Privacy Policy
How we handle personal data when you read, contact, or contribute to Booze.co.uk.
Last updated: 2 May 2026.
Who We Are
Booze.co.uk is operated by Alcohol Ltd. We publish trade news, analysis, events information, corrections, newsletters, and editorial resources for readers aged 18 and over. For privacy questions, requests, or complaints, email privacy@booze.co.uk.
This policy explains how we handle personal data under the UK GDPR and Data Protection Act 2018 when you use the public website, contact the editorial team, submit information, use the editor area, or interact with analytics and security services.
Data We Receive
We may receive contact details, correspondence, article feedback, correction requests, complaints, event submissions, press releases, contributor biographies, author social links, images, source material, and any other information you choose to send us. If you use the editor area, we process account identifiers, login records, role information, content changes, and audit records needed to operate the CMS.
We also receive limited technical data when the site is loaded, including IP-derived region, browser, device type, referring page, pages viewed, click events, search use, article share events, event registration link clicks, form submissions, scroll depth, performance signals, and security logs. Some of this data is collected in aggregate by Google Analytics, Vercel Analytics, Supabase, hosting infrastructure, and browser storage.
How We Use Data
We use data to operate the website, respond to enquiries, maintain editorial records, investigate corrections, protect the site, and understand aggregate audience performance. We also use data to verify editor access, prevent misuse, diagnose errors, improve navigation, understand which coverage readers value, and comply with legal or regulatory obligations.
Our usual lawful bases are legitimate interests, consent, contract, compliance with legal obligations, and, where applicable, establishment or defence of legal claims. For analytics cookies and similar non-essential storage, we ask for consent through the cookie preference banner before granting analytics storage.
Analytics
We use Google Analytics and Vercel Analytics to understand readership, technical performance, and high-value editorial interactions. Google Analytics is configured with Consent Mode defaults so analytics storage is denied until you accept analytics cookies. When analytics is enabled, we track page views, outbound links, article shares, event registration clicks, form submissions, button clicks, and scroll depth. We do not use analytics to sell reader personal data.
Vercel Analytics helps us understand aggregate performance and page usage. Supabase is used for CMS data, editor authentication, and local sample data during development. These providers process data only for operating, measuring, securing, and improving the website.
Cookies and Local Storage
Essential storage is used for age verification, editor authentication, security, and remembering your cookie preference. Analytics storage is optional. You can change or clear cookies and local storage through your browser settings. See our Cookie Policy for more detail on each category.
Editorial Correspondence and Sources
If you send us information for editorial purposes, we may keep your message, contact details, source material, and related notes for as long as needed to assess, verify, publish, defend, or correct content. We take reasonable steps to protect confidential source material, but you should tell us clearly if a submission contains sensitive or confidential information.
Sharing and Retention
We share data only where needed with service providers, professional advisers, regulators, law enforcement, or another party where required by law. We keep personal data only for as long as needed for the purpose for which it was collected. Editorial, correction, complaint, and audit records may be retained for longer where they relate to published material, accountability, or legal risk.
Your Rights
You may request access, correction, deletion, restriction, or portability of personal data where applicable under UK data protection law. You may also object to processing based on legitimate interests or withdraw consent for analytics storage. We may need to verify your identity before responding. If you are unhappy with our handling of personal data, you can contact us first or complain to the UK Information Commissioner's Office.