LEGAL

Privacy

VERSION 2 · UPDATED 2026-07-12

Plain English first: the Atlas is an editorial archive. We run no advertising, we sell no data, and we set no tracking cookies. You can read the whole site, and add an amaro or suggest a correction, without an account. What follows is the detail.

WHO IS RESPONSIBLE

The data controller is Asterley Bros, London Ltd (company no. 09295823), 5 Orchard Business Centre, Kangley Bridge Road, London SE26 5AQ, United Kingdom. Contact: info@asterleybros.com.

WHAT WE COLLECT, AND WHY

· Contributor accounts. If you sign in to be credited for your contributions, we hold your email address (used only to send your one-time sign-in link and to identify your account) and any handle, display name and short bio you choose. Your handle, display name, bio and kudos total are public — they appear on records you add and may appear on a contributors list; your email is never shown publicly or shared. Sign-in is passwordless (magic link). Lawful basis: consent.
· Submissions and corrections. When you add an amaro or suggest a correction, we store what you send (the details of the amaro or the correction, and any link you provide) in a contributions log, with its review status, so the archive keeps an accurate audit trail and accepted contributions can earn credit. You can contribute anonymously; sign in only to claim the credit. Nothing you submit is published automatically — a person reviews it first. Lawful basis: legitimate interests (an accurate, auditable archive), and consent where you sign in.
· Spam protection. When you submit a form we store a one-way, salted hash of your IP address — not the address itself — solely to rate-limit abuse. It cannot be reversed to identify you. Lawful basis: legitimate interests (keeping the site usable).
· Newsletter. If you subscribe to the monthly dispatch, we hold your email address with our newsletter provider and only add you after you confirm (double opt-in). Every email carries a one-click unsubscribe. Lawful basis: consent.
· Claim verification data (when the producer claim flow launches): name, work email, role and the evidence you offer. Used only to verify you speak for the producer; retained as part of the record’s moderation history. Lawful basis: legitimate interests, and contract where you request the claim.
· Public-record facts on profiles. Producer profiles name businesses and, where already public, founders and distillers, with graded sources. This is editorial publication in the legitimate interest of an accurate archive — see Corrections & Removal for how to correct or remove.
· Server logs. Our hosting and email providers keep short-lived technical logs (IP, request, timestamp) for security and reliability.

WHERE IT LIVES

The site is served by Netlify. Sign-in and the archive database run on Supabase in the EU (AWS eu-west-2, London). Account and notification emails are sent through Mailgun’s EU region; the optional newsletter is handled by MailerLite (EU). We use Google Search Console for aggregate, non-identifying search-performance data about the site. All of these are UK/EU-based, and we do not transfer your personal data beyond these processors’ standard arrangements.

HOW LONG WE KEEP IT

We keep your contributor account until you ask us to delete it. The contributions log is retained as part of the archive’s change history (we can detach your name from it on request). Correspondence is kept while it is relevant. Newsletter data is kept until you unsubscribe.

YOUR RIGHTS

UK GDPR gives you the right to access, correct, delete, restrict or object to processing of your personal data, to withdraw consent at any time, and to complain to the ICO (ico.org.uk). Email us and we will act on it — deleting a contributor account, unsubscribing, or correcting and removing records all have a clear path (records via the published policy).