UK delivery only · free from £50 · Free collection from Netherfield House, Strathaven

Free UK delivery from £50 · Free collection
Whisky

Privacy policy

PRIVACY POLICY

INTRODUCTION

Welcome to Netherfield Bond Ltd’s privacy policy. Netherfield Bond Ltd respects your privacy and is committed to protecting your personal data. This policy will inform you as to how we look after your personal data when you visit our website (https://thenetherfield.com) and tell you about your privacy rights and how the law protects you.

This policy applies to data collected when you: purchase products, subscribe to marketing, book a tour, or interact with our website.

1: IMPORTANT INFORMATION AND WHO WE ARE

Purpose of this Privacy Policy

This policy supplements other notices and policies and is not intended to override them. It is important that you read this policy so that you are fully aware of how and why we are using your data.

  • Children's Data: This website and our marketing communications (including our SMS lists) are strictly intended for individuals of legal drinking age in their country of residence. We do not knowingly collect personal data relating to individuals under the legal drinking age. If you subscribe to our SMS marketing, you affirm that you meet these eligibility requirements.
  • Controller: Netherfield Bond Ltd is the data controller and is responsible for your personal data (referred to as "Netherfield Bond," "we," "us," or "our").

Contact Details

We have appointed a Data Privacy Contact responsible for overseeing questions regarding this policy.

Full name of legal entity: Netherfield Bond Ltd
Email address: info@thenetherfield.com
Postal address: Coachmans Cottage, Netherfield House, Glassford, Strathaven, ML10 6TB
Telephone number: +44 141 255 1848

Complaints: If you are unhappy with how we have handled your personal data, you have the right to complain to us. Email info@thenetherfield.com with "Privacy complaint" in the subject line, use the contact form on our website, or write to us at the postal address above. We will acknowledge your complaint within 30 days and tell you the outcome without undue delay. You also have the right to complain to the Information Commission (the ICO), the UK regulator for data protection (ico.org.uk). We would appreciate the chance to deal with your concerns first.

Changes to the Policy

This version was last updated on 28 October 2026. It is important that the personal data we hold about you is accurate and current.

  • Third-party links: This website may include links to third-party websites. We do not control these websites and are not responsible for their privacy statements.

2: THE DATA WE COLLECT ABOUT YOU

Personal data means any information from which a person can be identified. We may collect, use, store, and transfer the following kinds of personal data:

  • Identity Data: First name, last name and title and, only if we need to check your age, your date of birth and the details on your proof of age.

  • Contact Data: Billing address, delivery address, email address, and telephone numbers.
  • Financial Data: Bank account and payment card details (handled securely by our payment processor).
  • Transaction Data: Details about payments, purchases, and orders you have made.
  • Technical Data: Internet protocol (IP) address, login data, browser type, location, operating system, and other technology used to access the website.
  • Profile Data: Your username, purchases, interests, preferences, and feedback.
  • Usage Data: Information about how you use our website and products.
  • Marketing and Communications Data: Your preferences in receiving marketing from us.

We also collect Aggregated Data (statistical/demographic data), which does not directly identify you. We do not collect Special Categories of Personal Data (e.g., race, health, political opinions).

If you fail to provide personal data: Where we need to collect data by law or under the terms of a contract, and you fail to provide it, we may have to cancel the product or service you have purchased.

3: HOW IS YOUR PERSONAL DATA COLLECTED?

We use different methods to collect data:

Direct interactions (Data provided by you)

This includes data you provide when you fill in forms or correspond with us:

  • Purchase our products (Identity, Contact, Financial Data).

  • Subscribe to receive offers or our newsletter (Contact Data).

  • Request marketing.

  • Give us feedback or contact us.

Automated technologies or interactions

  • As you interact with our website, we automatically collect Technical Data using cookies and similar technologies. For more about cookies and how to refuse them, see Cookies in section 4 below.

Third parties or publicly available sources

We receive data from:

  • Analytics Providers (e.g., Google, Meta).
  • Payment and Delivery Services (e.g., Shopify).
  • Publicly Available Sources (e.g., Companies House).

4: HOW WE USE YOUR PERSONAL DATA

We use your personal data only where the law allows. This is what we use it for, and the legal basis for each purpose:

  • To take, process and deliver your order or tour booking, take payment, and deal with returns and questions: performance of a contract with you.

  • To keep tax, VAT and accounting records: legal obligation.

  • To check your age where needed (see Proof of age below): legitimate interests.

  • To prevent fraud and keep our website secure: legitimate interests (protecting our customers and our business).

  • To invite you, after we have sent your order, to review it on Trustpilot: legitimate interests (hearing what our customers think). You can ask us to stop these invitations at any time.

  • To collect and publish product reviews on our website (Judge.me): legitimate interests (hearing what our customers think and showing it to other customers).

  • To send you our newsletter by email or news and offers by text message: consent, which you give when you sign up on our website or tick the box at checkout.

  • To remind you by email about items left in a checkout you did not complete: consent. We send these reminders only if you have agreed to receive marketing emails from us.

  • To understand how our website is used, and to measure and show our adverts on Google and Meta (Facebook, Instagram): consent, which you give by clicking Accept in our cookie banner (see Cookies below).

Proof of age

The law does not allow us to sell alcohol to anyone under 18. If we have reason to doubt that you are 18 or over, we may ask you to show or send us proof of age (such as a passport or photo driving licence) before we dispatch your order. We use it only to check your age. Our legal basis is our legitimate interest in making sure that we do not sell alcohol to anyone under 18, which is a criminal offence under section 102 of the Licensing (Scotland) Act 2005. If you send us a copy, you may cover everything except your photo, your name and your date of birth. We delete the copy as soon as we have checked it and keep only a note on your order that your age was checked, with the date and the type of document.

Marketing

If you have agreed to hear from us, we use your contact details, what you have bought from us and, if you clicked Accept in our cookie banner, what you looked at on our website to choose which news and offers to send you. You can unsubscribe at any time using the link in any email, by replying STOP to any text message, or by emailing info@thenetherfield.com. Unsubscribing does not affect messages about an order you have placed.

Your right to object to marketing: You can object at any time to our use of your personal data for direct marketing, including the profiling described above. If you object, we will stop.

  • Cookies: Essential cookies keep the shop and your basket working and remember your answer to our age check. Analytics and advertising cookies (Shopify, Google and Meta) and Mailchimp cookies are set only if you click Accept in our cookie banner; if you click Decline, they are not set. Tour bookings are handled by FareHarbor, which sets its own cookies (for example, for the booking calendar on our Visit page). You can set your browser to refuse all or some cookies. If you disable cookies, some parts of this website may become inaccessible.

  • SMS Marketing Opt-Out & Help: By opting into our SMS communications, you agree to receive recurring promotional and transactional text messages. Message and data rates may apply. Message frequency varies. To stop receiving SMS messages, reply STOP at any time. For assistance, reply HELP or contact us at info@thenetherfield.com.

5: WHO WE SHARE YOUR PERSONAL DATA WITH

We share your personal data only as needed for the purposes in section 4:

  • Shopify and our payment providers: run our online shop and checkout, hold customer and order records, and process card payments. Shopify also uses some data for its own purposes, such as fraud prevention, under its own privacy policy.

  • Royal Mail (or occasionally another courier): delivers your order. We give them your name, your delivery address and the contact details needed for delivery.

  • Mailchimp (Intuit): sends our emails and text messages to people who have agreed to receive them and, only if you click Accept in our cookie banner, receives information about your visits to our website.

  • FareHarbor: takes bookings and payments for our tours.

  • Trustpilot: sends you an invitation to review your order and publishes reviews.

  • Judge.me: collects and publishes the product reviews on our website. It receives details of your orders from our shop (such as your name, email address and the products you bought) and any review you leave.

  • Other software we use to run the shop, such as stock and order management and event ticketing software: receives the details it needs to provide its service to us.

  • Google and Meta (Facebook, Instagram): only if you click Accept in our cookie banner. They receive information about your visit and any purchase so that we can measure and show our adverts, and they may also use it for their own purposes under their own privacy policies. For the Meta pixel, we and Meta are joint controllers for collecting this information on our website and sending it to Meta; Meta is responsible for what it does with it afterwards.

  • WhatsApp (Meta): if you choose to message us on WhatsApp.

  • Professional advisers (accountants, lawyers), HM Revenue & Customs, the licensing authority and the police: where the law requires it, or to deal with a legal claim.

  • A buyer of our business: if we sell, transfer or merge all or part of it.

Our service providers may use your personal data only on our instructions, except where we say above that they also use it for their own purposes.

Critical SMS Privacy Protection: Notwithstanding anything to the contrary in this Privacy Policy, mobile phone numbers and SMS consent data collected for the purposes of text message marketing will not be shared, sold, rented, or leased to any third parties or affiliates for their own marketing or promotional purposes. This exclusion strictly applies to SMS opt-in data and consent records; however, such data may be shared securely with our trusted digital platform partners acting solely on our behalf as data processors to facilitate message delivery and service analytics.


6: INTERNATIONAL TRANSFERS

Some of these providers store or access personal data outside the UK, for example in the USA, Canada and the European Union. Transfers to the European Union and Canada are covered by UK adequacy regulations. For providers in the USA, we rely on the safeguards in their data protection terms: the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge") where the provider is certified under it, and otherwise the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. You can ask us for a copy of the safeguards for any transfer by emailing info@thenetherfield.com.

7: DATA SECURITY AND RETENTION

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We also limit access to your data to only those employees, agents, and contractors who have a business need to know. We have procedures in place to deal with any suspected personal data breach.

Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including satisfying any legal, regulatory, or tax requirements.

  • Legal Obligation: By law, we have to keep basic information about our customers (Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for tax purposes.
  • Anonymisation: We may anonymise your personal data for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

8: YOUR LEGAL RIGHTS

Under data protection laws, you have the following rights in relation to your personal data:

  • Right of Access: Request access to your personal data (Data Subject Access Request).
  • Right to Correction: Request correction of inaccurate data we hold about you.
  • Right to Erasure: Request erasure (deletion) of your personal data.
  • Right to Object: Object to our use of your data where we rely on legitimate interests, and at any time to direct marketing, including profiling.

  • Right to Restriction: Request restriction of processing (suspend the use of your data).
  • Right to Portability: Request the transfer of your personal data to you or a third party.
  • Right to Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your personal data.

No Fee Usually Required: You will not have to pay a fee to exercise these rights, although we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

Time Limit to Respond: We try to respond to all legitimate requests within one month.

NETHERFIELD BOND LTD, LAST UPDATED 28 October 2026