1. Introduction and Data Controller
BEVS(“we”, “us”, or “our”) is committed to protecting your privacy and safeguarding your personal data. This policy explains how we collect, process, and protect your information when you visit our website (theonlywayisbevs.com), sign up for our waitlist, contact our support team, or use our on-demand beverage delivery services.
For the purpose of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, BEVS is the Data Controller.
Data Protection Enquiries: info@theonlywayisbevs.com | Headquarters: Basildon, Essex, United Kingdom | Phone: +44 743 855 4370
2. The Personal Data We Collect About You
Because BEVS delivers age-restricted alcoholic beverages, we collect specific data categories necessary to provide our service lawfully and safely:
| Category | Examples | Source & Purpose |
|---|---|---|
| Identity & Age | Name, date of birth, age verification status (18+). | Order checkout and age gate prompts to meet legal alcohol licensing rules. |
| Challenge 25 Check | Visual in-person inspection of photo ID (Passport, UK Driving Licence, PASS card) upon delivery. | Conducted physically by drivers at handover. We never photograph, scan, or store copies of your physical ID. |
| Contact & Delivery | Delivery address, postcode, phone number, email address, delivery notes. | Order fulfilment and driver communications. |
| Transaction & Order | Products ordered, order value, delivery time, transaction reference. | Payment verification and accounting. |
| Payment Details | Payment tokens and card brand. | Processed securely via PCI-DSS certified payment processors (e.g. Stripe, Apple Pay, Google Pay). BEVS does not store raw card numbers. |
| Marketing & Waitlist | Email address, platform preference (iOS/Android). | Waitlist registration forms (processed via Brevo). |
| Technical & Usage | IP address, browser type, device identifiers, analytics cookies. | Server logs and Google Analytics (subject to cookie consent). |
3. Our Lawful Bases for Processing (UK GDPR)
| Purpose | Lawful Basis | Justification |
|---|---|---|
| Age Verification (18+) | Legal Obligation | Licensing Act 2003 strictly prohibits the sale or delivery of alcohol to persons under 18. |
| Order Delivery | Performance of a Contract | Required to prepare, route, and deliver your purchased products. |
| Customer Service | Legitimate Interests | To resolve customer inquiries and support requests efficiently. |
| Waitlist & Promotional News | Consent | We only send marketing updates if you have opted in. You can unsubscribe at any time. |
| Fraud Prevention & Site Security | Legitimate Interests | Protecting our platform and users from unauthorized transactions or abuse. |
| Statutory Accounting & Taxes | Legal Obligation | Complying with HMRC and UK corporate financial reporting laws. |
4. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data. We only share details with trusted service partners under strict data processing agreements:
- Delivery Couriers: Verified drivers receive your name, address, and delivery instructions to complete delivery.
- Payment Gateways: PCI-DSS compliant payment providers who securely process your card or digital wallet.
- Communications: Brevo (Sendinblue) for waitlist announcements and transactional emails.
- Hosting: Cloud hosting infrastructure (e.g. Vercel) that securely hosts our application.
- Licensing & Law Enforcement: Police or licensing authorities only when strictly required by UK law.
5. Data Retention
- Order and financial records: Retained for six (6) years following the end of the relevant financial tax year in accordance with HMRC guidelines.
- Waitlist data: Retained until the service launches or until you choose to unsubscribe.
- Customer inquiries: Retained for up to 12 months after resolution.
- Physical IDs: Inspected visually on doorstep under Challenge 25 and never retained.
6. Your Rights Under UK GDPR
You have the right to:
- Request access to personal data we hold about you (Subject Access Request).
- Request rectification of inaccurate or incomplete information.
- Request erasure of your data (“Right to be Forgotten”) where legally permissible.
- Restrict or object to our processing of your personal data.
- Request data portability.
- Withdraw marketing or cookie consent at any time without penalty.
To exercise any of your rights, email us at info@theonlywayisbevs.com.
7. Supervisory Authority (ICO)
If you have an unresolved complaint about our data practices, you may lodge a complaint with the UK Information Commissioner’s Office (ICO):
The Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 | Website: ico.org.uk
Contact Our Privacy Team
BEVS
Headquarters: Basildon, Essex, United Kingdom
Email: info@theonlywayisbevs.com
Phone: +44 743 855 4370