Our consumers are at the heart of what we do. This Privacy and Cookie Notice applies to personal information collected by or on behalf of a company within the Diageo group of companies. It sets out what we do with your personal information, how we keep it secure and explains the rights that you have in relation to your personal information.

Particularly interested in how we use cookies?  Please see the dedicated Cookie section of this notice .

Last revised: [June 2020]

Who we are

Diageo is the world’s leading premium drinks business. Details of Diageo’s different brands can be found here.

This website and/or mobile app is operated by a member of the Diageo group of companies, the ultimate holding company of which is Diageo plc (registered in England and Wales with company number 23307 and registered address at Lakeside Drive, London, NW10 7HQ, United Kingdom). Information on our subsidiaries can be found in our latest annual report, which is available here.

All references to 'our', 'us', 'we', or ‘company’ within this notice are deemed to refer to Diageo plc, its subsidiaries, affiliates, and/or associates, as appropriate.

Are you of legal purchase age?

You must not provide us with your personal information if you are not of legal age to purchase alcohol in the jurisdiction in which you reside and (if different) in the jurisdiction in which you are accessing the website or app.

We do not intend to collect personal information from any individuals under the legal purchase age, or to market alcoholic beverages to anyone under the legal purchase age.

If we receive notice or believe that someone under the legal purchase age has provided us with personal information we will make every reasonable effort to remove such personal information from our records.

What types of personal information do we collect?

Personal information is information about an identifiable individual, as defined by applicable law. The personal information we collect includes:

 (a) information you provide to us; and

 (b) information we automatically collect/generate or information we obtain from third parties.

We have set out below more details regarding these types of personal information:

How/when do we collect personal information?

We will indicate where any personal information we have requested is mandatory or optional. We will also explain the consequences should you decide not to provide information which we have indicated is mandatory. In some circumstances this may mean we are unable to provide you with a certain service or product.

Here are a few places third party data may come from:

Purposes for which your personal information is used

The different purposes for which we use your personal information are set out below:

Legal basis for the processing of personal information

We will only process your personal information where we have a legal basis to do so. The legal basis will depend on the purposes for which we have collected and use your personal information. In almost every case the legal basis will be one of the following:

Disclosure of your personal information

We value your personal information and only share it with third parties in certain circumstances.  From time to time we may disclose personal information to:

  1. third parties where you have provided your consent. For example we will obtain your permission before we allow a third party that is not an affiliate to send you any marketing and promotional information relating to that third party’s products or services;
  2. our service providers and subcontractors, including our affiliates, and/or third party websites (such as social media platforms or search engines) retained to perform functions on our behalf, or to provide services to us (such as warehousing and delivery) marketing and advertising (including by delivering online interest-based advertising on third party websites and social media platforms where you have consented to the use of advertising cookies set by Diageo or our partners); credit card and data processing; age verification; monitoring our digital advertisements to ensure that they do not appear on unsuitable websites or near inappropriate content and also to ensure that our advertising is visible and seen by real people online (as opposed to ‘bots’ or similar fraudulent techniques); software development; website hosting and management; information technology and office services; legal, accounting, audit and other professional service providers; and other services related to our business), provided such service providers and subcontractors have entered into written agreements with us and do not collect, use, or disclose the personal information for any purpose other than to perform such functions on our behalf, to provide services to us, or as otherwise required or permitted by law;
  3. third parties who, in our reasonable judgment, are providing or seeking the information as your authorised or appointed legal agent;
  4. a person or entity, including our affiliates, in the event of a sale, merger, consolidation, change in control, transfer of substantial assets, financing, reorganisation, or liquidation whereby we transfer, sell, or assign to such third party information concerning your relationship with us, including without limitation, personal information that you provide and other information concerning your relationship with us; and
  5. law enforcement, governmental or regulatory agencies, or other third parties in order to comply with applicable law, or where we believe such action is necessary in order to comply with applicable law, or to detect, protect, or defend us and/or other third parties against error, negligence, breach of contract, theft, fraud, or other illegal or harmful activity, to comply with our audit and security requirements, or to audit compliance with our corporate policies, procedures, legal, or contractual obligations.

International data transfers

Please note that your personal information may be transferred to, and stored at, a destination outside the country in which you reside, including countries, which have less strict, or no data protection laws, when compared to those in your country.

Whenever we transfer your information as described in the paragraph above, we will take steps which are reasonably necessary to ensure that adequate safeguards are in place to protect your personal information and to make sure it is treated securely. In these cases, we rely on approved data transfer mechanisms (for example, the EU “Standard Contractual Clauses” or the EU-US “Privacy Shield”) to ensure your information is subject to adequate safeguards in the recipient country. If you are located in the EEA, you may contact us using the contact details below for a copy of the safeguards which we have put in place to protect your personal information and privacy rights in these circumstances.  

Public areas of our websites and apps

Information that you post on or through the public areas of our websites and apps (e.g., chat rooms, bulletin boards, discussion groups), or on social media platforms generally is accessible to, and may be collected and used by, others, and may result in unsolicited messages or other contact from others. You should not provide personal information about yourself in public (or interactive) areas of our websites, apps or social media pages.

Information security

We take information security seriously and take precautions to keep your personal information secure. We have put in place appropriate physical, technical, and organisational measures to safeguard the information we collect. However, we have no control over the privacy of any communication while it is in transit to us. We therefore recommend that you do not include confidential, proprietary, or sensitive information in any such communications.

Unfortunately, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem by contacting us at the contact details below.

In the unlikely event that we believe that the security of your personal information in our possession or control may have been compromised, we may seek to notify you of that development. If such a notification is appropriate, we will endeavour to do so as promptly as possible under the circumstances, and, to the extent we have your email address, we may notify you by email.

You are reminded that, in accordance with the Conditions of Use for this website and/or app, you are responsible for maintaining the strict confidentiality of your account password, and you are responsible for any activity under your account and password. It is your sole responsibility to control the dissemination and use of your password, access to and use of your account, and to notify us when you wish to cancel your account. We will not be responsible or liable for any loss or damage arising from your failure to comply with this obligation.

Your rights

Depending on the jurisdiction in which you are located, you have certain rights in relation to your personal information. These rights may include:

If you wish to exercise any of these rights you may contact us (using the contact details provided below). We will handle any request to exercise your rights in accordance with applicable law in your country and any relevant legal exemptions.

How to make a complaint

You have the right to complain to a data protection authority if you think we have processed your personal information in a manner which is unlawful or infringes your rights.

However if you have such concerns we suggest that you initially contact us (using the contact details below in the “How to contact us” section) so that we can investigate, and hopefully resolve, your concerns.

How long will we retain your personal information for?

We will retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy and Cookie Notice unless a longer retention period is required or permitted by law.  After this period it will be deleted or in some cases anonymised.

For example, where you have made a purchase with us, we will keep a record of your purchase for the period necessary for invoicing, tax and warranty purposes. We may also keep a record of correspondence with you (for example if you have made a complaint) for as long as is appropriate to protect us in the event of a legal claim.

Where we have collected the personal information based on your consent and we have no other lawful basis to continue with that processing, if you subsequently withdraw your consent then we will delete your personal information. However, please note that where you unsubscribe from our marketing communications, we will keep a record of your contact details to ensure we do not send you further marketing communications in future.

Interfaces with Third-Party Websites and Services

Our websites and apps may contain links, references, and content from other websites and services outside of our control. Please be aware that we have no control over these websites and services and our Privacy and Cookie Notice does not apply to them.

We will not be liable to you for any issues arising in connection with their use of your information and we encourage you to read the Privacy and Cookie Notices and Conditions of Use of any linked, referenced, or interfacing websites and services you visit or use.

Cookies and similar technologies

Like many other websites and apps, we use cookies, scripts, pixel tags, etags, web beacons  and similar technologies (collectively referred to as “cookies”) to help us gather and store information about visitors to our websites and apps and certain third party websites with whom we have partnered.

This section explains what cookies are and gives details of the specific cookies we use on our website.  It also sets out why we use these cookies and provides information on the cookie choices that you and all our website visitors have.

We use a range of cookies on our website, including strictly necessary cookies, performance / analytics cookies, functional cookies and advertising cookies (see more details under ‘What do we use our cookies for?’ below).  The cookies may be set by us or by a third party, including advertising cookies, which are used by our advertising partners to show online adverts based on your activity.  When you first visit our website, you will be asked via our Cookie Preference Centre (the ‘CPC’) if you agree to non-essential cookies – and we will not use these cookies unless and until you provide your consent.  You can also change your mind at any time using the CPC or the settings on your internet browser or device (see more details under ‘How to manage cookies’ below).

If you have any questions about our use of cookies, please get in touch with us using the details at the end of this notice.

What is a cookie?

A cookie is a text-only string of information that a website transfers to the cookie file of the browser on your device’s hard disk. A cookie will typically contain the name of the domain from which the cookie has come, the "lifetime" of the cookie, and a value, usually a randomly generated unique number. The other technologies we use serve a very similarly function but work slightly differently.

We use two broad types of cookies:

These cookies can be divided into session cookies and persistent cookies.  Session cookies are temporary cookies that remember your user choices and preferences and are then deleted as soon as you leave the site.  Persistent cookies stay in one of your browser’s subfolders until you delete them manually or until they expire.

Cookies are useful because they allow a website to recognise a user’s device. You can find more information about cookies at: www.allaboutcookies.org.

How does this website use cookies?   

This website uses the following cookies for the following purposes:

How can you manage cookies?

There are a number of ways you can manage our website’s cookies.

Our Cookie Preference Centre (‘CPC’)

When you first visit our site, and where applicable based on your jurisdiction, we will ask you for your cookie preferences via our CPC.  Through the CPC, you can choose to provide or withhold your consent to non-essential cookies and we will only use these cookies if and when we have your consent to do so.  You can disable these cookies later or change your mind at any time via the CPC or through your browser settings (see below).

Your browser settings

If you are using a web browser (e.g. Google Chrome, Mozilla Firefox or Microsoft Edge), you have the ability to accept or decline cookies by modifying the settings in your browser. Please refer to your browser instructions or help screen to learn more about the functions which your browser provides to manage cookies. If you use different browsers and/or different devices you may need to ensure that each browser is adjusted to suit your cookie preferences. For instructions on how to manage cookies in your browser, please read the information available here. Please note that you may not be able to use all the interactive features of our site if all cookies are disabled.

If you are using a mobile app, the operating system of your mobile device (e.g. Apple iOS, Google Android or Microsoft Windows) provides privacy settings which let you manage how mobile apps use technologies similar to cookies to recognise your device and in certain cases make interest-based advertising available within mobile apps you use. Please refer to the instructions or help pages of your mobile operating system to learn more about the functions which it provides to manage these privacy settings.

You also have the ability to opt out of online interest-based advertising using the AdChoices icon as further described below.

How do I opt out of online interest- based advertising?

If you see any of our advertising with the  https://footer.diageohorizon.com/Generic/current/imgs/arrow_logo.jpg  logo  on it, you’re able to take control of whether you get these types of ads. This is the AdChoices icon provided by the European Interactive Digital Advertising Alliance (EDAA).

When you click through the Icon, you’ll get information about the companies that provide interest-based ads on the sites you visit. You’ll learn about how it works, how this type of advertising supports free content, and about other privacy choices.

If you don’t want this type of advertising, you can click through to the consumer choice page to opt out from the companies that participate in the Icon program.

For further information about how to manage or delete online interest-based advertising cookies in this way visit here.

How to contact us

We are committed to safeguarding your privacy. If you have any comments, queries, or complaints about our collection or use of personal information please contact us via:

Post: Global Data Privacy Officer, Global Legal Team, Diageo plc, Lakeside Drive, Park Royal, London, NW10 7HQ

Email:  consumer.privacy.queries@diageo.com 

You may also contact your local data protection regulator in the event of any complaints. The details of the UK Information Commissioner’s Office are here and the details of your local regulators can be provided via the email address above.

© 2020 All rights reserved. Version 12.0 dated June, 2020.