Last updated: June 2025 Plain language, no jargon — because you deserve to know exactly what's going on.
---
BrewBilt Brewing is a craft brewery. We make beer we're proud of, and we run a small website to share what we do, connect with customers, and occasionally sell things online.
We're based in Portugal and this policy covers how we handle your personal information in line with the EU's General Data Protection Regulation (GDPR) and Portuguese data protection law (supervised by the CNPD — Comissão Nacional de Proteção de Dados).
If you have any questions about this policy or your data, you can reach us at:
> BrewBilt Brewing > [your address here] > [your email here] > [your phone number here]
We don't have a dedicated Data Protection Officer — we're a small team — but the person responsible for data questions is the business owner, and they genuinely want to hear from you.
---
We collect as little information as possible. We don't sell your data. We don't share it with anyone who doesn't need it. We use it only to run our business and give you a decent experience. You can ask us to delete it at any time.
That's the honest summary. Here's the detail.
---
When you visit our site, our web hosting provider automatically logs some basic technical information — things like your IP address, which pages you visited, and what browser you're using. This is standard stuff that happens on every website.
Why: To keep the site running and spot technical problems. Legal basis: Legitimate interests — running a functioning website is a reasonable need. How long we keep it: Typically 30–90 days in server logs, then it's gone.
---
If you send us an email, fill in a contact form, or message us through social media, we'll have your name, email address, and whatever you wrote to us.
Why: To respond to you. That's it. Legal basis: Legitimate interests — you reached out, we're replying. How long we keep it: We keep correspondence for up to 2 years in case we need to refer back to it, then we delete it.
---
If you choose to hear from us about new beers, events, or what we've been up to, we'll store your email address and name (if you gave it).
Why: To send you the emails you asked for. Legal basis: Consent — you opted in, and you can opt out whenever you like. How long we keep it: Until you unsubscribe. Every email we send includes a one-click unsubscribe link. No hoops.
---
If we sell products through the website, we'll collect your name, delivery address, email address, phone number, and payment information.
Why: To process your order, send you what you bought, and handle any issues. Legal basis: Contract — we need this information to fulfil what you've paid for. How long we keep it: We keep order records for 7 years to comply with Portuguese tax and accounting law. Your payment card details are handled entirely by our payment processor (see below) — we never see or store your full card number.
---
We sell alcohol. We have a legal and ethical responsibility to sell only to adults.
When you visit our site, we ask you to confirm you are of legal drinking age (18 in Portugal). We may implement a simple age gate for this purpose.
Why: Legal compliance and responsible trading. Legal basis: Legal obligation and legitimate interests.
---
We use cookies on this website. A cookie is a small text file saved on your device that helps the website remember things — like what's in your basket, or whether you've already confirmed your age.
The cookies we use:
| Cookie Type | What It Does | Can You Opt Out? | |---|---|---| | Essential | Keeps the site working (e.g. your basket, session security) | No — the site won't function without these | | Analytics | Helps us understand how people use the site (e.g. Google Analytics, if used) | Yes | | Marketing | Used to show you relevant ads elsewhere online | Yes |
When you first visit the site, we'll ask for your cookie preferences. You can change your mind at any time using the cookie settings link at the bottom of the page.
We do not use cookies to build profiles on you or sell data to advertisers.
---
We keep this to a minimum. Here are the only situations where your information goes anywhere:
Service providers who help us run the business: - Our website hosting company (to host the site) - Our email/newsletter platform (to send you emails you asked for) - Our payment processor (to handle payments securely) - Our delivery or fulfilment partner, if applicable (to get your order to you)
All of these providers are under contract to protect your data and use it only for the specific job we've hired them to do. We don't allow them to use your data for their own purposes.
If we're legally required to: If a court or regulatory authority requires us to share data, we'll comply — but we'll only share exactly what's required.
That's the complete list. We do not sell your data. We do not share it with marketing companies. We do not share it with other breweries, partners, or anyone not on the list above.
---
Some of our service providers (like email platforms or analytics tools) may store or process data outside the EU. Where this happens, we make sure they have the proper protections in place — such as Standard Contractual Clauses approved by the European Commission — so your data is treated to the same standard as it is here.
If you'd like to know which providers this applies to, just ask us.
---
You have real rights here, and we take them seriously. Here's what you can ask for at any time:
- See your data — Ask us what personal information we hold about you. - Correct your data — If something's wrong, we'll fix it. - Delete your data — Ask us to erase it. We'll do so unless there's a legal reason we have to keep some of it (like tax records). - Restrict processing — Ask us to pause using your data while you check something with us. - Data portability — Ask us to send you your data in a usable format. - Object to processing — Particularly where we're relying on legitimate interests as our basis. - Withdraw consent — If you've given us consent for something (like the newsletter), you can withdraw it at any time, no questions asked.
To exercise any of these rights, just email us at [your email here]. We'll respond within 30 days. We won't charge you for this, and we won't make it difficult.
---
We take reasonable steps to keep your information secure:
- Our website uses HTTPS encryption - We limit who on our team has access to personal data - Our payment processing is handled by certified, PCI-DSS compliant providers — we never handle raw card data ourselves - We don't keep data longer than we need to
No system is 100% foolproof, and we won't pretend otherwise — but we treat your data with the same care we'd want applied to our own.
---
In the unlikely event of a data breach that could harm you, we are legally required to notify the CNPD within 72 hours and, where appropriate, to notify you directly. We won't hide problems.
---
Our products are alcoholic beverages. This website is not intended for anyone under 18, and we do not knowingly collect data from minors. If we discover we have accidentally collected information from someone under 18, we'll delete it immediately.
---
If you feel we've handled your data badly, we'd genuinely like to know — please contact us first and we'll do our best to make it right.
If you're not satisfied with our response, you have the right to complain to the Portuguese data protection authority:
> CNPD — Comissão Nacional de Proteção de Dados > www.cnpd.pt > +351 213 928 400
---
If we change this policy in a meaningful way, we'll update the date at the top and, if it's a significant change, we'll let our newsletter subscribers know. We won't quietly update things that matter.
---
We're a small craft brewery. We care about what we make and we care about the people who drink it. Collecting your data is not something we do enthusiastically — we do it only where it genuinely helps us serve you better or run the business legally.
If you ever have a question about any of this, please just ask.
---
*BrewBilt Brewing | Portugal | [email] | [website]*