Privacy Policy

Last updated: 7 September 2026

This policy explains how Tecán BV, Westerdoksplein 4, 1013 AZ Amsterdam, Netherlands (KvK 85983829) — "we" — processes your personal data when you use shop.tecantequila.com, in accordance with the EU General Data Protection Regulation (GDPR/AVG). Contact: info@tecantequila.com.

1. What we process, why, and on what legal basis

Data Purpose Legal basis Retention
Name, delivery address, email, phone Processing and delivering your order; service messages Contract (art. 6(1)(b) GDPR) 7 years (fiscal retention duty for order/administration data)
Age confirmation / date of birth Verifying you are 18+, as required by the Dutch Alcoholwet for online alcohol sales Legal obligation (art. 6(1)(c) GDPR) Stored with the order record
Payment data (handled by our payment provider) Payment processing, fraud prevention Contract; legitimate interest Per PSP policy; we never store full card details
Order history, contact with support Customer service, warranty, returns Contract; legitimate interest 7 years
Email address for newsletter Marketing (only to confirmed 18+ recipients) Consent (art. 6(1)(a)); or the existing-customer exception of art. 11.7 Telecommunicatiewet for similar products Until you unsubscribe
Cookie/tracking data Analytics, advertising Consent (see Cookie Policy) See Cookie Policy

We do not store copies of identity documents. The ID check at delivery is performed visually by the carrier; no ID data is passed to us.

2. Who receives your data (processors/recipients)

  • Shopify (webshop platform, hosting)
  • PostNL (18+ delivery service) (delivery, including execution of the mandatory 18+ age check)
  • Shopify Payments (iDEAL, Apple Pay, Google Pay, cards)
  • Klaviyo (email marketing)
  • Google / Meta (analytics and advertising — only with your cookie consent; Google Consent Mode v2 applies)
  • our fulfilment partner, our accountant

We have data processing agreements with our processors. Where data is transferred outside the EEA (e.g. to US providers), transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.

3. Your rights

You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest, and withdraw consent at any time (without affecting prior processing). Contact info@tecantequila.com; we respond within one month. You can complain to the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

4. Marketing

  • We only send marketing to recipients who are 18 or older; newsletter signup requires an age confirmation (Advertising Code for Alcoholic Beverages).
  • Every marketing email contains an unsubscribe link.

5. Automated decision-making

We do not make decisions with legal effect based solely on automated processing. Order age-gating is a rule-based legal requirement, not profiling.

6. Security

Data is transmitted over TLS; access is restricted on a need-to-know basis; our processors are contractually bound to appropriate security measures.

7. Changes

We may update this policy; the current version is always available on this page.