Privacy policy

Last updated: 6 October 2026

This privacy policy explains how Scotch Whisky World collects and uses your personal information when you visit our website, create an account, buy from us or contact us, and the rights you have over that information.

Contents

1. Who we are
2. The information we collect
3. How we use your information
4. Cookies and analytics
5. Who we share your information with
6. Information sent outside the UK
7. How long we keep your information
8. How we keep your information safe
9. Under-18s
10. Your rights
11. Changes to this policy
12. Contact us

1. Who we are

Scotch Whisky World is a trading name of TVI Fife Limited, a company registered in Scotland with company number SC844459, whose registered office is at 3 Castle Street, Carnegie Campus, Dunfermline, KY11 8PB.

We are the controller of the personal information described in this policy, which means that we decide how and why it is used. If you have any questions about this policy or about your information, please contact us (see section 12).

2. The information we collect

Information you give us

• Account details: your name, e-mail address and password (which we store only in a scrambled form that cannot be read), your confirmation that you are 18 or over, and your answer to "Where did you hear about us?".
• Order and delivery details: your billing and delivery addresses, telephone number, the products you order, the amount you pay and how your order is delivered.
• Payment details: you enter these on the secure payment page of our payment provider, Cashflows, or with PayPal if you choose it. We never see or store your full card number or security code; the payment provider tells us whether your payment succeeded and gives us a reference for it.
• Messages: your name, e-mail address, order number and message when you use our contact form or e-mail us.
• Marketing preference: whether you have chosen to receive news and offers from us by e-mail.

Information collected automatically

• Cookies that the shop needs in order to work, such as those that keep your basket and keep you signed in.
• Analytics, only if you accept analytics cookies: the pages and products viewed, searches made in the shop and the steps taken through the basket and checkout. This is linked to a random reference for your browser, not to your name, e-mail address or account, and searches that look like an e-mail address or telephone number are discarded.
• Technical information: like any website, our servers receive your IP address and details of your browser and device when you visit. Our hosting providers use this to deliver the website and keep it secure.

Information from others

• Our payment provider tells us whether a payment succeeded, or whether it was declined or flagged as possibly fraudulent.
• Our delivery company may give us updates about the delivery of your order.

3. How we use your information

The law requires us to have a lawful reason, known as a lawful basis, for each way we use your personal information. We use it:

• to take, process and deliver your orders, run your account, and handle cancellations, returns and refunds, because this is necessary for our contract with you;
• to send you e-mails about your orders and your account, such as order confirmations, delivery updates and sign-in codes, because this is necessary for our contract with you;
• to check that you are 18 or over, because the law on selling alcohol requires it;
• to keep tax and accounting records, because the law requires it;
• to answer your messages and deal with complaints, because this is necessary for our contract with you or is in our legitimate interest in looking after our customers;
• to prevent fraud and misuse and keep our website secure, in our legitimate interest, and our customers', in a safe shop;
• to understand how customers find us, from your answer to "Where did you hear about us?", in our legitimate interest in knowing which of our marketing works;
• to measure and improve our website using analytics, only with your consent;
• to send you news and offers by e-mail, only if you have chosen to receive them;
• to comply with the law, respond to lawful requests from the authorities, and establish or defend legal claims, because the law requires it or in our legitimate interests.

We need your name, contact details, delivery address and telephone number to fulfil an order; without them we cannot accept it.

We do not make decisions about you based only on automated processing that have legal or similarly significant effects. Our payment provider may run automated fraud checks when you pay, which can lead to a payment being declined; if this happens, you can contact us.

4. Cookies and analytics

We use a small number of cookies that the shop needs in order to work and, only if you agree, analytics cookies that help us improve it. We do not use advertising cookies, social media cookies or third-party tracking. Our Cookie policy lists every cookie we use, and you can change your choice at any time using "Cookie settings" at the foot of every page.

5. Who we share your information with

We do not sell your personal information, and we do not share it with anyone for their own marketing. We share it only with:

• Cashflows, our payment provider, to take payments, make refunds and prevent fraud; if you pay by PayPal, PayPal also processes your payment under its own privacy notice;
• our delivery company, which receives your name, delivery address and telephone number in order to deliver your order;
• our hosting and IT providers, who run our website, our online shop system and our e-mail for us;
• our professional advisers, such as accountants and lawyers, and HMRC and other authorities where the law requires it;
• the police, licensing authorities, courts and regulators, where the law requires it, or where it is needed to prevent or detect fraud or crime or to protect our rights;
• a buyer of our business, if we sell or transfer all or part of it, who would have to use your information in line with this policy.

Our service providers may only use your information on our instructions and must keep it secure.

6. Information sent outside the UK

Some of our service providers may process your information outside the UK. When they do, we make sure that it is protected as UK data protection law requires, for example by only transferring it to countries that the UK recognises as protecting personal information adequately, or under contracts approved by the Information Commissioner.

7. How long we keep your information

• Orders, invoices and payment records: six years from the end of the financial year they relate to, because tax and company law require it.
• Your account: for as long as it stays open. If you ask us to delete your account, we delete it, but we must keep your order records for the period above.
• Messages you send us: up to two years, or for as long as we keep the order they relate to.
• Analytics information: 13 months, after which it is deleted automatically.
• Your marketing preference: until you change it or your account is deleted.

When we no longer need information, we delete it or make it anonymous.

8. How we keep your information safe

Our website is only served over an encrypted (HTTPS) connection. Passwords are stored only in a scrambled form that cannot be read, card details are entered on our payment provider's secure page and never reach us, and access to customer information is limited to the people who need it to run the shop. No system is completely secure, but we take care to protect your information, and if a breach puts your information at serious risk, we will tell you and the Information Commissioner as the law requires.

9. Under-18s

Our website and our products are only for people aged 18 or over, and we do not knowingly collect information about anyone under 18. If you believe that someone under 18 has given us their information, please contact us and we will delete it.

10. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information, unless we need to keep it, for example to meet our legal obligations;
• ask us to restrict how we use your information, or object to how we use it;
• object at any time to our using your information for direct marketing;
• ask us to send the information you gave us to you, or to another organisation, in a machine-readable format;
• withdraw your consent at any time, where we rely on it: for analytics, use "Cookie settings" at the foot of any page; for news and offers, change your preference in your account or contact us.

If you have an account, you can update your details, change your e-mail preferences, and ask for a copy of your data or for your account to be deleted on your account page. Otherwise, please contact us. We will reply within one month, and there is normally no charge.

If you are unhappy with how we have used your information, please contact us first so that we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at https://ico.org.uk/make-a-complaint or on 0303 123 1113.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed, and if we make an important change we will tell you on our website or by e-mail.

12. Contact us

TVI Fife Limited, trading as Scotch Whisky World
3 Castle Street
Carnegie Campus
Dunfermline
KY11 8PB

E-mail: info@scotchwhiskyworld.com