Privacy Policy
Last updated: 14 May 2026
This Privacy Policy explains how The Malt Club Limited (“Malt Club”, “we”, “us”) collects, uses and protects your personal data when you visit whiskycaskclub.co.uk and engage with our services.
Who we are
The Malt Club Limited is registered in England and Wales under company number 14289400, with a registered office at 2nd Floor Regis House, 45 King William Street, London EC4R 9AN. We are the data controller for personal data collected through this website.
What data we collect
Information you give us directly
- Your name, email address and phone number when you request the investment guide or a portfolio adviser call.
- Your investment budget range and time horizon when you complete the recommendation wizard.
- Identity-verification information (passport or driving licence, proof of address, date of birth) at the point of contract, if and when you proceed to a purchase.
- Bank or payment details, processed by our payment partners, when a transaction takes place.
Information collected automatically
- IP address, browser type, device type, operating system, and pages visited.
- Referring URL and any ad-click identifiers (such as gclid or fbclid) that brought you to the site.
- Cookies and local-storage values used to remember your session, your form progress and the marketing source of your visit.
Why we process your data
- To send you the guide and follow up. If you request the investment guide, we use your email and phone number to send the guide and to arrange an introductory call with a portfolio adviser.
- To produce your recommendation. Your budget and time-horizon answers are used to generate the indicative projection on screen and to brief the adviser ahead of your call.
- To improve the website. Aggregated and pseudonymised usage data helps us see which sections are read, which are skipped and where pages break on different devices.
- To meet legal obligations. If you proceed to a contract, we collect the identification documents needed under UK anti-money-laundering and excise regulations.
Legal bases (UK GDPR)
- Consent for marketing follow-up and for any non-essential cookies.
- Contract for processing a purchase once a buyer instructs us to proceed.
- Legal obligation for identity verification and for tax and excise reporting required of UK alcohol traders.
- Legitimate interest for improving the site, measuring marketing performance and preventing fraud.
Who we share data with
We work with a small number of carefully chosen processors. They handle data only on our instructions and only for the purposes set out below.
- SendGrid (Twilio): transactional email delivery (your investment guide, adviser follow-ups).
- PostHog: product analytics and session replay, hosted in the EU.
- Zapier: routing of leads to our internal CRM and operations inbox.
- Vercel: static hosting and edge delivery of this website.
- Google Ads and Google Analytics, where enabled: measurement of paid-search and organic visit performance.
- HMRC AWRS-licensed bonded warehouse operator in Scotland: storage of casks and execution of purchase or sale instructions if and when you become a buyer. The warehouse operator is verifiable on the public HMRC AWRS register.
We do not sell your data and we do not share it with unrelated third parties for their own marketing.
Where your data lives
Servers used for hosting (Vercel), analytics (PostHog) and email delivery (SendGrid) are based in the United Kingdom, the European Union or the United States. Where data is transferred outside the UK or EEA we rely on Standard Contractual Clauses or an equivalent adequacy mechanism so that your data continues to be protected to UK standards.
How long we keep it
- Marketing enquiries (guide request, recommendation wizard answers) are kept for up to 24 months after the last point of contact, then deleted unless you have become a client.
- Client records are kept for the duration of the contract and for six years afterwards, in line with HMRC retention requirements.
- Anonymous analytics are kept indefinitely in aggregated form; identifying fields are deleted in line with the marketing-enquiry window above.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Have inaccurate data corrected.
- Have your data deleted, subject to legal-retention obligations.
- Restrict or object to certain processing.
- Withdraw consent at any time.
- Lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk).
Cookies and similar technologies
We use a small number of first-party cookies and local-storage values to remember your form progress, your investment-guide download and the marketing source of your visit. Analytics are routed through a same-origin path so they can be blocked by browser settings or privacy extensions without breaking the rest of the site.
Children
Whisky cask investing is restricted to adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided personal data through our site, please contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. The current version is always available at this URL, with the “Last updated” date above reflecting the most recent change. Material changes will be highlighted on the site.
Contact
For any privacy question, or to exercise any of the rights above, please contact:
Email: info@maltclub.co.uk
Post: The Malt Club Limited, 2nd Floor Regis House, 45 King William Street, London EC4R 9AN, United Kingdom.