Skip to content
Blow & Barrel
Menu

Privacy & cookie policy

Last updated: October 2026

This policy explains which personal data is processed when you visit blowandbarrel.co.uk, why, and on what legal basis. It is written for readers in the United Kingdom under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). Readers in the EU have the same rights under the EU GDPR.

1. Who is responsible

The data controller is the operator of blowandbarrel.co.uk. Contact: contact@blowandbarrel.co.uk

More about who runs the site is on the About page. We have not appointed a data protection officer because we are not required to. For any privacy question, please use the email address above.

2. In short

  • You can use this site without telling us who you are. There are no user accounts, no comments and no newsletter.
  • When you open a page, our hosting provider processes technical data (server logs), kept for no more than 14 days.
  • Google Analytics only loads if you agree to it in the cookie banner.
  • Links to Amazon are affiliate links. Amazon only receives data once you click one.
  • Fonts and images are served from our own server. No content is loaded from Google Fonts, Amazon or any other third party when you read a page.

3. Hosting

The site runs on servers of an external hosting provider in a data centre in the European Union or the United Kingdom. The provider processes the data that arises when pages are requested only on our behalf and on our instructions, under a data processing agreement (Article 28 UK GDPR). The legal basis is our legitimate interest in delivering the site securely and reliably (Article 6(1)(f) UK GDPR).

4. Server logs

Each time a page is requested, the web server automatically records information your browser sends:

  • the IP address of the requesting device,
  • the date and time of the request,
  • the address (URL) requested and the amount of data transferred,
  • the HTTP status code,
  • the website you came from (referrer),
  • your browser and operating system (user agent).

We need this data to deliver the site, keep it stable and secure, and fend off attacks. The legal basis is Article 6(1)(f) UK GDPR. Server logs are deleted after 14 days at the latest, unless a specific security incident means they must be kept longer to investigate it. Logs are not combined with any other data.

5. Cookies, local storage and consent

On your first visit a banner asks whether we may use Google Analytics to measure how the site is used. You can choose "Accept", "Reject" or pick in "Cookie settings". Until you accept, no analytics cookies are set and no data is sent to Google.

We store your choice in your browser's local storage (entry "cookie-consent") so the banner does not appear on every visit. This storage is strictly necessary to provide the choice you asked for, so it does not need consent under PECR (regulation 6(4)). The related processing is based on our legal obligation to be able to show that you consented (Article 6(1)(c) and Article 7(1) UK GDPR). The entry stays until you delete it in your browser.

You can withdraw or change your consent at any time, with effect for the future: . Withdrawing consent does not affect processing that took place before (Article 7(3) UK GDPR). When you withdraw, we also delete the Google Analytics cookies set on this site.

6. Google Analytics 4

If you have agreed, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). It helps us understand which pages are used and how, so we can improve the site.

  • How it works:Google Analytics sets cookies (for example "_ga" and "_ga_<ID>", lasting up to 2 years) and records usage data such as pages viewed, time on page, clicks, approximate location (country, region, city), device type, operating system and browser.
  • IP addresses: According to Google, Google Analytics 4 does not log or store IP addresses. For visits from the UK and EU, the IP address is used briefly on servers in the EU to work out the approximate location and is then discarded before the data is processed further.
  • Consent Mode v2:We use Google's consent mode. Every consent type is set to "denied" by default. The Google script is only loaded after you consent; before that, nothing is measured. Advertising features, Google signals and ad personalisation are switched off.
  • Legal basis: your consent (Article 6(1)(a) UK GDPR and regulation 6 PECR).
  • International transfers:Data may be transferred to Google LLC in the USA. Transfers to Google LLC are covered by the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge"), and in addition by the International Data Transfer Addendum to the EU standard contractual clauses.
  • Retention: Event data in Google Analytics is deleted automatically after the retention period set in our property, which is 14 months.
  • Processor terms:We have accepted Google's data processing terms (Google Ads Data Processing Terms).

More information: Google privacy policy and data privacy in Google Analytics.

7. Amazon Associates (affiliate links)

We take part in the Amazon EU Associates Programme. Links to Amazon on this site are marked "Affiliate link" and carry our partner tag. We do not embed any Amazon content on our pages: no product images, no prices and no scripts. Simply reading our pages therefore sends no data to Amazon.

Only when you click an affiliate link do you go to Amazon's website. Amazon (Amazon Europe Core S.à r.l., Amazon EU S.à r.l., Amazon Services Europe S.à r.l. and Amazon Media EU S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg, and Amazon UK Services Ltd. for amazon.co.uk) may then set cookies and record that you came from our site, so that a later purchase can be credited to us. Amazon does not give us any data that identifies you, only aggregated reports on clicks and sales. Amazon is responsible for processing on its own website; see the Amazon.co.uk privacy notice. The legal basis for including affiliate links is our legitimate interest in funding the site (Article 6(1)(f) UK GDPR).

8. Contacting us by email

If you email us, we process your email address, your name (if given) and the content of your message in order to reply. The legal basis is our legitimate interest in answering enquiries (Article 6(1)(f) UK GDPR). We delete the message once it has been dealt with, unless we are legally required to keep it. Emails are stored with our email provider, which processes them on our behalf.

9. What we do not do

  • We do not run a newsletter and do not send marketing emails.
  • There are no user accounts, no comments and no orders on this site.
  • We do not sell personal data and do not use automated decision-making or profiling within the meaning of Article 22 UK GDPR.
  • The calculators on this site run entirely in your browser; what you type is not sent to us.

10. Your rights

Under UK GDPR you have the following rights regarding personal data about you:

  • the right to be informed and the right of access (Article 15),
  • the right to rectification (Article 16),
  • the right to erasure (Article 17),
  • the right to restrict processing (Article 18),
  • the right to data portability (Article 20),
  • the right to withdraw consent at any time, with effect for the future (Article 7(3)).

Right to object (Article 21): Where we process data on the basis of legitimate interests (Article 6(1)(f)), you can object at any time on grounds relating to your particular situation. We will then stop, unless we can show compelling legitimate grounds that override your interests, or the processing is needed to establish, exercise or defend legal claims.

To exercise any of these rights, a short email to contact@blowandbarrel.co.uk is enough. We reply within one month.

11. Right to complain

If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint

Readers in the EU can complain to the supervisory authority where they live or work. As the controller is based in Estonia, the lead authority in the EU is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, www.aki.ee).

12. Security

This site uses TLS encryption (you can see "https://" in the address bar), so data you send to us cannot be read by third parties in transit.

13. Changes

We update this policy when the site or the law changes. The version published on this page is the one that applies.