Plain English
How we look after your details.
Highwood Distillers Ltd. is a Canadian whisky distillery in High River, Alberta and a wholly-owned subsidiary of Caldera Inc. This page explains what personal information this marketing site collects, why we collect it, where it is stored, and what you can ask us to do with it. Written under Canadian federal privacy law (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).
Who we are
This site is operated by Highwood Distillers Ltd., a wholly-owned subsidiary of Caldera Inc., with mailing address 114 – 10th Avenue S.E., High River, Alberta, Canada T1V 1E7.
Privacy questions go to the Highwood office at the email below. Under PIPA Alberta s.5 and PIPEDA Principle 1 we are required to name an accountable person; for now that role sits with the Highwood office, copied on every privacy enquiry.
What we collect
This site does not run analytics, advertising trackers, or social pixels. What we collect is limited to the following:
- Mailing list form: your name and postal address. The mailing list is postal only, not email.
- Contact form: your name, email address, the category of your inquiry (Trade, Press, Visit), and the message text you send.
- Server access logs: your IP address, browser and OS strings, the URL you requested, and the timestamp. These are collected automatically by Netlify, our hosting provider, for security and abuse prevention.
- Map tile requests: the Where to Buy page renders a map using tiles served by Carto. When the map loads, your IP address is sent to Carto’s servers as part of the standard tile request.
Why we collect it
Each piece of information is collected for a single, stated purpose:
- Mailing list: to send you printed Highwood mailings (release notices, the almanac edition, the occasional invitation).
- Contact form: to respond to your enquiry. Trade messages route to our distribution team, press messages to our communications team, visit requests to the distillery.
- Server logs: to keep the site available and to investigate abuse. Standard Netlify hosting practice.
- Map tiles: to render the map. There is no Highwood‑hosted alternative; the only way to make the map work is to fetch tiles from a third party.
Consent
Different forms have different consent models, in plain terms:
- Mailing list: you completed the form and submitted it. That is express consent to send you mailings by post. There is no email follow‑up unless you ask for one separately.
- Contact form: you wrote to us. We treat that as implied consent to write back. We do not add contact‑form senders to any list.
- Server logs: collected as part of normal site operation. PIPEDA Principle 3 lets us rely on identified purposes here.
Sharing and sub‑processors
We do not sell personal information. We do not share it with marketers, data brokers, insurers, or law‑enforcement aggregators. The only parties that touch the data are the service providers we use to run the site:
- Netlify, Inc.: hosting, form delivery, server logs. Headquartered in the United States. Their data‑processing terms are at netlify.com/gdpr-ccpa.
- Carto (CartoDB): map tile provider for the Where to Buy page only. Your IP is sent to Carto when the map loads.
How long we keep it
We keep things only as long as the original purpose needs:
- Contact form messages: kept for as long as the conversation is open, then routinely deleted within 12 months unless a continuing trade or press relationship calls for keeping the record.
- Mailing list: kept until you ask to be removed.
- Server logs: Netlify’s standard rolling retention, typically about 30 days.
Your rights
Under PIPA Alberta (sections 24–30) and PIPEDA, you can ask us at any time to show you what personal information we hold about you, to correct anything inaccurate, or to remove you from the mailing list. Email the privacy contact below; we respond within two business days.
If you are unsatisfied with our response, you can contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.
Security
The site is hosted on Netlify, which provides infrastructure security and TLS in transit by default. Personal information is held in Netlify’s form storage; access on our end is limited to the small number of people who handle each kind of enquiry. We use long, unique passwords and two‑factor authentication on the admin tooling.
The shop is separate
The Shop button on this site links to shop.highwoodwhisky.com, our Shopify storefront. That site has its own privacy policy, its own cookies, its own analytics, and its own payment processor. This policy does not extend to it.
Cookies and local storage
This site does not use advertising cookies, analytics cookies, or social media trackers. The only browser storage we set is:
- Age gate: a small cookie that remembers you confirmed you were of legal drinking age, so the gate does not reappear on every page.
- Netlify form helpers: small technical cookies Netlify may set when a form is submitted, to prevent abuse.
Legal drinking age
This site is intended for adults of legal drinking age in their province, territory, or country of residence. Visitors below legal drinking age should not submit personal information through this site, and we will delete it if we become aware that any has been submitted.
Changes to this policy
We update this policy when the site changes or the underlying law changes. The effective date and version number at the top of the page reflect the current revision. Material changes will be reflected in a fresh effective date; we do not silently revise older versions.
Contact
Privacy questions and requests for access, correction, or removal:
Highwood Distillers Ltd.
114 – 10th Avenue S.E.
High River, Alberta · Canada T1V 1E7
Email: hello@highwoodwhisky.com