Privacy Policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from middletonmixology.com (the "Site").

Personal Information We Collect

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as "Device Information".

We collect Device Information using the following technologies:

• Cookies: Data files that are placed on your device or computer and often include a unique identifier. For more information about cookies, and how to disable cookies, visit allaboutcookies.org.
• Log files: Track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
• Web beacons, tags, and pixels: Electronic files used to record information about how you browse the Site.

The cookie policy lists each of these technologies, the company that provides it and the category that controls it.

When you arrive from a campaign link we also keep, in your browser for the tab session, the campaign fields of the link (the utm values), the path of the page you landed on and the referring site. An advertising click identifier or an affiliate referral code in the link is kept only while the marketing category of your privacy choices is on. We refer to this as "Attribution Information".

When you send us a form (a wholesale or corporate enquiry, a contact message, an email or text signup, a back-in-stock or wishlist request) we collect what you enter, such as your name, business name, email address, phone number and message, together with the Attribution Information for that visit. We refer to this as "Enquiry Information".

Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. We refer to this information as "Order Information".

When we talk about "Personal Information" in this Privacy Policy, we are talking about Device Information, Attribution Information, Enquiry Information and Order Information.

How Do We Use Your Personal Information?

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

• Communicate with you
• Screen our orders for potential risk or fraud
• When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services
• Share emails with a third party to collect reviews

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns). Where the session replay category is on, we also record how pages are used so we can find usability problems.

We use Enquiry Information to answer you, to manage wholesale and corporate accounts, and to send the emails or text messages you signed up for. We use Attribution Information to understand which campaigns bring visitors and enquiries.

Sharing Your Personal Information

We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Shopify to power our online store—you can read more about how Shopify uses your Personal Information here: Shopify Privacy Policy.

The categories of recipients are:

• Store, hosting and security providers (Shopify, Vercel, Cloudflare, Upstash, Sentry): Order Information and Device Information needed to run the store, take payment, deliver orders, keep the Site secure and fix errors.
• Analytics providers (Google Analytics, and Vercel Web Analytics and Speed Insights): Device Information about pages viewed and actions taken on the Site. You can opt out of Google Analytics here: Google Analytics Opt-out, or with your privacy choices on this Site.
• Advertising and marketing providers (Google Ads, Meta, Klaviyo, HubSpot, Apollo, OpenAI Ads and our affiliate platform GoAffPro): Device Information about your visit and, for email and customer relationship tools, Enquiry Information.
• Session replay provider (Microsoft Clarity): recordings of how pages are used.
• Customer relationship, messaging and automation tools (HubSpot, Klaviyo, Zapier, Slack and the system that processes wholesale applications): Enquiry Information, so we can respond and follow up.
• Review collection (Shopper Approved): your name, email address and the products you bought, so it can ask you for a review after an order.
• AI providers (OpenAI): the text you type into site search or the chat assistant.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Targeted Advertising and Your Privacy Choices

We use Personal Information for targeted advertising. While the marketing category of your privacy choices is on, the advertising and marketing providers named above receive identifiers for your browser or device and information about your activity on the Site, and use it to measure our advertising and to show advertising based on that activity. Some US state privacy laws treat this kind of disclosure as a "sale" or "sharing" of personal information.

You can opt out on this Site at any time, without an account and without giving us any information: open "Your Privacy Choices" at the bottom of any page, or use the button below, switch off "Marketing and targeted advertising" and save. The choice takes effect straight away for this browser and is remembered for 180 days. It applies to the browser you set it in, so repeat it on other browsers and devices you use.

For visitors in the United States, analytics, marketing and session replay are on unless you opt out. Everywhere else, and where we cannot determine your country, they are off until you switch them on. The cookie policy has the details.

Checkout is hosted by Shopify. The choices you save on this Site are not passed to the Shopify checkout, which has its own privacy settings.

You can also use the advertising platforms' own controls:

• Facebook
• Google
• Bing

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance's opt-out portal at: optout.aboutads.info. These controls are in addition to the opt-out on this Site, not a replacement for it.

Global Privacy Control and Do Not Track

We honor the Global Privacy Control (GPC) signal. If your browser sends it, we treat it as an opt-out: analytics, marketing and targeted advertising, and session replay are switched off for that browser before those technologies load, including where you had accepted them before. The opt-out is saved, so it continues to apply on later visits until you change it in "Your Privacy Choices".

GPC is a different signal from the older "Do Not Track" browser setting. We do not respond to Do Not Track on its own.

Your Rights

Depending on where you live, privacy laws may give you rights over your Personal Information. These can include the right to know what we hold about you and to receive a copy of it, to have it corrected, to have it deleted, and to opt out of targeted advertising or of the sale or sharing of your Personal Information. Which rights apply, and any limits on them, depend on the law of the place where you live.

To opt out of targeted advertising, use "Your Privacy Choices" as described above. For any other request, contact us using the details at the end of this policy and tell us what you would like us to do. We will ask only for what we need to find your records and confirm the request is yours.

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.

Data Retention

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

Your privacy choices are kept in a cookie on your browser for 180 days. Attribution Information is kept in your browser until you close the tab, and is stored with an enquiry if you send one. Cookies set by the analytics, advertising and session replay providers last for the periods those providers set, and the ones we know of are removed from your browser when you switch the category off. Switching a category off does not delete information a provider has already received; contact us if you would like us to act on that.

Age Restrictions

AI Chat Assistant (Max)

Our website includes an AI chat assistant named Max, powered by OpenAI. When you interact with Max, your messages are processed to generate responses. Please be aware of the following:

• Chat messages you send are transmitted to OpenAI's API for processing. OpenAI's privacy policy applies to this processing.
• We do not permanently store your chat conversation history on our servers beyond the duration of your session. If you ask in the chat for a call back from our sales team, the contact details you enter and the conversation are sent to our customer relationship system so the team can follow up.
• Do not share sensitive personal information (payment details, passwords, government ID numbers) in the chat.
• Max is an AI and can make mistakes. Always verify prices, product details, and links before making purchasing decisions.
• The chat is intended for users 21 and older, consistent with our site-wide age restriction.

By using the Max chat assistant, you consent to your messages being processed by OpenAI in accordance with their privacy policy.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.