Privacy Policies - China

品牌隐私政策-中华人民共和国

简介

最后更新日期：2026年4月21日

本隐私政策适用于我们品牌的消费者

如果您以其他身份行事，请查看我们公司的隐私政策。如果您是潜在候选人，请参考我们的招聘隐私政策。

本隐私政策适用于中华人民共和国（“中国”或“PRC”就, 就本隐私政策而言，不包括香港特别行政区、澳门特别行政区和台湾）。如果您位于其他司法管辖区，请查看我们的全球隐私政策以查找适用您所在地区的相关隐私政策。

我们是谁

爱丁顿集团旗下拥有众多卓越的烈酒品牌，其中包括一些全球备受喜爱的苏格兰威士忌和其他烈酒。我们的品牌可以在这里找到，我们的最终母公司是The Edrington Group Limited，这是一家在苏格兰注册的私人有限公司（注册号SC036374），注册地址位于100 Queen Street, Glasgow, G1 3DN。本隐私政策中所述的我们品牌消费者的个人信息处理工作由The Edrington Group Limited及相关集团公司在必要时进行。更多详情请参阅此链接。

爱丁顿集团是处理您的个人信息的控制者，我们设有数据隐私经理，负责监督有关本隐私政策的问题。如果您位于南非，我们设有信息专员，负责确保我们遵守相关法规。如果您对本隐私政策有任何疑问，包括任何行使与您的个人信息相关权利的请求，请通过以下方式与我们联系。

在本隐私政策中，相关的爱丁顿集团公司被称为“爱丁顿”、“我们”或“本公司”。

概述

爱丁顿致力于保护和尊重我们消费者的个人信息隐私，并遵守本隐私政策所述处理过程中适用的数据保护法律规定的义务（“数据保护法律”）。保护我们消费者的个人信息是我们的首要任务，我们希望您能放心，您的信息在我们手中是安全的。我们制定了本隐私政策，以便您了解：

• 我们收集哪些类型的个人信息；
• 我们如何收集个人信息；
• 我们收集个人信息的目的，包括我们如何利用这些信息改进我们的产品，并为我们的消费者提供更好的服务和体验；
• 在何种情况下，我们可能会与支持我们运营的其他组织共享这些信息，包括所涉及的组织类型；
• 我们存储您的个人信息的位置；
• 我们会保存个人信息的时间长度；以及
• 您对个人信息所享有的权利和可选择的方式。

当我们在特定场合就收集或处理您的个人信息向您提供其他隐私政策或隐私声明时，务请您将这些文件与本隐私政策一并阅读，以便您能充分了解我们如何以及为何使用您的个人信息。本隐私政策对其他通知和隐私政策起补充作用，并非旨在取代或推翻它们。

我们会收集消费者的哪些类型的个人信息？

• 您的姓名、年龄/出生日期（包括用于年龄验证和尽职调查目的）、家庭住址以及可能需要对您身份证明文件进行目视检查以进行尽职调查；
• 您的联系方式：包括账单地址和送货地址在内的邮政地址、联系电话和电子邮件地址；
• 与您之间的付款详情以及您购买、下单的其他详情，包括您的购买历史记录以及您为购买我们的产品而提交的选票。这也包括跟踪您在转售市场上的购买记录；
• 当您向我们购买商品或下单时，在适用法律允许的范围内，您的支付卡详细信息；
• 您已预订的任何活动或体验的详细信息，包括您提供的或我们从您那里收集的与您参加我们为您安排的任何活动或体验相关的详细信息（例如与活动或体验相关的无障碍或饮食要求或其他兴趣）；
• 如果我们需要进行尽职调查，在适用法律允许的范围内，任何犯罪记录或制裁的详细信息、非法活动、负面媒体报道或您是否为公开的政治公众人物；
• 您的互联网协议（IP）地址、登录数据、浏览器类型和版本、时区设置和位置、浏览器插件类型和版本、操作系统和平台以及您用于访问本网站的设备上的其他技术（技术数据）；
• 有关您如何使用我们的网站、产品和服务的信息（使用数据）；
• 您与我们的书信往来和通讯；
• 您可能通过公共平台（如我们的社交媒体动态）分享的个人信息；
• 您从我们和我们的第三方接收营销信息的偏好以及您的通讯偏好。
• 当您参观我们的任何一家酿酒厂/其他体验式零售场所，以及参加为宣传活动而进行拍摄或摄影的活动或体验时，您的影像可能会被闭路电视拍摄下来，除非您另行通知我们，否则这些影像可能会用于我们品牌的全渠道以及第三方媒体的宣传。
• 我们的客户互动人员及/或代表可能收集或生成的信息，或您参与在线体验时产生的信息，例如：
  • 对我们产品和服务的偏好，包括有关偏好产品和体验的任何“愿望清单”项目，以及您如何与他人分享对我们品牌的体验和热情；
  • 生活方式偏好和兴趣，例如偏好的旅游目的地、偏好的餐厅/菜系以及威士忌和饮品的偏好/收藏；
  • 社交指标，例如您的职业和人脉关系；
  • 互动数据，例如您打开或点击我们的电子邮件的时间、您成为我们品牌消费者的时长，以及您与我们的人员/代表的互动方式；
  • 沟通渠道偏好（如社交媒体账号和基于应用程序的即时通讯工具），例如领英、脸书、推特、微信和WhatsApp；
  • 您的行为，只要它们对我们的品牌产生影响，包括遵守我们品牌的销售条款和条件（请参阅相关品牌网站）以及在活动和网上的行为；
• 向您提供的任何体验、礼品、特别邀请或优惠的相关信息；
• 您的反馈和调查回复；以及
• 在我们网站上的在线浏览活动。

出于任何目的，我们还会收集、使用和共享汇总数据，例如统计数据或人口统计数据。汇总数据可能源自您的个人信息，但根据法律，此类数据不被视为个人信息，因为这些数据不会直接或间接透露您的身份。例如，我们可能会汇总您的使用数据，以计算访问特定网站功能的用户百分比。但是，如果我们将汇总数据与您的个人信息相结合，从而能够直接或间接识别您的身份，则我们会将合并后的数据视为个人信息，并按照本隐私政策使用。

除上述数据外，我们不会收集关于您的任何敏感个人信息（这包括有关您的种族或民族、宗教或哲学信仰、性生活、性取向、政治观点或党派身份、工会成员资格、健康信息、生物识别或遗传数据的详细信息）。

请注意，法律并未要求您向爱丁顿提供您的个人信息，您向我们提供的任何个人信息均是出于您自身的意愿和同意。在法律要求我们收集个人信息的情况下，根据我们与您签订的合同条款，如果您在收到请求后未能提供或选择不提供此类信息，我们可能无法与您互动、履行我们与您签订或试图与您签订的合同（例如，向您提供商品或服务）或妥善处理您的请求。在这种情况下，我们可能不得不取消您与我们任何品牌的购买或体验，但若发生这种情况，我们会及时通知您。

我们如何收集您的个人信息？

我们通过多种方法收集您的个人信息，包括：

• 直接互动：这包括您在以下情况下提供的个人信息：
  • 您订阅以接收我们的时事通讯；
  • 您在台湾订阅品牌的LINE频道；
  • 您在我们的网站上创建账户或参与我们的在线体验之一；
  • 您在线购买产品或商品或在线下单；
  • 您参加与我们品牌或我们其中一个产品相关的抽奖或竞赛；
  • 您参加我们的活动之一，参观我们的场所之一（例如我们的酿酒厂）或体验我们的活动之一（例如威士忌品鉴、餐饮和其他定制或专属体验）；
  • 您与我们的私人客户关系经理（PCRMs）、品牌大使或其他代表互动；
  • 您通过电话、短信或其他基于应用程序或社交媒体的即时通讯工具与我们沟通；
  • 您在我们的精品店或零售店（例如机场）向我们提供您的信息；以及
  • 您出于任何原因与我们联系。
• 自动化技术或互动：当您与我们的网站互动时，我们将自动收集有关您的设备、浏览行为和模式的技术数据。我们还可能会收集发送给您的电子邮件的统计信息（例如打开、点击、送达率、退订和转发）。这有助于我们评估和改进电子邮件性能以及我们与您的互动。我们使用Cookie、像素和其他类似技术来收集这些个人信息。有关更多详细信息，请参阅相关品牌网站上的Cookie政策。
• 第三方信息来源：我们可能会从以下第三方来源获取有关您的信息：
  • 您与代表我们行事的第三方互动时（例如我们的分销商、合资伙伴、机场精品店运营商和零售商的代表）；
  • 我们的专业顾问（例如律师、会计师和银行家）；
  • 公开可用的信息来源（例如，您如何在社交媒体上与他人分享您对我们品牌的体验和热情）；以及
  • 当我们进行客户尽职调查时，我们会使用第三方尽职调查筛查服务提供商来搜索公开可用的信息。
• 技术数据：我们还会从以下第三方收集技术数据：
  • 分析服务提供商（例如设在英国和/或欧盟以外的谷歌）；
  • 广告网络；
  • 搜索信息提供商；以及
  • 尽职调查筛查服务提供商。
• 社交登录：当您使用社交媒体账户创建账户并登录我们品牌的网站时，即表示您授权社交媒体提供商（例如谷歌、苹果和Meta）为此目的与我们共享您的个人信息。

在线分析

我们在网站上使用各种类型的在线分析工具，包括由Google（谷歌）提供的网络分析服务Google Analytics（谷歌分析）。Google Analytics（谷歌分析）使用Cookie或其他跟踪技术帮助我们分析用户如何与网站进行交互和使用网站，就相关活动编写报告，并提供与网站和应用活动和使用情况有关的其他服务。谷歌使用的技术可能会收集您的IP地址、访问时间、您是否为回头客以及任何推荐网站或应用等信息。Google Analytics（谷歌分析）生成的信息将传输给谷歌并由谷歌存储，且将受谷歌隐私政策的约束。要了解有关谷歌合作伙伴服务的更多信息，以及了解如何选择退出谷歌的分析跟踪，请点击此处。

调查问卷

我们会不时地（并在适用当地法律要求获得您同意的情况下）为您提供参与调查的机会，其中一些调查可能由第三方赞助或进行。参与这些调查完全是自愿的。如果您选择参与，我们会要求您提供某些个人信息。如果调查涉及第三方赞助商，我们可能会向第三方赞助商提供某些个人信息。请务必查看赞助商的隐私政策，并请注意，我们提供的任何调查均可能受特定规则和条款的约束，这些规则和条款独立于本隐私政策且是对本隐私政策的补充。通过参与任何此类调查，您将受这些规则的约束，包括但不限于接收包含调查通讯的电子邮件。

我们如何使用您的个人信息？

爱丁顿（以及代表我们行事的受信任合作伙伴和服务提供商）使用您的个人信息：

• 向您提供您向我们请求的信息、产品或服务，或者我们认为您可能感兴趣的信息、产品或服务。这仅在您同意我们与您联系，或者我们根据数据保护法获准与您联系时进行（例如，当您向我们购买商品时未选择拒绝接收此类信息时）；
• 根据您的偏好以及您与我们品牌、产品、服务或体验的互动情况，向您发送个性化通讯；
• 核实您的身份和年龄；
• 当您购买价值超过一定金额的商品，或者我们与您建立或正在建立关系时，使用我们的第三方尽职调查系统进行尽职调查检查；
• 用于预防、侦查犯罪和欺诈行为及相关目的；
• 使我们的品牌能够管理与您的任何客户服务互动；
• 确保遵守我们品牌的销售条款和条件，并保护我们的品牌和产品；
• 确保以最有效的方式为您和您的计算机展示我们的网页内容；
• 当您选择参与时，允许您参与我们网站上的互动功能；以及
• 当我们有合法权利或义务使用或披露您的信息时（例如，与公共当局的调查或法律纠纷有关）。

我们还可以将通过各种来源收集的您的个人信息（包括通过我们的网站和服务收集的信息）相结合，并建立一个档案，用于上述目的。

营销通讯

注册接收来自我们品牌的通讯后，您可能会自动被分配偏好设置，以接收有关以下主题的电子邮件通讯：

• 合作伙伴关系
• 产品发布
• 活动
• 体验
• 区域通讯
• 酒厂更新

如果某个品牌提供了相关选项，您可以通过登录该品牌网站上的账户（如果提供了账户），通过该品牌的通讯偏好中心查看您被分配接收的通讯类型，并随时进行更新（例如，仅接收有关威士忌发布的电子邮件）。

更好地了解我们的消费者

爱丁顿还将使用我们收到或收集的关于某些消费者的个人信息，以更好地了解我们的消费者概况，并更有效地与我们的消费者互动。

这将涉及使用这些个人信息来考虑我们消费者的偏好、特征、兴趣和活动、购买习惯以及与我们品牌和产品的互动情况。在识别这些信息时，我们将利用它来更好地了解我们最有价值消费者的习惯、偏好和概况，并确定我们可以更好地与之互动的价值消费者类别，以及更好地定制他们对我们产品和品牌的体验。

基于对我们最有价值的消费者的更深入了解，爱丁顿将确定如何改进其向消费者提供的产品、服务和体验，如何改进我们与消费者的互动和交流，并评估我们最有价值的消费者是否有资格获得特别邀请、体验和其他福利。

只要您与爱丁顿保持合作关系，我们便会持续进行此类处理。这意味着，在我们与您的合作过程中，我们向您提供产品和服务、与您互动和交流，或向您提供任何特别邀请、体验和福利的方式可能会发生变化。

您可随时要求我们停止向您发送营销信息，或停止将您的个人信息用于营销目的（包括分析）。详情请参阅“您有哪些权利？”。

我们持有您个人信息的法律依据是什么？

数据保护法可能要求我们说明处理您个人信息的法律依据。

如果我们已征得您的同意，我们将依据此同意向您发送有关爱丁顿的营销信息。在适用法律允许的情况下，如果您已向我们请求信息或进行了购买，且未选择拒绝接收此类信息，我们也可能向您发送有关爱丁顿的营销信息。

您可随时通过使用我们发送给您的信息中的取消订阅按钮、联系我们的品牌代表或使用下文“如何联系我们”部分中的详细信息，撤回您对接收此类信息的同意或选择拒绝接收此类信息。如果您选择拒绝接收营销信息，这不会删除您在购买时提供的任何个人信息。

在适用法律允许的情况下，爱丁顿收集和使用您的个人信息也是出于以下必要原因：

• 追求我们的合法利益（如下所述）；
• 履行我们在向消费者销售商品或服务的合同下的义务和行使我们的权利；或
• 遵守我们的法律和监管义务。

我们的合法利益

在适用的情况下，处理消费者个人信息的常见法律依据是，这对于爱丁顿的合法利益是必要的，包括：

• 向我们的消费者销售和供应商品和服务；
• 保护消费者、员工和其他个人，并维护他们的安全、健康和福利；
• 推广、营销和宣传我们的产品、服务、活动、体验和品牌合作；
• 了解我们消费者的行为、活动、偏好和需求，包括分析；
• 改进现有产品并开发新产品；
• 为我们最有价值的消费者提供体验、特别邀请和其他福利；
• 保护我们的品牌，这可能涉及记录消费者对我们品牌的负面行为；
• 处理消费者联系、查询、投诉或纠纷；
• 行政目的（会计、风险管理和记录保存、商业研究、数据、规划和统计分析以及员工培训）；以及
• 预防、调查和发现犯罪、欺诈或反社会行为，并起诉违法者，包括协助当局进行此类调查。

如果我们在追求合法利益的过程中处理您的个人信息，我们将确保这符合下文所述的您的权利，包括您对我们出于上述目的使用您的个人信息的反对权。如果您希望对上述任何处理提出异议，请使用下文“如何联系我们”部分中的详细信息与我们联系。如果我们同意并遵守您的异议，这可能会影响我们为您的利益而执行上述任务的能力。详情请参阅“您有哪些权利？”。

在适用法律要求我们在某些地区这样做的情况下，我们将依赖您的同意作为处理您个人信息的依据，而不是合法利益。

浏览器缓存文件

您可以将浏览器设置为拒绝所有或部分浏览器Cookie，或在网站设置或访问Cookie时提醒您。如果您禁用或拒绝Cookie，请注意，我们网站的某些部分可能无法访问或无法正常运行。有关我们使用的Cookie的更多信息，请参阅相关品牌网站上的Cookie政策以获取更多详情。

目的变更

我们仅会将您的个人信息用于收集目的，除非法律允许，且我们合理认为需要出于与原始目的兼容的其他原因使用它。如果您需要有关新目的与原始目的兼容性的更多信息，请使用以下详细信息与我们联系。

如果我们需要将您的个人信息用于无关目的，我们将通知您，并解释允许我们这样做的法律依据，并在需要时请求您的同意。请注意，在符合上述规则且法律要求或允许的情况下，我们可能会在您不知情或未同意的情况下处理您的个人信息。

您享有哪些权利？

根据《数据保护法》，就我们处理您的个人信息的方式而言，您享有以下一系列权利：

• 获取并复制您的个人信息，法律法规另有规定的除外；
• 如果您认为您的个人信息不准确或不完整，有权要求更正和补充您的个人信息，尽管我们可能需要核实您提供给我们的新信息的准确性；
• 在以下情况下，撤回您的同意并删除您的个人信息，前提是我们处理您的个人信息仅基于您的同意：
  • 如果我们处理个人信息违反了任何法律法规；
  • 如果我们处理个人信息违反了我们与您签订的任何协议；
  • 如果处理的目的已经实现、无法实现，或者个人信息不再为实现处理目的所必需；
  • 如果留存期限已过；或
  • 法律法规规定的其他情形；
• 在我们仅基于自动决策做出任何决定，且该决定对您的权利和利益产生重大影响时，对任何自动决策进行限制；以及
• 回应您的请求——您有权在法律规定的适用时限内收到我们的回应。出于安全考虑，在处理您的请求之前，我们可能会要求您提供书面请求或以其他方式证明您的身份。但是，对于不合理重复、需要过多技术措施、侵犯他人合法权益或技术上不可行的请求，我们可能会予以拒绝。如果满足以下条件，我们将无法回应您的请求：
  • 该请求与履行我们根据与您签订的合同或法律法规所承担的义务有关；
  • 该请求直接涉及国家安全和国家防御；
  • 该请求直接涉及公共安全、公共卫生或重大公共利益；
  • 该请求直接涉及刑事调查、起诉、审判和判决执行；
  • 我们有证据表明您存在恶意行事或滥用权利的行为；
  • 为保护您或其他个人的生命、财产和其他重大合法权益所必需，但在难以获得您同意的情况下；或
  • 该请求涉及商业秘密；
• 依法享有的其他个人信息主体权利。

如果您希望行使上述任何权利，请使用下文“如何联系我们”部分中的联系方式与我们联系。

我们会与谁共享您的个人信息？

为了有效履行我们对您的义务，并为您提供营销和特定体验、特别邀请和福利，我们使用值得信赖的第三方来执行涉及您个人信息的职能。这些第三方包括：

• 代表我们并根据我们的书面指示处理您的个人信息以提供服务的供应商，例如在我们开展业务过程中使用的IT服务提供商、金融机构、客户关系管理供应商、营销服务提供商以及其他基于云的解决方案提供商。我们与这些供应商签订合同，确保他们仅根据我们的指示处理您的个人信息，并通过实施适当的技术和组织措施来确保您的个人信息的安全性和保密性。我们的一些供应商可能会使用人工智能来支持我们的服务，但这不会处理您的个人信息；
• 处理您的个人信息以帮助我们更好地了解消费者以及如何改进消费者参与度的供应商，例如HubSpot、Wunderman Thompson和Salted Stone；
• 当您从我们的在线商店订购产品或服务时，我们会将您的详细信息分享给我们的履行合作伙伴（目前为英国的Mail Marketing UK Limited、美国的Thirstie和Reserve Bar），他们将根据我们品牌销售条款和条件处理您的订单；
• 如果您购买的商品价值超过一定金额，或者我们与您已经建立或正在建立关系，我们会将您的姓名和出生日期分享给我们的尽职调查服务提供商，以进行尽职调查检查；
• 当您联系我们，且与您的互动由我们的第三方技术服务合作伙伴Huntswood处理时；
• 代表我们管理服务的营销服务提供商，例如向我们的消费者发送通信、管理我们举办的任何促销活动或投票；
• 代表我们管理服务的翻译服务提供商，例如翻译以不同语言接收和发送的通信；
• 其他机构和履行合作伙伴，用于管理活动、竞赛、体验、品牌计划以及其他特别邀请和福利；
• 如果您已明确表示同意，我们会将您的个人信息分享给我们的机场精品店运营商——目前为WDFG UK Limited (DUFRY)、Maritime & Mercantile International LLC (Le Clos)、Ever Rich DFS Corporation、DFS Group Limited和UETA, Inc——以便您接收来自他们的营销通信；
• 我们的专业顾问（例如律师、会计师和银行家）；
• 爱丁顿集团内的其他实体；以及
• 爱丁顿的第三方经销商和合资合作伙伴。

我们可能会出于善意向其他方（如政府或执法机构或主管部门）提供信息，相信这样做是必要的，以便：(i) 执行或应用我们品牌的销售条款和条件；(ii) 遵守针对爱丁顿提出的任何法律索赔；(iii) 保护爱丁顿的权利、财产或安全；(iv) 保护公众的权利、财产或安全；或 (v) 协助调查以预防和发现犯罪、欺诈或反社会行为。

根据适用法律，如果爱丁顿卷入合并、整合、收购、控制权变更、破产、重组、清算或其他涉及出售我们部分或全部业务或资产的交易，通过您使用我们的网站从您那里收集的用户信息（包括个人信息）可能会被纳入转让的业务或资产中。如果发生此类事件，我们将通过电子邮件和/或在我们网站上发布醒目的通知等合理方式通知您。

我们存储您的个人信息的位置

出于本隐私政策中规定的目的，您将直接在中华人民共和国境外将您的个人信息传输至我们位于英国的总部爱丁顿集团有限公司，并且其他海外关联集团公司或第三方可能会进一步访问此类个人信息。这主要是为了使我们能够：

• 从位于美国、南非和澳大利亚等其他司法管辖区的供应商处获得咨询、营销和信息技术服务（例如云存储服务、数据库开发和管理服务、电子邮件/网络邮件服务和客户关系管理服务）；以及
• 从其他爱丁顿集团公司或选定的第三方经销商、合资合作伙伴或机场精品店运营商处为您提供特别邀请、产品、服务、体验和其他福利。

对于在中华人民共和国境外传输的您的个人信息，我们将根据适用法律履行我们的法律义务，并确保其获得足够水平的数据保护（根据《数据保护法》的要求）。

我们会将您的个人信息保存多久？

对于本隐私政策中规定的目的，包括为了维护我们与您的关系以及满足任何法律、监管、税务、会计或报告要求，我们不会保留您的个人信息超过必要的时间。如果发生投诉或如果我们合理认为有可能就我们与您的关系提起诉讼，我们可能会保留更长时间的您的个人信息。

为了确定个人信息的适当保留期限，我们会考虑我们与您的持续关系、您将来可能希望从我们这里进一步购买的可能性、个人信息的数量、性质和敏感性、未经授权使用或披露您的个人信息可能带来的潜在危害风险、我们处理您的个人信息的目的以及我们是否可以通过其他方式实现这些目的，以及适用的法律、监管、税务、会计或其他要求。

当我们不再需要使用您的个人信息时，我们会将其从我们的系统和记录中删除，和/或采取措施使其匿名化，以便您无法再从中被识别出来（除非我们需要保留您的个人信息以遵守我们受到的法律或监管义务）。

在某些情况下，您可以要求我们删除或移除您的个人信息（有关您的权利的更多信息，请参见上文标题为“您拥有哪些权利？”的部分）。

我们还可能会通过录制电话以及保留我们通过品牌网站与您进行的实时聊天的记录（包括由爱丁顿的第三方技术服务合作伙伴处理的这些电话和聊天），来收集您的个人信息，用于以下目的：

1. 账户管理；
2. 预防、发现、调查和起诉欺诈行为；
3. 投诉处理和解决；
4. 衡量通话质量；
5. 关于通话处理的内部培训。

我们保留通话和实时聊天有合法权益，以便为我们的消费者提供良好的服务并保护我们的业务。如果您反对通话录音，您可以在被告知通话可能会被录音时选择结束通话。如果您使用我们的实时聊天功能与我们联系，我们会在聊天开始时告知您我们将保留讨论记录，并且您可以随时结束聊天。您可以选择通过其他方式与我们联系。所有通话和实时聊天记录将保留一年。

我们如何保护您的个人信息？

爱丁顿致力于保护您的个人信息的安全。为了防止未经授权的访问、维护数据准确性并确保个人信息的正确使用，我们监控并调整我们的物理、电子和管理程序，以保护和保障我们在线收集的个人信息的安全。

第三方网站和应用程序

我们的网站和服务可能包含由第三方运营的其他网站或应用程序的链接。请注意，本隐私政策中所述的做法不适用于通过这些第三方网站和应用程序收集的信息。我们无法控制且不对第三方及其他网站和应用程序的行为和隐私政策负责。

如何联系我们

如果您对处理个人信息的方式有任何疑问或疑虑，请通过以下详细信息联系相关品牌：

• The Macallan（[email protected]）
• Highland Park（[email protected]）
• The Glenrothes（[email protected]）
• Brugal（[email protected]）
• Wyoming Whiskey（[email protected]）

我们的全球数据隐私经理可通过[email protected]联系。如果您在印度，您可以就与本隐私政策或您的个人信息有关的任何问题联系我们的投诉专员。我们印度投诉专员的联系方式见下文的投诉部分。

变更

随着我们隐私做法的改变或适用法律或监管要求的需要，爱丁顿可能会不时更新本隐私政策。在可行的情况下，我们会通知您任何重大变更。但是，最后更新日期如下所列，爱丁顿鼓励您定期查看本隐私政策，以便随时了解我们如何使用您的个人信息。

ENGLISH

Last updated: 21 April 2026

The Privacy Policy applies to consumers of our brands.

If you are acting in another capacity, please see our corporate privacy policy here. If you are a prospective candidate, please refer to our recruitment privacy polices here.

This Privacy Policy applies in the People’s Republic of China (“PRC”, for the purpose of this Privacy Policy, excluding the Special Administrative Region of Hong Kong, the Special Administrative Region of Macao and Taiwan). If you are based within another jurisdiction, please see our global privacy policy to locate the relevant privacy policy for your region. 

WHO WE ARE

Edrington is the home of exceptional spirits with a portfolio of some of the world’s best-loved Scotch whiskies and other spirits. Our brands can be found here and our ultimate parent company, is The Edrington Group Limited, a private limited company (registered in Scotland No.SC036374), having our registered office at 100 Queen Street, Glasgow, G1 3DN. Processing of personal information for our brands’ consumers as described in this Privacy Policy is undertaken by The Edrington Group Limited and other group companies where relevant. Please refer to this link for further details.

Edrington is the controller for the processing of your personal information and we have a data privacy manager who is responsible for overseeing questions about this Privacy Policy. If you are based in South Africa, we have an information officer who is responsible for our compliance with the relevant legislation. If you have any questions about this Privacy Policy, including any requests to exercise your rights in relation to your personal information, please contact us at the details set out below.

In this Privacy Policy the relevant Edrington group companies are referred to as Edrington, we, us or our. 

OVERVIEW 

Edrington is committed to protecting and respecting the privacy of our consumers’ personal information and complying with the obligations under data protection laws applicable to the processing set out in this Privacy Policy (Data Protection Laws). Looking after our consumers’ personal information is a priority for us and we want you to be confident that your information is in safe hands. We’ve developed this Privacy Policy to let you know: 

• What types of personal information we collect;
• How we collect personal information;
• The purposes we collect personal information for, including how we use it to make our products better and to offer better services and experiences to our consumers;  
• The circumstances in which we may share it with other organisations that support our operations, including the types of organisations involved;
• Where we store your personal information;
• How long we keep personal information for; and
• The rights and choices you have with regards to your personal information.

It is important that you read this Privacy Policy together with any other privacy policy or notice we may provide on specific occasions when we are collecting or processing personal information about you so that you are fully aware of how and why we are using your personal information. This Privacy Policy supplements other notices and privacy policies and is not intended to override them.

WHAT TYPES OF PERSONAL INFORMATION DO WE COLLECT ABOUT OUR CONSUMERS? 

• Your name, age/date of birth (including for age verification and due diligence purposes), home location(s) and a visual inspection of your identification documentation may be required for due diligence checks;
• Your contact details: postal addresses including billing and delivery addresses, contact telephone numbers and email address;
• Details about payments to and from you and other details of purchases, orders made by you, including your purchase history and ballots you have submitted for the purchase of our products. This also includes tracking purchases that you have made on the resale market;
• When you make a purchase or place an order with us, your payment card details to the extent permitted by applicable law;
• Details of any event or experience bookings you have made, including details you have provided or we have collected from you in connection with your attendance at any events or experiences we have arranged with you (such as any accessibility or dietary requirements or other interests related to the event or experience);
• If we are required to carry out due diligence, details of any criminal convictions or sanctions, to the extent permitted under applicable law, illegal activity, adverse media or whether you are a politically exposed person, which is publicly available;
• Your internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the website (Technical Data);
• Information about how you use our websites, products and services (Usage Data);  
• Your correspondence and communications with us;
• Personal information, which you have maybe shared via a public platform (such as on our social media feeds);
• Your preferences in receiving marketing from us and our third parties and your communication preferences;
• Your image may be captured on CCTV when you visit any of our distilleries / other experiential retail premises and at events or experiences you attend where filming or photography is taking place for promotional activities, which may be used on our brands’ global owned channels and by third party press unless you have notified us otherwise;
• Information which may be collected or generated by our customer engagement personnel and/or representatives, or when you participate in an online experience, such as:
  • preferences regarding our products and offerings including any "wish list" items regarding preferred products and experiences and how you share your experiences and passion for our brands with others;
  • lifestyle preferences and interests such as preferred travel destinations, preferred restaurants / cuisines and whisky and drink preferences / collection;
  • social indicators such as your profession and connections;
  • engagement data such as when you open or click on our emails, how long you have been a consumer of our brands, and how you interact with our personnel / representatives;
  • communication channel preferences (e.g. social media handles and app-based messaging) such as LinkedIn, Facebook, Twitter, WeChat and WhatsApp;
  • your behaviours insofar as they impact our brands, including compliance with our brands’ terms and conditions of sale (please see the relevant brand website) and behaviour at events and online;
• Information about any experiences, gifts, special invitations or benefits made available to you;
• Your feedback and survey responses; and
• Online browsing activities on our websites. 

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal information but is not considered personal information in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal information so that it can directly or indirectly identify you, we treat the combined data as personal information which will be used in accordance with this Privacy Policy.

Other than the data listed above, we do not collect any sensitive personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions or affiliations, trade union membership, information about your health, biometric or genetic data).

Please note that you are not legally required to provide Edrington with your personal information, and any personal information you provide us, is provided of your own free will and consent. Where we need to collect personal information by law, under the terms of a contract we have with you, and you fail to provide or choose to refrain from providing that information when requested, we may not be able to engage with you, perform the contract we have or are trying to enter into with you (e.g. to provide you with goods or services) or properly handle your requests. In this case, we may have to cancel a purchase or experience you have with any of our brands but we will notify you if this is the case at the time.  

HOW DO WE COLLECT YOUR PERSONAL INFORMATION? 

We collect your personal information by different methods, including: 

• Direct interactions: This includes personal information you provide when:
  • You subscribe to receive our newsletters;
  • You subscribe to a brand’s LINE channel in Taiwan;
  • You create an account on our website or participate in one of our online experiences;
  • You make an online purchase or place an order online for a product or merchandise;
  • You enter a ballot or competition related to our brands or one of our products;
  • You attend one of our events, visit one of our sites (e.g. our distillery) or one of our experiences (e.g. whisky tastings, dinning and food, and other bespoke or exclusive experiences);
  • You interact with one of our Private Client Relationship Managers (PCRMs), brand ambassadors or other representatives;
  • You communicate with us through telephone, text messaging, or other app-based or social media direct messaging;  
  • You provide your information to us at one of our boutiques or retail outlets, such as at airports; and  
  • You contact us, for whatever reason.
• Automated technologies or interactions: As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We may also gather statistical information on emails sent to you (e.g. opens, clicks, delivery rates, unsubscribes and forwards). This helps us to assess and improve email performance and our engagement with you. We collect this personal information by using cookies, pixels and other similar technologies. Please see the cookies policy on the relevant brand’s website for further details.
• Third party sources of information: We may obtain information about you from the following third-party sources:
  • Where you interact with a third-party acting on our behalf (e.g. a representative of one of our distributors, joint venture partners, airport boutique operators and retailers);
  • Our professional advisors (e.g. lawyers, accountants and bankers);  
  • Publicly available sources (e.g. how you share your experiences and passion for our brands with others on social media); and
  • Where we carry out customer due diligence, we use a third-party due diligence screening provider who searches publicly available information.
• Technical Data: We also collect Technical Data from the following third-parties:
  • Analytics providers (such as Google based outside the UK and/or EU);
  • Advertising networks;  
  • Search information providers; and
  • Due diligence screening providers.
• Social logins: Where you use your social media accounts to create an account and log in to our brands’ websites, you give the social media provider (such as Google, Apple and Meta) permission to share your personal information with us for this purpose. 

ONLINE ANALYTICS 

We use various types of online analytics, including Google Analytics, a web analytics service provided by Google, Inc. (Google), on our website. Google Analytics uses cookies or other tracking technologies to help us analyze how users interact with and use the website, compile reports on the related activities, and provide other services related to website and app activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a return visitor, and any referring website or app. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google’s privacy policies. To learn more about Google’s partner services and to learn how to opt out of tracking of analytics by Google click here.

SURVEYS

From time to time, and subject to your consent where required by applicable local law, we may provide you with the opportunity to participate in surveys, some of which might be sponsored or conducted by a third party. Participation in these surveys is completely voluntary. If you choose to participate, we will request certain personal information from you. If there is a third-party sponsor involved in the survey, we may provide certain personal information to the third-party sponsor. Please make sure to review the sponsor’s privacy policy and be aware that any surveys offered by us may be governed by specific rules and terms and conditions that are separate from and in addition to this Privacy Policy. By participating in any such surveys you will become subject to those rules, including but not limited to receiving emails containing survey communications. 

HOW DO WE USE YOUR PERSONAL INFORMATION? 

Edrington (and trusted partners and service providers acting on our behalf) use your personal information: 

• To provide you with information, products or services that you request from us, or which we feel may interest you. This is only done when you’ve given your consent to be contacted by us, or where we are permitted to contact you in accordance with Data Protection Law (such as where you have not opted out of receiving such information from us at the time of making a purchase from us);  
• To send you personalised communications based on your preferences, and engagement with our brands, products, services or experiences;
• To verify your identity and your age;
• Where you make a purchase above a certain value or we have or are building a relationship with you, carry out due diligence checks using our third-party due diligence system;
• For crime and fraud prevention, detection and related purposes;
• To enable our brands to manage any customer service interactions with you;
• To ensure compliance with our brands’ terms and conditions of sale and protection of our brands and products;
• To ensure that our web content is presented in the most efficient way for you and your computer;
• To allow you to participate in interactive features on our website, when you choose to do so; and  
• Where we have a legal right or duty to use or disclose your information (e.g. in relation to an investigation by a public authority or in a legal dispute).  

We may also combine your personal information collected through various sources, including information collected through our website and services, and develop a profile that will be used for the purposes above. 

Marketing communications

By signing up to receive communications from our brands, you may automatically be assigned preferences to receive email communications on topics such as:

• Partnerships
• Product releases
• Events
• Experiences
• Regional communications
• Distillery updates

Where provided by a brand, you can review what types of communications you have been assigned to receive and update them at any time (e.g. to only receive emails on whisky releases) via the brand’s communications preference centre by logging into your account (where provided) on the brand’s website. 

UNDERSTANDING OUR CONSUMERS BETTER 

Edrington will also use the personal information that we receive or collect about certain of our consumers to understand our consumer profile better and to engage with our consumers more effectively.

This will involve using this personal information to consider our consumers’ preferences, characteristics, interests and activities, purchase habits and engagement with our brands and products. In identifying this information, we will use it to better understand the habits, preferences and profiles of our most valued consumers and to identify categories of valued consumers that we can better engage with and better tailor their experience of our products and brands.

Based on this better understanding of our most valued consumers, Edrington will determine how we can improve the products, services and experiences it makes available to its consumers, how we can improve our interactions and engagement with consumers, and to assess eligibility of our most valued consumers for special invitations, experiences, and other benefits.  

This processing may continue so long as you have a relationship with Edrington. This means that the way in which we provide products and services to you, interact and engage with you, or provide any special invitations, experiences and benefits to you, may change over the course of our relationship with you.  

You can ask us at any time to stop sending you marketing communications or using your personal information for marketing purposes (including profiling) at any time. Please see “What are your rights?” for further details. 

WHAT IS OUR LEGAL REASON FOR HOLDING YOUR PERSONAL INFORMATION? 

Data Protection Laws may require us to state our legal reason for processing your personal information.    

Where we have requested your consent, we will rely on this consent to send you marketing communications about Edrington. Where permitted by applicable law, we may also send you marketing communications about Edrington where you have requested information from us or made a purchase and you have not opted out of receiving such communications.  

You can withdraw your consent to, or opt out of, receiving these communications at any time by using the unsubscribe button in communications we send you, contacting one of our brand representatives or using the details in the “How to contact us” section below. Where you opt out of receiving marketing communications, this will not remove any personal information provided when you made a purchase.

Where permitted by applicable law, Edrington also collects and uses your personal information because it is necessary for:

• the pursuit of our legitimate interests (as set out below);
• the purposes of complying with our duties and exercising our rights under a contract for the sale of goods or services to a consumer; or
• complying with our legal and regulatory obligations. 

Our legitimate interests

A common legal basis for processing consumer personal information, where applicable, is that it is necessary for Edrington’s legitimate interests, including: 

• selling and supplying goods and services to our consumers;
• protecting consumers, employees and other individuals and maintaining their safety, health and welfare;
• promoting, marketing and advertising our products, services, events, experiences and brand partnerships;
• understanding our consumers’ behaviour, activities, preferences, and needs, including profiling;
• improving existing products and developing new products;
• providing experiences, special invitations and other benefits to our most-valued consumers;
• protecting our brands, which may involve noting negative consumer behaviour towards our brands;
• handling consumer contacts, queries, complaints, or disputes;  
• administrative purposes (accounting, risk management and record keeping, business research, data, planning and statistical analysis and staff training); and
• preventing, investigating and detecting crime, fraud, or anti-social behaviour and prosecuting offenders, including assisting authorities with such investigations.   

Where we process your personal information in pursuit of our legitimate interests, we will ensure that this in accordance with your rights set out below, including your right to object to us using your personal information for the above purposes. If you wish to object to any of the above processing, please contact us by using the details in the “How to contact us” section below. If we agree and comply with your objection, this may affect our ability to undertake the tasks above for your benefit. Please see “What are your rights?” for further details.

Where applicable laws require us to in certain regions, we will rely on your consent as the ground to process your personal information for these purposes, rather than legitimate interests.

COOKIES 

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our websites may become inaccessible or not function properly. For more information about the cookies we use please see the cookies policy on the relevant brand’s website for further details. 

CHANGE OF PURPOSE 

We will only use your personal information for the purposes for which we collected it, unless the law permits us and we reasonably consider that we need to use it for another reason, which is compatible with the original purpose. If you require any further information on how the new purpose is compatible with the original purpose, please contact us using the details below.

If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so and request for your consent where required. Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law. 

WHAT ARE YOUR RIGHTS? 

You have a number of rights under Data Protection Laws in relation to the way we process your personal information, namely: 

• to access and copy your personal information, except as otherwise specified by laws and regulations;
• to correct and supplement your personal information, where you consider your personal information to be inaccurate or incomplete, although we may need to verify the accuracy of the new information you provide to us;
• To withdraw your consent and delete your personal information where we process your personal information solely on consent in the following circumstances:
  • if our processing of the personal information violates any laws or regulations;
  • if our processing of the personal information is in breach of any agreement we have with you;
  • if the purpose of the processing has been achieved, cannot be achieved, or the personal information is no longer required to achieve the purposes of the processing;
  • if the retention period has expired; or
  • other circumstances provided by any laws and administration regulations;
• To constrain any automatic decision-making where we take any decisions based solely on automatic decision-making and this materially affects your rights and interests; and
• To respond to your requests – you have a right to receive a response from us within the applicable time limit set down by law. For security reasons, we may require you to provide a written request or to otherwise prove your identity before we process your request. However, we may refuse any requests that are unreasonably repetitive, require excessive technical measures, pose a right to others’ legitimate rights and interests or is technical impractical. We will not be able to respond to a request if:
  • it relates to the performance of our obligations under a contract with you or under laws or regulations;
  • it directly relates to national security and national defence;
  • it directly relates to public safety, public health or material public interest;
  • it directly relates to a criminal investigation, prosecution, trial and enforcement of judgement;
  • we have evidence to provide that you are acting with malice or are abusing your rights;
  • it is necessary to protect your or other individuals’ lives, property and other significant legitimate rights and interests, but where difficult to obtain your consent; or
  • it relates to trade secrets;  
• Other personal information subject rights in accordance with applicable law. 

If you wish to exercise any of these rights, please contact us by using the details in the “How to contact us” section below. 

WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH? 

To effectively fulfil our obligations to you, and to provide you with marketing and certain experiences, special invitations and benefits, we use trusted and reliable third-parties to carry out functions, which involve your personal information. These include: 

• vendors who process your personal information on our behalf and under our written instructions to carry out their services during our business, such as IT service providers, financial institutions, customer relationship management vendors marketing service providers, and other cloud-based solutions providers that are used by Edrington in the conduct of our business. We contract with such vendors to ensure that they only process your personal information under our instructions and ensure the security and confidentiality of your personal information by implementing appropriate technical and organisational measures for such processing. Some of our vendors may use AI to support our services but this will not process your personal information;
• vendors that process your personal information to assist us to better understand our consumers and how we can improve our consumer engagement, such as HubSpot, Wunderman Thompson, and Salted Stone;
• when you order products or services from our online shop, we will share your details with our fulfilment partners (currently Mail Marketing UK Limited, Thirstie and Reserve Bar in the United States), who will process your orders as set out in our brands’ terms and conditions of sale;
• where you make a purchase above a certain value or we have or are building a relationship with you, we will share your name and date of birth with our due diligence service provider to carry out due diligence checks;
• when you contact us and interactions with you are handled by our third-party technical services partner, Huntswood;
• marketing service providers that administer services on our behalf, such as sending communications to our consumers, administering any promotions or ballots which we run;
• translation service providers that administer services on our behalf, such as translating communications received and sent in different languages;
• other agencies and fulfilment partners to administer events, competitions, experiences, brand programmes and other special invitations and benefits;
• where you have given your specified consent, we will share your personal details with our airport boutique operators – presently WDFG UK Limited (DUFRY), Maritime & Mercantile International LLC (Le Clos), Ever Rich DFS Corporation, DFS Group Limited and UETA, Inc – to allow you to receive marketing communications from them;
• our professional advisors (e.g. lawyers, accountants and bankers);
• other entities in Edrington group of companies; and
• Edrington’s third party distributors and joint venture partners. 

We may provide information to others (such as governmental or law enforcement agencies or authorities) in the good faith belief that such action is necessary to: (i) enforce or apply our brands’ terms and conditions of sale; (ii) comply with any legal claims raised against Edrington; (iii) protect the rights, property or safety of Edrington; (iv) protect the rights, property or safety of the public; or (v) assist with investigations to prevent and detect crime, fraud or anti-social behaviour.

In accordance with applicable law if Edrington becomes involved in a merger, consolidation, acquisition, change in control, bankruptcy, reorganisation, liquidation or other transaction involving the sale of some or all our business or assets, user information, including personal information collected from you through your use of our website, could be included in the transferred business or assets. Should such an event occur, we will use reasonable means to notify you, either through email and/or a prominent notice on our websites.  

WHERE WE STORE YOUR PERSONAL INFORMATION 

For the purposes set out in this Privacy Policy, you will transfer your personal information directly outside the PRC to The Edrington Group Limited, our headquarters in the United Kingdom, and such personal information may be further accessed by other overseas affiliated group companies or third parties. This is primarily to allow us to: 

• receive consultancy, marketing and IT services (e.g. cloud storage services, database development and management services, email/webmail services and customer relationship management services) from vendors located in other jurisdictions, such as the US, South Africa and Australia; and
• provide special invitations, products, services, experiences and other benefits to you, from other Edrington group companies, or selected third-party distributors, joint venture partners, or airport boutique operators. 

        
For your personal information transferred outside of the PRC, we will fulfil our legal obligations in accordance with applicable law and ensure it is afforded an adequate level of data protections (as required by Data Protection Laws). 

HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?  

We will not retain your personal information for longer than necessary for the purposes set out in this Privacy Policy, including for the purposes of maintaining our relationship with you as well as satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect of our relationship with you.  

To determine the appropriate retention period for personal information, we consider any ongoing relationship we have with you, the likelihood you may want to make a further purchase from us in the future, the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.  

When we no longer need to use your personal information, we will remove it from our systems and records, and or take steps to anonymise it so that you can no longer be identified from it (unless we need to keep your personal information to comply with legal or regulatory obligations we are subject to).

In certain circumstances, you can ask us to delete or remove your personal information (see the section entitled “What rights do you have?” above for further information on your rights).

We may also use your personal information collected by recording phone calls and retaining a transcript of our live chats with you through our brands’ websites (including where these are handled by Edrington’s third-party technical services partners) for the following purposes:

1.  Account management;
2. Prevention, detection, investigation and prosecution of fraud;
3. Complaint handling and resolution;
4. Measuring the quality of the call;
5. Internal training on call handling. 

We have a legitimate interest in retaining calls and live chats to offer our consumers a good service and to protect our business. If you object to the call recording, you may choose to end the call when you are informed that calls may be recorded.  If you use our live chat function to get in touch with us, you will be informed that we will keep a record of the discussion at the start of the chat and you will be able to end the chat at any time.  You will have the option to contact us through alternative means. All calls and live chat records will be retained for a period of one year. 

HOW DO WE PROTECT YOUR PERSONAL INFORMATION? 

Edrington is committed to keeping your personal information safe and secure.  To prevent unauthorised access, maintain data accuracy and ensure the correct usage of personal information, we monitor and adjust our physical, electronic and managerial procedures to safeguard and secure the personal information we collect online. 

THIRD-PARTY WEBSITES AND APPS 

Our website and services may contain links to other websites or apps operated by third-parties. Please be advised that the practices described in this Privacy Policy do not apply to information gathered through these third-party websites and apps. We have no control over, and are not responsible for, the actions and privacy policies of third-parties and other websites and apps. 

HOW TO CONTACT US 

If you have any questions or concerns about the way in which your personal information is processed, please contact the relevant brand at the following details: 

• The Macallan ([email protected])
• Highland Park ([email protected])
• The Glenrothes ([email protected])
• Brugal ([email protected])
• Wyoming Whiskey ([email protected]) 

Our global data privacy manager can be contacted at [email protected]. If you are based in India, you may contact our grievance officer with any inquiry relating to this Privacy Policy or your personal information. Contact details for our India grievance officer are provided in the Complaints section below. 

CHANGES 

Edrington may update this Privacy Policy from time to time as our privacy practices change, or as required by applicable legal or regulatory requirements. Where it is practicable, we will notify you of any significant changes. However, the last update date is given below and Edrington encourages you to review this Privacy Policy periodically so you remain informed of how we use your personal information.