Privacy Policy

Who we are

Brew Who (we, us, our) is a UK craft alcohol discovery platform at brewwho.co.uk. We are the data controller for the personal information described in this policy. To contact us about data matters, email hello@brewwho.co.uk.

What data we collect

• Account data — your name, email address, and profile picture, provided directly or via a third-party sign-in (Google, GitHub).
• Activity data — articles you like, breweries or drinks you save, and reviews you write.
• Producer data — if you claim a producer profile, we store your association with that profile and any content you post (news updates, offers).
• Usage data — page views and article click-throughs, used to rank popular content. This data is not linked to identifiable individuals outside of your account session.
• Communications — emails we send you (welcome, password reset, claim approval). We do not send marketing email without your explicit consent.

Why we collect it and our lawful basis

• Contract — to operate your account and provide the service you signed up for.
• Legitimate interests — to improve the platform, rank content by popularity, and detect abuse.
• Legal obligation — to keep records where required by law.

We do not sell your personal data to third parties and do not use it for advertising.

How long we keep your data

We keep your account data for as long as your account is active. If you delete your account, your personal data is deleted immediately. Anonymised usage data (page views, click counts) may be retained for analytical purposes.

Who we share it with

We use a small number of third-party services to operate the platform:

• Resend — transactional email delivery (password reset, notifications). Your email address is shared only to send emails you request.
• Google / GitHub — if you use social sign-in, your name, email, and profile picture are passed to us by that provider under their own privacy policies.
• Hosting provider — our database and application servers are hosted by a third-party provider. Data is stored in the UK or EU.

We do not share your data with any other third parties without your consent, except where required by law.

Cookies

We use a single session cookie to keep you signed in. We do not use advertising, tracking, or analytics cookies. No cookie consent banner is required for strictly necessary cookies under UK PECR.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and all associated data — you can do this at any time from your account page.
• Object to processing based on legitimate interests.
• Portability — request a copy of your data in a machine-readable format.
• Complain to the ICO if you believe we have handled your data unlawfully.

To exercise any of these rights, email us at hello@brewwho.co.uk. We will respond within 30 days.

Changes to this policy

We may update this policy from time to time. Material changes will be notified by email to registered users. The date at the top of this page always shows when it was last revised.