Politique de confidentialité

1. Data Controller

The entity responsible for processing your personal data is:

SAS Quetzalli
77 Avenue Aristide Briand
92120 Montrouge
France

Privacy contact:
Email: info@quetzallitequila.com

SAS Quetzalli acts as the data controller under the GDPR, meaning that we determine the purposes and methods of processing your personal data.

2. Personal Data We Collect

Personal data means any information relating to an identified or identifiable individual.

Depending on how you interact with our website and services, we may collect the following categories of personal data:

Identity and Contact Information

This may include:

• First name and last name;
• Email address;
• Telephone number;
• Billing address;
• Delivery address.

Order and Transaction Information

This may include:

• Products purchased;
• Order details;
• Delivery information;
• Transaction history;
• Customer service communications relating to purchases;
• Returns or complaints.

Payment Information

Payments are processed through third-party payment providers.

Depending on your selected payment method, payment information may be processed by:

• Shopify Payments;
• Stripe;
• PayPal;
• Apple Pay;
• Google Pay.

SAS Quetzalli does not store complete payment card numbers or banking credentials.

Newsletter and Marketing Information

If you subscribe to our newsletter or promotional communications, we may collect:

• Email address;
• Name where provided;
• Subscription preferences;
• Information relating to interaction with our emails.

Newsletter management is handled through Beehiiv.

Technical and Usage Information

When you visit our website, we may automatically collect technical information including:

• IP address;
• Browser type;
• Device information;
• Operating system;
• Website activity;
• Pages visited;
• Date and time of access;
• Navigation information.

This information may be collected through cookies and analytics technologies, including Google Analytics and Vercel Analytics.

3. How We Use Your Personal Data

SAS Quetzalli processes personal data only for specific, legitimate, and necessary purposes.

Depending on your interaction with our services, we may use your personal data for the following purposes:

Processing and Fulfilling Orders

We use your personal data to:

• Process and confirm purchases made through our website;
• Process payments;
• Prepare and deliver orders;
• Provide delivery notifications;
• Manage returns, exchanges, and complaints;
• Provide customer support relating to purchases.

The legal basis for this processing is the performance of the contract between you and SAS Quetzalli.

Managing Customer Communications

We use your personal data to communicate with you regarding:

• Your orders;
• Delivery updates;
• Customer service requests;
• Questions or complaints;
• Important information relating to our services.

These communications are necessary to provide the services requested by you.

Marketing and Promotional Communications

Where you have provided consent, SAS Quetzalli may use your personal data to send:

• Newsletters;
• Product announcements;
• Information about new tequila releases;
• Brand updates;
• Invitations to events;
• Promotional communications.

Newsletter subscriptions are managed through Beehiiv.

You may withdraw your consent or unsubscribe from marketing communications at any time by clicking the unsubscribe link included in our emails or by contacting:

info@quetzallitequila.com

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Improving Our Website and Services

We use technical and analytics information to:

• Understand how visitors use our website;
• Improve website functionality;
• Improve customer experience;
• Monitor website performance;
• Identify technical issues.

Analytics technologies, including Google Analytics and Vercel Analytics, may process information relating to website usage where consent has been provided through our cookie management system.

Preventing Fraud and Protecting Our Services

We may process personal data to:

• Verify transactions;
• Detect and prevent fraudulent activity;
• Protect the security of our website;
• Protect our customers and business;
• Enforce our legal rights.

Compliance With Legal Obligations

We may process personal data where necessary to comply with applicable legal obligations, including:

• Accounting and tax requirements;
• Consumer protection obligations;
• Alcohol sales regulations;
• Requests from governmental or regulatory authorities;
• Legal proceedings.

4. Age Verification and Alcohol Sales Compliance

SAS Quetzalli sells alcoholic beverages and is committed to complying with applicable laws regarding the sale of alcohol.

Access to our website requires confirmation that the visitor is at least 18 years old.

Before completing a purchase, customers must confirm that they meet the legal drinking age requirements through an age confirmation mechanism, including:

• An age verification popup when accessing the website; and
• An age confirmation checkbox during checkout.

SAS Quetzalli may process information relating to age confirmation for the purposes of:

• Preventing the sale of alcohol to minors;
• Complying with legal obligations;
• Protecting against fraudulent purchases.

SAS Quetzalli does not knowingly sell alcohol to individuals under the age of 18.

5. How We Share Your Personal Data

SAS Quetzalli may share personal data with trusted third-party service providers when necessary to operate our business, provide our services, or comply with legal obligations.

We only share personal data that is necessary for the relevant purpose.

Third parties that may process personal data on our behalf include:

Shopify

Our online store is hosted and operated through Shopify.

Shopify provides the ecommerce infrastructure that allows us to:

• Operate our online store;
• Manage orders;
• Process transactions;
• Maintain website functionality.

Shopify may process personal data in accordance with its own privacy policies and contractual obligations.

Payment Providers

To process payments securely, personal data may be shared with payment providers, including:

• Shopify Payments;
• Stripe;
• PayPal;
• Apple Pay;
• Google Pay.

These providers process payment information according to their own privacy policies and security standards.

Order Fulfillment and Delivery Providers

To prepare and deliver customer orders, we may share necessary information with:

Winesitting

Information shared may include:

• Customer name;
• Delivery address;
• Contact information;
• Order details.

This information is used solely for order preparation and delivery purposes.

Newsletter Provider

Newsletter and promotional communications are managed through:

Beehiiv

Beehiiv may process subscriber information to:

• Store newsletter subscriptions;
• Send communications;
• Manage email campaigns;
• Measure engagement.

Analytics Providers

We use analytics services including:

• Google Analytics;
• Vercel Analytics.

These services help us understand website usage and improve our services.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies to provide functionality, improve user experience, and analyze website performance.

Cookies are small files stored on your device when you visit a website.

We may use cookies for:

Necessary Cookies

These cookies are required for the operation of our website, including:

• Shopping cart functionality;
• Checkout processes;
• Website security.

These cookies do not require consent where permitted by applicable law.

Analytics Cookies

Analytics cookies help us understand:

• Website traffic;
• Visitor behavior;
• Website performance.

Analytics cookies, including those used by Google Analytics and Vercel Analytics, are only activated after obtaining your consent where required.

Cookie Preferences

When visiting our website, you can manage your cookie preferences through our cookie consent banner.

The banner allows you to:

• Accept cookies;
• Reject non-essential cookies;
• Customize your preferences.

You may change your cookie preferences at any time through the cookie settings available on our website.

7. Third-Party Websites and Links

Our website may contain links to websites, platforms, or services operated by third parties.

If you follow a link to a third-party website, you should review that website’s privacy policy and terms of use before providing any personal data.

SAS Quetzalli is not responsible for the privacy practices, security measures, or content of third-party websites that are not operated or controlled by us.

The inclusion of third-party links on our website does not constitute an endorsement of those websites or their operators.

8. Relationship With Shopify

Our website and online store are hosted and powered by Shopify.

Shopify provides the ecommerce infrastructure that enables us to provide our Services, including:

• Website hosting;
• Online storefront functionality;
• Order management;
• Checkout services;
• Payment processing support;
• Security and technical infrastructure.

When you use our website, certain personal data may be processed by Shopify in order to provide and improve its services.

Shopify may process personal data in accordance with its own privacy policies and contractual obligations.

For more information about how Shopify processes personal data, you may consult Shopify’s privacy policy directly through its website.

9. Security and Retention of Personal Data

SAS Quetzalli takes appropriate technical and organizational measures to protect personal data against:

• Unauthorized access;
• Accidental loss;
• Alteration;
• Disclosure;
• Destruction;
• Unlawful processing.

We work with service providers that maintain appropriate security standards and contractual obligations regarding the protection of personal data.

However, no method of transmission or storage of information can be guaranteed to be completely secure. While we take reasonable measures to protect your personal data, we cannot guarantee absolute security.

Retention of Personal Data

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by applicable law.

Retention periods may vary depending on:

• The purpose for which the data was collected;
• Legal and accounting obligations;
• The nature of our relationship with you;
• The need to resolve disputes or enforce agreements.

Examples include:

• Order and transaction information may be retained for accounting and legal compliance purposes;
• Newsletter information is retained until you unsubscribe or withdraw consent;
• Customer service communications are retained only as long as necessary to manage the request.

Once personal data is no longer required, it is securely deleted or anonymized.

10. International Transfers of Personal Data

Some of our service providers may process personal data outside the European Economic Area (“EEA”).

These providers may include technology, payment, analytics, ecommerce, and communication service providers.

Where personal data is transferred outside the EEA, SAS Quetzalli ensures that appropriate safeguards are implemented in accordance with applicable data protection laws.

Such safeguards may include:

• Transfers to countries recognized by the European Commission as providing an adequate level of protection;
• Standard Contractual Clauses approved by the European Commission;
• Other legally recognized transfer mechanisms.

11. Your Rights Under the GDPR

Under applicable data protection laws, you may have the following rights regarding your personal data:

Right of Access

You have the right to request access to the personal data we hold about you and obtain information regarding how it is processed.

Right of Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data where:

• The data is no longer necessary;
• You withdraw consent and no other legal basis applies;
• The processing is unlawful;
• Applicable law requires deletion.

Right to Restriction of Processing

You may request that we limit the processing of your personal data in certain circumstances.

Right to Data Portability

Where applicable, you have the right to receive your personal data in a structured, commonly used and machine-readable format and request its transfer to another controller.

Right to Object

You have the right to object to certain processing activities, including processing based on legitimate interests or direct marketing.

Right to Withdraw Consent

Where we rely on your consent to process personal data, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

12. Exercising Your Rights

You may exercise your rights by contacting us at:

SAS Quetzalli
77 Avenue Aristide Briand
92120 Montrouge
France

Email: info@quetzallitequila.com

To protect your privacy, we may request additional information to verify your identity before responding to your request.

We will respond to requests within the timeframe required by applicable data protection laws, generally within one month of receiving a valid request.

In certain circumstances, this period may be extended where permitted by law.

13. Complaints

If you believe that SAS Quetzalli has processed your personal data in violation of applicable data protection laws, please contact us first so that we may attempt to resolve your concern.

You also have the right to lodge a complaint with the French data protection authority:

Commission Nationale de l’Informatique et des Libertés (CNIL)

Website: https://www.cnil.fr

You may contact the CNIL if you believe your rights under applicable data protection laws have not been respected.

14. Changes to This Privacy Policy

SAS Quetzalli may update this Privacy Policy from time to time to reflect:

• Changes to our services;
• Changes to our business practices;
• Changes to applicable laws;
• Changes to our data processing activities.

When we update this Privacy Policy, we will revise the “Last updated” date at the top of this page.

Where required by applicable law, we may provide additional notice of significant changes.

15. Contact

If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your rights regarding your personal data, you may contact us at:

SAS Quetzalli

Email: info@quetzallitequila.com

For the purposes of applicable data protection laws, SAS Quetzalli is the data controller responsible for processing your personal data.