Privacy Policy

This website is operated by Cask and Core, based in Kuala Lumpur, Malaysia. We are responsible for the personal data we collect through this website. You can reach us about privacy matters through our contact page.

We collect the personal data you give us when you place an order, create an account, subscribe to our newsletter or contact us. This includes your name, email address, phone number, billing and delivery addresses, order details and any messages you send us.

When you use this website, we also collect limited technical data, such as your IP address, browser type and the pages you visit, through cookies and server logs. Payments are processed by third-party payment providers; we do not receive or store your full card details.

We use your personal data to process and deliver your orders; to communicate with you about your orders and enquiries; to verify age for wine and spirits purchases; to manage your account; to send our newsletter if you have subscribed; to prevent fraud and keep this website secure; and to meet our legal and accounting obligations.

We send marketing emails only if you have agreed to receive them. You can unsubscribe at any time using the link in any newsletter or by contacting us.

We share personal data only as needed to run our business: with payment providers to process payments, with couriers and logistics partners to deliver orders, and with the service providers who host and maintain this website and our email. These parties may use your data only to provide their services to us.

We may also disclose personal data where required by law or by a government authority. We do not sell your personal data.

Some of our service providers, including our website hosting provider, store data on servers outside Malaysia. Where personal data is transferred abroad, we take reasonable steps to make sure it is protected to a standard comparable to the PDPA.

We keep personal data only for as long as it is needed for the purposes described in this policy, including to meet legal, tax and accounting requirements. Order records are kept for as long as the law requires. When data is no longer needed, we delete or anonymise it.

This website uses an encrypted (HTTPS) connection. We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access, and we limit access to those who need it to do their work.

Under the PDPA, you have the right to request access to the personal data we hold about you, to ask us to correct data that is inaccurate, incomplete or out of date, to withdraw your consent to processing, and to ask us to limit how we process your data, including for direct marketing.

To make a request, please contact us. We may need to verify your identity before responding. If you withdraw consent, we may no longer be able to provide some services, such as processing an order.

This website uses cookies that are needed for it to work, such as keeping items in your cart, keeping you signed in and remembering your age confirmation. We may also use cookies that help us understand how the website is used. You can block or delete cookies in your browser settings, but some parts of the website, such as the cart and checkout, may not work without them.

This website is not intended for anyone under 18, and we do not knowingly collect personal data from children. Wine and spirits are sold only to customers of legal drinking age.

We may update this policy from time to time. The latest version will always be published on this page, with the date it was last updated.