01535 637451



This Privacy Policy sets out how Naylor’s Brewery will process your personal data that you may provide to us or that we may collect from you.


Naylor’s Brewery Ltd is registered at Units 9 & 10 Midland Mills, Crosshills, Keighley, West Yorkshire.

Company Reg No. GB 856 5104 22.


Naylor’s Brewery Ltd is committed to ensuring that your privacy is protected and will only process personal data in          accordance with this Privacy Policy.


Contact details

If you have any questions our contact details are:


Naylor’s Brewery Ltd

Midland Mills

Station Road



West Yorkshire

BD20 7DT


Telephone: 01535 637451



The information we collect

We process personal data including and not limited to:


Name and job title

Contact information including e-mail address and telephone number

Financial information including credit card and/or debit card information

Invoice and delivery addresses

Demographic information such as postcode and preferences

Legal grounds for processing your information


We will rely on the following legal bases under GDPR to process your personal data:


Performance of a contract

Legal obligation

Vital interest

Public interest or exercise of official authority

Legitimate interest pursued by the controller or 3rd party

How we collect your information

Voluntary Information

You may provide us this information when completing forms and contracts, corresponding via the telephone, e-mail or live chat or we may meet you at an event or exhibition.


How we process your information

We collect and process data for the following reasons:


to ensure we can fulfil our service levels to a high standard

internal record keeping

to improve our products and services

to ensure that our website is presented in the most effective manner

our legal requirements as a UK registered business

to communicate with our partners

to market our products and service (see Marketing below)

We will also provide information to 3rd parties, when it is necessary to fulfil your service requirements. These include but are not limited to 3rd party carriers for the delivery of goods and secure payment gateway services.


We only process your data in the UK. In all circumstances the information obtained will be retained and utilised in accordance with all applicable laws in particular, the Data Protection Act 2018 and GDPR. Accordingly we will maintain and protect the confidentiality of your information.



We may from time to time contact you to make you aware of new products and services, unless you explicitly request us not so do so.


If you have made a purchase with Naylor’s Brewey pre-dating 25th May 2018, you will receive regular product recommendations from us by e-mail. If you no longer wish to receive such communications, you can opt out by emailing us.


This will ensure we do not send promotional material via email.


We never share your name and contact details with third parties for marketing purposes. We do use third party service providers to send out marketing material but only allow them to use that information on our instructions and where they have agreed to treat the information confidentially and to comply with data protection legislation.


Data security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure your information.


How do we protect your personal data?

We treat your data with care and take all steps to protect it

Access to our websites is password protected

Sensitive data is secured by SSL encryption

Our systems have the highest level of security

We carry out regular penetration testing to identify ways to further strengthen our security

We monitor our systems for any intrusions

We will notify you and any applicable regulator of a suspected breach as required by law

Data retention

We collect and store data for the purposes of all our business operations and to provide service to our customers.

How long will we keep personal data?


For active customers we will retain data for as long as you remain active.

For inactive customers we will retain data for marketing purposes; however we will anonymise your personal data so that it can no longer be associated with you, in such case we may use such information without further notice to you.

On request of an ‘unsubscribe’ or a specific request not to be contacted, personal data will be transferred to a suppression list.

We will keep personal data in our database for our own internal records.


Your rights

You have the right to:

Receive disclosure of any of your personal data that we store and process.

Update/amend inaccuracies or changes to your data

Opt out of e-mail marketing by clicking the unsubscribe link at the bottom of any Kite email communication

Request for processing of your personal data to be restricted

Be informed of what lawful basis we are relying on for the processing of your personal data

Be forgotten (have your personal data deleted) or we would recommend that we supress you from future communications, rather than delete your data from our database.

You can also stop the processing of your data for digital marketing purposes by emailing us.


If you wish to review, verify, correct or request the erasure of your personal data, object to the processing of your personal data, withdraw the consent to the processing of your personal data or request that we transfer a copy of your personal data to a third party please contact us on


We will respond to the request as soon as we can. Generally this will be within one calendar month from when we receive your request but on occasions it may take longer to deal with your request and in such circumstances we will let you know.


Links to other websites

Our website may contain links to enable you to visit other websites of interest easily. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement.


Automated Decision Making

We do not use any form of automated decision making in our business.


Changes to this Privacy Notice

Any changes we make to our Privacy Notice in future will be posted on our website and where appropriate notified to you by e-mail or otherwise.