Purpose and Scope
These legal notices apply to the website operated at hopstarbrewery.co.uk (the “Website”). By accessing or using the Website, you agree to these terms. If you do not agree, you must not use the Website.
Website Hosting and Traffic Routing
Hosting, content delivery, performance optimisation, and security services for this Website are provided by Cloudflare.
Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, United States.
Cloudflare UK Limited, 2nd Floor, 20 St Thomas Street, London SE1 9RG, United Kingdom.
Intellectual Property
All content on the Website, including but not limited to text, designs, graphics, logos, images, videos, audio clips, software code, databases, and the selection and arrangement thereof, is protected by applicable intellectual property laws. The names, signs, branding, and trade dress associated with HopStarBrewery and the Website are protected rights of their respective owners.
You are granted a limited, non-exclusive, non-transferable licence to access and use the Website for personal, non-commercial purposes. Any reproduction, adaptation, modification, translation, distribution, display, transmission, publication, extraction, data mining, or other use of the Website or its content, in whole or in part, without prior written permission of the rights holder is prohibited.
Where user-generated content is submitted to the Website (for example, reviews or comments), you warrant that you hold all necessary rights to such content and grant the Website operator a worldwide, royalty-free, non-exclusive licence to host, store, reproduce, display, and distribute that content for the operation and promotion of the Website, for the duration of applicable rights.
Access, Responsible Use, and Age Restriction
The Website is intended for persons aged 18 or over. By using the Website, and in particular by accessing any shop functionality or placing an order, you confirm that you are at least 18 years old. It is illegal for anyone under 18 to purchase or attempt to purchase alcohol in the United Kingdom, and it is illegal to purchase alcohol on behalf of a person under 18. The Website operator reserves the right to refuse service, cancel orders, or restrict access where age cannot be verified or where misuse is suspected.
You must not misuse the Website by knowingly introducing viruses, trojans, worms, logic bombs, or other material that is malicious or technologically harmful; attempting to gain unauthorised access to the Website, the server on which it is stored, or any server, computer, or database connected to the Website; or attacking the Website via a denial-of-service or distributed denial-of-service attack.
Liability and Disclaimers
While reasonable efforts are made to ensure that information on the Website is accurate, complete, and up to date, it is provided for general information only and without any guarantee, warranty, or representation as to accuracy, completeness, reliability, or fitness for a particular purpose.
The Website may reference third-party products, services, or resources. Any such references do not constitute endorsements, and the Website operator is not responsible for third-party content or services.
To the fullest extent permitted by law, the Website operator excludes liability for any indirect or consequential loss or damage, loss of profit, business interruption, loss of data, or other loss arising from or in connection with use of, or inability to use, the Website. Nothing in these notices excludes or limits liability that cannot be excluded or limited by law (including liability for death or personal injury caused by negligence, fraud, or fraudulent misrepresentation).
The Website is provided “as is” and “as available”. Access may be suspended or withdrawn without notice for maintenance, upgrades, or events outside reasonable control.
Personal Data Processing
Data Controller
For the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018, personal data collected through the Website is processed by the Website operator acting as data controller.
Categories of Data Collected
- Identification and contact data you provide (for example, name, postal address, billing address, and, where applicable, age or date of birth for age verification).
- Account and transaction data (for example, login details, order history, delivery preferences, and payment status information obtained from payment providers; full payment card details are handled by certified payment processors and are not stored on the Website).
- Communications data (for example, messages or enquiries you send and your marketing preferences).
- Technical and usage data (for example, IP address, device identifiers, browser type and settings, pages visited, time and date of visits, referral URLs, and interaction data), collected via logs and cookies or similar technologies.
Purposes and Legal Bases
- To operate the Website, secure it, and prevent fraud or abuse (legitimate interests; compliance with legal obligations).
- To process orders, deliver products, manage customer accounts, and provide customer support (performance of a contract; legitimate interests; legal obligations such as tax and accounting).
- To send service communications (performance of a contract; legitimate interests) and, where you have opted in, marketing communications (consent, which you may withdraw at any time).
- To analyse and improve Website performance, user experience, and services (consent for non-essential cookies and analytics; legitimate interests for aggregated, non-identifiable insights).
- To comply with applicable laws, including age verification, record-keeping, and regulatory requirements (legal obligations).
Recipients and Processors
Personal data may be shared with trusted service providers acting under instructions, including hosting, security and performance providers (such as Cloudflare), IT and support providers, analytics providers, payment service providers, and delivery and logistics partners, solely for the purposes described above and subject to appropriate contractual safeguards.
International Data Transfers
Where personal data is transferred outside the United Kingdom, such transfers will rely on an adequacy regulation or appropriate safeguards, such as standard contractual clauses approved for use in the UK or the UK International Data Transfer Agreement, together with supplementary measures where required.
Retention
- Account and order records: retained for the duration of your relationship with the Website and for up to six years thereafter to comply with legal and tax obligations.
- Customer service communications: retained for up to three years after last contact, or longer where necessary to establish, exercise, or defend legal claims.
- Technical logs necessary for security and integrity: retained for up to 12 months, unless a longer period is required for investigating incidents.
- Analytics and preference cookies: retained in accordance with the periods stated in the Cookies section below.
Your Rights
Subject to conditions and exemptions under data protection law, you have the rights to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests, as well as the right to withdraw consent at any time (without affecting the lawfulness of processing prior to withdrawal). To exercise your rights, use the contact details provided on this Website.
You also have the right to lodge a complaint with the Information Commissioner’s Office: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; telephone 0303 123 1113.
Security
Appropriate technical and organisational measures are applied to protect personal data against unauthorised access, alteration, disclosure, or destruction. No method of transmission over the internet or electronic storage is entirely secure; residual risk cannot be eliminated.
Cookies and Similar Technologies
What Cookies Are
Cookies are small text files placed on your device when you visit the Website. Similar technologies (such as local storage, pixels, and tags) may also be used for comparable purposes.
How We Use Cookies
- Strictly necessary cookies: essential for the Website to function, to provide security, load balancing, and to remember choices necessary to provide a service you request (for example, maintaining your session or a shopping basket). These do not require consent under the Privacy and Electronic Communications Regulations.
- Preferences cookies: remember your settings and choices (for example, region or cookie preferences). These may require consent where non-essential.
- Analytics cookies: help measure and improve performance and user experience by collecting aggregated data about how visitors use the Website. These are set only with your consent.
- Marketing or profiling cookies: if used, these support advertising relevance and campaign measurement. These are set only with your consent.
Consent and Control
Non-essential cookies (including analytics and marketing) are used only if you provide consent via the cookie banner or settings tool displayed on the Website. You can change or withdraw your consent at any time using the same tool. You may also configure your browser to block or delete cookies. Blocking some cookies may affect the proper functioning of the Website.
Retention
- Strictly necessary and security cookies: session-based or retained for up to 12 months, depending on purpose.
- Preferences cookies: up to 12 months.
- Analytics cookies: up to 24 months.
- Marketing cookies: up to 24 months.
Cloudflare Cookies
Cloudflare may set essential cookies to identify malicious visitors, manage traffic, and enhance performance and security. These cookies are strictly necessary for the operation and protection of the Website.
Do Not Track
The Website does not currently respond to Do Not Track signals. You can manage consent and cookies as described above.
Third-Party Services and Links
Where the Website integrates third-party services (for example, payment processors, delivery providers, analytics, or social media features), your use of those services may be subject to the third parties’ own terms and privacy notices. Any references to third-party sites or resources are provided for information only, and the Website operator has no control over and accepts no responsibility for them.
Applicable Law and Jurisdiction
These notices and any dispute or claim arising out of or in connection with them or the Website (including non-contractual disputes or claims) are governed by the laws of England and Wales. The courts of England and Wales shall have exclusive jurisdiction.
Changes to These Legal Notices
These notices may be updated from time to time to reflect changes in law, technology, or the Website’s services and practices. Continued use of the Website after changes take effect constitutes acceptance of the updated notices.
Last updated: 8 December 2025.