitimate interest – to improve the Website.

To ensure that content on the Website is presented in the most effective manner for you and for your device.

The technical information mentioned above.

Legitimate interest – to improve the Website.

To use data analytics to improve the Website, products/services, marketing, customer relationships and experiences.

The technical information mentioned above.

Legitimate interest – to understand our customers better, keep the Website updated and relevant, to develop our business and to inform our marketing strategy.

To provide you with marketing communications, for example, newsletters, updates and notifications and to make suggestions and recommendations to you about products, services or local events that may be of interest to you.

Your name, email address and country of residence (and if you are based in the US also the state of residence).





To prevent, detect and investigate any violations of law and other misuse of the Website.

The technical information mentioned above, date of birth and country of residence

Compliance with a legal obligation


Where we need to collect personal data by law or as part of a contract we have with you (for example, when you enter into a prize competition) and you fail to provide that data when requested, we may not be able to provide you with the services requested (for example, enabling you to access the Website) or perform the contract we have or are trying to enter into with you (for example, to pick you as a winner of the prize competition).

Where we have a legal basis to use your personal data without consent (as we have described above), this policy fulfils our duty to process personal data fairly and lawfully and in a manner that you would expect given the nature of our relationship with you, by giving you appropriate notice and explanation of the way in which your personal data will be used.

Where consent is required for our use of your personal data, by ticking the appropriate consent box or otherwise communicating your consent, you consent to our use of that personal data for the purposes covered by the specific consent that you have given. For example, we will only process your personal data for marketing purposes if we have your consent to do so. You have the right to withdraw your consent at any time, where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.


As mentioned above, we would like to, if you have consented to this, send and present you with marketing information about us such as news, events and products which we think may be of interest to you.

We will not provide your personal data to other businesses so they can use your personal data for marketing purposes.

We will only send and present you with marketing communications if you would like us to. You will have the opportunity to clearly set out whether you wish to receive marketing communications from us by ticking the relevant boxes.

Disclosure Of Personal Data

We may share your personal data with selected third parties in accordance with this policy, including:

Where We Store Your Personal Data

The personal data that we collect from you may be transferred to, processed and stored at, destinations outside the UK or European Economic Area (EEA) such as the US.

Where we transfer, process or store your personal data out of the UK or EEA, we ensure that a similar degree of protection is afforded to it by ensuring that one of the following safeguards is implemented:

If you would like to find out more about how we transfer your personal data , please contact us using the details at the top of this page.


All the information you provide us with is stored on secure servers. We will use appropriate technical and organisational measures to safeguard your personal data.

We maintain (and ensure that anyone we share your personal data with maintains) appropriate technical and organisational measures to ensure that an appropriate level of security in respect of all personal data we process. Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the Website and you acknowledge that any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features which are appropriate to the type of personal data you have provided to try to prevent unauthorised access or inadvertent disclosure.

Retaining Personal Data

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. If you would like to find out more about the applicable retention periods, please contact us using the contact details at the top of this page.

In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.

Your Legal Rights

You have the following rights with regard to your personal data:

Please note that if you ask us to stop processing your personal data in certain ways or erase your personal data, and this type of processing of data is needed to facilitate your use of the Website or the provision of products or services to you, you may not be able to use the Website or receive products or services from us as you did before. This does not include your right to object to direct marketing, or withdraw consent, which can be exercised at any time without restrictions. Please allow at least 3 working days for your request to be actioned.

Please note that the rights mentioned above do not extend to non-personal data.

If you would like to exercise any of the rights mentioned above, please contact us using the details at the top of this page.

Changes To Our Privacy Policy

Any changes we make to our privacy policy in the future will be posted on this page, where appropriate, or notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.

How To Contact Us

Questions, comments and requests regarding our privacy policy are welcomed and should be addressed to Compass Box using the contact details at the top of this page.

Please also contact us if you would like to know more about our data processing activities, to update or amend any of your personal data which you have provided to us or if you believe our records relating to your personal data are incorrect.

Our privacy policy was last updated on 29th January 2022.

Cookie Declaration