Effective Date: 1 October 2024

Punjab IPA Beer Company Ltd and its affiliates (“Punjab IPA,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and handle your personal information when you use our website, purchase our products, or interact with us in any way.

Please read this Privacy Policy carefully. By using our website or purchasing our products, you agree to the practices described herein.

1. Who We Are

Punjab IPA Beer Company Ltd is registered in the United Kingdom.

Punjab IPA is a registered trademark of Punjab IPA Beer Company Ltd.

2. Information We Collect

Personal Information

We may collect the following personal information from you:

• Name, postal address, and billing address
• Email address
• Telephone number
• Date of birth or age verification (to confirm you are 18 or over)
• Payment information (e.g. card number, expiry date, and security code — processed securely by our payment provider)
• Order history and transaction details
• IP address and geolocation data
• Marketing preferences
• Any information you provide when contacting us, including messages and enquiries
• Social media account details, where you tag us or submit content to our pages

Automatically Collected Information

When you visit our website, we may automatically collect technical data such as your browser type, operating system, referring URLs, and pages visited. This is collected via cookies and similar tracking technologies.

3. How We Use Your Information

We may use the information we collect for the following purposes:

• To process and fulfil your orders
• To verify that you are aged 18 or over, as required by UK law for the purchase of alcohol
• To create and manage your account
• To communicate with you about your orders, queries, and our products
• To send you marketing communications, where you have consented or we have a legitimate interest to do so
• To improve and personalise our website and services
• To comply with our legal obligations
• To detect and prevent fraud
• For analytics and business improvement purposes

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases for processing your personal data:

• Performance of a contract — to fulfil orders and provide our services
• Legitimate interests — for fraud prevention, analytics, and improving our services
• Consent — for marketing communications and optional cookies
• Legal obligation — to comply with applicable law, including age verification for alcohol sales

5. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience on our website. These may include:

• Essential cookies — required for the website to function
• Analytics cookies — such as Google Analytics, to understand how visitors use our site
• Marketing cookies — to deliver relevant advertising and track campaign effectiveness

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

6. Disclosure of Your Information

We do not sell your personal data. We may share your information with:

• Service providers — including payment processors, delivery companies, email marketing platforms, and IT service providers, who process data on our behalf
• Legal authorities — where required by law, regulation, or court order
• Business transfers — in the event of a merger, acquisition, or sale of assets

All third-party service providers are contractually required to handle your data in compliance with UK data protection law.

7. International Data Transfers

Where we transfer your personal data outside the United Kingdom, we ensure appropriate safeguards are in place, including the use of standard contractual clauses or other lawful transfer mechanisms approved by the UK Information Commissioner’s Office (ICO).

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Transaction records are typically retained for 7 years in accordance with UK tax law.

9. Your Rights

Under UK GDPR, you have the following rights with respect to your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of your data, subject to certain exceptions
• Right to restrict processing — to request that we limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making — we do not use solely automated decision-making that produces legal or similarly significant effects

To exercise any of these rights, please contact us at info@punjabipa.com. We will respond within one calendar month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

10. Age Restriction

Our products are alcoholic beverages and may only be purchased by individuals aged 18 or over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have collected data from a minor, we will delete it promptly.

11. Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. However, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

12. Marketing

Where you have consented to receive marketing communications, we may contact you by email or SMS about our products and promotions. You may withdraw your consent at any time by:

• Clicking the “unsubscribe” link in any marketing email
• Contacting us at info@punjabipa.com

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: