Skip to content

Privacy Policy

Last updated: 6 October 2026

At Still, we respect your privacy and are committed to protecting your personal data. This policy explains what we collect through this website, why, and your rights.

1. Who we are

Still is a product of Rienzi Technologies, United Kingdom, which is the data controller for personal data collected through this website. Contact us at privacy@icalastill.com. We have not appointed a Data Protection Officer; privacy queries are handled at that address.

2. Information we collect

We collect:

  • Enquiry and demo forms: your name, email address, telephone number, organisation, website (demo form), your message, whether you ticked the marketing box, and your IP address.
  • Security and anti-spam data: technical information used by Google reCAPTCHA (where enabled) to tell people from bots, and standard server logs (IP address, pages requested, browser type).
  • Analytics data: pages visited and device information, only if you accept analytics cookies.
  • Account and service data if you use the Still application: user details and the distillery records you enter. For that data we act as your processor under our customer agreement.

3. Why we use it and our legal bases

Under UK GDPR and the Data Protection Act 2018 we rely on:

  • Legitimate interests (Art. 6(1)(f)) to respond to enquiries and demo requests, keep the site secure and prevent spam;
  • Contract (Art. 6(1)(b)) to take steps at your request before entering a contract and to provide the service;
  • Consent (Art. 6(1)(a)) for marketing emails and for non-essential cookies. You can withdraw consent at any time using the unsubscribe link, the cookie settings link in the footer, or by emailing us;
  • Legal obligation (Art. 6(1)(c)) where we must keep records, for example for tax.

4. Cookies and similar technologies

Essential cookies keep the site working (for example the session and security-token cookies set by our application). Your cookie choice is stored in your browser's local storage. Analytics (Google Analytics) is loaded only after you opt in, and marketing preferences are recorded the same way. You can change your choice at any time via Cookie settings. Google reCAPTCHA, where enabled on forms, is provided by Google and is subject to the Google Privacy Policy.

5. Who we share data with

We do not sell personal data. We share it only with service providers that help us run the site and service, under written agreements: hosting and database providers, our email delivery provider, Google (reCAPTCHA and, if you consent, analytics), and professional advisers or authorities where the law requires.

6. International transfers

Some providers (such as Google) may process data outside the UK. Where they do, we rely on an adequacy decision, the UK International Data Transfer Addendum / Standard Contractual Clauses, or another lawful transfer mechanism.

7. How long we keep it

  • Enquiry and demo-form data: up to 2 years after our last contact with you, or until you ask us to delete it;
  • Marketing consent records: for as long as needed to show we respect your choice;
  • Customer account data: for the subscription term and as set out in our customer agreement and Terms of Service;
  • Server and security logs: for a short rolling period.

8. Security

We use measures appropriate to the risk, including encrypted (HTTPS) connections, role-based access control for staff and administrators, and limited access to personal data. No system is completely secure; if a breach affects you we will notify you and the ICO where required by law.

9. Your rights

You have the right to access, rectify, erase, restrict or object to our use of your personal data, to data portability, and to withdraw consent. Email privacy@icalastill.com; we will respond within one month. There is no fee unless a request is manifestly unfounded or excessive.

If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ico.org.uk), although we would appreciate the chance to resolve it first.

10. Children

Our website and service are for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16.

11. Changes to this policy

We may update this policy; the date above shows the latest version. For material changes we will give notice on the site or by email.