Back

Dram of Destiny Privacy Policy

Last updated: June 2026

Dram of Destiny is an event project owned and operated by Barrel & Brand Ltd.

This Privacy Policy explains how Barrel & Brand Ltd collects, uses, stores and protects personal data in connection with Dram of Destiny, including ticket purchases, guest communications, menu selections, dietary requirements, accessibility requirements, event attendance, photography, filming, fundraising activity and related event administration.

References to “Dram of Destiny”, “Barrel & Brand”, “we”, “us” or “our” mean Barrel & Brand Ltd and its authorised event team.

This policy should be read alongside any ticketing terms and conditions, booking platform notices, cookie notices, and any specific privacy information provided when we collect personal data from you.

1. Who We Are

Dram of Destiny is a project owned and operated by Barrel & Brand Ltd.

For the purposes of UK data protection law, Barrel & Brand Ltd is the data controller for personal data collected and used in connection with Dram of Destiny, except where another organisation acts as its own controller, such as a payment provider, ticketing platform, venue, charity, or media organisation.

Full name of legal entity: Barrel & Brand Ltd

Event project: Dram of Destiny

Contact email: Hello@Dramofdestiny.com

We do not publish our office address within this Privacy Policy. If a postal address is required for a formal data protection request, please contact us using the email address above.

You have the right to make a complaint at any time to the Information Commissioner’s Office, the UK regulator for data protection matters. We would appreciate the opportunity to deal with your concerns first, so please contact us before approaching the ICO where possible.

2. Purpose of This Privacy Policy

This Privacy Policy explains how we collect and use personal data when you:

  • Visit the Dram of Destiny website or associated Barrel & Brand websites
  • Purchase or receive a ticket for Dram of Destiny
  • Register interest in the event
  • Contact us by email, phone, web form, social media or another communication channel
  • Provide menu, dietary, allergy or accessibility information
  • Attend the event
  • Take part in the whisky tasting or Burns Night supper
  • Participate in fundraising activity connected with the event
  • Appear in photography, video, livestreams or event media
  • Subscribe to updates or marketing communications

Dram of Destiny is an over-18s event. Our website and ticketing process are not intended for children, and we do not knowingly collect personal data relating to children.

3. The Personal Data We Collect

We may collect, use, store and transfer the following types of personal data.

Identity Data

This may include your name, title, ticket holder name, guest name, username or similar identifier, and proof-of-age confirmation where required.

Contact Data

This may include your email address, telephone number, billing details and any contact information provided during booking or correspondence.

Booking and Transaction Data

This may include ticket type, ticket quantity, table or seating allocation, payment confirmation, booking reference, order history, refunds, transfers, name changes and customer service records.

Payment Data

Payments are processed through approved payment providers or ticketing platforms. We may receive confirmation that payment has been made, but we do not normally store full payment card details ourselves.

Guest Preference Data

This may include menu selections, hospitality choices, drink package details, table preferences, group booking details and guest communication preferences.

Dietary, Allergy and Accessibility Data

This may include dietary requirements, allergies, intolerances, medical food needs, mobility requirements, wheelchair access needs, assistance requirements, sensory considerations, carer or companion requirements, and other information needed to help us plan the event safely and appropriately.

Some dietary, allergy and accessibility information may reveal health-related information. Where this is the case, we will treat it with additional care.

Communications Data

This may include emails, contact form submissions, social media messages, customer service notes, feedback, survey responses and records of your interactions with us.

Marketing and Communications Data

This may include your preferences in receiving event updates, marketing from us, charity-related updates where applicable, and your communication preferences.

Technical and Usage Data

This may include IP address, browser type, device information, operating system, time zone setting, website usage, cookie information, analytics data and information about how you interact with our website or booking platform.

Photography, Video and Audio Data

This may include images, video, livestream footage, audio recordings, crowd shots, event photography, promotional footage, press photography and other media captured at the event.

Record Attempt Participation Data

This may include attendance records, check-in data, participation confirmation, table or seating records, witness information, counting data, photographic or video evidence, and other information required to support the event’s record attempt evidence process.

Fundraising Data

Where you make a donation, participate in fundraising activity, or engage with charity-related elements of the event, we may process information connected with that activity. Depending on the donation route used, the charity or payment platform may also process your data under its own privacy policy.

4. How We Collect Your Personal Data

We may collect personal data in the following ways.

Directly From You

You may provide personal data when you:

  • Buy a ticket
  • Register interest in the event
  • Create an account on a booking platform
  • Contact us with a question
  • Provide guest names
  • Submit menu choices
  • Provide dietary, allergy or accessibility requirements
  • Request assistance
  • Complete a survey or feedback form
  • Join a mailing list
  • Enter a promotion or competition
  • Make a donation or fundraising pledge
  • Attend the event

Through Our Booking System

Our booking system may collect ticketing details, payment confirmation, guest details, table information, menu selections, dietary requirements, accessibility requirements and other information needed to manage your booking.

Once menus have been finalised, our booking system will contact guests to collect menu selections, dietary requirements, accessibility requirements and any additional information required to plan the event.

Through Event Operations

We may collect information during event check-in, guest registration, table management, record attempt participation, security processes, incident reporting, customer service, accessibility support and event safety management.

Through Automated Technologies

When you visit our website or interact with online services, we may collect technical information using cookies, analytics tools or similar technologies.

From Third Parties

We may receive personal data from ticketing platforms, payment processors, event partners, venues, caterers, contractors, security providers, customer service providers, analytics providers, advertising platforms, professional advisers, or publicly available sources where relevant and lawful.

5. How We Use Your Personal Data

We only use personal data where the law allows us to. The main reasons we use personal data are set out below.

To Manage Ticket Purchases and Bookings

We use personal data to process ticket purchases, confirm bookings, issue tickets, manage payments, process refunds where applicable, support name changes, manage table allocations and provide customer support.

Lawful basis: Performance of contract, legal obligation and legitimate interests.

To Plan and Deliver the Event

We use personal data to manage guest lists, table plans, entry, seating, hospitality areas, food service, drinks service, accessibility support, event safety, staff planning, supplier coordination and guest communications.

Lawful basis: Performance of contract, legitimate interests and legal obligation.

To Manage Menu Selections and Dietary Requirements

We use menu, dietary and allergy information to plan catering, support guest safety, brief caterers, reduce food waste and help ensure guests receive the correct meal.

Where dietary or allergy information includes health-related data, we will use it only for event planning, catering, guest safety and related administration.

Lawful basis: Performance of contract, legitimate interests, explicit consent where required, legal obligation and, in rare urgent situations, vital interests.

To Manage Accessibility Requirements

We use accessibility information to plan seating, access routes, guest assistance, companion or carer requirements, venue arrangements, staff support and reasonable adjustments.

Where accessibility information includes health-related data, we will use it only for accessibility planning, guest safety and related administration.

Lawful basis: Performance of contract, legitimate interests, explicit consent where required, legal obligation and, in rare urgent situations, vital interests.

To Communicate With Guests

We use contact details to send booking confirmations, ticket updates, menu requests, dietary and accessibility forms, arrival information, event schedules, safety information, changes to event details and post-event communications.

Lawful basis: Performance of contract and legitimate interests.

To Administer the Record Attempt

We may use personal data to verify attendance, manage participant counting, support record evidence requirements, coordinate adjudication, produce records of participation and respond to queries relating to the attempt.

This may include sharing limited evidence with the relevant record body, adjudicators or appointed verification personnel.

Lawful basis: Performance of contract and legitimate interests.

To Manage Alcohol Service and Legal Compliance

We may use personal data to support age verification, licensing compliance, incident management, refusal of service, guest safety and venue requirements.

Lawful basis: Legal obligation, legitimate interests and, where necessary, vital interests.

To Support Fundraising Activity

We may use personal data to administer fundraising communications, donation records, charity-related event activity and reporting. Where donations are made through a charity or third-party platform, that organisation may also process your personal data under its own privacy policy.

We will not share your personal data with a charity for its own direct marketing unless you have given permission or it is otherwise lawful to do so.

Lawful basis: Legitimate interests, performance of contract, consent where required, and legal obligation.

To Send Marketing Communications

We may send you marketing communications about Dram of Destiny, Barrel & Brand events, whisky experiences, related products or future activities where you have signed up, bought from us, requested information, or where we are otherwise permitted to do so by law.

You can unsubscribe or opt out of marketing at any time.

We will obtain your consent before sharing your personal data with third parties for their own marketing purposes.

Lawful basis: Consent and/or legitimate interests, depending on the communication and your relationship with us.

To Capture and Use Event Photography, Video and Audio

Photography, filming, livestreaming and audio recording may take place at Dram of Destiny.

We may use event media for promotional, press, social media, website, archive, sponsorship, fundraising and event-reporting purposes.

Where possible, we will provide clear notice that filming and photography are taking place. If you do not wish to appear in close-up promotional media, please notify a member of event staff on arrival. We will make reasonable efforts to accommodate this, but we cannot guarantee that guests will not appear incidentally in wide shots, crowd shots, livestreams or background footage.

Lawful basis: Legitimate interests and consent where required.

To Improve Our Website, Services and Events

We may use technical, usage, feedback and survey data to improve our website, booking process, guest experience, event operations, customer service and future events.

Lawful basis: Legitimate interests.

To Meet Legal, Tax, Accounting and Regulatory Obligations

We may use personal data to keep business records, comply with tax and accounting obligations, manage complaints, respond to legal claims, support insurance matters and comply with requests from regulators or authorities.

Lawful basis: Legal obligation and legitimate interests.

6. Special Category Data

Special category data is more sensitive personal data, such as health information.

We may collect limited special category data where you provide information about dietary needs, allergies, medical food requirements, disability, accessibility requirements or other health-related needs.

We collect this information only where needed to support your attendance, safety, access, catering or reasonable adjustments.

We ask guests to provide only the information necessary for us to support their attendance at the event.

Where required, we rely on your explicit consent to process this information. In some circumstances, we may also process this information where necessary to meet legal obligations, protect vital interests, or establish, exercise or defend legal claims.

You may choose not to provide this information, but this may affect our ability to accommodate your needs at the event.

7. Who We Share Your Personal Data With

We may share personal data with trusted third parties where necessary for the purposes described in this policy.

This may include:

  • Ticketing platforms and booking system providers
  • Payment processors
  • Website and IT service providers
  • Email and customer communication providers
  • Event venue and venue operations teams
  • Caterers and hospitality providers
  • Bar operators and alcohol service providers
  • Security, stewarding and medical support providers
  • Accessibility support providers
  • Event production teams and contractors
  • Photographers, videographers and livestream providers
  • Record attempt adjudicators, evidence reviewers or verification personnel
  • Charity partners or donation platforms, where relevant and lawful
  • Sponsors or partners, where relevant and lawful
  • Professional advisers, including accountants, insurers, consultants and legal advisers
  • HM Revenue & Customs, regulators, law enforcement or public authorities where required

We only share the personal data necessary for the relevant purpose.

We require third-party service providers to respect the security of your personal data and use it only for agreed purposes and in accordance with data protection law.

We do not sell your personal data.

We will not share your personal data with third parties for their own marketing purposes unless you have given consent or it is otherwise lawful to do so.

8. International Transfers

Some of our service providers, booking platforms, payment providers, email systems, website tools or analytics providers may process personal data outside the UK.

Where personal data is transferred outside the UK, we will take steps to ensure that appropriate safeguards are in place, such as adequacy regulations, international data transfer agreements, standard contractual clauses, or other lawful transfer mechanisms.

9. Data Security

We take appropriate steps to protect personal data from being accidentally lost, used, accessed, altered or disclosed without authorisation.

We limit access to personal data to those who have a genuine business or operational need to know it.

This may include authorised staff, contractors, suppliers, professional advisers and service providers who need access to deliver the event, manage bookings, provide support, meet legal obligations or carry out agreed services.

Where third parties process personal data on our behalf, they are required to use appropriate security measures and process the data only in accordance with our instructions.

We have procedures in place to deal with suspected personal data breaches and will notify affected individuals and the ICO where legally required.

10. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including event delivery, customer service, legal, regulatory, accounting, tax, insurance and reporting purposes.

As a general guide:

  • Booking, ticketing, transaction and financial records may be kept for up to six years for tax, accounting and legal purposes.
  • Guest communications may be kept for as long as needed to manage the event, respond to queries and handle complaints.
  • Dietary, allergy and accessibility information will be kept only for as long as needed to plan and deliver the event safely, and for a reasonable period afterwards in case of queries, incidents or complaints.
  • Incident, safety or security records may be kept for longer where required for legal, insurance or safeguarding reasons.
  • Marketing data will be kept until you unsubscribe, withdraw consent, or we decide it is no longer appropriate to retain it.
  • Event photography, video and archive material may be retained for promotional, historical, reporting and archive purposes for as long as it remains relevant to the event or Barrel & Brand’s activities.

We may anonymise personal data so that it can no longer identify you. Anonymised data may be used for statistical, reporting or event-planning purposes.

11. Marketing Communications

You may receive marketing communications from us if you have requested information, purchased tickets, attended an event, signed up to updates, or otherwise engaged with us, and you have not opted out.

Marketing may include information about Dram of Destiny, Barrel & Brand events, whisky tastings, related products, future events, offers, competitions or announcements.

You can opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us at Hello@Dramofdestiny.com.

Opting out of marketing will not stop essential service messages relating to your ticket, booking, menu choices, dietary requirements, accessibility requirements, event safety or event administration.

12. Cookies and Website Analytics

Our website may use cookies, pixels, analytics tools and similar technologies to operate the website, understand website use, improve performance, support marketing activity and provide a better user experience.

Some cookies are necessary for the website to function. Others may be used for analytics or marketing, depending on your cookie choices.

Where required, we will ask for your consent before using non-essential cookies.

You can manage cookies through your browser settings or any cookie preference tool available on our website.

13. Third-Party Links and Platforms

The Dram of Destiny website, Barrel & Brand website, booking system or event communications may contain links to third-party websites, platforms, payment providers, charity pages, social media sites or partner websites.

We do not control these third-party websites or platforms and are not responsible for their privacy practices.

When you leave our website or use a third-party platform, you should read that organisation’s privacy policy.

14. Your Legal Rights

Under data protection law, you may have the right to:

  • Request access to the personal data we hold about you
  • Request correction of incomplete or inaccurate personal data
  • Request erasure of your personal data
  • Object to our processing of your personal data
  • Request restriction of processing
  • Request transfer of your personal data to you or another organisation
  • Withdraw consent where we rely on consent
  • Object to direct marketing at any time

These rights may not apply in every situation, and there may be legal reasons why we cannot fulfil a request in full. If this applies, we will explain why.

To exercise your rights, please contact us at:

Hello@Dramofdestiny.com

We may need to request information from you to confirm your identity before responding to your request.

We aim to respond to valid data protection requests within one month. If a request is complex or if you have made several requests, we may need more time and will let you know.

15. Accuracy of Your Information

It is important that the personal data we hold about you is accurate and up to date.

Please let us know if your contact details, guest information, dietary requirements, accessibility requirements or other relevant information changes before the event.

Guests are responsible for ensuring that the information provided through the booking system is accurate and complete.

16. If You Do Not Provide Personal Data

Where we need personal data to fulfil your booking, manage your attendance, provide event information, meet legal obligations, support accessibility requirements or provide catering, failure to provide that information may mean we cannot provide the relevant service or accommodate your request.

For example, if you do not provide dietary or allergy information by the required deadline, we may not be able to guarantee a suitable meal.

If you do not provide accessibility information in advance, we may have limited ability to make appropriate arrangements on the day.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the event, our systems, suppliers, legal requirements or data protection practices.

The latest version will be made available through the Dram of Destiny website, Barrel & Brand website, booking platform or guest communications.

Where significant changes are made, we may notify ticket holders by email or through the booking platform.

18. Contact Us

For questions about this Privacy Policy, personal data, guest information, dietary requirements, accessibility information or your data protection rights, please contact:

Barrel & Brand Ltd

Dram of Destiny Project

Email: Hello@Dramofdestiny.com

Please do not rely on social media messages for urgent privacy, ticketing, dietary or accessibility matters.