PRIVACY POLICY
Last Updated: 11 July, 2026
We are Holdsworth Spirits & Co Ltd, trading as HALF HITCH® Gin (referred to as "we", "us", or "our"). We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act.
For the purposes of data protection law, we are the Data Controller of your personal data.
1. THE PERSONAL DATA WE COLLECT
We collect, store, and process the following categories of personal data when you interact with our website or place an order:
Identity Data: First name, last name, and title.
Age Verification Data: Date of birth, or metadata tokens passed to us by our certified age-verification partners to confirm you are 18 or older.
Contact Data: Delivery address, billing address, email address, and telephone number.
Financial & Transaction Data: Details about payments to and from you, and details of products you have purchased from us. (Note: We do not store raw credit card details; these are handled directly by our PCI-DSS compliant payment processor).
Technical & Usage Data: Your IP address, browser type, operating system, and how you use our website.
2. HOW AND WHY WE USE YOUR DATA (LAWFUL BASIS)
We only use your personal data when the law allows us to. We process your data under the following legal bases depending on the activity:
To register you as a customer and fulfill your order: We process your Identity, Contact, Financial, and Transaction Data to package and deliver your order. The lawful basis for this is the Performance of a Contract with you.
To verify your age: Because it is illegal to sell alcohol to minors in the UK, we process your Identity and Age Verification Data to comply with our statutory obligations under the Licensing Act. The lawful basis for this is Compliance with a Legal Obligation.
To process payments and prevent fraud: We use your Contact, Financial, and Transaction Data to securely handle your payment. The lawful bases for this are the Performance of a Contract and our Legitimate Interests in preventing fraudulent transactions.
To manage our ongoing relationship: We use your Identity and Contact Data to notify you about updates to our Terms or to send mandatory service updates. The lawful bases are the Performance of a Contract and our Legitimate Interests.
To send you marketing updates: We use your Identity, Contact, and Usage Data to send you newsletters or promotional offers. The lawful basis for this is your explicit Consent, which you can withdraw at any time.
3. WHO WE SHARE YOUR PERSONAL DATA WITH
We do not sell your personal data to third parties. To run our online shop, we must share specific data with trusted service providers:
To verify your age: We process your Identity Data at the point of delivery to ensure we comply with the Licensing Act and do not sell alcohol to minors. The lawful basis for this is Compliance with a Legal Obligation.
Delivery & Courier Companies: We share your name, delivery address, and contact details with our couriers, including but not limited to DPD and Royal Mail. Because we do not verify your age digitally at checkout, our couriers act as our physical verification agents and are instructed to run strict Challenge 25 ID checks before handing over the goods.
Payment Gateways: Your payment details go directly to our secure payment gateway provider Stripe or PayPal.
Legal Authorities: We may disclose data to local licensing authorities, law enforcement, or HM Revenue & Customs if required by law.
4. DATA SECURITY & RETENTION
4.1 Security: We have put in place robust security measures to prevent your personal data from being accidentally lost, altered, disclosed, or accessed in an unauthorized way.
4.2 Retention: We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for. To comply with UK tax and accounting laws, we hold transaction records for 6 years after a purchase.
5. YOUR LEGAL RIGHTS
Under the UK GDPR, you have the following rights regarding your personal data:
Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): You can ask us to delete your data under certain conditions, provided we do not have a overriding legal obligation to keep it (such as tax records).
Right to Restrict or Object to Processing: You can object to us processing your data for direct marketing or based on legitimate interests.
To exercise any of these rights, please email us at orders@halfhitch.london.
6. HOW TO COMPLAIN
If you have any concerns about our use of your personal information, you can make a formal complaint to us at orders@halfhitch.london.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to resolve your concerns directly with you first.
