Legal

Privacy Policy

Last updated DATE. Draft for review, produced 10 September 2026

This Site is intended only for people of legal drinking age in their country of residence. It is not directed at children, and we do not knowingly collect personal information from anyone under the legal drinking age.

1Who we are

Tiago Royale Brands Ltd, a company registered in England and Wales under company number COMPANY NUMBER, is the controller of the personal information described in this policy.

Registered office: REGISTERED OFFICE ADDRESS

PRIVACY EMAIL

If you are in the European Economic Area and have questions about how we handle your data, write to us at the address above.

2Information we collect

We collect only what we need to answer you and to keep the Site working.

Contact form
Your name, email address, the enquiry type you select (Events and Sponsorships, Distribution, or General), and the content of your message.
Newsletter sign-up
Your email address, and the date and time you subscribed.
Direct correspondence
If you email us or reach out through social media, we receive whatever you choose to include.
Age verification
When you confirm you are of legal drinking age, that confirmation is saved in your own browser using localStorage, so you are not asked again on every visit. It records only that verification was given and when it expires. It does not record your age or date of birth, and it is never sent to us or to anyone else. Clearing your browser data removes it.
Server logs
Our hosting provider automatically records standard technical information including IP address, browser type, and timestamps, for security and troubleshooting.

We do not sell alcohol or any other product through this Site. We do not collect payment information, and we do not ask for your date of birth, government identification, or any special category data.

We do not currently use analytics of any kind. No third-party analytics, advertising, or tracking script runs on this Site, and the fonts are served from our own domain rather than from a third party. If that changes, this policy will be updated before the change takes effect.

3Why we use it, and our legal basis

For visitors in the United Kingdom and the European Economic Area, the legal bases under the UK GDPR and GDPR are as follows.

To respond to contact form submissions and emails
So that we can answer your question or trade enquiry. Our legal basis is legitimate interests, namely responding to a request you made of us.
To send you the newsletter
Because you asked to receive it. Our legal basis is your consent.
To store your age verification
So we can restrict access to Site content to people of legal drinking age, in line with alcohol advertising self-regulation. Our legal basis is legitimate interests.
To keep the Site secure and available
To prevent abuse, spam, and outages. Our legal basis is legitimate interests.
To meet legal and regulatory requirements
Where applicable regulation requires it. Our legal basis is legal obligation.

You can withdraw consent at any time. Withdrawing it does not affect anything we did before you withdrew it.

4Who we share it with

We do not sell your personal information, and we do not share it for advertising purposes.

We use a small number of service providers who process data on our behalf under contract, and only on our instructions:

Web3Forms
Delivers contact form and newsletter submissions to our inbox. Submissions pass through their service and are not stored by us on this Site.
Hosting provider
Hosts the Site and maintains server logs.
Email provider
Receives and stores our email.

We may also disclose information where we are legally required to, where we need to establish or defend a legal claim, or in connection with a sale or reorganization of our business, in which case this policy would continue to apply to the information transferred.

5International transfers

We are based in the United Kingdom. Some of our service providers may be located outside the UK, including in the United States. Where that happens, we rely on appropriate safeguards, including the UK International Data Transfer Addendum (or the EU Standard Contractual Clauses as applied by that Addendum) or an applicable UK adequacy decision. You may request a copy of the relevant safeguards by writing to PRIVACY EMAIL.

6How long we keep it

Contact form messages and correspondence
RETENTION PERIOD - e.g. "for 24 months" after the matter is closed.
Newsletter subscribers
Until you unsubscribe, then removed within RETENTION PERIOD - e.g. "30 days".
Age verification
Thirty days from the date you verify, after which you are asked again. It is held only on your device and expires there.
Server logs
The period set by our hosting provider.

We may keep information longer where the law requires it or where we need it for a legal claim.

7Your rights

Depending on where you live, you may have some or all of the following rights:

Access
Ask for a copy of the personal information we hold about you.
Correction
Ask us to fix information that is wrong or incomplete.
Deletion
Ask us to erase your information.
Restriction
Ask us to limit how we use it.
Objection
Object to processing based on our legitimate interests.
Portability
Receive your information in a portable format.
Withdraw consent
At any time, for anything based on consent.
Complain
To your data protection authority.

To exercise any of these, write to PRIVACY EMAIL. We will respond within one month, and will tell you if we need longer. We may ask you to confirm your identity first.

If you are in the United Kingdom, you can complain to the Information Commissioner's Office at ico.org.uk. If you are elsewhere in the European Economic Area, you can complain to your national supervisory authority.

Unsubscribing from the newsletter is always available through the link at the bottom of every email. You do not need to contact us.

8Cookies and similar technology

This Site sets no cookies. Not for age verification, not for analytics, and not for advertising.

Your age confirmation is stored in localStorage, a storage area inside your own browser. It is never automatically sent to our servers or to anyone else. You can clear it at any time through your browser's settings for site data, and if you do, the Site will ask you to verify your age again on your next visit.

Under the Privacy and Electronic Communications Regulations (PECR), rules on storing information on a user's device are not limited to cookies - they cover this kind of local storage too. We rely on the "strictly necessary" exemption for this specific use: the Site cannot show you age-restricted content at all until this check happens, and nothing beyond the verification flag and its expiry is stored. No consent banner is used because none is required for this narrow, functional use.

We do not use advertising or tracking cookies or similar technologies, and we do not allow third parties to track you across other websites through this Site.

9Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS) across the Site and access controls on the systems that hold it. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10Other websites

The Site links to third-party sites, including social media. We are not responsible for their privacy practices, and this policy does not apply to them.

11Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it last changed. Material changes will be brought to your attention on the Site.

12Contact

Questions, requests, or complaints about this policy:

Tiago Royale Brands Ltd

Registered in England and Wales, company number COMPANY NUMBER

Registered office: REGISTERED OFFICE ADDRESS

PRIVACY EMAIL