Privacy Policy

How we collect, use and protect your personal data — triplebrewonline.es

Data Controller

Cervezas Artesanales Irialba SL — CIF: B09898917

Trading as Triple Brew Online — triplebrewonline.es

C. Isla Cabrera, Nave 9, 03177 San Fulgencio, Alicante, Spain

info@triplebrewonline.eu | +34 645 331 857

Last updated: March 2026

This Privacy Policy explains how Triple Brew Online collects, uses, stores and protects your personal data when you visit our website or place an order. It is written in compliance with the EU General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD).

1What Data We Collect

We collect the following categories of personal data:

Identity dataFirst name, last name, username or similar identifier

Contact dataEmail address, telephone number, delivery address, billing address

Transaction dataDetails of products purchased, order value, order history

Payment dataPayment confirmation and order reference — we do not store card numbers or CVV codes; card data is processed exclusively by SumUp (see §7)

Account dataEncrypted password, customer type, partner ID (if you create an account)

Technical dataIP address, browser type and version, device type, pages visited, time and date of visit, referring URL

Usage dataHow you use our website, search terms, products viewed, cart activity

Communication dataMessages sent via our contact form or to our support email

2How We Collect Your Data

Directly from you when you create an account, place an order, fill in our contact form or subscribe to updates.
Automatically via cookies and similar technologies when you browse the Store (see §8).
From our payment processor (SumUp) when a transaction is completed — we receive a confirmation and order reference, not your card details.

3Legal Basis for Processing

Processing your orderPerformance of a contract (Art. 6(1)(b) GDPR)

Managing your accountPerformance of a contract (Art. 6(1)(b) GDPR)

Sending order confirmation and shipping updatesPerformance of a contract (Art. 6(1)(b) GDPR)

Fraud prevention and securityLegitimate interests (Art. 6(1)(f) GDPR)

Website analytics and improving our serviceLegitimate interests (Art. 6(1)(f) GDPR)

Sending marketing emails (if opted in)Consent (Art. 6(1)(a) GDPR) — you may withdraw consent at any time

Compliance with legal obligationsLegal obligation (Art. 6(1)(c) GDPR)

4How We Use Your Data

To process and fulfil your orders, including arranging delivery via our carrier partners.
To send you order confirmations, shipping notifications and tracking information.
To manage your account and respond to your queries.
To prevent fraud and ensure the security of our website.
To improve our website, product range and customer experience using aggregated analytics data.
To comply with legal and regulatory obligations (e.g. tax records, age verification requirements for alcohol sales).
To send you promotional emails about our products and offers, only if you have opted in. You can unsubscribe at any time.

5Data Retention

Order and transaction records7 years from the date of order (Spanish tax/accounting law requirement)

Account dataFor the duration your account is active, plus 3 years after deletion

Communication records3 years from the last communication

Analytics data (aggregated)Up to 26 months (Google Analytics default)

Cookie consent records1 year

After these periods, data is securely deleted or anonymised. You may request earlier deletion subject to our legal obligations (see §6).

6Your Rights Under GDPR

As a data subject, you have the following rights. To exercise any of them, contact us at info@triplebrewonline.eu. We will respond within 30 days.

Right of access (Art. 15)Request a copy of the personal data we hold about you

Right to rectification (Art. 16)Request correction of inaccurate or incomplete data

Right to erasure (Art. 17)Request deletion of your data where it is no longer necessary or where you withdraw consent — subject to legal retention obligations

Right to restrict processing (Art. 18)Request that we limit how we use your data in certain circumstances

Right to data portability (Art. 20)Request your data in a structured, machine-readable format

Right to object (Art. 21)Object to processing based on legitimate interests, including profiling

Right to withdraw consentWhere processing is based on consent, you may withdraw it at any time without affecting prior lawful processing

You also have the right to lodge a complaint with the Spanish supervisory authority: Agencia Española de Protección de Datos (AEPD) — www.aepd.es.

7Third Parties and Data Sharing

We share data only where necessary to provide our service or comply with the law. We do not sell your data.

Odoo (Odoo SA)

Order management, customer accounts, stock and invoicing

📍 Belgium / EU

SumUp (SumUp Limited)

Secure card payment processing — SumUp is a PCI DSS Level 1 certified payment processor. We do not receive or store your card details.

📍 Ireland / EU

Packlink / carrier partners (e.g. GLS, Correos Express)

Delivery of your order. Your name, delivery address and phone number are shared to arrange shipping.

📍 EU

Google Analytics 4 (Google Ireland Ltd)

Website analytics and performance measurement. Data is anonymised where possible. IP anonymisation is enabled.

📍 EU / US (EU-US Data Privacy Framework)

Email delivery provider

Sending transactional emails (order confirmations, shipping updates)

📍 EU

All third-party processors are bound by data processing agreements and are required to handle your data securely and in compliance with GDPR.

8Cookies

We use cookies and similar technologies on our website. A cookie is a small file stored on your device that helps us recognise you and improve your experience.

Strictly necessarySession management, authentication, shopping cart — these cannot be disabled as the site will not function without them

Analytics (Google Analytics 4)Understanding how visitors use our site — pages visited, time spent, traffic sources. You may opt out via browser settings or Google's opt-out tool.

Preference cookiesRemembering your language preference and cookie consent choice

You can control or delete cookies via your browser settings. Disabling analytics cookies will not affect your ability to shop. For more information, see . aboutcookies.org.

9Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. Our website uses HTTPS encryption. Payment data is handled exclusively by SumUp's PCI DSS-certified environment and never passes through or is stored on our servers.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the AEPD within 72 hours as required by GDPR, and we will notify you without undue delay if the breach is likely to result in a high risk to you.

10Children's Privacy

Our Store sells alcoholic beverages and is intended exclusively for persons aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

11Links to Other Websites

Our website may contain links to third-party websites (e.g. brewery websites, beer rating platforms). We are not responsible for the privacy practices of those sites and recommend that you read their privacy policies before providing any personal data.

12Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or by email. The date at the top of this policy indicates when it was last updated.

13Contact Us

For any questions about this Privacy Policy, to exercise your data subject rights, or to make a complaint, please contact us:

Cervezas Artesanales Irialba SL — Triple Brew Online