Privacy Policy / Cookie Policy

 

Privacy Policy

Last updated: 28 October 2025

1. Who We Are

We are Indie Rabble Ltd, a company registered in England and Wales under company number 13975950, with our registered address at 27–28 The Arches, Alma Road, Windsor, Berkshire, SL4 1QZ.

We operate the website indierabble.co.uk (“the Website”), where we sell our range of beers and related products online.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller responsible for your personal data.

If you have any questions about this policy or how we use your data, please contact us at:
📧 [email protected]
📞 [insert contact number if applicable]

---

2. What Personal Data We Collect

When you use our website, we may collect and process the following information:

• Identity Data: Your name

• Contact Data: Your email address, billing address, and delivery address

• Transaction Data: Details about payments to and from you, and what products you purchased

• Technical Data: Your IP address, browser type and version, time zone setting, and device information

• Usage Data: Information on how you use our website, such as pages viewed and interactions made

• Cookie Data: Information collected through cookies and similar technologies (see Section 7 below)

---

3. How We Use Your Personal Data

We use your information for the following purposes:

• To process your orders and deliver products

• To communicate with you about your order, including confirmations and delivery updates

• To manage your account (if you create one)

• To improve our website, services, and customer experience

• To comply with legal obligations, such as record-keeping and age verification

• To send marketing communications, if you have consented to receive them

---

4. Our Legal Basis for Processing

We rely on the following legal bases under the UK GDPR:

• Contractual necessity: To process your order and deliver your purchases

• Legal obligation: To comply with tax, accounting, and regulatory requirements

• Consent: For sending marketing communications or placing non-essential cookies

• Legitimate interests: To understand customer behaviour and improve our services (only where your rights do not override these interests)

---

5. How Long We Keep Your Data

We keep personal data only as long as necessary for the purposes we collected it, including to satisfy legal, accounting, or reporting requirements.

Typically:

• Order and transaction records: 6 years (for legal and tax compliance)

• Marketing data: Until you withdraw consent or unsubscribe

---

6. How We Share Your Data

We share your data only when necessary, for example with:

• Payment processors (e.g. Stripe, PayPal) to securely handle payments

• Delivery partners (e.g. Royal Mail, courier services) to deliver your orders

• IT and website service providers who host or support our website and email communications

All third parties are required to respect your privacy and handle your data lawfully.
We will never sell or rent your personal data.

---

7. Cookies and Tracking Technologies

Our website uses cookies to:

• Enable essential website functionality (e.g. basket, checkout)

• Improve website performance and analytics

• Remember your preferences

• Deliver personalised marketing (only with your consent)

You can manage or disable cookies via your browser settings or our on-site cookie consent tool.

For more details, please see our Cookie Policy.

---

8. Your Rights

Under the UK GDPR, you have the following rights:

• Access: Request a copy of the personal data we hold about you

• Rectification: Ask us to correct any inaccurate or incomplete data

• Erasure: Request deletion of your personal data (“the right to be forgotten”)

• Restriction: Ask us to limit how we use your data

• Portability: Request your data in a structured, machine-readable format

• Objection: Object to processing based on legitimate interests or for direct marketing

• Withdraw consent at any time (for cookies or marketing)

To exercise these rights, contact us at [email protected].

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk/

---

9. Data Security

We use appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, alteration, or disclosure.
These include secure hosting, encrypted transactions, and restricted internal access.

---

10. International Data Transfers

Some of our third-party service providers may transfer data outside the UK (for example, for cloud hosting).
Where this happens, we ensure that adequate safeguards are in place — such as UK-approved standard contractual clauses or equivalent protection mechanisms.

---

11. Changes to This Policy

We may update this Privacy Policy from time to time.
Any updates will be posted on this page with an updated “Last updated” date.

---

Would you like me to add a linked Cookie Policy section next — one that aligns with this privacy policy and explicitly mentions consent, analytics, and third-party cookies (e.g. Google Analytics or Meta tracking, if used)?