Privacy policy

We are careful with your data. We only ask for what we need, keep it no longer than necessary and never sell it. This website uses no tracking cookies and no advertising or analytics services.

1. Who is responsible?

The Whisky House BV, Assestraat 11, 1790 Affligem, Belgium, enterprise number BE 0884.190.929, is responsible for processing your personal data. Please send privacy questions to sales@thewhiskyhouse.com.

2. What data, why and for how long?

Contact form and tasting requests. Name, email, phone number, your message and, where relevant, the number of guests and the preferred date. We use this data to answer your question (steps prior to a contract, and our legitimate interest in answering questions). Retention: 24 months.

Tasting tickets. Name, email, phone number, the names of your guests if you provide them, your booking and the payment status. Needed to perform the contract. Invoicing data is kept as long as Belgian accounting and tax law requires (currently up to 10 years). Incomplete bookings are deleted after 90 days.

Bottle of the Month offers. Name, email, phone number, country, the amount of your offer and your confirmation that you are 18 or over. Needed to handle your offer and, if we accept it, to perform the sale. Unconfirmed offers are deleted after 30 days. Other offers are anonymised 24 months after the end of the offer period. Data of a concluded sale is kept as long as accounting law requires.

Newsletter. Email address, first name (optional), preferred language and proof of your consent (date, source and version of the consent text). Legal basis: your consent, which you confirm through a link in an email (double opt-in). You can unsubscribe at any time with the link at the bottom of every newsletter. Unconfirmed subscriptions are deleted after 30 days. After you unsubscribe, we only keep your email address marked "unsubscribed", so that we do not send you newsletters again.

Email delivery reports. If an email cannot be delivered, we keep that report for up to 12 months to avoid emailing an invalid address again.

3. Who processes data for us?

We work with a small number of service providers who act only on our instructions:

• Supabase (database and storage, servers in the European Union);
• Mollie B.V., the Netherlands (online payments; Mollie also processes your payment data as an independent controller);
• Scaleway SAS, France (sending emails);
• Cloudflare, Inc. (website hosting and form spam protection with Cloudflare Turnstile; Cloudflare participates in the EU-US Data Privacy Framework);
• DeepL SE, Germany (translation of our own texts; no customer personal data is translated).

The map on our website is only loaded from OpenStreetMap when you click "Show map".

4. Cookies

We set no tracking cookies and no third-party cookies for advertising or statistics, which is why we do not ask for cookie consent. When you submit a form, Cloudflare Turnstile checks that you are human without tracking cookies. The admin area uses technically necessary login storage for signed-in staff only.

5. Your rights

You have the right to access, correct and delete your data, to restrict or object to its processing, and to data portability. You can withdraw your consent at any time. Send your request to sales@thewhiskyhouse.com. We reply within one month.

If you are not satisfied with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.

6. Security

All connections are encrypted (HTTPS). Access to data is limited to the staff of The Whisky House who need it, with a personal login. Payment details never reach our servers.

7. Minors

Our website and products are intended only for persons aged 18 or over. We do not knowingly process data of minors.

8. Changes

We may update this privacy policy. The date at the top shows the last change. The Dutch text prevails over translations.