Privacy Policy

This policy explains how BrewTheory handles personal data when visitors use our website, read editorial content, and interact with site forms. We aim to collect as little personal data as reasonably possible while maintaining site security, service quality, and lawful reporting obligations.

1. Data controller and scope

BrewTheory acts as the controller for personal data processed through this website. This notice applies to website visits, page analytics, form submissions, and security logs connected with the public service.

It does not automatically extend to third-party services, payment platforms, or client systems that may be linked from this site. Those services apply their own privacy practices.

2. Categories of data we may process

Depending on how the site is used, we may process the following categories of information:

• technical identifiers such as IP address, browser type, device information, and approximate region
• usage data such as pages viewed, session duration, referring source, and interaction events
• information you choose to provide through a contact form or similar request field
• security data used to detect abuse, repeated failed requests, or other suspicious activity

We do not publish personal contact information on the site and we do not ask visitors to submit more data than is necessary for the relevant request.

3. Lawful bases for processing

Where the General Data Protection Regulation applies, BrewTheory relies on several lawful bases depending on the activity. These may include consent for optional cookies, legitimate interests for service security and basic performance measurement, and compliance with legal obligations where record retention is required.

When consent is used, visitors may withdraw it by adjusting browser settings or cookie preferences where available. Withdrawal does not affect processing that occurred before consent was removed.

4. Cookies and analytics

We use cookies and similar technologies to keep the site functional, remember basic preferences, and understand whether pages are operating correctly. Some cookies are strictly necessary for page delivery and user interface stability. Others help us understand aggregate usage patterns.

Cookie information may include a browser identifier, session timing, page transitions, and high-level interaction signals. We use this information to improve site speed, editorial structure, and tool performance rather than to build intrusive individual profiles.

5. Retention and security

Personal data is retained only for as long as necessary for the purpose for which it was collected, including reasonable periods for dispute handling, fraud prevention, and legal compliance. Retention periods vary according to the nature of the data and the operational need behind it.

We apply proportionate technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure, or loss. No web service can guarantee absolute security, but we review access controls, logging, and storage practices on a continuing basis.

6. Sharing and international transfers

We may use service providers that support hosting, analytics, infrastructure, and form processing. These providers may process data on our behalf under contractual terms that require confidentiality and appropriate safeguards.

Where data is transferred outside the UK or EEA, we seek appropriate transfer mechanisms and supplementary measures where relevant. The exact mechanism depends on the provider and jurisdiction involved.

7. Your rights

Subject to applicable law, you may have rights to request access to personal data, rectification of inaccurate information, erasure, restriction of processing, objection to certain processing, and data portability. You may also have the right to lodge a complaint with a supervisory authority.

To exercise a privacy-related request, use the contact form on this site and describe the request with enough detail for verification. We may ask for limited information needed to confirm identity before actioning a request.

8. Updates to this notice

We may revise this policy when our site, legal obligations, or processing activities change. The most recent version published on this page applies from the date of posting.