Privacy Policy — Cabinet Platform
Applies to: whisky.cab, vanity.cab, cabinet.cab
Data Controller: Cabinet
Contact: privacy@cabinet.cab
Last updated: March 2026
Version: 1.0
1. Introduction
This Privacy Policy explains how Cabinet ("Cabinet", "we", "us", "our") collects, uses, stores, and protects your personal data when you use any Cabinet platform, including whisky.cab, vanity.cab, and cabinet.cab (collectively, "the Platform").
Cabinet is committed to handling your data responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are
The data controller for all personal data collected across the Cabinet platform is: Cabinet — Email: privacy@cabinet.cab
3. Data We Collect
3.1 Account Data: Email address, name or display name, password (stored in hashed form), authentication provider identifier (Google or Apple), date of birth (whisky.cab only, for age verification).
3.2 Collection Data: Product names, brands, types, regions, and ABV; purchase price, purchase date, and retailer; bottle status and consumption records; personal ratings and tasting notes; product photographs you upload.
3.3 Preferences and Settings: Retailer loyalty scheme memberships, currency preference, notification preferences, public profile settings.
3.4 Usage Data: Pages and features visited, search queries, product pages viewed, affiliate link click-throughs, session duration and frequency, device type, OS, and browser.
3.5 Technical Data: IP address, device identifiers, log data.
3.6 Communications Data: Records of correspondence if you contact us.
4. How We Use Your Data
4.1 To Provide and Operate the Platform — Lawful basis: Performance of a contract (UK GDPR Article 6(1)(b)).
4.2 Age Verification (whisky.cab only) — Lawful basis: Compliance with a legal obligation (UK GDPR Article 6(1)(c)) and legitimate interests (Article 6(1)(f)).
4.3 Platform Improvement and Analytics — We use Google Analytics 4. Lawful basis: Legitimate interests (UK GDPR Article 6(1)(f)).
4.4 Affiliate Click Tracking — Lawful basis: Legitimate interests (UK GDPR Article 6(1)(f)).
4.5 Year-End Statistics ("Unboxed") — Opt-in feature. Lawful basis: Performance of a contract / legitimate interests.
4.6 Communications — Transactional messages, platform updates. Lawful basis: Performance of a contract for transactional; legitimate interests or consent for non-essential.
4.7 Master Database Contributions — Product-level data only. Lawful basis: Legitimate interests (UK GDPR Article 6(1)(f)).
5. Data Sharing
Cabinet does not sell your personal data. We share data only with: Service Providers (Google Analytics 4, Vercel, Railway, Google/Apple authentication); Affiliate Networks (click data only, no name or email); as required by law; in the event of a business transfer.
6. Data Retention
Account data: Duration of account + 30 days. Collection data: Duration of account, deleted within 30 days of account deletion. Date of birth: Duration of account. Usage/analytics data: 26 months. Affiliate click data: 13 months. Communications records: 3 years. Legal/compliance records: 7 years where required.
7. Your Rights
Under UK GDPR: Right of access, right to rectification, right to erasure, right to restriction, right to data portability (CSV or JSON), right to object, right to withdraw consent. Contact privacy@cabinet.cab. We will respond within one calendar month. You may also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies
Essential cookies (required), Analytics cookies (Google Analytics 4, can be disabled), Affiliate cookies (click tracking, can be disabled). Cookie consent notice shown on first visit.
9. Data Security
Passwords stored using industry-standard hashing. HTTPS encryption for all data in transit. Access controls limiting who can access user data. Regular security reviews.
10. Children's Privacy
whisky.cab requires users to be aged 18 or over. Other Cabinet verticals require age 13 or over.
11. International Transfers
Data primarily stored within the UK and EEA. Where processed outside (e.g. Google Analytics), appropriate safeguards including Standard Contractual Clauses are in place.
12. Third-Party Links
This Privacy Policy does not apply to third-party websites linked from the Platform.
13. Changes to This Privacy Policy
Material changes notified via email or in-app notice at least 14 days before taking effect.
14. Contact and Complaints
Cabinet — Email: privacy@cabinet.cab. UK Information Commissioner's Office: ico.org.uk, Helpline: 0303 123 1113.
This Privacy Policy applies to all Cabinet platform verticals: whisky.cab, vanity.cab, and cabinet.cab.