Legal
Privacy Policy
This policy explains what personal data Gunpowder Proof Ltd, trading as Navy Strength Distribution collects through navystrength.uk, why we collect it, who it is shared with, how long we keep it, and what rights you have. It is written to meet our obligations under the UK GDPR and the Data Protection Act 2018.
1. Who we are
Gunpowder Proof Ltd, trading as Navy Strength Distribution is the data controller for personal data collected through this website. That means we decide why and how it is processed.
| Company | Gunpowder Proof Ltd, trading as Navy Strength Distribution |
|---|---|
| Registered in | England and Wales, company number 17296912 |
| Registered office | Dept 6884, 126 East Ferry Road, Canary Wharf, London E14 9FP |
| Contact | hello@navystrength.uk |
We are exempt from the ICO data protection fee under the Data Protection (Charges and Information) Regulations 2018. That exemption concerns the fee only — our obligations under the UK GDPR, and your rights under it, are unaffected and are set out in full below.
We have not appointed a Data Protection Officer, as we are not required to. Questions about this policy go to the address above.
2. What we collect
Information you give us
This site has two forms — a brand study request and a general enquiry. Both collect only what you type into them:
- Your name
- Your brand or company name
- Your email address
- Your message, and the type of enquiry you select
- Whether you ticked the consent box
We do not ask for, and this site does not collect, payment details, card numbers or identity documents. If you email or call us directly, we hold that correspondence too.
Information collected automatically
Our host records standard server logs when you load a page — your IP address, the time of the request, the pages served, and your browser and device type. These are used to keep the site running and secure, not to build a profile of you.
Storage on your device
This site sets no cookies. It stores a single value in your browser's local storage, ns_age_ok, which records that you confirmed you are of legal drinking age so you are not asked again. It contains no personal data, is never transmitted to us, and you can clear it at any time through your browser settings.
Analytics
We do not currently run any analytics or tracking product on this site. If we introduce one, we will use a privacy-preserving, cookieless tool and update this policy before it goes live.
3. Why we use it, and our lawful basis
UK GDPR requires us to have a lawful basis for each use of your data. Ours are:
| What we do | Lawful basis |
|---|---|
| Reply to a trade enquiry you sent us | Legitimate interests — responding to someone who contacted us about doing business |
| Send the sample brand study you requested | Consent — the tick box on the form |
| Follow up about working together after your enquiry | Consent, where you gave it |
| Keep the site online, secure and free of spam | Legitimate interests — protecting our systems |
| Keep business and accounting records | Legal obligation |
Where we rely on consent, you can withdraw it at any time and we will stop. Withdrawing consent does not affect anything done before you withdrew it.
We do not sell your personal data, and we never will. We do not use it for automated decision-making or profiling.
4. Who we share it with
We use a small number of service providers who process data on our behalf, under contract and on our instructions:
| Provider | What they do | Where |
|---|---|---|
| Netlify, Inc. | Hosts the website and receives form submissions | United States |
| Microsoft (Microsoft 365) | Our email — where your enquiry lands and is replied to | EU / United States |
| Google (Google Fonts) | Serves the typefaces this site uses; your IP address is visible to Google when a page loads | United States |
We may also disclose data where the law requires it, or to establish or defend legal claims.
We do not pass enquiries from this website to Spirits of Anarchy or to any other distribution or wholesale partner.
5. Transfers outside the UK
Some of the providers above are based in the United States, so your data may be transferred there. Where that happens we rely on the UK Government's data bridge for the EU–US Data Privacy Framework, or on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, together with appropriate safeguards.
6. How long we keep it
| Data | Retention |
|---|---|
| Enquiries that do not lead to a relationship | 24 months from your last contact with us, then deleted |
| Enquiries from brands or venues we go on to work with | For the length of the relationship, then 6 years for contractual and tax records |
| Server logs | As retained by our host, typically no more than 30 days |
7. Your rights
Under UK GDPR you have the right to:
- Access — ask for a copy of the personal data we hold about you
- Rectification — have inaccurate data corrected
- Erasure — ask us to delete your data, where there is no overriding reason to keep it
- Restriction — ask us to pause processing while a concern is resolved
- Portability — receive the data you gave us in a machine-readable format
- Object — object to processing based on legitimate interests, and to direct marketing at any time
- Withdraw consent — where consent is our basis
Email hello@navystrength.uk and we will respond within one month. There is no charge.
8. Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
9. Security
The site is served over HTTPS. Form submissions are transmitted encrypted, and access to enquiry data is limited to the people at Navy Strength who need it. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
10. Children
This site concerns alcoholic drinks and is intended for adults of legal purchasing age, and principally for drinks trade professionals. It is not directed at children and we do not knowingly collect data from anyone under 18.
11. Changes
If we change how we use personal data we will update this page and change the date at the top. Where a change is significant, and we hold your contact details, we will tell you directly.