Personal Data Processing Policy

1) Scope
This policy explains how we collect, use, disclose, and protect your personal data when you visit lunindistillery.com, purchase our products, or contact us. It applies to consumers in Great Britain. We process your data in accordance with UK GDPR and the Data Protection Act 2018.

2) Data we collect
Identity & Contact: name, email, phone, billing/shipping address, company (optional).

Order & Payment: items purchased, order value, VAT details, partial card details (last 4 digits/brand) as returned by our payment processor; we do not store full card data.

Age-verification: date of birth, results of checks, delivery verification outcome (e.g., Challenge 25).

Delivery: tracking numbers, delivery status, proof of delivery (adult signature/ID check where applicable).

Marketing Preferences: your opt-in/opt-out choices.

Technical: IP address, device, browser, cookies, pixel data, usage logs (pages viewed, events).

Correspondence: enquiries, support messages, testimonial submissions.

We collect data directly from you, from our service providers (payment, delivery, age-verification), and via cookies/pixels (see Cookie Policy).

3) Purposes & lawful bases
Operate our store & fulfil your order (contract performance – Art. 6(1)(b)): checkout, payments, invoicing, delivery, customer service.

Age-restricted sales compliance (legal obligation/legitimate interests – Art. 6(1)(c)/(f)): verify age at checkout and/or delivery; prevent under-18 sales.

Customer communications (contract/legitimate interests – Art. 6(1)(b)/(f)): order confirmation, updates, service notices.

Marketing by email/SMS (consent – Art. 6(1)(a) and PECR): only if you opt-in; withdraw any time.

Analytics & advertising (consent – Art. 6(1)(a)): GA4, Meta pixel, and similar to improve site and show relevant ads.

Fraud prevention & security (legitimate interests – Art. 6(1)(f)).

Legal claims & record keeping (legal obligation/legitimate interests – Art. 6(1)(c)/(f)).

4) Age verification
To comply with UK law, we may verify your age at checkout and/or on delivery (Challenge 25). Couriers may request a valid photo ID. If age cannot be verified, we may cancel an order or refuse delivery.

5) Cookies & pixels
We use essential cookies (for site and checkout), and—if you consent—analytics and advertising cookies/pixels (e.g., Google Analytics, Meta). You can manage preferences any time via Cookie Settings. See our separate Cookie Policy for providers, purposes and lifespans.

6) Disclosures to third parties
We share data only as necessary for the purposes above with:
Payment processors (e.g., Stripe/PayPal/Apple Pay/Google Pay).
Delivery & logistics partners (tracked couriers, age-verified delivery).
Age-verification providers.
IT & hosting, email and CRM platforms.
Analytics/advertising providers (with consent).
Professional advisers (legal/accounting) and authorities where required by law.
We do not sell your personal data.

7) International transfers
Our service providers may process data outside the UK. Where applicable, we use adequacy regulations, IDTA/SCCs, and additional safeguards to protect your data.

8) Retention
Orders & invoices: 6 years (tax/legal).
Age-verification logs: as required by law/defence of claims (typically up to 3 years).
Marketing data: until you withdraw consent or after 24 months of inactivity.
Cookie data: per cookie lifespan (see Cookie Policy).
We retain only what we need and delete or anonymise when no longer required.

9) Your rights
You have the right to access, rectify, erase, restrict, object, data portability, and to withdraw consent at any time (this does not affect processing before withdrawal). You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
To exercise your rights, contact info@lkdistillery.com.

10) Marketing communications
We send marketing only with your opt-in consent. You can unsubscribe via the link in any message or by emailing us. Service emails (order/updates) are not marketing.

11) Security
We implement technical and organisational measures including encryption in transit (HTTPS), access controls, least-privilege policies, and vendor due diligence. No method is 100% secure; we work to continuously improve safeguards.

12) Children
Our website and products are intended for adults 18+ and are not directed at children.

13) Automated decision-making
We do not carry out decisions producing legal or similarly significant effects solely by automated means.

14) Links to third parties
Our site may contain links to third-party websites. Their privacy practices are outside our control; please review their policies.

15) Changes to this policy
We may update this policy from time to time. Material changes will be notified on this page and, where appropriate, by email.

Contact:
LK Distillery LTD, 49 West Ham Lane, London, E15 4PH, United Kingdom
Email: info@lkdistillery.com

Cookie Policy (concise add-on)
Categories:
Essential – required for site, security and checkout (always on).
Analytics – help us understand performance and improve the site (consent).
Advertising – help us show relevant ads off-site (consent).

Your choices: Set preferences via the Cookie Banner (Accept all / Reject non-essential / Manage settings) and adjust anytime in Cookie Settings.
A detailed cookie table (name, provider, purpose, lifespan) can be added once we finalise the exact stack (GA4, Meta Pixel, etc.).

Licensing & Compliance
LK Distillery LTD (trading as LUNIN Distillery).
Premises Licence holder: LK Distillery LTD, Premises address: 49 West Ham Lane, London, E15 4PH.
AWRS URN: XQAW00000122445.
We support responsible drinking — drinkaware.co.uk. Sales only to persons 18+.