Privacy Policy

The data controller is Sicilian Whiskey Distillery, operating in Caltagirone, Sicily, Italy. For privacy requests, contact info@sicilianwhiskey.com.

We process only the data needed to run the website, checkout and connected services:

• browsing data, cookie consent, language preferences and age verification;
• checkout, shipping, destination country/state, fiscal receipt/invoicing and order status data;
• payment data handled by payment providers, without storing full card details;
• cart, email and checkout-step data when needed for assistance or abandoned-checkout recovery;
• Club, PIN, OakChain and authenticity data when a bottle is activated;
• product reviews linked to verified purchases or activated PINs;
• messages sent through forms, email or WhatsApp.

We use data to perform the sales contract, comply with fiscal, customs and logistics obligations, prevent abuse and improve the customer experience.

For international shipping and the U.S. 21+ post-trip service, we may process data needed to verify destination, declared age, service availability, local restrictions and operational messages about order completion.

Marketing communications, including the newsletter, are sent only after a separate, optional consent recorded with its date, source and notice version. Order recovery is handled separately and is sent only when you have chosen to receive it.

Technical cookies are necessary. Analytics cookies are used only after consent, so we can understand purchase paths without selling data to external brokers.

The website exposes structured information, such as llms.txt, schema.org and AI Gateway, so search engines and digital assistants can better understand catalog, shipping and authenticity data. We do not currently provide a public generative chat: assistants may prepare information or a checkout path, but payment always requires confirmation by a human adult. Details: AI Transparency.

We retain data for as long as required for orders, assistance, fiscal obligations, security and legal protection. Access is limited to authorized staff and necessary suppliers: hosting, email, payments, shipping, tax support and analytics tools when consented. Analytics, commerce, abandoned-checkout and LLM feedback data follow a documented technical retention cycle and are deleted when no longer useful.

You may request access, rectification, erasure, restriction, objection and portability within GDPR limits. Analytics consent can be changed through the site's cookie preferences or your browser settings.