Legal
Privacy Policy
This policy explains what personal data we collect about you, why we collect it, how we use it, and your rights over it.
Last updated · [LAST_UPDATED_DATE]
1. Data controller
[COMPANY_NAME] ("we") is the data controller for personal data collected through our website and services, contactable at [SUPPORT_EMAIL] and [COMPANY_ADDRESS]. Our data protection contact is [DPO_CONTACT].
2. What we collect
Depending on how you use Lorochesky, we may collect:
- Account details (name, email, company, account type)
- Order details (cask, bottle, quantity, artwork, delivery address)
- Payment metadata (handled by our payment processor; we do not store card data)
- Communications you send us (messages, uploaded logos, brand assets)
- Technical data (device, browser, IP address, cookie identifiers)
3. Why we use it
- To create and manage your account.
- To process, produce and deliver orders.
- To verify age at delivery where required by law.
- To provide customer support and respond to enquiries.
- To meet legal and tax obligations.
- To improve the site, and — with your consent — to send marketing.
4. Legal bases
We rely on: performance of a contract (order fulfilment), legal obligation (tax, alcohol regulation), legitimate interests (running and securing the service), and consent (optional cookies and marketing).
5. Sharing
We share personal data with the production and logistics partners named on our Partners page only to the extent required to produce and deliver your order (for example, delivery address to the freight carrier). We use trusted sub-processors including [PAYMENT_PROCESSOR_NAME], [EMAIL_PROVIDER_NAME] and [HOSTING_PROVIDER_NAME]. We do not sell personal data.
6. International transfers
Some of our sub-processors are located outside [YOUR_JURISDICTION]. Where they are, we rely on appropriate safeguards such as [SCC / UK IDTA / Adequacy Decision] to protect your data.
7. Retention
We keep personal data only for as long as we need it: account data while your account is active; order data for [RETENTION_ORDERS_YEARS] years to meet tax and audit obligations; support communications for [RETENTION_SUPPORT_YEARS] years.
8. Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, restrict or object to processing, or to receive your data in a portable format. Contact us at [SUPPORT_EMAIL] to exercise them. You can also complain to your local supervisory authority ([SUPERVISORY_AUTHORITY]).
9. Cookies
See our Cookie Policy for detail on which cookies we set, why, and how to change your choices.
10. Security
We use encryption in transit and at rest, role-based access to production systems, and per-user access controls on order data. No system is perfectly secure — please use a strong, unique password for your account.
This document contains [PLACEHOLDER] markers where jurisdiction-specific facts must be inserted before publication.