Privacy Policy as of 31/10/2024
This website is owned and operated by Cumbre Spirits Limited. Cumbre Spirits ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and protect personal information through our website and related services (the "Service"). By using our Service, you accept the practices described in this policy.
Data controller Cumbre Spirits Limited. If you have questions or requests regarding your personal data, please contact us at: anthony@yerbaspirit.com
We collect information that you provide directly and information collected automatically when you use our Service.
Information you provide
Account information: name, email address, telephone number.
Ordering and payment information: billing and delivery addresses, payment card details (processed by third-party payment providers; we do not store full card details).
Communication: messages you send us (including enquiries, feedback and support requests).
Marketing preferences: consent and choices about receiving communications from us.
Information collected automatically
Device and usage data: IP address, device type, browser, operating system, pages visited, referral URLs, page interactions, date/time stamps.
Cookies and tracking technologies: small data files and similar technologies used to enhance and personalise your experience (see "Cookies and similar technologies" below).
How we use your information We use personal information for the following purposes:
To provide and operate the Service: process orders, deliver products, manage accounts and process payments.
To communicate with you: respond to enquiries, send transactional messages, provide updates and customer support.
To personalise and improve the Service: tailor content, recommendations, and promotions; analyse usage to improve our website and offerings.
For marketing: send newsletters, offers and promotional materials where you have consented; manage marketing preferences.
For legal and safety reasons: comply with legal obligations, detect and prevent fraud or abuse, enforce our terms and policies.
For analytics and research: measure and analyse performance and user behaviour to enhance the Service.
Legal bases for processing (EEA/UK) Where applicable, we rely on one or more of the following legal bases to process personal data:
Performance of a contract: processing necessary to fulfil an order or provide a Service you requested.
Consent: where you have given clear consent (e.g. marketing emails, cookies).
Legitimate interests: for business operations, fraud prevention, and to improve and personalise services, balanced against your rights and freedoms.
Legal obligation: to comply with applicable law or regulatory requirements.
Cookies and similar technologies We use cookies and similar tracking technologies to collect device and usage information, remember preferences and personalise content. You can manage cookie preferences through your browser settings. Blocking some cookies may affect the functionality of the Service.
Third-party services and sharing We share personal information with third parties only as necessary and in accordance with this policy:
Service providers: third-party suppliers who perform services on our behalf (payment processors, delivery partners, analytics providers, email and marketing platforms).
Legal and safety reasons: when required by law, legal process, or to protect our rights, property or safety, or that of others.
Business transfers: in the event of a merger, sale, reorganisation, acquisition, or asset transfer, personal data may be transferred as part of that transaction. We will notify you where required by law.
With your consent: when you have expressly authorised sharing.
We require our service providers to safeguard personal information and to use it only for the purposes for which we disclose it.
International transfers Personal data may be transferred to, stored and processed in countries other than your own, including countries whose data protection laws may differ from those in your jurisdiction. Where transfers occur, we use appropriate safeguards such as standard contractual clauses, or rely on adequate legal frameworks, to protect your information.
Data retention We retain personal data only as long as necessary to fulfil the purposes described in this policy, to comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by the type of data and the purposes for which it is processed.
Your rights and choices Depending on your jurisdiction, you may have the following rights regarding your personal data:
Access: request a copy of personal data we hold about you.
Rectification: correct inaccurate or incomplete data.
Erasure: request deletion of your personal data (subject to legal restrictions).
Restriction: request restriction of processing in certain circumstances.
Portability: receive your personal data in a structured, commonly used format.
Objection: object to processing based on legitimate interests
