top of page

Privacy Policy

​

1. Introduction

Welcome to Lagom Spirits. We are an independent UK spirits bottler dedicated to delivering unique and accessible spirits.

This Privacy Policy explains how Cask Med Ltd (trading as Lagom Spirits) collects, uses, stores, and protects your personal data when you visit our website at www.lagomspirits.com (the “Site”), purchase our bottlings, subscribe to our communications, or interact with us.

We handle your personal data in strict compliance with UK Data Protection Legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​

2. Data Controller & Contact Details

Cask Med Ltd is the Data Controller responsible for your personal data.

 

3. What Personal Data We Collect

Depending on how you interact with our Site and services, we collect and process the following categories of personal information:

  • Identity Data: Name, title, date of birth (used primarily for age verification required for alcohol retail).

  • Contact Data: Billing address, delivery address, email address, and phone number.

  • Transaction & Purchase Data: Details of products you have purchased from us, order histories, and delivery instructions.

  • Payment Data: Payment transactions made via Credit/Debit Cards, Apple Pay, or Google Pay. Note: Payment card details are processed directly by our encrypted payment gateways (e.g., Stripe, PayPal, or Wix Payments); we do not store full payment card details on our servers.

  • Profile & Niche Preference Data: Information you share regarding product preferences, tasting notes, cigar pairing interests, or communication choices.

  • Enquiry & Communications Data: Any information supplied when filling out a contact form, emailing us directly, or interacting with our social media accounts (Instagram, TikTok).

We do not intentionally collect any "special category" data (e.g., health, political, or religious data) or data from individuals under the legal drinking age.

 

4. How We Use Your Data & Our Legal Bases

We process your personal data under the following lawful bases under UK GDPR:

  1. Performance of a Contract:

    • To process, fulfil, and deliver your orders for spirits or merchandise.

    • To communicate transactional updates, invoice details, and dispatch information.

    • To manage your online retail customer account.

  2. Legal Compliance:

    • To verify that you meet the legal drinking age in your country/jurisdiction before processing spirit sales.

    • To keep accurate accounting, financial, and tax records (as required by UK law).

  3. Legitimate Interests:

    • To respond to enquiries submitted via email or contact forms.

    • To optimize our retail operations, audit site security, and prevent fraudulent orders.

    • To conduct B2B outreach to trade partners (bars, pubs, spirit retailers, cigar lounges, and hotels).

  4. Consent:

    • To send you email updates, newsletters, and early release announcements regarding upcoming single cask outturns.

    • You can withdraw your consent at any time by clicking the "Unsubscribe" link in any marketing email or contacting us at hello@lagomspirits.com.

 

5. Disclosure of Your Personal Data

We do not sell, rent, or trade your personal data to third parties. We only share your data with trusted service providers strictly as necessary to operate our business:

  • E-Commerce & IT Platforms: Wix.com for website hosting, database administration, and e-commerce infrastructure.

  • Payment Service Providers: Payment processors for secure, encrypted transaction execution.

  • Logistics & Courier Services: Direct courier and postal partners to deliver your purchased bottlings to your address.

  • Marketing & Email Platforms: Email distribution platforms used to manage release communications.

  • Legal & Regulatory Authorities: Statutory bodies, law enforcement, or tax authorities where required by law.

All third-party service providers are contractually required to keep your data secure, handle it confidentially, and process it only in accordance with our instructions.

 

6. International Data Transfers

While Lagom Spirits is based in the UK, some of our software suppliers, hosting platforms (such as Wix), or international delivery couriers may process data outside the UK or European Economic Area (EEA).

Where international transfers occur, we ensure appropriate safeguards are in place—such as standard contractual clauses (SCCs) approved by the Information Commissioner’s Office (ICO)—to ensure your data receives the same standard of protection as in the UK.

Note for B2B/International expansion: As we expand distribution into international markets (including trade partners in Asia such as Vietnam and Thailand), order fulfilment data will be transferred to local delivery couriers solely to complete contract delivery.

 

7. Data Retention

We will only hold your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, tax, or reporting obligations:

  • Order & Financial Records: Retained for up to 6–7 years following a transaction in compliance with UK tax regulations.

  • Marketing Communications: Retained until you opt out or withdraw consent.

  • General Enquiries: Retained for as long as necessary to address your query and up to 2 years thereafter.

 

8. Data Security

We have put in place appropriate technical and organizational measures to prevent your personal data from being accidentally lost, accessed, altered, or disclosed without authorization. Access to your personal data is restricted strictly to authorized staff and service providers who have a business need-to-know.

 

9. Your Legal Rights

Under UK Data Protection Law, you have rights regarding your personal data:

  • Right of Access: You can request a copy of the personal data we hold about you (a Subject Access Request).

  • Right to Rectification: You can ask us to correct inaccurate or incomplete data.

  • Right to Erasure ("Right to be Forgotten"): You can ask us to delete your personal data under certain conditions.

  • Right to Restrict or Object: You can object to our processing based on legitimate interests or request restricted handling.

  • Right to Data Portability: You can request that we transfer your provided data to another provider in a structured format.

  • Right to Withdraw Consent: Where processing relies on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at hello@lagomspirits.com.

 

10. Complaints & Regulatory Body

If you have concerns about how we handle your personal data, we encourage you to contact us directly so we can resolve the issue.

You also have the right to lodge a formal complaint with the UK data protection supervisory authority:

  • Information Commissioner’s Office (ICO)

  • Website: www.ico.org.uk

  • Helpline: 0303 123 1113

 

11. Amendments to This Privacy Policy

We may review and update this Privacy Policy periodically to reflect changes in our business or legal requirements. Updates will be posted on this page with a revised "Last Updated" date.

​

Last Updated: 26 July 2026

bottom of page