Privacy Policy

Last updated: 18th August 2025

1. Introduction

Smooth Balance Limited ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information when you visit our website or use our whisky tasting services.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name and contact details (email address, phone number, postal address)
• Payment information for booking our services
• Dietary requirements and preferences for our experiences
• Age verification for alcohol service compliance
• Communication preferences and marketing consent

2.2 Technical Information

We automatically collect certain technical information, including:

• IP address and location data
• Browser type and version
• Device information and operating system
• Website usage data and analytics
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal data for the following purposes:

• Providing and managing your whisky tasting experiences
• Processing payments and managing bookings
• Communicating with you about our services
• Sending marketing communications (with your consent)
• Improving our website and services
• Complying with legal obligations

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Contractual necessity: To provide our services and fulfil our contracts with you
• Legitimate interests: For business operations, improving services, and fraud prevention
• Consent: For marketing communications and non-essential cookies
• Legal obligation: To comply with tax, accounting, and licensing requirements

5. Data Sharing

We may share your information with:

• Partner distilleries for experience coordination
• Payment processors for transaction handling
• Service providers for website hosting and analytics
• Legal authorities when required by law

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Customer data: 7 years after last interaction (for tax and legal compliance)
• Marketing data: Until you withdraw consent or 3 years of inactivity
• Website analytics: 26 months maximum

7. Your Rights

Under UK data protection law, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data in certain circumstances
• Restrict processing of your data
• Data portability
• Object to processing based on legitimate interests
• Withdraw consent for marketing or cookies

8. Cookies

Our website uses cookies to enhance your experience. We use:

• Essential cookies: Required for website functionality
• Analytics cookies: To understand website usage (with consent)
• Marketing cookies: For targeted advertising (with consent)

You can manage your cookie preferences through our cookie banner or browser settings.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes:

• SSL encryption for data transmission
• Secure payment processing
• Regular security assessments
• Staff training on data protection

10. International Transfers

We primarily process data within the UK. When we transfer data outside the UK, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children under 18.

12. Changes to This Policy

We may update this privacy policy periodically. We will notify you of significant changes by posting the updated policy on our website with the revision date.

13. Contact Information

For any questions about this privacy policy or to exercise your rights, please contact us:

14. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately: