Last Updated: May 21st, 2018
1. WHAT TYPE OF PERSONAL INFORMATION DOES DISTILLER COLLECT?
We collect the personal information that you voluntarily provide to us (for example, email addresses you give us to subscribe to Distiller newsletters) and we also automatically collect types of data, which do not identify you personally but may uniquely identify the device (e.g. your computer, tablet, or smartphone) you are using for the Services ("Device"). In some countries, this type of data may be considered as personal information:
- "Device Information", which means technical information about your Device. When we refer to Device Information, this means your operating system and operating system version, Device ID, and the brand and manufacturer of your Device. If you are using the App, then Device Information will also include the version of the App that you are currently using.
- "Location Information", which means general information about the location from which you are using the Services (e.g. IP address, country, and city). If you have enabled location services on your Device, Location Information may also include your geolocation information.
PERSONAL INFORMATION & PURPOSE(S)
Your birth month and year:
We need to verify that you're old enough to use the Services. You will only be asked to provide this information when you launch the App or visit the Website for the first time.
Email address, username, and password:
Although you can browse the Services without a Distiller account ("Account"), you need an Account to access all of the Services' features. You can create an Account by giving us your email address, username, and password, and we will use this information to create your Account so that you can:
- Rate spirits and leave tasting notes.
- Follow other users on Distiller.
- Create spirits lists.
- Enter into Distiller promotions and giveaways.
- Receive recommendations of spirits based on your rating history.
Name and email address:
Throughout the Services, there are several opportunities for you to interact with us via email. For example, you can contact us for customer support, apply for a job with us, or request that we review new spirits.
If you contact us via email, we will collect and store the contact information you provide to us (e.g. your email address and your name) so that we can respond to you. If you send us your application for an employment opportunity, we will use this information and any other personal information that you provide, to process your application and/or contact you in connection with your application.
Also, if you want to receive occasional newsletters and other email updates about Distiller ("Newsletters"), then you can provide us with your email address to subscribe. For instructions on how to opt-out of receiving Newsletters, please see Section 6.
Location Information and Device Information:
Analytics – see Section 3 for more information.
Information from Connected Facebook or Twitter Accounts:
If you create your Account by logging into Facebook or Twitter, we will collect the email address you use with your Facebook or Twitter account. We will use this email address to create your Account, and we will also collect the name you use on Facebook or Twitter to create your Distiller username.
Other Personal Information You Voluntarily Provide:
2. DO THIRD PARTIES HAVE ACCESS TO MY PERSONAL INFORMATION?
Yes. Like most companies, we use tools from service providers ("Service Providers") to help us with various parts of our business, and depending on the service we need, these Service Providers may have access to your personal information. For example, we use a Service Provider's email software to manage our Newsletter subscriptions, and if you have given us your email address to subscribe to the Newsletter, then your email address will be shared with that Service Provider.
We contractually require all Service Providers to treat your personal information as confidential information and to only use it for the services we need. However, we do not have direct control over how Service Providers use your personal information and we cannot guarantee that our Service Providers will use your personal information as required in our contract with them. For this reason, we are not responsible for our Service Providers' misuse of your personal information.
DISTILLER SERVICE PROVIDERS
(Name and Service Provider Type)
- Google Analytics: Analytics
- Segment: Analytics
- MixPanel: Analytics
- Fabric: Analytics
- Heroku: Hosting
- Mailchimp / Mandril: Email
In addition to allowing our Service Providers to have access to your personal information, we may share your personal information in the following occasions:
3. HOW IS MY PERSONAL INFORMATION USED FOR ANALYTICS?
As an online business, it is important for us to know how users interact with our Services. We and our Service Providers will collect your Location Information and Device Information so that we can deliver our Services to our users, measure, analyze, and improve performance of the Services, and to continually update and develop our Services. For example, we will use this information to fix any bugs or errors in the App, evaluate the demographic of our users, and to determine whether or not we need to support a new Device type for the Services.
4. HOW LONG WILL DISTILLER KEEP MY PERSONAL INFORMATION?
How long we store your personal information will depend on the purpose that we originally collected it. We will not retain personal information for longer than is necessary for our business or for legal requirements.
6. OPTING OUT OF OR UNSUBSCRIBING FROM NEWSLETTERS.
If you wish to unsubscribe from receiving Newsletters, you can click on the “unsubscribe” link at the bottom of the email. Please allow up to 24 hours before you stop receiving Newsletters. You may also continue to receive emails unrelated to marketing.
7. THIRD PARTIES AND THEIR PRIVACY POLICIES.
8. IS MY PERSONAL INFORMATION SECURE?
The security of your information is important to Distiller. We follow generally accepted industry standards to protect the information submitted to Distiller, both during transmission and once it is received. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security. While no security system is completely secure, we and our third-party partners and vendors take appropriate security measures to protect against unauthorized access or disclosure of the information we collect. For Distiller, this includes, but is not limited to, ensuring that all Information is disclosed only on a "need to know" basis and ensuring that all information collected by Distiller is done so via secured connections and protected and encrypted industrial grade security software to guard against unauthorized access.
9. HOW DO I ACCESS, MANAGE, AND UPDATE MY PERSONAL INFORMATION?
If you wish to review, update, or delete the information we have about you, you may do so by updating your settings in your Account, or you may contact us at [email protected].
10. SOCIAL MEDIA FEATURES.
The Services are not directed to children under the age of 13 and we do not knowingly collect information from children under the age of 13. If we learn that we have received any type of information from a child under the age of 13, we will delete such information. Please contact us at [email protected] if you believe we have collected information from a child.
12. FOR USERS IN THE EUROPEAN UNION.
A. Legal Basis for Processing.
Our legal basis for collecting, using, and sharing your personal information will depend on the purpose for which we use your personal information. Typically, we will rely on the following legal bases for processing your personal information: (i) your consent; (ii) our legitimate interest; or (iii) contractual necessity.
If we rely on your consent to process your personal information, you have the right to withdraw your consent at any time.
B. Transfer of Personal Information Outside of the EU.
Because Distiller and our Service Providers are located in countries outside of the European Union, your personal information may be transferred to other countries that may not offer the same level of data protection as the laws of your country of residence. We may rely on model contractual clauses or other protective mechanism for such transfers.
C. How to Lodge Complaints.
If you believe your rights under the GDPR have been infringed upon, you may lodge a complaint with the supervisory authority of your country of residence. For contact information for your supervisory authority, please visit: http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm.
14. CONTACT US.
2815 2nd Ave., Suite 510, Seattle, WA 98121