LAST UPDATED: November 25, 2019
1. WHAT TYPE OF PERSONAL INFORMATION DOES DISTILLER COLLECT?
We collect the personal information that you voluntarily provide to us (for example, email addresses you give us to subscribe to Distiller newsletters) and we also automatically collect types of data, which do not identify you personally but may uniquely identify the device (e.g. your computer, tablet, or smartphone) you are using for the Service (“Device”). Based on your location, this type of data may be considered as personal information:
• “Device Information,” which means technical information about your Device. When we refer to Device Information, this means your operating system and operating system version, Device ID, and the brand and manufacturer of your Device. If you are using the App, then Device Information will also include the version of the App that you are currently using.
• “Location Information,” which means general information about the location from which you are using the Service (e.g. IP address, country, and city). If you have enabled location services on your Device, Location Information may also include your geolocation information.
Your birth month and year
We need to verify that you’re old enough to use the Service. You will only be asked to provide this information when you launch the App or visit the Website for the first time.
Email address, username, and password
Although you can browse the Service without a Distiller account (“Account”), you need an Account to access all of the Service’s features. You can create an Account by giving us your email address, username, and password, or by linking through Facebook or Twitter, and we will use this information to create your Account so that you can: o Rate spirits and leave tasting notes. o Follow other users on Distiller. o Create spirits lists. o Enter into Distiller promotions and giveaways. o Receive recommendations of spirits based on your rating history.
Name and email address
Throughout the Service, there are several opportunities for you to interact with us via email. For example, you can contact us for customer support, apply for a job with us, or request that we review new spirits. If you contact us via email, we will collect and store the contact information you provide to us (e.g. your email address and your name) so that we can respond to you. If you send us your resume for an employment opportunity, we will use this information and any other personal information that you provide, to process your application and/or contact you in connection with your interest in employment. Also, if you want to receive occasional newsletters and other email updates about Distiller (“Newsletters”), then you can provide us with your email address to subscribe. For instructions on how to opt-out of receiving Newsletters, please see Section 6.
Location Information and Device Information
• Analytics – see Section 3 for more information.
Information from Connected Facebook or Twitter Accounts
If you create your Account by logging into Facebook or Twitter, we will collect the email address you use with your Facebook or Twitter account. We will use this email address to create your Account, and we will also collect the name you use on Facebook or Twitter to create your Distiller username.
Other Personal Information You Voluntarily Provide
2. DO THIRD PARTIES HAVE ACCESS TO MY PERSONAL INFORMATION?
Yes. Like most companies, we use tools from service providers (“Service Providers”) to help us with various parts of our business, and depending on the service we need, these Service Providers may have access to your personal information. For example, we use a Service Provider’s email software to manage our Newsletter subscriptions, and if you have given us your email address to subscribe to the Newsletter, then your email address will be shared with that Service Provider. All personal information shared with Service Providers will be to allow Distiller to better provide the Service in compliance with the California Consumer Privacy Act (“CCPA”). While the CCPA is required for only California residents, Distiller treats all of it user equally and will apply the same protections of the personal information for all of its users.
We contractually require all Service Providers to treat your personal information as confidential information and to only use it for the services we need. However, we do not have direct control over how Service Providers use your personal information and we cannot guarantee that our Service Providers will use your personal information as required in our contract with them. For this reason, we are not responsible for our Service Providers’ misuse of your personal information.
Distiller Service Providers
|Name||Service Provider Type|
|MailChimp / Mandrill|
In addition to allowing our Service Providers to have access to your personal information, we may share your personal information in the following situations:
3. HOW IS MY PERSONAL INFORMATION USED FOR ANALYTICS?
As an online business, it is important for us to know how users interact with our Service. We and our Service Providers will collect your Location Information and Device Information so that we can deliver our Service to our users, measure, analyze, and improve performance of the Service, and to continually update and develop our Service. For example, we will use this information to fix any bugs or errors in the App, evaluate the demographic of our users, and to determine whether or not we need to support a new Device type for the Service.
4. HOW IS MY PERSONAL INFORMATION USED FOR ADVERTISING?
A. Ad Partner Technologies.
To help us keep our Service running, we show ads in our Service with the help of third-party advertising partners, like AdMob and AdSense (“Ad Partner”). We integrate the Ad Partner technologies into our Service, which are then used by the Ad Partner to determine what kind of ads to display to you.
i. Does the Ad Partner Collect My Personal Information?
In order to show you ads that you might find interesting and/or relevant (“Targeted Ads”), the Ad Partner collects and uses your Location Information and Device Information. If location services are enabled in your Device settings, the Ad Partner may additionally collect your geolocation information. Because the Ad Partner’s technologies control what kind of personal information is collected from your Device and how it is used, we encourage you to review the Ad Partner privacy policies, found https://policies.google.com/privacy?hl=en.
ii. How to Opt-Out of Receiving Targeted Ads.
If you do not want to receive Targeted Ads on your mobile Device, your mobile Device may give you the option to opt-out of receiving Targeted Ads on all apps on your Device. On Android Devices, you may opt-out by enabling the “Opt out of Ads Personalization” setting. On iOS Devices, you may opt-out by enabling the “Limit Ad Tracking” setting. In addition, you may be able to opt-out of receiving Targeted Ads from a specific Ad Partner by visiting https://adssettings.google.com/authenticated. Please note that if you opt-out of receiving Targeted Ads, you will still receive contextual ads, which are non-targeted ads related to the content of the Service.
5. HOW LONG WILL DISTILLER KEEP MY PERSONAL INFORMATION?
How long we store your personal information will depend on the purpose that we originally collected it. We will not retain personal information for longer than is necessary for our business or for legal requirements.
7. OPTING OUT OF OR UNSUBSCRIBING FROM NEWSLETTERS.
If you wish to unsubscribe from receiving Newsletters, you can click on the “unsubscribe” link at the bottom of the email. Please allow up to 24 hours before you stop receiving Newsletters. You may also continue to receive emails unrelated to marketing.
8. THIRD PARTIES AND THEIR PRIVACY POLICIES.
9. IS MY PERSONAL INFORMATION SECURE?
The security of your information is important to Distiller. We follow generally accepted industry standards to protect the information submitted to Distiller, both during transmission and once it is received. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security. While no security system is completely secure, we and our third-party partners and vendors take appropriate security measures to protect against unauthorized access or disclosure of the information we collect. For Distiller, this includes, but is not limited to, ensuring that all Information is disclosed only on a "need to know" basis and ensuring that all information collected by Distiller is done so via secured connections and protected and encrypted industrial grade security software to guard against unauthorized access.
10. HOW DO I ACCESS, MANAGE, AND UPDATE MY PERSONAL INFORMATION?
If you wish to review, update, or delete the information we have about you, you may do so by updating your settings in your Account, or you may contact us at [email protected] and provide your email and username connected to your Account.
11. SOCIAL MEDIA FEATURES.
We provide the Service to people who are able to drink according to any applicable alcohol consumption laws. We do not knowingly collect information from children under the age of 13. If we learn that we have received any type of information from a child under the age of 13, we will delete such information. Please contact us at [email protected] if you believe we have collected information from a child.
13. FOR USERS IN THE EUROPEAN UNION.
A. Legal Basis for Processing.
Our legal basis for collecting, using, and sharing your personal information will depend on the purpose for which we use your personal information. Typically, we will rely on the following legal bases for processing your personal information: (i) your consent; (ii) our legitimate interest; or (iii) contractual necessity.
If we rely on your consent to process your personal information, you have the right to withdraw your consent at any time.
B. Transfer of Personal Information Outside of the EU.
Because Distiller and our Service Providers are located in countries outside of the European Union, your personal information may be transferred to other countries that may not offer the same level of data protection as the laws of your country of residence. We may rely on model contractual clauses or other protective mechanism for such transfers.
C. How to Lodge Complaints.
If you believe your rights under the GDPR have been infringed upon, you may lodge a complaint with the supervisory authority of your country of residence. For contact information for your supervisory authority, please visit: http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm.
15. CONTACT US.