Legal
DRAFT: pending Bit Cask legal review
Draft information about how BitCask collects, uses, protects and retains personal data.
Data Protection Officer: contact details pending configuration.
BitCask (“we”, “us”, “our”) provides whisky cask investment, bespoke bottlings, private tastings and related membership services. We are the data controller for the personal data described in this policy.
Contact: hello@bit-cask.com | bit-cask.com | 75 Maude Road, #04-01, 208352, Singapore
Information you give us: name, email address, telephone number, postal and delivery address, date of birth or age confirmation, membership details, investment profile answers (objectives, horizon, budget, flavour preferences), enquiry and tasting requests, bespoke bottling instructions, and correspondence with your cask manager.
Information we generate: your membership tier and points balance, cask and bottle holdings, transaction and valuation history, and records of tastings and events you attend.
Information collected automatically: IP address, device and browser type, pages viewed, referring pages and approximate location, gathered through cookies and similar technologies.
We do not knowingly collect data from anyone below the legal drinking age in their country of residence.
To create and administer your account, membership tier and points; to source, purchase, store, insure, revalue, bottle and sell casks on your instruction; to fulfil bottle orders and deliveries; to arrange tastings and events; to answer enquiries and provide personalised cask guidance; to send The Whisky Times and offers where you have chosen to receive them; to meet legal, tax, duty, anti-money-laundering and age-verification obligations; and to secure, maintain and improve our website.
Where the UK GDPR, EU GDPR or Singapore's Personal Data Protection Act applies, we rely on: performance of a contract (ownership, purchases, membership); legitimate interests (service improvement, fraud prevention, client care); consent (marketing communications and non-essential cookies); and legal obligation (duty, tax, record-keeping and age verification).
We share personal data only as needed with: bonded warehouse operators, insurers and brokers; bottling, labelling, logistics and delivery partners; payment processors; auction houses and verified buyers where you instruct a sale; professional advisers and auditors; and technology providers that host our website, database and email systems.
We never sell your personal data. Where partners are located outside your country, transfers are made under appropriate safeguards such as standard contractual clauses.
Valuations, holdings and movement data shown in the Cask Exchange are visible only to the account holder. Aggregated, anonymised market data may be used to publish index-level information that cannot identify you or your holdings.
We send marketing by email or by phone, SMS and WhatsApp only where you have separately opted in to that channel. You may withdraw marketing consent at any time through the privacy request form or the unsubscribe link in an email. Withdrawal does not affect service messages about your account, casks or orders.
Strictly necessary storage supports site functions such as age confirmation and account sessions. Optional functional, analytics, marketing cookies and pixels remain off until you choose to accept them. You can accept, reject or manage optional categories in the cookie notice and change your choice later using Cookie Settings in the footer.
Age confirmation: if you choose “Remember me on this device” when confirming your age, we store that preference in your browser so we do not ask again on this device. It holds no personal data, it is not shared with anyone, and clearing your browser storage removes it.
Optional categories start switched off. Closing the notice without saving does not grant consent. A saved choice is remembered on your device; open Cookie Settings in the footer at any time to review or change it. No analytics, pixel or other third-party tracking tags are currently loaded by the site.
We keep account, ownership, bottling and transaction records for as long as you hold an account and thereafter for the period required by tax, duty and accounting law. Enquiry records are scheduled for deletion after three years. The website does not send incomplete or abandoned form data to the server.
Access to personal data is restricted through application roles and infrastructure permissions. The production database uses encryption at rest, and web traffic uses HTTPS. No transmission over the internet can be guaranteed fully secure.
Subject to local law you may request access to or correction of your personal data and withdraw marketing consent through our privacy request form. Other rights may be exercised by contacting hello@bit-cask.com. We will verify requests and respond within the applicable statutory period.
We may update this policy from time to time. Material changes will be notified by email or through a notice on this website.
Registered entity name and UEN pending configuration.
hello@bit-cask.com · 75 Maude Road, #04-01, 208352, Singapore
Need to access or correct your information, or withdraw marketing consent? Submit a privacy request.
