Privacy Policy
Effective Date: October 2025
1. Introduction
Grandma Liquors & Spirits Limited (“we,” “us,” or “our”) operates the website www.orlagin.com.
We respect your privacy and process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Irish Data Protection Act 2018, and other applicable privacy laws, including the UK Data Protection Act 2018 and the California Consumer Privacy Act (CCPA).
2. Data Controller
The data controller is Grandma Liquors & Spirits Limited, Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork T23 AT2P, Ireland.
For privacy inquiries: drink@orlagin.com
3. Information We Collect
We may collect:
• Contact information (name, email, phone number) when you submit our contact form.
• Email address when you subscribe to our newsletter.
• Technical data (IP address, browser type, device info, access time).
• Analytics and marketing data from cookies and pixels (Google Analytics, Meta Pixel, Hotjar, etc.).
4. Purposes and Legal Bases
We process data to:
• Respond to inquiries and provide information (Article 6(1)(b) GDPR).
• Manage newsletters and marketing (consent – Article 6(1)(a)).
• Improve website functionality and security (legitimate interest – Article 6(1)(f)).
• Comply with legal obligations (Article 6(1)(c)).
5. Data Sharing
Data may be shared with:
• Technical and hosting providers (Shopify Inc. and affiliates).
• Marketing and analytics partners (Google, Meta, Hotjar, Mailchimp or Shopify Email).
• Professional consultants acting under confidentiality agreements.
All such parties act under data-processing agreements.
6. Hosting and International Transfers
Our website is hosted and operated through Shopify Inc., whose servers may be located in the European Union, Canada, and the United States.
Where data is transferred outside the EEA, we rely on the European Commission’s Standard Contractual Clauses (SCCs) or other lawful safeguards.
7. Data Retention
• Contact requests: retained for up to 24 months after last interaction.
• Newsletter subscriptions: retained until you unsubscribe.
• Security logs: retained for 12 months.
• Cookie preferences: retained per your browser settings.
8. Your Rights (EU/EEA/UK)
You may request access, correction, erasure, restriction or portability of your data, and you may object to processing or withdraw consent at any time.
Requests: drink@orlagin.com
You also have the right to lodge a complaint with the Irish Data Protection Commission (www.dataprotection.ie).
9. California and Other Non-EU Rights
Residents of California may request information about how their personal data is used or ask for deletion of personal information (CCPA Sections 1798.100–1798.199).
We do not sell personal data for monetary value.
Similar rights apply under the UK DPA and other international laws.
10. Security
We use industry-standard technical and organizational measures to protect data against loss, misuse or unauthorized access.
11. Children and Age Restriction
This website is intended only for individuals of legal drinking age in their country of residence. Access requires age verification (date of birth). We do not knowingly collect data from individuals under 18.
12. Updates to This Policy
We may update this policy periodically. The latest version will always be posted on our website with a revised “Effective Date.”
13. User Accounts & Registration
You may create a personal account on our website to save your details for future purchases, receive tailored offers, and manage your preferences.
By creating an account, you confirm that you are of legal drinking age in your country of residence.
(a) Data Collected
When you register for an account, we collect the following information:
• First and last name
• Email address
• Password (encrypted)
• Phone number
• Postal address and country
• Company name (if provided)
• Device and login metadata (IP address, browser type, time of access)
All data are stored securely within the Shopify platform and processed in accordance with the GDPR and the Irish Data Protection Act 2018.
(b) Purpose and Legal Basis
We process your registration data to:
• create and manage your user account (Article 6(1)(b) GDPR – performance of a contract);
• send you personalized offers and news by email (Article 6(1)(a) GDPR – consent);
• improve user experience and maintain security of the service (legitimate interest, Article 6(1)(f)).
You may opt out of marketing emails at any time by clicking “unsubscribe” or contacting us at drink@orlagin.com.
(c) Data Access and Deletion
Users can access, update, or delete their account directly via the account settings page.
If you delete your account, all associated personal data will be removed or anonymized within a reasonable period, except for data we must retain to comply with legal obligations.
(d) Retention Period
Your account data are retained until you choose to delete the account or request erasure under the GDPR.
