Privacy
Privacy Notice
This notice explains what personal data Sipping uses, why we use it and the choices and rights available to you.
Effective 5 October 2026
Who is the controller?
The controller is the legal operator of Sipping.co.uk shown in the operator information below. We do not infer or publish an operator identity until it has been confirmed.
What we collect
Depending on how you use Sipping, we may process account details such as email address and authentication identifiers; saved lists, taste preferences and basket/session identifiers; consent choices; security and technical logs; and information about affiliate handoffs such as a click reference, retailer, source page and time.
If you enable optional analytics, Google Analytics receives usage information such as page views and interaction events. We configure analytics without Google Signals or ad-personalisation signals.
Why we use it and our lawful bases
Contract / steps at your request: providing an account, saved lists and other features you ask us to use.
Legitimate interests: operating and securing Sipping, preventing abuse, maintaining basket/session continuity, measuring non-advertising commercial handoffs, improving content and reconciling affiliate referrals, balanced against your privacy rights.
Consent: optional Google Analytics. You can withdraw that consent at any time through Cookie settings.
Legal obligation: where we must retain or disclose information to comply with law.
Who receives data
We use service providers needed to operate the site, including Base44 for application infrastructure and authentication. If you consent to analytics, Google receives analytics data. When you follow an affiliate or retailer link, the destination retailer and, where applicable, its affiliate network receive the referral information required to attribute that visit. We do not sell personal data.
International transfers
Some technology providers may process data outside the UK. Where UK data-protection law requires safeguards for such transfers, we rely on the provider’s applicable transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement/addendum, or another lawful safeguard.
How long we keep information
We keep account and saved-feature data while it is needed to provide your account and for a reasonable period afterwards where necessary for security, dispute resolution or legal obligations. Consent choices are kept until changed or the consent version is refreshed. Analytics retention follows the configured Google Analytics retention period. Affiliate-reconciliation and security records are retained only for as long as reasonably necessary for attribution, fraud prevention, accounting or dispute purposes.
Your rights
Depending on the circumstances, UK data-protection law may give you rights of access, correction, deletion, restriction, objection and data portability, and the right to withdraw consent without affecting earlier lawful processing.
Your right to object: where we rely on legitimate interests, you may object to that processing and we will consider your circumstances and the legal test that applies.
Complaints
You can contact us first using the details below. You also have the right to complain to the UK Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully.
Children
Sipping is not designed as a service for children. Alcohol purchasing links are intended for adults who meet the legal purchasing age in their location.
Operator information
Operator details must be completed before Search Console submission. The legal operator name, legal form, geographic business address, contact email and telephone number have deliberately not been guessed. They are held in one central configuration so they can be added once and shown consistently across Sipping.