Privacy notice
Last updated: 6 October 2026
This notice explains how personal data is handled when you visit nishantsharma.co.uk (“the website”) or contact me through it. It is provided under Articles 13 and 14 of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
1. Who is responsible for your data
The website is the personal website of Nishant Sharma (“I”, “me”). I am the controller of the personal data described in this notice. You can contact me about any data protection matter at nishant@rosslyndistillery.com.
2. What personal data is processed
Visiting the website. The website sets no cookies, uses no analytics, advertising or tracking technologies, contains no forms, and loads its typefaces and images from its own address. Like any website, it is delivered by a hosting provider whose servers automatically record technical information in server logs when pages are requested. This normally includes your IP address, the date and time of the request, the page or file requested, the referring page, and your browser and device type.
Contacting me. If you email me, I will process your name, email address, the content of your message and anything else you choose to include, together with any reply.
Please do not send special category data (for example information about health, religion or ethnicity) unless it is necessary for your enquiry.
3. Why it is processed, and the lawful basis
- To deliver the website securely, keep it working and prevent misuse — legitimate interests (Article 6(1)(f)): it is necessary to operate a secure website.
- To read and reply to your enquiry and keep a record of our correspondence — legitimate interests (Article 6(1)(f)); or, where you are asking about a possible agreement, steps taken at your request before entering into a contract (Article 6(1)(b)).
- To comply with the law — legal obligation (Article 6(1)(c)), where a law requires me to keep or disclose information.
- To establish, exercise or defend legal claims — legitimate interests (Article 6(1)(f)).
Where I rely on legitimate interests, I have balanced them against your rights and interests. You can ask me for more information about this balance.
4. How long it is kept
Server logs are kept only as long as needed for security and operational purposes and, under my policy, for no longer than twelve months. Email correspondence is kept for as long as needed to deal with your enquiry and, as a record, for up to six years after our last contact, unless a longer period is needed for a legal claim or required by law.
5. Who it is shared with
Personal data is shared only with service providers who process it on my behalf and under contract, namely the website’s hosting provider and my email service provider; with professional advisers where necessary; and with regulators, law-enforcement bodies or courts where the law requires it. I do not sell personal data or use it for advertising.
6. International transfers
My service providers may process data outside the United Kingdom. Where they do, the transfer is protected by UK adequacy regulations or by appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
7. Security
The website is served over an encrypted connection (HTTPS), and access to correspondence is restricted. No method of transmission over the internet is completely secure, but I take reasonable steps to protect personal data.
8. Your rights
Under the UK GDPR you have the right to: be informed about how your data is used; access your data; have inaccurate data corrected; have data erased; restrict processing; object to processing based on legitimate interests; and data portability where it applies. No decisions are made about you by automated means. To exercise a right, email nishant@rosslyndistillery.com. I will normally respond within one month, free of charge; complex requests may take up to two further months, and I will tell you if so. I may need to confirm your identity first.
9. Children
The website discusses alcoholic drinks and is not directed at anyone under 18. I do not knowingly collect personal data from children.
10. Other websites
Links to other websites (for example press articles, video platforms and LinkedIn) take you to sites that have their own privacy policies. I am not responsible for how they handle your data.
11. Complaints
If you have a concern, please contact me first so I can try to resolve it. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority: ico.org.uk/make-a-complaint, telephone 0303 123 1113, or Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
12. Changes to this notice
I may update this notice from time to time. The date at the top shows when it was last changed.