Privacy Policy
0
Overview
This Privacy Policy describes how Moth Drinks Limited (“we” or “us”), operators of the site Mothdrinks.co.uk (the “Site”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site or have other interaction with us.
For the purposes of the Data Protection Act 2018 and the General Data Protection Regulation as applicable in the UK (“Data Protection Law”), the data controller is Moth Drinks Limited, a limited company registered in England and Wales with registered number 11525411 and registered office at Wisteria Grange Barn, Pikes End, Pinner, London HA5 2EX, United Kingdom.
1
Collecting, using and disclosing personal information
When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information that can uniquely identify an individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.
Device information :
Examples of Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.
Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.
Disclosure for a business purpose: shared with our processor Shopify
Order information :
Examples of Personal Information collected: name, billing address, shipping address, order details, payment information (including credit card numbers , Shop Pay, Apply Pay, Google Pay and Paypal details), email address, and phone number.
Purpose of collection: to provide products or services to you to fulfil our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
Source of collection: collected from you.
Disclosure for a business purpose: shared with our processor Shopify, our Third Party Fulfilment Partner – Huboo including their own owned software, Unleashed & Shipping Partners including DPD, Royal Mail, Evri & Fedex.
Live Chat & Customer Support information :
Examples of Personal Information collected: Name, billing address, shipping address, order details, payment method (without card details), email address and phone number.
Purpose of collection: to provide customer support.
Disclosure for a business purpose of limited data: This information is collected by and shared with our It may also be shared with Third Party Fulfilment Partner – Huboo including their own owned software , Unleashed & Shipping Partners including DPD, Royal Mail, Evri & Fedex. This is not an exhaustive list, should you need this, please email us at support@mothdrinks.com
Review Collection:
Examples of Personal Information collected: Name, billing address, shipping address, order details, order and returns history, loyalty program tier status, email address and phone number.
Purpose of collection: To enable you to participate in and share reviews about your product and service experience
Source of collection: collected from you via prost transactional emails send by our service prod.
Disclosure for a business purpose of limited data: shared with our loyalty program service provider Yotpo – please see their privacy notice here.
Loyalty program:
Examples of Personal Information collected: Name, billing address, shipping address, order details, order and returns history, loyalty program tier status, email address and phone number.
Purpose of collection: to enable you to participate in and benefit from our loyalty program.
Source of collection: collected from you and from your orders.
Disclosure for a business purpose of limited data: shared with our loyalty program service provider yotpo – please see their privacy notice here.
Physical Collatoral Marketing:
Examples of Personal Information used: Name, billing address, shipping address, order history, email address, and phone number. Behavioural interactions with our website communications (see sections 4 and 12 below).
Purpose of collection: These details are collected when you place an order on our website and are used to provide personalised collateral in your order.
Disclosure for a business purpose: We partner with Yuzu for our email marketing and you can find out more about their privacy policy here.
Email & SMS Marketing :
Examples of Personal Information used: Name, billing address, shipping address, order history, email address, and phone number. Behavioural interactions with our website and email communications (see sections 4 and 12 below).
Purpose of collection: These details are collected when consent is given for marketing content to be sent to keep you informed with our promotions, product releases and other activities. We may also use pixels or other technology similar to cookies to gather information from your interaction with email communications that we send to you.
Unsubscribe or request erasure: You can unsubscribe from our email marketing by clicking the unsubscribe button that is included on all email communications. To exercise all other rights, please see section below.
Disclosure for a business purpose: We partner with Klaviyo for our email marketing and you can find out more about their privacy policy here.
Stock Alerts Email Marketing :
Examples of Personal Information used: Name, billing address, shipping address, order history, email address, and phone number. Behavioural interactions with our website and email communications (see sections 4 and 12 below).
Purpose of collection: These details are collected when you enter your email of a specific page to receive stock alerts about a product. Data collected is not used for marketing purposes.
Unsubscribe or request erasure: You can unsubscribe from these emails by clicking the unsubscribe button that is included on all email communications.
Disclosure for a business purpose: We partner with Globo Pre Order or our email stock alerts and you can find out more about their privacy policy here.
Social Media Information :
Examples of Personal Information collected: Your social media username and interactions and behaviours with us on Social Media Channels.
Purpose of collection: This data is only collected where relevant from our accounts on the relevant social media platforms to help us respond to your comments, questions or feedback.
Processing of your data by 3rd Party Social Media Channels: The operator of the social media platform processes personal data on in their own commercial interest and under their own privacy policies and terms & conditions. This legal person too is to this extent another data controller who carries out data processing upon whom we have no influence.
Competition Information :
Examples of Personal Information collected: Name, competition submission information, billing address, shipping address, order history, email address, and phone number.
Purpose of collection: If you have decided to participate in a competition we will use personal data to be able to identify you as a participant, to verify your capacity to participate, to judge your entry and to be able to reach out to you for delivery and follow-up on prize deliveries.
Disclosure for a business purpose: Collection of this information will either be done by our social media partners on on our our website using our provider Shogun or Klaviyo. This data may be shared with with our Third Party Fulfilment Partner – Huboo including their own owned software, Unleashed & Shipping Partners including DPD, Royal Mail, Evri & Fedex to allow prizes to be delivered to you. Where a competition is run it collaboration with another brand this information may also be shared with that brand and their Third Party Fulfilment Partner.
Afiiflatie Marketing & AWIN Network
Examples of Personal Information collected:
Through our partnership with AWIN, the following data may be collected for tracking and commission purposes. Transaction Data – Order value, purchased products, transaction ID. Referral Data – The affiliate website that referred you to us. Device & Technical Data – Browser type, IP address (for fraud prevention and geo-targeting).
Purpose of collection: We participate in affiliate marketing programs, which means third-party affiliates who promote our products and services can receive benefit for this service. When you click on an affiliate link and make a purchase, the affiliate partner may receive a commission.
Disclosure for a business purpose: Collection of this data is via our partner AWIN You can find AWIN’s opt-out options in their privacy policy here.
Refer-a-Friend Program & ReferralCandy
Examples of Personal Information collected: When you participate in our Refer-a-Friend program, ReferralCandy may collect and process the following information:Referrer Data (Existing Customer): Name, email address, referral link, and reward status. Referred Friend Data (New Customer):Name, email address (if provided for tracking rewards), purchase details (for verifying reward eligibility). Transaction & Engagement Data:Whether a referred friend makes a purchase, order value, and referral tracking information
Purpose of collection: We use ReferralCandy, a third-party referral marketing platform, to manage our Refer-a-Friend program. This allows customers to refer friends and earn rewards when their friends make a purchase using their referral link.
Disclosure for a business purpose: Collection of this data is via our partner Referral Candy You can find their privacy policy here.
Except as explicitly stated herein, we never pass on, sell or swap your data to any third parties.
2
Minors
The Site is not intended for individuals under the age of 18, or the legal age of alcohol consumption in the country of their residence. We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at the address below to request deletion.
3
Sharing personal information
We share your Personal Information with service providers to help us provide our services and fulfil our contracts with you, as described above. For example:
We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.Other service providers we share information with: Yotpo Loyalty, NORTH SEO, Third Party Fulfilment Partner – Huboo including their owned software, Unleashed & Shipping Partners including DPD, Royal Mail, Evri, Fedex.This is not an exhaustive list, should you like to request this, please email us on chat@mothdrinks.com
4
Behavioural advertising & analysis
We use server-side tracking to collect and process certain data about interactions with our website. Unlike traditional browser-based tracking, where data is sent directly from your device to third-party services, server-side tracking processes data on our secure servers before forwarding it to analytics and advertising platforms.
This method enhances privacy, security, and data accuracy, while giving you greater control over how your information is used.
Through server-side tracking, we may process the following information:
Device & Technical Data – Browser type, operating system, IP address (anonymized where required).
Website Activity – Page views, clicks, time spent on pages, interactions with forms and buttons.
E-Commerce Data – Products viewed, cart activity, purchases (excluding payment details).
Marketing & Attribution Data – How you arrived at our website, ad interactions, and conversion tracking.
After processing, we may securely transmit certain data to third-party analytics and advertising platforms, including:
Google Analytics 4 (GA4) – For website performance analysis.
Google Ads & Meta (Facebook/Instagram) Ads – For advertising optimization and conversion tracking.
As described above, we may use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:
We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://policies.google.com/privacy?hl=en.You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout. We may share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which you may consent to, depending on your location).
This includes Facebook and Klaviyo.We use Hotjar analytics system to help improve usability and the customer experience. Hotjar may record mouse clicks, mouse movements and scrolling activity. Hotjar may record keystroke information that you voluntarily enter on this website. Hotjar does not track this activity on any site that does not use the Hotjar system. To view and manage data that Hotjar has collected about you on the Hotjar website, or to opt out of future tracking please visit their data privacy information here.For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising on specific platforms, for example by visiting:
FACEBOOK - https://www.facebook.com/settings/?tab=ads
GOOGLE - https://www.google.com/settings/ads/anonymous
BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.
See also section 12 below for further information regarding our use of cookies.
5
Using personal information
We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfilment of your order, and keeping you up to date on new products, services, and offers.
6
Lawful basis
Data Protection Law requires us to meet at least one of the “lawful bases” for processing set out in Article 6 of the General Data Protection Regulation. The bases applicable to the processing of personal information to which this policy relates are:
1. Where the processing is necessary for us to perform a contract that you are party to, or to take steps at your request prior to entering a contract, that is the ground on which we are processing that information;
2. Where the processing is necessary for compliance with a legal obligation to which we are subject, that is the ground on which we are processing that information;
3. Where processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, that is the ground on which we are processing that information, provided that your fundamental rights and freedoms which require protection of your information override those legitimate interests (our legitimate interests comprise the management, marketing and promotion of our business and products and the supply of our products);
4.If you have given your consent to our processing the data, that is the basis on which we are processing that data.
If more than one of the above grounds is capable of applying to the processing of data in question, the applicable ground will be the one that is set out first above.
7
Retention
When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the ‘Your rights’ section below.]
Our policy is to ensure that personal data is only stored for as long as is necessary for the purposes set out at section 1 above. This may vary according to the type of information and the specific applicable purpose(s). If you would like to know what that means in respect of your personal data, please contact us (see section 15 below). In determining how long we retain your information the criteria that we take into consideration include our legal obligations, good industry practice, the guidance of relevant UK authorities and bodies such as HM Revenue & Customs (HMRC), and also tax, accounting, health and safety, and employment rules where applicable.
8
Automatic decision-making
You have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.
We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.
Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.
Services that include elements of automated decision-making include:
Temporary denylist of IP addresses associated with repeated failed transactions. This denylist persists for a small number of hours. Temporary denylist of credit cards associated with denylisted IP addresses. This denylist persists for a small number of days.
9
Your Other Rights
You have various rights under Data Protection Law. These include:
1. The right to ask us not to process your personal data for direct marketing purposes, even if you have given consent;
2. If our processing is based on your consent, the right to withdraw any consent you may have given for our processing of your data – if you exercise this right, we will be required to stop such processing if consent is the sole lawful basis on which we are processing that data (see section 6 above);
3. The right to ask us for access to the data we hold about you (see below for further details);
4. The right to ask us to rectify any data that we hold about you that is inaccurate or incomplete;
5. The right to ask us to delete your data in certain circumstances;
6. The right to ask us to restrict our processing of your data in certain circumstances;
7. The right to object to our processing of your data in certain circumstances;
8. In certain circumstances, the right to require us to give you the data we hold about you in a structured, commonly used and machine-readable format so that you can provide the data to another data controller.
You can exercise any of the rights set out above, free of charge, by using any applicable methods set out in our communications with you, or by contacting us at chat@mothdrinks.com. In respect of certain of the rights referred to above, your right may be qualified by the GDPR or other laws, such as where we are processing data for in the context of actual or possible legal claims or in relation to legal privilege. We will discuss with you following your request any such qualifications, and any further information that we may need from you in order to fulfil your request. We may ask you to provide further information in order to confirm your identity. Please also note that if you submit unfounded or excessive (for example repetitive) requests to exercise any of these rights, we reserve the right to make a reasonable charge for providing the requested information or taking the requested action, or to decline your request.
You also have the right to lodge a complaint with the Information Commissioner’s Office (www.ico.org.uk) if you are concerned that we are not respecting your rights under Data Protection Law. The Information Commissioner’s Office is the authority in the UK which is responsible for overseeing the application of, and enforcing, Data Protection Law.Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.
10
ACCESSING YOUR INFORMATION
You have the right to obtain from us:
1.Confirmation as to whether we are processing (including holding) personal data about you; and
2. If we are processing personal data about you, you are entitled to be provided with:
3.Information as to the purposes for which we process the data;
4. Information as to the categories of the data that we are processing;
5. Information as to the recipients or categories of recipients to whom the data has or will be disclosed;
6. Information as to the envisaged period for which we will store the data, or as to the basis on which that period will be determined;
7. A copy of the data (further copies are available at a reasonable charge, which we will inform you of should you request further copies). Please note that this right is subject to the rights of others in relation to their own personal data, meaning that we cannot disclose data to you if it would involve disclosing data about someone else.
You can exercise your rights under this section 10 in the same way as specified at section 9 above.
11
OVERSEAS TRANSFERS OF DATA
Your Personal Information will be initially processed in the UK and the Republic of Ireland and may then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.
12
COOKIES
A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.
We use the following cookies to optimize your experience on our Site and to provide our services.
Cookies Necessary for the Functioning of the Store
_ab
Used in connection with access to admin.
_secure_session_id
Used in connection with navigation through a storefront.
cart
Used in connection with shopping cart.
cart_sig
Used in connection with checkout.
cart_ts
Used in connection with checkout.
checkout_token
Used in connection with checkout.
secret
Used in connection with checkout.
secure_customer_sig
Used in connection with customer login.
storefront_digest
Used in connection with customer login.
_shopify_u
Used to facilitate updating customer account information.
Reporting and Analytics
_tracking_consent
Tracking preferences.
_landing_page
Track landing pages
_orig_referrer
Track landing pages
_s
Shopify analytics.
_shopify_s
Shopify analytics.
_shopify_sa_p
Shopify analytics relating to marketing & referrals.
_shopify_sa_t
Shopify analytics relating to marketing & referrals.
_shopify_y
Shopify analytics.
_y
Shopify analytics.
The above is not an all-encompassing list and is subject to change. Please email chat@mothdrinks.com for a current list.
The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.
You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible or functioning.
You can choose whether or not to accept cookies through the pop up displayed on site upon opening the site, you can also amend your preference within the widget displayed on the bottom left of all pages.. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as www.allaboutcookies.org.
Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.
Our marketing emails may contain pixels (marketing industry standard technology similar to cookie technology). These pixels may collect information about you, such as tracking email opens (if you have images enabled in your email client/mailbox) and clicks. Links in emails may be proxied through a redirection service that records data for each link clicked. This can lead to a series of events including the recording of:
Event type (delivery, bounce, open, click, spam complaint, unsubscribe)
Email address of the recipient (if you will have provided)
IP address of the recipient (in the case of open and click)
GEO location based on IP address (city level) (in the case of open and click)
Device type (eg mobile/computer/tablet) and browser (eg chrome/safari/edge).
If you do not want this information to be collectable, you should disable and not open images in your email application.
11
Do Not Track
Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.
12
CHANGES
We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.Please therefore check back frequently to see any updates or changes.
15
CONTACT
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at chat@mothdrinks.com or by mail using the details provided below:
Moth Drinks, Wisteria Grange Barn Pikes End, Pinner, London, England, HA5 2EX
Last updated: 20/03/2025
If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority, or our supervisory authority here: https://ico.org.uk/make-a-complaint/