Privacy Policy

How we collect, use, and protect your personal information.

1. Who We Are

Elusa Drinks Ltd ("we", "us", "our") is a company registered in England and Wales. We are the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us:

2. What Information We Collect

We may collect and process the following personal data:

Information you provide directly

  • Contact details: name, email address, phone number, delivery address
  • Order information: products purchased, order history, payment details
  • Account information: username, password, preferences
  • Communications: enquiries, feedback, and correspondence with us

Information collected automatically

  • Browsing data: pages visited, time on site, referral source
  • Device information: browser type, operating system, screen resolution
  • Cookies and similar technologies: see Section 6 below
  • IP address: for security, fraud prevention, and analytics

3. How We Use Your Information

We use your personal data for the following purposes:

  • Fulfilling orders: processing payments, arranging delivery, sending order confirmations and updates
  • Customer support: responding to enquiries, resolving issues, handling returns
  • Marketing: sending promotional emails and product updates (only with your consent; you can unsubscribe at any time)
  • Fraud prevention: protecting against fraudulent transactions and ensuring the security of our website
  • Legal compliance: meeting our obligations under applicable laws, including age verification for alcohol sales
  • Website improvement: analysing browsing behaviour to improve our website, products, and services

Legal basis for processing

Under UK GDPR, we rely on the following legal bases:

  • Contract: processing necessary to fulfil your order
  • Legitimate interests: fraud prevention, website analytics, business improvement
  • Consent: marketing communications
  • Legal obligation: age verification, tax records

4. Third-Party Disclosure

We do not sell your personal data. We may share your information with trusted third parties who assist us in operating our business:

  • Payment processors: to securely process your transactions (e.g. Stripe, PayPal)
  • Delivery partners: to fulfil and deliver your orders (e.g. Royal Mail, DPD)
  • Website hosting: our website is hosted on Cloudflare
  • Analytics: Google Analytics to understand website usage (anonymised where possible)
  • Email marketing: to send newsletters and promotional content (only with your consent)

All third-party providers are required to process your data securely and in accordance with applicable data protection laws.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Order data: retained for 7 years for accounting and tax purposes
  • Marketing data: retained until you unsubscribe or request deletion
  • Website analytics: anonymised data retained for up to 26 months
  • Enquiry data: retained for 2 years unless an ongoing relationship exists

6. Cookies

Our website uses cookies (small text files stored on your device) to improve your browsing experience. We use:

  • Essential cookies: required for the website to function (e.g. shopping cart, age verification)
  • Analytics cookies: to understand how visitors use our website (Google Analytics)
  • Marketing cookies: to deliver relevant advertisements (only with your consent)

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encrypted data transmission (SSL/TLS), secure payment processing, and restricted access to personal data within our organisation.

While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

8. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of access: request a copy of the personal data we hold about you
  • Right to rectification: request correction of inaccurate or incomplete data
  • Right to erasure: request deletion of your personal data (subject to legal obligations)
  • Right to restrict processing: request that we limit how we use your data
  • Right to data portability: request your data in a structured, machine-readable format
  • Right to object: object to processing based on legitimate interests or for marketing purposes
  • Right to withdraw consent: withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at info@elusa-drinks.com. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. International Transfers

Your data may be processed by third-party providers located outside the UK. Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data in accordance with UK data protection law.

10. Children's Privacy

Our products contain alcohol and are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have collected data from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page. We encourage you to review it periodically.

Last updated: March 2026