Skip to content
My cask

Privacy Policy

Who we are

Our website address is: https://highcoastwhisky.se.

We are High Coasy Distillery, a company registered in Sweden, (“we”, “our”, “us”). We act as the Data Controller for the processing of your personal data related to newsletter subscriptions and marketing communications.

If you have any questions about this Privacy Policy, or about how we handle your personal data, you can contact us at: dataskydd@highcoastwhisky.se, Sörviken 140, 872 96 Bjärtrå, Sweden

If we operate local subsidiaries or branches in EU/EEA member states, your data may be handled by the relevant local entity in accordance with applicable national laws and this Privacy Policy.

Scope and applicability

This Privacy Policy applies to all visitors and subscribers within the European Union (EU) and European Economic Area (EEA) who register for our newsletter or consent to receive marketing communications, regardless of the website language version they use.

It complements any country-specific privacy notices available in local languages.

What data we collect

When you subscribe to our newsletter or consent to receive marketing materials, we may collect and process the following categories of data:

  • Contact details: e-mail address (mandatory), name (optional)

  • Consent information: date, time, IP address, and method of consent

  • Language and region: to send newsletters in your preferred language

  • Marketing interaction data: e-mail opens, link clicks, and other engagement metrics (for performance analytics)

  • Technical information: device type, browser, and IP address (for security and compliance purposes)

Why we collect your data

We process your personal data for the following purposes:

  • To send you newsletters, updates, offers, and marketing content based on your consent

  • To personalize communications according to your selected language and location

  • To improve our marketing communication based on aggregated engagement statistics

  • To ensure compliance with applicable legal and regulatory obligations

  • To maintain proof of your consent (for GDPR compliance)

Legal basis for processing

Our processing of your personal data is primarily based on your explicit consent under Article 6(1)(a) of the General Data Protection Regulation (GDPR) and, where relevant, Article 7 of the ePrivacy Directive (implemented through national laws). You may withdraw your consent at any time.In certain cases, we may process limited personal data to comply with legal obligations (Article 6(1)(c) GDPR) or to protect legitimate interests, such as defending against legal claims (Article 6(1)(f) GDPR).

How we share your data

We will never sell your personal data. We may share your data only with trusted third-party service providers who assist us in delivering ournewsletters and managing analytics. These include:

  • E-mail marketing platform (HubSpot)

  • IT hosting and website management providers

  • Legal and compliance partners (if required by law)

All such partners act as Data Processors under Article 28 GDPR and are contractually bound to process your data only in accordance with our instructions, using appropriate technical and organizational security measures.

Where personal data is transferred outside the EU/EEA, we ensure that such transfers are based on adequate safeguards (e.g., Standard Contractual Clauses, adequacy decisions, or binding corporate rules).

Cookies and tracking

If our newsletters or website use cookies or similar technologies for analytics or tracking, this will be explained in our Cookie Policy. You can manage or withdraw your cookie preferences at any time through the cookie consent banner on our website.

Data retention

We retain your personal data only as long as necessary to fulfill the purposes described above or as required by law.

If you unsubscribe or withdraw your consent, your personal data will be promptly deleted or anonymized, unless retention is required for legal reasons (e.g., proof of consent for GDPR compliance). Typical retention period for newsletter data: 12–24 months after the last interaction or until consent withdrawal.

Your rights under EU law

As an EU/EEA data subject, you have the following rights:

  • Access – to obtain a copy of your personal data

  • Rectification – to correct inaccurate or incomplete data

  • Erasure (“right to be forgotten”) – to request deletion of your data

  • Restriction of processing – to limit processing under certain conditions

  • Data portability – to receive your data in a machine-readable format

  • Objection – to object to processing for marketing purposes

  • Withdrawal of consent – to revoke your consent at any time

To exercise any of these rights, contact us at dataskydd@highcoastwhisky.se.

You also have the right to lodge a complaint with your national Data Protection Authority (DPA).

For example:

  • Sweden – Integritetsskyddsmyndigheten (IMY)

  • Germany – Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)

  • France – Commission Nationale de l’Informatique et des Libertés (CNIL)

  • Ireland – Data Protection Commission (DPC)

Multilingual communication

We provide this Privacy Policy in English and, where possible, in the local languages of the countries where we operate.

In case of discrepancies between translations, the English version shall prevail, unless otherwise required by local law.

Security of your data

We use appropriate technical and organizational measures to protect your personal data, including encryption, secure servers, limited access, and staff confidentiality obligations.

We regularly review and update our security measures to ensure ongoing compliance with GDPR standards.

Updates to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website, and significant changes will be communicated to subscribers via e-mail.

Last updated: 13 january 2026