Plain English
How we look after your details.
Highwood Distillers Ltd. is a Canadian whisky distillery in High River, Alberta and a wholly-owned subsidiary of Caldera Inc. This page explains what personal information this marketing site collects, why we collect it, where it is stored, and what you can ask us to do with it. Written under Canadian federal privacy law (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).
Who we are
This site is operated by Highwood Distillers Ltd., a wholly-owned subsidiary of Caldera Inc., with mailing address 114 – 10th Avenue S.E., High River, Alberta, Canada T1V 1E7.
Privacy questions go to the Highwood office at the email below. Under PIPA Alberta s.5 and PIPEDA Principle 1 we are required to name an accountable person; for now that role sits with the Highwood office, copied on every privacy enquiry.
What we collect
This site uses one analytics tool, Google Analytics 4, and no advertising trackers or social-media pixels. What we collect is:
- Mailing list form: your name and postal address. The mailing list is postal only, not email.
- Contest / giveaway entry form: when you enter a promotion (for example the Highwood x Calgary Flames draw), your name, email address, Instagram handle, and province; your confirmation that you are of legal drinking age; and, only if you tick the optional box, your consent to receive marketing email. We also store a one-way hashed form of your IP address to prevent duplicate or fraudulent entries.
- Contact form: your name, email address, the category of your inquiry (Trade, Press, Visit), and the message text you send.
- Server access logs: your IP address, browser and OS strings, the URL you requested, and the timestamp. These are collected automatically by Netlify, our hosting provider, for security and abuse prevention.
- Map tile requests: the Where to Buy page renders a map using tiles served by Carto. When the map loads, your IP address is sent to Carto’s servers as part of the standard tile request.
- Google Analytics 4: we use Google Analytics (measurement ID G-CHSS9F0SF2) to understand how the site is used, which pages are viewed, approximate city-level location derived from your IP (GA4 does not store the full IP), and general device and browser information. GA4 sets first-party cookies. We also enable Google Signals, which lets Google associate this activity with signed-in Google users who have consented, so we can see cross-device and aggregate demographic and interest reporting. Google may process this data in accordance with its own policies.
Why we collect it
Each piece of information is collected for a single, stated purpose:
- Mailing list: to send you printed Highwood mailings (release notices, the almanac edition, the occasional invitation).
- Contest entry: to administer the promotion, confirm you are eligible (Alberta, of legal drinking age), run the draw, and contact you if you win. If, and only if, you ticked the optional marketing box, we also use your email to send Highwood news and offers.
- Contact form: to respond to your enquiry. Trade messages route to our distribution team, press messages to our communications team, visit requests to the distillery.
- Server logs: to keep the site available and to investigate abuse. Standard Netlify hosting practice.
- Map tiles: to render the map. There is no Highwood‑hosted alternative; the only way to make the map work is to fetch tiles from a third party.
- Google Analytics: to measure how the site is used, in aggregate, so we can improve it. It is not used to identify you individually.
Consent
Different forms have different consent models, in plain terms:
- Mailing list: you completed the form and submitted it. That is express consent to send you mailings by post. There is no email follow‑up unless you ask for one separately.
- Contact form: you wrote to us. We treat that as implied consent to write back. We do not add contact‑form senders to any list.
- Server logs: collected as part of normal site operation. PIPEDA Principle 3 lets us rely on identified purposes here.
- Contest entry: submitting the entry form is your consent to be contacted about that promotion. It is not consent to marketing email. We add you to our marketing email list only if you separately tick the optional opt-in box, which is express consent under Canada's Anti-Spam Legislation (CASL); you can withdraw it at any time using the unsubscribe link in any email.
- Google Analytics: we rely on implied consent, together with this disclosure, to run analytics with Google Signals enabled (cross-device and aggregate demographic reporting; full IP not stored). You can control this through Google's Ads Settings (adssettings.google.com), the Google Analytics opt-out add-on, or by blocking cookies, and the site works the same either way.
Sharing and sub‑processors
We do not sell personal information. We do not share it with marketers, data brokers, insurers, or law‑enforcement aggregators. The only parties that touch the data are the service providers we use to run the site:
- Netlify, Inc.: hosting, form delivery, server logs. Headquartered in the United States. Their data‑processing terms are at netlify.com/gdpr-ccpa.
- Google LLC (Google Analytics): our analytics processor. Google receives the analytics data described above and processes it on Google infrastructure, some of it in the United States. Google's data terms: business.safety.google/adsprocessorterms.
- Carto (CartoDB): map tile provider for the Where to Buy page only. Your IP is sent to Carto when the map loads.
- Email service provider: we do not currently use one. Marketing opt-ins are recorded and held with Netlify (above); no marketing email is sent yet. If we engage an email provider, we will name it here and update this policy before any marketing email goes out.
How long we keep it
We keep things only as long as the original purpose needs:
- Contact form messages: kept for as long as the conversation is open, then routinely deleted within 12 months unless a continuing trade or press relationship calls for keeping the record.
- Mailing list: kept until you ask to be removed.
- Contest entries: kept for the duration of the promotion and up to 12 months after it closes for records and winner verification, then deleted. Marketing opt-ins are kept until you unsubscribe.
- Server logs: Netlify’s standard rolling retention, typically about 30 days.
Your rights
Under PIPA Alberta (sections 24–30) and PIPEDA, you can ask us at any time to show you what personal information we hold about you, to correct anything inaccurate, or to remove you from the mailing list. Email the privacy contact below; we respond within two business days.
If you are unsatisfied with our response, you can contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.
Security
The site is hosted on Netlify, which provides infrastructure security and TLS in transit by default. Personal information is held in Netlify’s form and object (Blobs) storage; access on our end is limited to the small number of people who handle each kind of enquiry. We use long, unique passwords and two‑factor authentication on the admin tooling.
The shop is separate
The Shop button on this site links to shop.highwoodwhisky.com, our Shopify storefront. That site has its own privacy policy, its own cookies, its own analytics, and its own payment processor. This policy does not extend to it.
Cookies and local storage
This site does not use advertising cookies or social-media trackers. The browser storage we set is:
- Age gate: a small cookie that remembers you confirmed you were of legal drinking age, so the gate does not reappear on every page.
- Netlify form helpers: small technical cookies Netlify may set when a form is submitted, to prevent abuse.
- Google Analytics: first-party cookies (
_gaand_ga_*) that measure site usage. With Google Signals enabled, your activity may also be associated with your signed-in Google account for demographic and cross-device reporting.
Legal drinking age
This site is intended for adults of legal drinking age in their province, territory, or country of residence. Visitors below legal drinking age should not submit personal information through this site, and we will delete it if we become aware that any has been submitted.
Changes to this policy
We update this policy when the site changes or the underlying law changes. The effective date and version number at the top of the page reflect the current revision. Material changes will be reflected in a fresh effective date; we do not silently revise older versions.
Contact
Privacy questions and requests for access, correction, or removal:
Highwood Distillers Ltd.
114 – 10th Avenue S.E.
High River, Alberta · Canada T1V 1E7
Email: hello@highwoodwhisky.com