How we look after your details.

This site is operated by Highwood Distillers Ltd., a wholly-owned subsidiary of Caldera Inc., with mailing address 114 – 10th Avenue S.E., High River, Alberta, Canada T1V 1E7.

Privacy questions go to the Highwood office at the email below. Under PIPA Alberta s.5 and PIPEDA Principle 1, Highwood is accountable for the personal information described in this policy.

• Mailing list form: your name and postal address. The mailing list is postal only, not email.
• Contest or giveaway entry form: your name, email address, Instagram handle, province, legal-age confirmation, rules acceptance, and optional marketing choice. We store a one-way hash of your IP address to prevent duplicate or fraudulent entries.
• Contact form: your name, email address, inquiry category, and message.
• Server access logs: your IP address, browser and operating-system details, requested URL, and timestamp. Netlify collects these as our hosting provider for security and abuse prevention.
• Map tile requests: the Where to Buy map uses tiles served by Carto. Your IP address is sent to Carto when those tiles load.
• Analytics and advertising data: Google Analytics 4 and the Meta pixel receive page, device, browser, approximate location, and interaction information. Google Analytics uses measurement ID G-CHSS9F0SF2. Meta uses dataset 1018931997443635 and may set _fbp and _fbc cookies. You can turn both off in your browser; see Consent and your choices below.
• Server-side advertising measurement: if you submit a giveaway entry, our server sends Meta a matching copy of the Lead event. It includes a one-way hash of your normalized email address, your IP address, browser details, and Meta cookie identifiers when available. A shared event ID prevents Meta from counting the browser and server copies twice.

• Mailing list: to send the printed Highwood mailings you requested.
• Contest entry: to administer the promotion, verify eligibility, run the draw, prevent duplicate entries, and contact the winner.
• Optional marketing email: only when you separately tick the marketing box on a form.
• Contact form: to respond to your inquiry.
• Server logs: to keep the site available and investigate abuse.
• Map tiles: to render the map.
• Google Analytics: to understand aggregate site use and improve the site.
• Meta pixel and Conversions API: to measure Facebook and Instagram advertising and, where Meta permits, reach adults who have visited the site or people with similar interests.

We collect only what is needed for these purposes. If we want to use submitted information for a new purpose, we will ask first.

Submitting a form gives us consent to use its information for the stated purpose. A contest entry is not consent to marketing email. Marketing email requires the separate optional checkbox, and you can withdraw that consent using an unsubscribe link or by contacting us.

Google Analytics, the Meta pixel, and the Meta Conversions API run on this site by default. Their purpose is measurement and advertising, described above, and they do not collect sensitive information. You can opt out at any time:

• Block or clear cookies for highwoodwhisky.com in your browser settings, or browse in a private window.
• Install the Google Analytics Opt-out Browser Add-on to stop Google Analytics on every site.
• Adjust Meta's own Ad Preferences to limit advertising use of activity from websites.
• Turn on the tracking protection built into your browser, which blocks these scripts before they load.
• Email the privacy contact below and we will remove your information from any Highwood advertising audience.

The site works normally with all of it blocked. The age-verification cookie, hosting security logs, and strictly necessary form processing do not depend on analytics or advertising.

The consent to measure a giveaway Lead is separate from the optional marketing-email checkbox. We do not use contest entrants as a customer-list advertising audience unless they also selected the optional marketing checkbox. For those opted-in entrants, we may upload a one-way hash of the email address to Meta to reach them or similar audiences. You can withdraw that marketing consent at any time.

We do not sell personal information. The service providers that may process the information described above are:

• Netlify, Inc.: hosting, form delivery, server logs, and object storage. Netlify is headquartered in the United States.
• Google LLC: optional site analytics after consent. Google may process this data outside Canada.
• Meta Platforms, Inc.: optional advertising measurement and matching after consent. Meta may process this data outside Canada.
• Carto (CartoDB): map tiles on the Where to Buy page.

We do not currently use an email service provider. Marketing choices are recorded, but no marketing email is sent until a provider is selected and this policy is updated.

Because some providers operate outside Canada, information may be subject to the laws of those jurisdictions. We disclose information in response to a valid legal requirement only to the extent required.

• Contact messages: while the conversation is active, then routinely deleted within 12 months unless an ongoing relationship requires the record.
• Mailing list: until you ask to be removed.
• Contest entries: through the promotion and up to 12 months after it closes for records and winner verification, then deleted. Marketing opt-ins remain until withdrawn.
• Server logs: according to Netlify's rolling retention settings.
• Analytics and advertising data: according to the retention settings and policies of Google and Meta.

Under Alberta PIPA and PIPEDA, you can ask to access or correct the personal information we hold, withdraw consent for optional uses, or ask to be removed from a list. Email the privacy contact below. We respond within two business days.

If you are not satisfied with our response, you can contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

The site uses TLS in transit and is hosted on Netlify. Submitted information is stored in Netlify form and object storage. Access is limited to the people who administer the relevant inquiry or promotion.

• Age gate: a necessary cookie that remembers legal-age confirmation.
• Netlify form helpers: technical storage Netlify may use for form security and abuse prevention.
• Google Analytics: _ga and _ga_* cookies.
• Meta: _fbp and, after an ad click, _fbc.

You can clear or block any of these in your browser; see Consent and your choices above. Clearing the age-gate cookie makes the age check reappear.

The Shop button links to shop.highwoodwhisky.com, a Shopify storefront. Shopify handles checkout, payment, storefront analytics, and that site's privacy controls under the shop's own privacy policy.

This site is for adults of legal drinking age in their province, territory, or country. Visitors below legal drinking age should not submit personal information. We will delete it if we learn that it was submitted.

We update this policy when the site, our providers, or applicable requirements change. The effective date and version at the top identify the current revision.

Privacy questions and requests for access, correction, withdrawal, or removal:

Highwood Distillers Ltd.
114 – 10th Avenue S.E.
High River, Alberta · Canada T1V 1E7

Email: info@caldera.ca