Loading...
Loading...
How The Whisky Index collects, uses, stores, shares, and protects personal, commercial, registry, and transaction-related information.
Important legal notice
The Whisky Index provides information, workflow tools, indicative valuation support, marketplace presentation, document review workflows, and buyer/seller matching support. We do not provide investment, financial, legal, tax, insurance, HMRC, or regulatory advice. Whisky casks are specialist assets and may be illiquid, difficult to verify, difficult to transfer, and may lose value. Nothing on this site guarantees ownership title, warehouse confirmation, transfer completion, buyer demand, sale price, resale timing, profit, or future performance.
Read our Terms, Risk Disclosure, Privacy Policy, and Cookies Policy before using the platform.
The Whisky Index is a trading name of THE WHISKY INDEX LTD, company number 17216416, with registered office at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. For privacy-related requests, contact privacy@thewhiskyindex.com.
We may collect account details, contact information, buyer preferences, seller submissions, registry records, cask details, document metadata, uploaded materials, valuation inputs, marketplace enquiries, saved items, transfer workflow information, payment-related references, support messages, consent records, analytics events, device information, IP address, browser data, and operational logs.
We use information to operate the platform, authenticate users, manage registry workflows, process enquiries, provide indicative valuations, support marketplace and buyer-matching workflows, review documentation, manage transfer-readiness workflows, prevent misuse, improve the product, monitor performance, maintain security, and comply with legal or operational obligations.
Registry submissions, cask data, proof-locker materials, warehouse references, seller authority materials, buyer criteria, and transfer workflow information may include sensitive commercial information. Access may be restricted by role, workflow stage, operational need, or legal requirement. Public pages should show non-sensitive information only unless a feature is intentionally designed to publish specific data.
Depending on the context, we may process personal data because it is necessary to provide requested services, take steps before entering a contract, pursue legitimate interests in operating and protecting the platform, comply with legal obligations, or because you have given consent, including for certain analytics or marketing activities where required.
We may share information with hosting providers, authentication providers, analytics providers, CRM providers, payment processors, communication tools, professional advisers, operational partners, warehouse or supplier contacts, and legal or regulatory authorities where necessary to operate the service, respond to requests, protect users, investigate misuse, or comply with legal obligations.
If enabled, we may use tools such as HubSpot, Intercom, Google Analytics, Vercel Analytics, error monitoring, and similar services to manage enquiries, support users, understand usage, monitor reliability, and improve conversion flows. Non-essential analytics, advertising, or similar tracking should only be used where the required consent or legal basis is in place.
We retain information for as long as reasonably necessary to operate the platform, manage records, support audits, resolve disputes, comply with legal obligations, prevent fraud, and maintain operational history. We use reasonable technical and organisational safeguards, but no system can guarantee absolute security.
Some providers may process information outside the UK or your country of residence. Where required, we expect appropriate transfer safeguards or contractual protections to be used by relevant providers.
Depending on applicable law, you may have rights to access, correct, delete, restrict, object to, or receive certain personal data. You may also have rights to withdraw consent where processing is based on consent. Requests may be subject to identity verification and lawful retention exceptions.
Privacy requests can be sent through the contact routes provided on the platform. If you are in the UK and are unhappy with how your personal data is handled, you may have the right to complain to the UK Information Commissioner’s Office.
This policy may be updated as the platform, service providers, analytics stack, CRM stack, legal requirements, or operational workflows change.