1. Introduction
Welcome to Vintagespiritsco (www.vintagespiritsco.com).
Vintagespiritsco respects the privacy of individuals who visit our website, purchase our products or communicate with our customer service team.
This Privacy Policy explains how we collect, use, process, store and disclose personal information when you access our website, browse our product collection, place an order or contact us.
Vintagespiritsco operates from Singapore and serves customers across European markets. Our personal information handling practices take account of the Singapore Personal Data Protection Act 2012 (PDPA), the European Union General Data Protection Regulation (GDPR), and applicable data protection requirements in the United Kingdom and other relevant European jurisdictions.
By using our website or providing personal information to us, you acknowledge the information handling practices described in this Privacy Policy.
2. Data Controller Information
For the purposes of this Privacy Policy, the data controller is:
- Brand Name: Vintagespiritsco
- Website: www.vintagespiritsco.com
- Privacy Contact Email: cocktail@vintagespiritsco.com
Vintagespiritsco determines the purposes and means of processing personal information collected through its online retail activities, subject to the applicable legal requirements.
For privacy-related enquiries, requests concerning personal information or questions about this Policy, please contact us using the email address above.
3. Personal Information We Collect
Depending on how you interact with our website, we may collect the following categories of personal information.
3.1 Personal Identification Information
When you place an order or contact us, we may collect:
- Full name.
- Email address.
- Telephone number.
- Billing address.
- Delivery address.
3.2 Order and Transaction Information
When you purchase products from our website, we may collect and maintain:
- Order reference numbers.
- Purchased product names and quantities.
- Order dates and transaction amounts.
- Billing and delivery information.
- Payment status and transaction references.
- Order correspondence and relevant customer service records.
3.3 Payment-Related Information
Payments made through our website are processed by Stripe, our payment processing provider.
Depending on the payment method selected, payment-related information may include:
- Payment card details.
- Cardholder name.
- Billing information.
- Payment transaction references.
- Payment confirmation and transaction status.
Payment card information is submitted to Stripe through its payment processing arrangements. Vintagespiritsco does not intentionally retain complete payment card numbers or card verification codes in its ordinary order records.
3.4 Website and Device Information
When you visit our website, certain information may be collected automatically, including:
- IP address.
- Browser type and version.
- Device information.
- Operating system.
- Website access dates and times.
- Pages visited and browsing activity.
- Cookie identifiers and related website preferences.
This information helps us understand website usage, maintain website operations and improve the browsing experience.
3.5 Customer Communications
When you contact us by email or through available website contact facilities, we may collect:
- Your name and contact details.
- The contents of your enquiry.
- Relevant order references.
- Correspondence history.
- Information you voluntarily provide when requesting assistance.
4. How We Use Personal Information
Vintagespiritsco processes personal information for the following purposes:
4.1 Order Administration
To receive, review, confirm and administer customer orders, including associated billing and delivery arrangements.
4.2 Payment Processing
To submit payment information to Stripe, receive transaction confirmations and maintain relevant payment records.
4.3 Customer Support
To respond to enquiries, review order-related questions and maintain relevant correspondence.
4.4 Website Administration
To operate our website, maintain website functionality and review general website usage.
4.5 Business Records
To maintain transaction documentation, accounting records, order histories and relevant commercial records.
4.6 Legal and Regulatory Obligations
To comply with applicable tax, accounting, regulatory and legal requirements and respond to lawful requests from competent authorities.
4.7 Business Administration
To manage our retail operations, review customer feedback and maintain records necessary for legitimate business activities.
5. Legal Grounds for Processing
Where the GDPR applies, Vintagespiritsco processes personal information on the following legal grounds, as appropriate:
- Contractual Necessity: Processing necessary to receive and fulfil customer orders and perform our contractual obligations.
- Legal Obligations: Processing necessary to comply with applicable accounting, tax and regulatory requirements.
- Legitimate Interests: Processing necessary for reasonable business administration, website operations, customer correspondence, record keeping and the handling of legal claims, provided these interests do not override applicable individual rights.
- Consent: Processing based on your consent, including certain optional cookies and marketing communications where applicable.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing lawfully carried out before consent was withdrawn.
Under Singapore’s PDPA, we also handle personal information in accordance with applicable consent, notification, purpose limitation and other relevant statutory requirements.
6. Stripe Payment Processing
Vintagespiritsco uses Stripe as its payment processing provider to facilitate customer payments made through our website.
Stripe processes payment-related personal information to handle transactions and provide the payment services required for an order.
Information transmitted to Stripe may include:
- Customer name.
- Email address.
- Billing address.
- Payment card information.
- Transaction amount.
- Currency.
- Order reference.
- Relevant transaction and device information.
When you proceed to checkout, the relevant payment information is submitted to Stripe for transaction processing.
Stripe may process personal information in different capacities depending on the particular service and processing activity:
As a Data Processor
Stripe processes relevant payment information on behalf of Vintagespiritsco and in accordance with the applicable contractual payment processing arrangements.
As an Independent Data Controller
Stripe may independently determine the purposes and means of certain processing activities, including its own regulatory compliance, payment service administration, transaction monitoring and other obligations.
Stripe’s independent processing activities are governed by its own privacy documentation.
For further information, please refer to:
Stripe Privacy Policy:
https://stripe.com/legal/privacy
Stripe Privacy Centre:
https://stripe.com/legal/privacy-center
Vintagespiritsco does not determine Stripe’s independent data processing purposes or retention obligations.
7. Disclosure of Personal Information
We may disclose relevant personal information to the following categories of recipients where necessary for the purposes described in this Policy.
7.1 Stripe
Payment-related information is shared with Stripe for payment processing and associated transaction administration.
7.2 Delivery and Fulfilment Providers
Relevant customer information, including names, delivery addresses and contact details, may be shared with delivery providers where necessary to arrange and complete an order.
7.3 Website and Hosting Providers
Website hosting, maintenance and related service providers may process certain information to support website operations.
7.4 Professional and Business Service Providers
We may disclose relevant information to accounting, legal and other professional service providers where reasonably necessary for business administration and applicable legal obligations.
7.5 Public Authorities
Information may be disclosed where required by applicable law, a lawful request, a court order or a competent regulatory authority.
We limit disclosures to information relevant to the applicable purpose and do not authorise recipients to use personal information for unrelated purposes.
8. International Data Transfers
Vintagespiritsco operates from Singapore and serves customers in European markets.
Personal information may be processed or transferred between Singapore, European countries and other jurisdictions where our service providers or payment processing arrangements operate.
Where personal information originating from the EEA or UK is transferred outside the relevant jurisdiction, we take account of applicable international transfer requirements.
Depending on the circumstances, appropriate arrangements may include:
- An applicable adequacy decision.
- Standard Contractual Clauses approved by the European Commission.
- The UK International Data Transfer Agreement or applicable UK Addendum.
- Other legally recognised transfer mechanisms.
Where Singapore’s PDPA applies, overseas transfers are handled in accordance with its requirements for comparable protection of transferred personal information.
9. Personal Information Retention Periods
Vintagespiritsco retains personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, subject to applicable legal and business record-keeping requirements.
Our general retention schedule is as follows:
| Information Category | General Retention Period |
|---|---|
| Customer enquiries and correspondence | Up to 24 months after the enquiry is closed |
| Order and transaction records | Up to 7 years from the relevant transaction or financial record date, where required for business, accounting or legal purposes |
| Customer account information | While the account remains active; reviewed after 24 months of inactivity |
| Delivery and fulfilment records | Up to 24 months after order completion, unless longer retention is necessary for a legal or commercial matter |
| Payment references and transaction confirmations | Up to 7 years where required for accounting, tax or transaction record purposes |
| Marketing preferences and consent records | Until consent is withdrawn, with a review after 24 months of inactivity |
| Website access and analytical records | Generally up to 12 months, unless a longer period is reasonably necessary for a documented purpose |
| Cookie information | According to the relevant cookie duration and consent preferences |
These periods are internal retention guidelines and are applied according to the purpose and legal basis for each record.
Where applicable legislation requires a longer retention period, relevant information may be retained for the required period.
Where information is no longer required for its original purpose or another legitimate legal or business purpose, we will take appropriate steps to delete, dispose of or anonymise it.
Payment information independently retained by Stripe is subject to Stripe’s own retention requirements and policies.
10. Cookies and Similar Technologies
Our website may use cookies and similar technologies to support website operations and understand browsing activity.
These may include:
Essential Cookies
Used for functions necessary for website operation, including shopping basket activities, checkout processes and session management.
Functional Cookies
Used to remember certain website preferences and improve browsing convenience.
Analytical Cookies
Used to understand general website traffic, visitor activity and website usage patterns.
Third-Party Cookies
Certain service providers, including Stripe, may use cookies or similar technologies in connection with payment processing and related services.
Where consent is required, non-essential cookies will only be activated after you provide the relevant consent through the website’s cookie preference facilities.
You may change your cookie preferences through the available website controls or your browser settings.
For further information, please refer to our Cookie Policy.
11. Data Protection and Confidentiality
Vintagespiritsco applies appropriate organisational and administrative measures to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.
Access to personal information is limited to persons and service providers who require the relevant information for legitimate business purposes.
We also take reasonable steps to ensure that information shared with relevant service providers is handled in accordance with applicable contractual and data protection requirements.
In the event of a personal data breach, we will assess the circumstances and take the notification or other measures required by applicable law.
12. Your Data Protection Rights
Where the GDPR applies, individuals may exercise the following rights, subject to applicable legal conditions and exceptions:
- Right of Access: Request information about personal data held about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal information.
- Right to Erasure: Request deletion of personal information where the relevant legal conditions are met.
- Right to Restriction: Request restriction of certain processing activities.
- Right to Data Portability: Request a copy of qualifying personal information in a commonly used, machine-readable format.
- Right to Object: Object to processing based on legitimate interests in circumstances provided by law.
- Right to Withdraw Consent: Withdraw consent where processing relies on consent.
Under Singapore’s PDPA, individuals may also exercise applicable rights to request access to or correction of personal information, and withdraw consent subject to the applicable statutory requirements.
To submit a request, please contact:
Email: cocktail@vintagespiritsco.com
We may request reasonable information to verify your identity before processing a request.
Requests will be handled within the time limits prescribed by applicable law.
Where a request cannot be fulfilled due to a lawful retention requirement or applicable statutory exception, we will handle the request in accordance with the relevant legal provisions.
13. Marketing Communications
Vintagespiritsco may send promotional communications where permitted by applicable law and where the necessary consent or other lawful basis has been obtained.
You may opt out of marketing emails by using the unsubscribe facility included in the relevant communication or by contacting us directly.
Opting out of marketing communications does not affect necessary order confirmations, transaction notifications or other service-related correspondence.
We will maintain relevant marketing preferences and consent records to administer your communication choices.
14. Children’s Personal Information
Our website and products are intended for adult customers.
Vintagespiritsco does not knowingly seek to collect personal information from children in circumstances where such collection is not permitted by applicable law.
Where we become aware that personal information has been collected inappropriately, we will assess the matter and take appropriate action in accordance with applicable requirements.
15. Third-Party Websites
Our website may contain links to external websites or services operated by third parties.
These external websites have their own privacy policies and information handling practices.
Vintagespiritsco does not control the privacy practices of independent external websites. Customers are encouraged to review the relevant privacy information before providing personal information to those services.
16. Changes to This Privacy Policy
Vintagespiritsco may update this Privacy Policy from time to time to reflect changes in our business operations, information handling practices or applicable legal requirements.
The latest version will be published on our website with its corresponding effective date.
Where changes materially affect the way personal information is processed, we will provide appropriate notice or seek consent where required by applicable law.