Privacy notification

We are the Carlsberg Marston’s Group. You may know us as Carlsberg Marston’s Brewing Company Limited (company reg. no. 00078439), Carlsberg Marston’s Limited (company reg. no. 12577732), CMBC Supply Limited (company reg. no. 08626420) or one of our other trading divisions or group companies from time to time (together the “Carlsberg Marston’s Group”). Where we refer to ‘CMBC’, ‘we’, ‘our’ or ‘us’ in this Privacy Notification, we mean Carlsberg Marston’s Brewing Company Limited, Carlsberg Marston’s Limited, CMBC Supply Limited and / or any other company or division in our group (from time to time) depending on the specific situation / activity carried out. See “How we use your Personal Data” below for further details.

At CMBC our mission is to brew for a better today and tomorrow. Improving and constantly doing better is in our DNA. This approach is not limited to brewing but extends to all parts of CMBC and what we do – including protecting personal data. In CMBC we believe that protecting personal data is of utmost importance and we constantly strive to improve our efforts every day. ’Personal Data’ is any information relating to you.

This Privacy Notification applies to you if you purchase goods from us, receive services from us, are a business partner or supplier, a visitor at one of our sites or offices, an applicant for a job at CMBC, participate in our events or promotions or otherwise interact with us, including by using any of our websites or communicating with us via social media or other platforms.

If you are an existing customer, consumer, business partner or supplier of ours, further details about how we use your Personal Data may be set out in your contract with us. Other notices highlighting certain uses we wish to make of your Personal Data (together with the ability to opt in or out of selected uses) may also be provided when we collect Personal Data from you.

Who uses your Personal Data?

For the purpose of your interactions with us, we may process and use Personal Data concerning you.

We are part of a global group of companies. In that connection, we may share your Personal Data with the following group companies (known as the ‘CMBC Group Entities’):

  1. Marston’s PLC (the ultimate parent company of our shareholders, Marston’s Trading Limited) and any entity which replaces it as a shareholder (in whole or in part) from time to time;
  2. our other shareholder, Carlsberg UK Holdings Limited, and any entity which replaces it as a shareholder (in whole or in part) from time to time (‘Carlsberg Shareholder’);
  3. any member of the Carlsberg Shareholder’s group, which means its other subsidiaries, its shareholders, the ultimate holding company of the Carlsberg Shareholder's group and its subsidiaries (‘Carlsberg Group Entities’); and
  4. any other member of the Carlsberg Marston's Group,

for the purposes stated in this Privacy Notification. Each of those companies may also process and use your Personal Data for the purposes stated in this Privacy Notification, but they do it independently on their own behalf only.

With whom we may share your Personal Data?

In addition to us sharing your Personal Data with CMBC Group Entities, we may in some situations also share your Personal Data with third parties such as business partners, suppliers (e.g. online payment processors), vendors, consultants, agencies, customers, consumers, governmental bodies, courts, e-commerce platform providers (e.g. Shopify, a company registered in Ireland and Carlsberg’s e-commerce platform provider for the website and IT hosting, supply and service providers that we use for our group’s IT environment (‘Third Parties’). We only share Personal Data where it is relevant and necessary for us to perform the activities described in this Privacy Notification; for example, the fulfilment of your order, the processing of your payment details, or the provision of support services.

For questions about Third Party service providers including their respective privacy policies, please send an email to [email protected].  For more information about whom we share your Personal Data with, please consult each activity in this Privacy Notification where you will find further details.

How we use your Personal Data


The Carlsberg Marston’s Group was formed on 31 October 2020 as a ‘joint venture’ between Carlsberg UK Holdings Limited (one of our shareholders) and Marston’s PLC and, as part of that process, control of any Personal Data about you held by Marston’s PLC’s (and any of Marston’s PLC’s group companies’) brewing business collected before that date by Marston’s PLC (or any of Marston’s PLC’s group companies) was transferred into the Carlsberg Marston’s Group. We may use such Personal Data in connection with each of the activities mentioned below (where relevant) but only where the law permits us to do so. In each case, the legal bases for such transfers are legitimate interests (in order to allow the Carlsberg Marston’s Group to develop its business) and legal obligation.

For each activity mentioned below, we note the purpose for which we use the Personal Data, whom this Personal Data regards, the categories of Personal Data being used, the legal bases we rely on for our use, the source from where we received the Personal Data, for how long we keep the Personal Data and with whom we might share the Personal Data.

Depending on the specific situation, we may use your Personal Data for the following activities – please click on each activity to learn more:

Transfer of your Personal Data outside the European Union (‘EU’) and the European Economic Area (‘EEA’)

 Some of the CMBC Group Entities and Third Parties with whom we share your Personal Data may be located in countries outside the UK, EU and/or European Economic Area.

Where we transfer your Personal Data to CMBC Group Entities and Third Parties located outside the UK, EU and the European Economic Area, we may be required to take specific additional measures to safeguard the relevant Personal Data. Certain countries outside the UK, EU and the European Economic Area have been approved by the UK Government or European Commission (as appropriate) as providing essentially equivalent protections to English, EU or European Economic Area (as appropriate) data protection laws and, therefore, no additional safeguards are required to transfer your Personal Data to these jurisdictions. In countries that have not had these approvals, we will use appropriate safeguards in accordance with Chapter V of the United Kingdom General Data Protection Regulation or the General Data Protection Regulation (as appropriate) to protect any Personal Data that are being transferred, such as UK standard contractual clauses (when approved), EU Commission-approved standard contractual clauses or other to ensure that your Personal Data is protected adequately.

How we protect your Personal Data

Keeping your Personal Data secure is a top priority at CMBC. We adhere to internationally recognised security standards and store your Personal Data on secure servers. All Personal Data will be treated as confidential information by those who are allowed to process and use it.  Furthermore, CMBC limits access to your Personal Data only to those people who require it. We regularly perform internal audits and follow-ups in order to review whether our measures are appropriate and to ensure continued compliance with internationally recognised security standards and our policies. 

Where we have given you (or where you have chosen) a password that enables you to access certain parts of our websites or other platforms, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your Personal Data transmitted to our websites – any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.


In certain limited circumstances, we may need to ask for your specific consent to use your Personal Data. However, in most cases we will process it for the reasons set out in this Privacy Notification and it will not be appropriate or necessary for you to provide consent.

If the legal basis for using your Personal Data is consent, you may at any time withdraw your consent by sending an email to [email protected] and informing us about your wishes. If you choose to withdraw your consent, we may no longer use your Personal Data based on consent. The withdrawal will not affect the lawfulness of use based on consent before its withdrawal. In some cases, we may continue using your Personal Data after withdrawal of your consent, if the law permits.

Your rights

If we use your Personal Data for the activities mentioned in this Privacy Notification, you may:

  • request further details about how we use your Personal Data, including receiving a copy of your Personal Data
  • request that we correct, update or erase your Personal Data
  • request that we restrict the use of your Personal Data
  • object to us using it, or that we use it for direct marketing and/or automated decision making, including profiling
  • request that we transfer your Personal Data to you or a Third Party (data portability)

If we use your Personal Data specifically based on our legitimate interests, you may at any time object to us using your Personal Data based on this legal basis.

Please note that these rights are subject to certain exemptions and may not all be available in the country in which you are based. This might be due to obligations imposed upon CMBC, such as other legislation requiring CMBC to retain the Personal Data, protection of the rights and freedoms of others, or the like. CMBC always does its utmost to carefully evaluate every single request and will provide the reasons if actions are not taken.

If you wish to exercise your rights, you can contact us by sending an email to [email protected].

How to file a complaint

If you have any queries that cannot be clarified as a result of internal dialogue with us or you wish to file a complaint, you can contact the Information Commissioner’s Office ('ICO') at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. For further information on how to file a complaint, please visit the ICO's website at You also have the option to contact your local Data Protection Authority, if you are located in another country.

Whom can I contact about this Privacy Notification?

If you have any concerns or questions about our use of your Personal Data or this Privacy Notification, you can contact us by sending an email to [email protected].

Updates to this Privacy Notification

Any changes to this Privacy Notification will be posted on this page and, where appropriate, notified to you. Please check back frequently to see any updates or changes to this Privacy Notification.

This Privacy Notification was last updated in June 2022.