Privacy

Privacy Policy

Last updated: 9 September 2026

Wishbone Brewery Limited (“Wishbone Brewery”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, purchase our products, contact us, subscribe to our marketing communications or otherwise interact with us.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and other applicable UK data protection legislation.

1. Who we are

The organisation responsible for your personal data is:

Wishbone Brewery Limited

2A Worth Bridge Industrial Estate
Chesham Street
Keighley
West Yorkshire
BD21 4LG

Telephone: 01535 600412
Mobile: 07867 419445
Email: info@wishbonebrewery.co.uk

Company number: 9188532
VAT number: 197 9671 31
Alcohol Wholesale Registration Scheme (AWRS) number: XRAW00000102958

For data protection purposes, Wishbone Brewery Limited is the data controller of the personal data described in this Privacy Policy.

If you have any questions about how we use your personal data, please contact us using the details above.

2. What personal data we may collect

Depending on how you interact with us, we may collect the following categories of personal data.

Information you provide to us

You may provide personal data when you:

  • place an order;
  • create or use an account, where applicable;
  • complete a form on our website;
  • contact us by email, telephone or another method;
  • sign up to receive marketing communications;
  • make an enquiry or request information;
  • enter a competition, promotion or event;
  • provide feedback or submit a review; or
  • otherwise communicate or interact with us.

This information may include your:

  • name;
  • billing and delivery address;
  • email address;
  • telephone number;
  • order and transaction details;
  • correspondence and communications with us;
  • marketing preferences; and
  • other information you choose to provide.

We do not generally intend to collect special category personal data, such as information concerning health, religion or political opinions. Please do not provide sensitive personal information unless it is necessary for your enquiry or transaction.

Information collected automatically

When you visit our website, we may automatically collect certain technical and usage information, such as:

  • IP address;
  • browser type and version;
  • operating system and device information;
  • approximate geographical location derived from technical information;
  • pages visited;
  • date and time of visits;
  • referring website or source;
  • links or buttons you click;
  • documents downloaded;
  • page response times;
  • length of visits; and
  • information about errors or problems encountered on the website.

Some of this information may constitute personal data under UK data protection law, particularly where it can be linked to an identifiable individual.

3. How we use your personal data and our lawful bases

We will only use your personal data where we have a lawful basis to do so.

The lawful basis we rely on will depend on the purpose for which we are processing your information.

To process and fulfil orders

We use personal data to:

  • process your orders;
  • arrange payment;
  • arrange delivery or collection;
  • communicate with you about your order;
  • deal with returns, refunds and complaints; and
  • provide customer service.

Our lawful basis for this processing is generally performance of a contract with you.

We may also process information where necessary to comply with a legal obligation, for example accounting, tax, alcohol licensing or other regulatory requirements.

To respond to enquiries

If you contact us, we may use your information to respond to your enquiry and provide the information or assistance you have requested.

Depending on the circumstances, our lawful basis will generally be legitimate interests or performance of a contract.

To administer and improve our website

We may use technical and usage information to:

  • operate and maintain our website;
  • identify and resolve technical problems;
  • maintain website security;
  • understand how our website is used;
  • improve our website and services; and
  • monitor website performance.

Where appropriate, we rely on legitimate interests for this processing.

Where cookies or similar technologies are required to obtain consent under PECR, we will obtain the appropriate consent before using them.

To send marketing communications

Where you have provided the necessary consent, we may use your personal data to send you information about:

  • new beers and products;
  • events;
  • promotions;
  • offers; and
  • other news about Wishbone Brewery.

Where consent is required, our lawful basis is consent.

You can withdraw your consent at any time by using the unsubscribe facility in our marketing emails or by contacting us at info@wishbonebrewery.co.uk.

We will comply with the requirements of PECR when sending electronic direct marketing. PECR applies alongside the UK GDPR to electronic marketing.

To comply with legal obligations

We may process personal data where necessary to comply with our legal and regulatory obligations, including obligations relating to:

  • taxation and accounting;
  • alcohol licensing and regulation;
  • fraud prevention;
  • health and safety;
  • financial and business records; and
  • responding to lawful requests from public authorities.

Our lawful basis for this processing is legal obligation where applicable.

To protect our business and prevent fraud

We may use personal data where reasonably necessary to:

  • prevent fraud or other unlawful activity;
  • protect our website, systems and property;
  • establish, exercise or defend legal claims; and
  • protect the rights, property and safety of our business, customers and others.

Our lawful basis may be legitimate interests or legal obligation, depending on the circumstances.

Where we rely on legitimate interests, we consider the impact on your rights and interests before processing your personal data.

4. Cookies and similar technologies

Our website uses cookies and similar technologies.

Cookies are small text files placed on your device which can help a website function, remember your preferences and understand how visitors use the website.

Strictly necessary cookies

Some cookies are necessary for the website to operate and cannot be switched off through our cookie management system. These may include cookies required for functions such as security, shopping baskets, login functionality or other essential website features.

Where applicable, these cookies may be used without consent where they are strictly necessary for a service you have requested.

Analytics and other non-essential cookies

We may use analytics and other non-essential cookies to understand how visitors use our website and to improve its performance.

For example, we may use Google Analytics.

Analytics cookies are not automatically considered strictly necessary under PECR. Where consent is required, we will obtain your consent before placing or using these cookies.

You can manage your cookie preferences through our cookie consent mechanism on the website.

You can also withdraw or change your cookie consent at any time using our cookie settings.

For information about how Google processes information in connection with Google Analytics, please see Google’s own privacy information.

Important: Our actual cookie notice and cookie settings should correspond to the cookies and tracking technologies currently installed on the website.

5. Who we share your personal data with

We do not sell your personal data.

We may share personal data with trusted third parties where this is necessary to operate our business, provide our services or comply with our legal obligations.

These may include:

  • payment service providers;
  • website hosting and technical service providers;
  • website analytics providers;
  • delivery and courier companies;
  • IT and software service providers;
  • email and marketing service providers;
  • accountants, auditors and professional advisers;
  • insurers;
  • fraud prevention services; and
  • government bodies, regulators, law enforcement agencies or other authorities where we are legally required or permitted to do so.

Where third parties process personal data on our behalf, we will take appropriate steps to ensure that they provide appropriate security and comply with applicable data protection law.

The precise third parties we use may change from time to time.

6. International transfers

Some of the service providers we use may process personal data outside the United Kingdom.

Where personal data is transferred outside the UK, we will ensure that the transfer is made in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.

These safeguards may include an adequacy regulation or appropriate contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum to EU Standard Contractual Clauses, where applicable.

Where appropriate, further information about relevant international transfers and safeguards can be obtained by contacting us.

7. How long we keep your personal data

We will only keep your personal data for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, regulatory and reporting requirements.

Different types of information may therefore be retained for different periods.

For example:

  • order and transaction information may be retained for as long as necessary to administer the transaction and meet applicable accounting, tax and legal requirements;
  • customer service correspondence may be retained for as long as necessary to deal with the enquiry and for a reasonable period afterwards;
  • marketing information may be retained until you withdraw your consent or otherwise opt out, subject to any legal requirements; and
  • technical and analytics information will be retained in accordance with the relevant service provider’s settings and our own retention requirements.

We periodically review the personal data we hold and securely delete or anonymise information when it is no longer required.

8. How we protect your personal data

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include appropriate access controls, security procedures, secure systems and limiting access to personal data to people who have a legitimate business need to access it.

However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.

9. Your data protection rights

Under UK data protection law, you may have the following rights in relation to your personal data:

  • Right to be informed – to receive clear information about how we use your personal data.
  • Right of access – to request a copy of the personal data we hold about you.
  • Right to rectification – to ask us to correct inaccurate or incomplete personal data.
  • Right to erasure – in certain circumstances, to ask us to delete your personal data.
  • Right to restrict processing – in certain circumstances, to ask us to restrict how we use your personal data.
  • Right to data portability – in certain circumstances, to receive personal data you have provided to us in a structured, commonly used and machine-readable format and to request its transfer to another organisation.
  • Right to object – in certain circumstances, to object to our processing of your personal data, including the right to object to direct marketing.
  • Rights relating to automated decision-making and profiling – where applicable, you may have rights concerning solely automated decisions that have legal or similarly significant effects.

Not all rights apply in every circumstance. For example, we may need to retain certain information to comply with legal obligations even where you request deletion.

More information about these rights is available from the Information Commissioner’s Office (ICO).

10. How to exercise your rights

If you wish to exercise any of your data protection rights, please contact us:

Email: info@wishbonebrewery.co.uk

Please provide enough information to allow us to identify you and understand your request.

We may need to request additional information where reasonably necessary to confirm your identity and locate the personal data concerned. We will not request information that is unnecessary for this purpose.

We will normally respond to a valid request within one month of receiving it. In certain circumstances, the law allows this period to be extended.

We will not normally charge a fee for exercising your data protection rights. However, applicable data protection law allows us to charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive.

11. Your right to withdraw consent

Where we rely on your consent to process personal data, you can withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew your consent.

You can withdraw consent by contacting us at info@wishbonebrewery.co.uk or, where applicable, by using the unsubscribe or cookie-management facilities provided on our website.

12. Direct marketing

We may send you marketing communications where permitted by applicable law.

Where we require your consent to send electronic marketing, we will obtain that consent in accordance with applicable requirements.

Every marketing email we send will include an appropriate way to unsubscribe.

You can also contact us at any time to ask us to stop sending you marketing communications.

You have an absolute right to object to direct marketing.

13. Third-party websites

Our website may contain links to websites operated by third parties.

If you follow a link to another website, that website will have its own privacy policy and terms. We are not responsible for the privacy practices, security or content of third-party websites.

We recommend that you read the privacy policy of any third-party website before providing it with your personal data.

14. Children’s personal data

Our website and services are not intended to knowingly collect personal data from children.

Because our business involves the sale of alcohol, we take particular care regarding age-related requirements and will not knowingly process orders for alcohol in circumstances where doing so would breach applicable law.

If you believe that a child has provided us with personal data improperly, please contact us at info@wishbonebrewery.co.uk.

15. Complaints

If you have concerns about the way we process your personal data, we would encourage you to contact us first so that we can try to resolve your concern.

You also have the right to complain to the Information Commissioner’s Office (ICO), which is the UK’s independent supervisory authority for data protection.

The ICO can be contacted through its website:

Information Commissioner’s Office (ICO)

The ICO’s current guidance confirms that individuals have the right to complain to the supervisory authority where they have concerns about the processing of their personal data.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or applicable data protection law.

Any updated version will be published on this page and the “Last updated” date will be amended.

Where appropriate, we may also notify you directly about significant changes.

We recommend checking this page periodically to ensure that you are aware of the latest version.

17. Contact us

If you have any questions, comments or requests concerning this Privacy Policy or the way we process your personal data, please contact us:

Wishbone Brewery Limited
2A Worth Bridge Industrial Estate
Chesham Street
Keighley
West Yorkshire
BD21 4LG

Email: info@wishbonebrewery.co.uk
Telephone: 01535 600412
Mobile: 07867 419445

Company number: 9188532
VAT number: 197 9671 31
AWRS number: XRAW00000102958