Privacy Policy
1. Introduction
McLellan’s of Ludlow (“we”, “our” or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website, access age-restricted pages, or purchase our products. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable online safety regulations.
2. Information We Collect
- Contact & Order Details: Name, email address, phone number, and postal address.
- Payment Information: Financial and billing details necessary to fulfill orders.
- Age & Identity Verification Data: Date of birth, age verification confirmation status, and (where applicable) identity checks required to access age-restricted pages or purchase age-restricted goods.
- Communications: Any information you provide when contacting us or subscribing to marketing communications.
- Technical Data: IP address, browser type, device information, and browsing activity collected through cookies and session logs.
3. How We Use Your Information
Your personal data will be processed for the following purposes and under the corresponding legal bases under UK GDPR:
- Processing & Order Fulfillment: To fulfill orders and deliver products (Performance of Contract).
- Age Verification & Compliance: To verify your age prior to granting access to age-restricted pages or processing orders for age-restricted items (Legal Obligation and Legitimate Interests to ensure child safety and regulatory compliance).
- Customer Communication: To respond to enquiries and send order updates (Performance of Contract / Legitimate Interests).
- Site Security & Safety: To detect and prevent fraud, unauthorized access, or attempts to bypass age gates (Legitimate Interests).
We retain your personal data only as long as necessary to fulfill these purposes or as required by law.
4. Age Verification & Third-Party Processors
- Age Verification Checks: To comply with UK legal standards regarding age-restricted content and products, we process your date of birth or status indicators returned from age checks.
- Data Minimisation: Where third-party age verification providers or age checks are utilized, we prioritize data minimisation. We store verification pass/fail status flags rather than retaining raw copies of personal identity documents on our core web servers.
- Data Sharing: We do not sell or rent your personal data. We share personal data only with trusted service providers—such as delivery couriers, payment gateway providers, and certified age verification processors—under strict data processing and confidentiality agreements.
5. Children’s Privacy
Our age-restricted pages and products are strictly intended for individuals aged 18 and over. We do not knowingly collect or maintain personal data from individuals under the minimum age required for restricted areas. If we become aware that a minor has provided false information to bypass age gating, we will take immediate steps to restrict access and remove associated personal data where legally permissible.
6. Your Rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you.
- Request the correction of inaccurate data.
- Request erasure of your data in certain circumstances.
- Object to or restrict the processing of your data.
- Withdraw consent at any time where processing relies on consent.
To exercise any of these rights, please contact us using the details in Section 10 below.
7. Cookies
Our website uses cookies and similar technologies to support site functionality, manage session states for restricted content, and improve your browsing experience. You can manage cookie preferences through your browser settings.
8. Security
We implement appropriate technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or loss.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or relevant legal obligations. Any updates will be published on this page with a revised effective date.
