Privacy Statement

Last updated: 17 August 2026

St. Patrick’s Distillery Ltd. (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Statement explains how we collect, use, store and protect personal data when you visit our website at www.stpatricksdistillery.ie, contact us, purchase products or services from us, subscribe to our communications, or otherwise interact with our business.

It also explains your rights in relation to your personal data.

1. Who we are

For the purposes of applicable data protection law, the data controller is:

St. Patrick’s Distillery Ltd.
Unit 105 St Patrick’s Mills, Douglas, Ireland T12 YE0C
Email: info@stpatricksdistillery.ie

If you have any questions about this Privacy Statement or how we use your personal data, please contact us using the details above.

2. What personal data we collect

The personal data we collect will depend on how you interact with us and may include:

Identity and contact information

This may include:

your name;
postal or delivery address;
billing address;
email address;
telephone number; and
company or organisation details, where applicable.

Order and transaction information

If you purchase products or services from us, we may collect information relating to your order, including:

products purchased;
order value;
billing and delivery information;
transaction details;
payment status;
returns, refunds or complaints; and
information required to process and fulfil your order.

Payment card details may be processed directly by our payment service provider rather than being stored by us.

Age or eligibility information

Because some of our products may be subject to minimum legal age requirements, we may collect or process information necessary to confirm that you meet applicable age requirements.

This may include an age confirmation made through our Website or, where necessary, information used by us or our delivery or verification providers to verify age or eligibility.

Communications

If you contact us, we may collect:

your name and contact details;
the content of your enquiry;
correspondence between you and us;
customer service records; and
any other information you choose to provide.

Marketing preferences

If you subscribe to our newsletter or other marketing communications, we may collect:

your name;
email address;
marketing preferences;
subscription status; and
information about how you interact with our marketing communications, where permitted.

Website and technical information

When you use our Website, we may collect certain technical information such as:

IP address;
browser type and version;
device type;
operating system;
approximate location derived from technical information;
pages visited;
date and time of visits;
referring website;
website interactions; and
cookie or similar technology identifiers.

For more information about our use of cookies and similar technologies, please see our [Cookie Policy – insert link].

Business and supplier information

If you interact with us as a supplier, distributor, retailer, business customer or other commercial contact, we may process:

your name;
job title;
organisation;
business contact details;
correspondence;
contractual information; and
payment or transaction information.

3. How we collect personal data

We may collect personal data:

Directly from you, for example when you:

make a purchase;
create an account;
complete a form;
contact us;
subscribe to marketing communications;
enter a promotion or competition;
attend an event or tasting;
communicate with our customer service team; or
otherwise provide information to us.

Automatically, when you use our Website, including through cookies and similar technologies.

From third parties, where appropriate, such as:

payment service providers;
e-commerce providers;
delivery or logistics providers;
age-verification providers;
analytics providers;
advertising or social media platforms;
distributors or commercial partners; and
publicly available sources.

4. How and why we use your personal data

We only process personal data where we have an appropriate legal basis for doing so.

Depending on the circumstances, we may process personal data for the following purposes:

Purpose	Types of information	Legal basis
Processing and fulfilling purchases or orders	Identity, contact, order and transaction information	Performance of a contract
Arranging delivery of products	Identity, address and order information	Performance of a contract
Processing payments, refunds and returns	Identity, transaction and order information	Performance of a contract and/or legal obligations
Responding to enquiries and customer service requests	Identity, contact and communications information	Performance of a contract, steps taken at your request before entering into a contract, and/or our legitimate interests
Operating, maintaining and securing our Website	Technical and usage information	Our legitimate interests and, where required, consent
Preventing fraud, misuse or security incidents	Identity, transaction and technical information	Our legitimate interests and/or legal obligations
Meeting legal, tax, accounting and regulatory obligations	Relevant identity, transaction and business information	Compliance with legal obligations
Confirming age or eligibility where required	Relevant identity or age-related information	Compliance with legal obligations and/or our legitimate interests
Sending newsletters and promotional communications	Identity, contact and marketing information	Consent or another lawful basis where permitted by applicable law
Measuring and improving our Website	Technical, cookie and usage information	Consent where required
Managing relationships with suppliers and business partners	Identity, business and transaction information	Performance of a contract and/or our legitimate interests
Establishing, exercising or defending legal claims	Information relevant to the claim	Our legitimate interests and/or legal obligations

Where we rely on legitimate interests, those interests may include operating and improving our business, providing customer service, protecting our Website and business from fraud or misuse, managing commercial relationships and establishing or defending our legal rights.

We will consider your rights and interests when relying on legitimate interests as a legal basis.

Where we rely on consent, you may withdraw your consent at any time.

5. Marketing communications

Where permitted, we may use your contact details to send you information about our products, news, promotions, events or other updates that we believe may be of interest to you.

Where consent is required, we will only send such communications after obtaining your consent.

You can unsubscribe from marketing communications at any time by:

using the unsubscribe link included in our marketing emails; or
contacting us at [CONTACT / MARKETING EMAIL].

Withdrawing your consent to marketing will not affect other communications that we may need to send to you, such as communications relating to an order or customer service request.

6. Who we share personal data with

We may share personal data with carefully selected third parties where necessary for the purposes described in this Privacy Statement.

These may include:

website hosting and IT service providers;
e-commerce platform providers;
payment processors;
delivery and logistics providers;
age-verification providers;
email and marketing service providers;
analytics providers;
professional advisers, including accountants, auditors, insurers and legal advisers;
distributors, retailers or other business partners where appropriate;
fraud prevention and security providers;
public authorities or regulators where required by law; and
prospective purchasers, investors or advisers in connection with a potential sale, restructuring or transfer of all or part of our business.

Where a third party processes personal data on our behalf, we require appropriate safeguards to protect that information.

We do not disclose personal data to third parties unless there is a legitimate reason for doing so.

7. International transfers

Some of the service providers we use may process personal data outside Ireland or the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the information receives an appropriate level of protection in accordance with applicable data protection law.

Depending on the circumstances, these safeguards may include:

a decision by the European Commission that the relevant country provides an adequate level of protection;
approved contractual safeguards, such as Standard Contractual Clauses; or
another legally permitted transfer mechanism.

You may contact us using the details in this Privacy Statement if you would like further information about the safeguards applicable to international transfers of your personal data.

8. How long we keep personal data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to comply with legal, regulatory, tax, accounting or reporting requirements and to establish or defend legal claims.

Retention periods vary depending on the nature of the information and why it is being processed.

When deciding how long to retain personal data, we may consider:

the amount, nature and sensitivity of the information;
the purpose for which it was collected;
whether we still require the information for that purpose;
applicable legal or regulatory requirements;
contractual requirements; and
potential legal claims.

When personal data is no longer required, we will delete it, anonymise it or otherwise securely dispose of it, as appropriate.

9. How we protect personal data

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, destruction or misuse.

These measures may include appropriate access controls, technical security measures, staff procedures and security arrangements with relevant service providers.

While we take appropriate measures to protect personal data, no internet transmission or electronic storage system can be guaranteed to be completely secure.

10. Your data protection rights

Depending on the circumstances and applicable law, you may have the right to:

Right of access

You may request confirmation as to whether we process your personal data and request a copy of the personal data we hold about you.

Right to rectification

You may ask us to correct personal data that is inaccurate or complete information that is incomplete.

Right to erasure

In certain circumstances, you may ask us to delete your personal data.

This right is not absolute, and we may be required or permitted to retain certain information.

Right to restriction of processing

In certain circumstances, you may ask us to restrict the way in which we process your personal data.

Right to data portability

Where applicable, you may have the right to receive certain personal data in a structured, commonly used and machine-readable format and to have that information transmitted to another organisation.

Right to object

Where we process your personal data on the basis of legitimate interests, you may have the right to object to that processing.

You may also object to the use of your personal data for direct marketing purposes.

Right to withdraw consent

Where we rely on your consent to process personal data, you may withdraw that consent at any time.

Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

Right to complain

You have the right to lodge a complaint with the Data Protection Commission, which is the supervisory authority for data protection in Ireland.

We would appreciate the opportunity to address any concerns you may have about our use of your personal data, so you are welcome to contact us first.

Some of these rights are subject to conditions, limitations or exemptions under applicable law.

11. Exercising your rights

To exercise any of your data protection rights, please contact us at:

Email: info@stpatricksdistillery.ie
Post: St. Patrick’s Distillery Ltd., Unit 105 St. Patrick’s Mills, Douglas T12 YE0C Ireland

Please provide sufficient information to allow us to identify you and understand your request.

We may need to request additional information where reasonably necessary to verify your identity before fulfilling a request.

12. Cookies and similar technologies

Our Website uses cookies and similar technologies for purposes such as operating the Website, remembering preferences, measuring Website performance and, where applicable and with appropriate consent, analytics and marketing.

13. Third-party websites and services

Our Website may contain links to websites, social media platforms or services operated by third parties.

We are not responsible for the privacy practices of those third parties. If you follow a link to another website or service, we recommend reviewing that organisation’s privacy information before providing personal data.

14. Social media

If you interact with us through social media platforms, such as by following our account, sending us a message or commenting on our content, we may receive information about you from the relevant platform.

Your use of social media platforms is also subject to the privacy policies and terms of those platforms.

15. Children and age-restricted products

Our products may be subject to minimum legal age requirements.

Our Website and marketing activities are not intended to encourage the purchase or consumption of age-restricted products by persons who are not legally permitted to purchase or consume them.

Where appropriate, we may use age-confirmation or age-verification measures in connection with access to certain Website content or the purchase or delivery of products.

If we become aware that personal data has been collected in circumstances where it should not have been collected, we will take appropriate steps in accordance with applicable law.

16. Automated decision-making

If we use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects, we will provide you with the information and safeguards required by applicable data protection law.

17. Changes to this Privacy Statement

We may update this Privacy Statement from time to time to reflect changes in:

our business activities;
our Website or services;
the way we process personal data;
the service providers we use; or
applicable legal or regulatory requirements.

The latest version will be published on this page and the “Last updated” date at the top of the Statement will be revised accordingly.

We encourage you to review this Privacy Statement periodically.