Privacy

Last updated 25th June, 2025

Your privacy is important to us. This privacy statement explains the personal data Beer52 processes, how Microsoft processes it, and for what purposes. This Privacy Notice (“Privacy Notice”) explains how Beer52 Limited (“Beer52”, “we”, “us”, “our”) processes your personal data when you visit beer52.com (the “Site”), or purchase any of our discovery boxes, subscriptions or related services we offer (the “Services”). We act as a data controller under the UK General Data Protection Regulation (“UK GDPR”).

We believe in fair, transparent data‑handling. Below you will find the information you need to understand what personal data we collect, why we collect it, how long we keep it, who we share it with, the rights you have and how to exercise them.

1. Who we are

We are Beer52 Limited (Beer52), registered in Scotland under company registration SC449930 , whose registered office is at 8 Melville Crescent, Edinburgh, EH3 7JA. We are registered with the Information Commissions Office under registration number ZA359384.

How to contact us:

On our Site
By post
Data Protection Officer, Beer52 Ltd, 8 Melville Crescent, Edinburgh, EH3 7JA
2. Your rights

You can exercise the rights set out below free of charge:

Right
What it means
Right to be informed
Ask for a copy of the personal data we hold.
Right of access
Correct inaccurate or incomplete data.
Right of rectification
Request deletion (“right to be forgotten”) in certain cases.
Right to be forgotten
Ask us to stop processing but keep a copy.
Right to restriction of processing
Receive a machine‑readable copy or ask us to transfer it to another controller.
Right of portability
Object to processing based on legitimate interests or direct marketing.
Rights in relation to object to automated processing & profiling
Not be subject to a decision based solely on automated processing that has legal or similar significant effects.
Withdrawal of consent
Withdraw any consent given at any time.

If you have cause for complaint about our use of your data, or you would like to exercise any of your rights, then please contact us using the details provided in Section 1 and we will do our best to solve the problem for you.

If we are unable to help, or you aren’t satisfied with our response, you also have the right to make a complaint with the UKs supervisory authority – The Information Commissioner’s Office (ICO), who may be contacted in writing at The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF; by telephone on 0303 123 1113; or via their website – www.ico.org.uk. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

3. Personal data we collect

Beer52 collects data from you, through our interactions with you and through our products. You provide some of this data directly, and we get some of it by collecting data about your interactions, use, and experiences with our products. The data we collect depends on the context of your interactions with Beer52 and the choices you make, including your privacy settings and the products and features you use. We also obtain data about you from Beer52 affiliates, and third parties.

Category
Examples (non‑exhaustive)
Identity Data
First/last name, date of birth, gender.
Contact Data
Billing & delivery address, e‑mail, phone number.
Registration Data
Username, password, contact preferences, any extra details supplied during sign‑up.
Financial Data
Bank or payment‑card details.
Transaction Data
Orders, payment history, refunds, vouchers used.
Technical Data
IP address, browser type/version, device IDs, operating system, time‑zone and geolocation.
Profile Data
Purchase history, interests, feedback, survey responses, competition entries.
Usage Data
How you navigate the Site, clicks, page views, marketing and sales interactions (via cookies & similar tech).
Marketing & Comms Data
Your choices about receiving marketing from us or third parties.

We do not intentionally collect special‑category data (e.g. health, religion) or criminal‑offence data. If you provide such data voluntarily (e.g. allergy information in a query) we will delete it once we have responded.

4. How do we collect personal data?
Method
Description
Directly from you
Creating an account, placing an order, contacting customer service, completing surveys, entering promotions.
Automated technologies
Cookies, pixels and similar tech capture Technical and Usage Data when you browse the Site or read our e‑mails.
Third parties
Analytics providers, payment processors, address‑validation services, marketing‑list brokers, social‑media platforms.
Public sources
Public registers, social‑media posts, open‑data sets.
5. Why do we use your personal data and what is the legal basis?

We use the information that we collect from you to provide our services to you. In addition to this we may use the information for one or more of the following purposes:

  1. To provide information to you that you request from us relating to our products or services.
  2. To provide information to you relating to other products that may be of interest to you. Such additional information will be provided where you have consented to receive such information or where we are pursuing our Legitimate Interest to grow the business using direct marketing to acquire new customers.
  3. To inform you of any changes to our website, services or goods and products.
  4. From time to time, we may also source names and addresses of prospective customers from reputable marketing services providers for the purposes of direct marketing. We only use this data for the purposes it was supplied to us, and the data subjects can request no further contact from us using our contact details set out below
  5. For statistical analysis and profiling to enable us better to manage our business, and better understand who our customers are so we can make our marketing communications more relevant.

If you have previously purchased goods or services from us we may provide to you details of similar goods or services, or other goods and services, that you may be interested in. Where your consent has been provided in advance we may allow selected third parties to use your data to enable them to provide you with information regarding unrelated goods and services which we believe may interest you. Where such consent has been provided it can be withdrawn by you at any time. You have the right to be forgotten.

Use of Your Information:

  • Provide and manage the Site:

    Activities include authenticating log-ins, enabling core functionality, maintaining security, and troubleshooting.

    Legal basis: Legitimate interests / Contract performance

  • Fulfil your orders:

    Involves creating, packing, and delivering boxes; managing payments; sending service emails/SMS; and age-verifying alcohol purchasers.

    Legal basis: Contract performance / Legal obligation

  • Customer service:

    Includes responding to queries by chat, email, phone, or social media, and recording calls for training purposes.

    Legal basis: Legitimate interests / Contract performance

  • Marketing (own products):

    Sending news, offers, and surveys by email/SMS/post/phone, and personalising content.

    Legal basis: Consent† / Legitimate interests (“soft opt-in”)

  • Marketing (third-party offers):

    Sharing limited data with selected partners so they can send offers that may interest you.

    Legal basis: Consent / Legitimate interests

  • Analytics & personalisation:

    Analysing browsing and purchase behaviour, testing new features, and improving the site.

    Legal basis: Consent (non-essential cookies) / Legitimate interests

  • Competitions & promotions:

    Running prize draws, selecting winners, delivering prizes, and publishing limited winner details.

    Legal basis: Contract performance / Legitimate interests

  • Events:

    Registering attendees, managing dietary requirements, and publishing event photos or quotes.

    Legal basis: Legitimate interests / Consent

  • Legal & compliance:

    Detecting fraud, keeping accounting records, complying with tax and consumer laws, and handling disputes.

    Legal basis: Legal obligation / Legitimate interests

  • Business transitions:

    Sharing data during mergers, acquisitions, or asset sales.

    Legal basis: Legitimate interests

† We will only send electronic marketing where you have consented or where we rely on the “soft‑opt‑in” exemption for existing customers. You can withdraw consent at any time (see § 11).

6. Cookies and similar technologies

We use first‑ and third‑party cookies, pixels and local‑storage objects to:

  • make the Site work;
  • remember your choices;
  • understand how visitors use our pages;
  • show you relevant Beer52 or partner ads on our Site and elsewhere.

Non‑essential cookies only run with your consent. You can manage cookies through:

  • the cookie banner / preference centre;
  • your browser settings; or
  • industry opt‑out tools such as [ YourAdChoices ].

Full cookie details are available in our Cookie Policy at https://www.beer52.com/cookies.

7. Who do we share your data with?

We only share data where necessary and subject to contracts imposing confidentiality and security obligations.

Recipient type
Reason for sharing
Delivery carriers
Get your purchases to you quickly.
Payment processors / banks
Process payments, refunds and fraud checks.
Age‑verification services
Confirm you are over 18 when alcohol is supplied.
Customer‑service providers
Operate chat, e‑mail ticketing, call centres, satisfaction surveys.
IT & hosting suppliers
Provide cloud infrastructure, data backup, analytics and security tools.
Marketing & advertising partners
Design and send campaigns; serve personalised ads; run look‑alike audiences.
Data‑co‑operatives
Enrich customer profiles and identify prospective customers.
Event venues & organisers
Register and host events safely.
Professional advisers
Obtain legal, accounting or auditing support.
Regulators & law‑enforcement
Comply with legal duties or respond to lawful requests.
Prospective buyers
In the event of a merger, acquisition or asset sale.

A current list of key processors is available on request—contact us via dataprotection@beer52.com.

Voucher offers of Sovendus GmbH:

In order to select a currently interesting voucher offer for you, we will transmit your pseudonymised hash value of your e-mail address and your IP-address in encrypted form to Sovendus GmbH, Moltkestrasse 11, D76133 Karlsruhe (Sovendus) (Art. 6 par. 1 f GDPR). The pseudonymised hash value of your e-mail address is used to consider a possibly existing objection to receive offers from Sovendus (Art. 21 par.3, Art. 6 par. 1 c GDPR). The IP-address will be exclusively used for data security purposes and as a rule the same will be anonymised after seven days (Art. 6 Abs.1 f GDPR). Furthermore, we will transmit order number, order value with currency, session ID, coupon code, and time stamp in pseudonymised form to Sovendus for billing purposes (Art. 6 Abs.1 f GDPR). If you are interested in a voucher offer of Sovendus, there is no objection existing to receive such offers and you click on the voucher banner, we will transmit your form of address, your name and your email address in encrypted form to Sovendus to prepare a voucher (Art. 6 par. 1 b, f GDPR).

You will find further information about the processing of your data by Sovendus in their Online Data Protection Notice at https://www.sovendus.co.uk/privacy_policy.

This website uses Google Ads:

This website uses the Google Ads remarketing service to advertise on third party websites (including Google) to previous visitors to our site. It could mean that we advertise to previous visitors who havent completed a task on our site, for example using the contact form to make an enquiry. This could be in the form of an advertisement on the Google search results page, or a site in the Google Display Network. Third-party vendors, including Google, use cookies to serve ads based on someone's past visits to the Beer52 website. Of course, any data collected will be used in accordance with our own privacy policy and Google's privacy policy.

Epsilon International UK Ltd:

We work with Epsilon Abacus (registered as Epsilon International UK Ltd), a company that manages the Abacus Alliance on behalf of UK retailers and charities. The participating retailers are active in the clothing, collectables, food & wine, gardening, gadgets & entertainment, health & beauty, household goods, home interiors and travel categories. These retailers and charities share information about their customers and supporters and what they buy or donate. Epsilon Abacus processes this information as a processor on behalf of these companies to help them understand individuals behaviour and preferences. Epsilon combines information provided by participating retailers and charities with third party data. From this combined information, these companies can tailor their communications, sending individuals suitable offers and appeals that should be of interest to them. You can learn more about how Epsilon Abacus processes your personal information in their Privacy Policy, which is available here: https://www.epsilon.com/abacus/services-privacy-policy

If you would like more information, please write to us at dataprotection@beer52.com.

8. International data transfers

Some partners and group companies are located outside the UK/EEA. Where we transfer personal data abroad we rely on:

  • Adequacy regulations (for territories deemed to provide equivalent protection); or
  • UK International Data Transfer Agreement / Addendum or other standard contractual clauses; or
  • Another lawful safeguard recognised by the ICO.
  • Further details are available on request.
9. Data security

We apply technical and organisational measures including:

  • TLS/SSL encryption of data in‑transit;
  • access controls and multi‑factor authentication;
  • secure destruction/anonymisation when data is no longer required

If we suspect a personal‑data breach, we will notify you and the ICO where legally obliged.

10. Failure to provide data

If you refuse to provide data that we need to fulfil a contract (e.g. delivery address or proof of age), we may be unable to supply the Services.

11. Children

Our Site and Services are not intended for anyone under 18. We do not knowingly collect data from minors. If you believe we hold data about a child, please contact us so we can delete it.

12. Refer‑a‑Friend

Existing customers may invite friends via our “Refer‑a‑Friend” programme. Please only share referral links with friends who genuinely want to hear about Beer52, Wine52, or Whisky52.

13. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. Any material changes will be notified via the Site or e‑mail. Please review this notice regularly. The version date is shown at the top.

14. Questions?

E‑mail our Data Protection Officer at dataprotection@beer52.com or write to the postal address in section 1.