Old St Andrews Limited Privacy Notice
Data Protection Act 2018
This legislation replaces the Data Protection Act 1998 and gives more rights to you as an individual and more obligations to organisations holding your personal data.
One of the rights is a right to be informed, which means we have to give you even more information than we do now about the way in which we use, share and store your personal information. This privacy notice helps you understand your rights, so you can access this information, along with information about the increased rights you have in relation to the information we hold on you and the legal basis on which we are using it.
How we use your information
This privacy notice tells you what to expect when Old St Andrews Limited collects personal information.
It applies to information we collect about:
- visitors to our websites;
- current customers;
- people who have bought from us in the past;
- our suppliers; and
- job applicants, current and former employees (further information regarding this group is available via our Recruitment Policy).
Visitors to our websites
When someone visits www.osawhisky.com we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way that does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.
A cookie is a small file that asks permission to be placed on your computer’s hard drive. By using our website, you are agreeing your acceptance to allow our site to take this cookie information, the file is added and the cookie helps analyse web traffic. Cookies allow web applications to respond to you as an individual. This information we would only utilise to improve our overall web site performance and customer experience. We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system. Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of this and other website.
We use third-party provides, MailChimp and Swiftpage to deliver our newsletters. We gather statistics around email opening and clicks using industry standard technologies including clear gifs to help us monitor and improve our e-newsletter. For more information, please see MailChimp’s privacy notice, available at https://mailchimp.com/legal/privacy/ and Swiftpage’s privacy notice, available at http://www.swiftpage.com/en-uk/privacy-policy/.
Security and performance
Old St Andrews Limited outsource all IT to Skye Cloud. Skye Cloud uses a third-party service to help maintain the security and performance of the Old St Andrews Limited website. To deliver this service it processes the IP addresses of visitors to the
Old St Andrews Limited website.
People who contact us via social media
Social Media Including; Facebook, LinkedIn, Twitter, Pinterest, WhatsApp, Snapchat &
Below are the privacy policies of some third parties who may indirectly provide services to us:
* Google http://www.google.com/intl/en/privacy/
* Facebook http://www.facebook.com/policy.php
* Twitter http://twitter.com/privacy
* Instagram https://help.instagram.com/519522125107875?helpref=page_content
People who make a complaint to us
When we receive a complaint from an individual, we create a file containing the details of the complaint. This normally contains the identity of the complainant and any other individuals involved in the complaint. We will only use the personal information we collect to process the complaint and to check on the level of service we provide. We do compile and publish statistics showing information like the number of complaints we receive, but not in a form that identifies anyone. We usually have to disclose the complainant’s identity to whomever the complaint is about. This is inevitable where, for example, the accuracy of a person’s record is in dispute. If a complainant does not want information identifying him or herself to be disclosed, we will try to respect that. However, it may not always be possible to handle a complaint on an anonymous basis.
We will keep personal information contained in complaint files in line with our retention policy. This means that information relating to a complaint will be retained for two years from closure. It will be retained in a secure environment and access to it will be restricted according to the ‘need to know’ principle. Similarly, where enquiries are submitted to us we will only use the information supplied to us to deal with the enquiry and any subsequent issues and to check on the level of service we provide. When we take enforcement action against someone, we may publish the identity of the defendant in our Annual Report or elsewhere. Usually we do not, identify any complainants unless the details have already been made public.
Under the Data Protection Act 1998, and replacement legislation, you have rights as an
individual that you can exercise in relation to the information we hold about you.
You can read more about these rights here – https://ico.org.uk/for-the-public/is-myinformation-being-handled-correctly/
Complaints or queries
Old St Andrews Limited tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures. This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of Old St Andrews Limited’s collection and use of personal information. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to the address below. Access to personal information Old St Andrews Limited tries to be as open as it can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a ‘subject access request’ under the Data Protection Act 1998 and replacement legislation. If we do hold information about you, we will:
- give you a description of it;
- tell you why we are holding it;
- tell you who it could be disclosed to; and
- let you have a copy of the information in an intelligible form.
To make a request to Old St Andrews Limited for any personal information we may hold you need to put the request in writing addressing it to our managing director at the address provided below. If you agree, we will try to deal with your request informally, for example by providing you with the specific information you need over the telephone.
If we do hold information about you, you can ask us to correct any mistakes by, once again, contacting the managing director.
Disclosure of personal information
In many circumstances, we will not disclose personal data without consent. However, when we investigate a complaint, for example, we will need to share personal information with the people concerned and with other relevant bodies.
You can also get further information on:
- agreements we have with other organisations for sharing information;
- circumstances where we can pass on personal data without consent for example, to prevent and detect crime and to produce anonymised statistics;
- our instructions to staff on how to collect, use and delete personal data; and
- how we check that the information we hold is accurate and up to date.
We will minimise any soft print of personal data wherever possible in our organisation, should printed documents be required we will implement a strict process to protect data sharing and ensure all documentation is privately and securely kept. All required employees have been given full training on this data process and written documentation is available.
We process personal data relating to those who apply for job vacancies with us or who send speculative job applications to us. We do this for employment purposes, to assist us in the selection of candidates for employment, and to assist in the running of the business. The personal data may include identifiers such as name, date of birth, personal characteristics such as gender, qualifications and previous employment history. We will not share any identifiable information about you with third parties without your consent unless the law allows or requires us to do so. The personal data provided during an application process will be retained for a period of at least six months or, if required by law, for as long as is required.
Links to other websites
This privacy notice does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.
Changes to this privacy notice
We keep our privacy notice under regular review. This privacy notice was last updated on 24th May 2018.
How to contact us
FAO Managing Director
Old St Andrews Limited
Unit E1, Chaucer Business Park,
Kemsing Nr. Sevenoaks,