Papa Benny

This Privacy Policy explains how Spirit Haven Distillery Ltd., operating under the brand name Papa Benny (“Papa Benny”, “we”, “us” or “our”), collects, uses, stores and protects personal data when you visit our website papabenny.com, contact us, use our online forms, place an order, subscribe to updates or otherwise communicate with us.

We respect your privacy and process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Estonian data protection laws.

Data Controller:
Spirit Haven Distillery Ltd.
Registration number: 16095250
Address: Pärna pst 7, Valga linn, 68207 Valga vald, Valga maakond, Estonia
Website: papabenny.com
Email: contact@papabenny.com

1. What personal data we collect

We may collect and process the following types of personal data, depending on how you interact with our website and services:

  • Name and surname;
  • Email address and phone number;
  • Delivery or billing address, where applicable;
  • Order details, booking details or inquiry details;
  • Payment-related information, where applicable;
  • Messages or information you send to us through forms, email or social media;
  • Technical information such as IP address, browser type, device type, operating system and website usage data;
  • Cookie and analytics data, subject to your consent where required.

2. How we collect your personal data

We collect personal data directly from you when you:

  • Fill in a contact form on our website;
  • Contact us by email, phone or social media;
  • Place an order or make a booking, where such functionality is available;
  • Subscribe to newsletters or promotional communications;
  • Participate in campaigns, promotions or customer feedback activities;
  • Browse our website and accept cookies or similar tracking technologies.

3. Why we use your personal data

We process personal data for the following purposes:

  • To respond to your inquiries and messages;
  • To process orders, bookings, reservations or customer requests;
  • To provide our products and services;
  • To manage customer communication and support;
  • To send service-related messages, confirmations or updates;
  • To send marketing messages, newsletters or offers, if you have given consent;
  • To improve our website, services, content and customer experience;
  • To analyse website usage and performance;
  • To protect our website, business, customers and legal rights;
  • To comply with legal, accounting and tax obligations.

4. Legal basis for processing

We process your personal data only when we have a valid legal basis under GDPR. Depending on the situation, this may include:

  • Performance of a contract – when we need your data to provide products or services you requested;
  • Legitimate interest – for example, to respond to inquiries, improve our website, prevent fraud and protect our business;
  • Consent – for example, for newsletters, marketing communications or non-essential cookies;
  • Legal obligation – when we are required to keep certain information for accounting, tax or legal compliance purposes.

5. Cookies and tracking technologies

Our website may use cookies and similar technologies to ensure website functionality, improve user experience, analyse traffic and, where applicable, support marketing activities.

Cookies are small files stored on your device. Some cookies are necessary for the website to work properly. Others, such as analytics or marketing cookies, are used only where required consent has been obtained.

You can manage or disable cookies through your browser settings. More information is available in our Cookie Policy.

6. Analytics and third-party services

We may use trusted third-party services to help us operate, secure and improve our website. These may include hosting providers, website analytics tools, payment providers, email service providers, delivery partners or marketing platforms.

These third parties may process personal data only where necessary and, where applicable, on the basis of appropriate data processing agreements.

7. Who we share your personal data with

We do not sell your personal data. We may share your personal data only where necessary with:

  • IT, hosting and website service providers;
  • Payment service providers, where applicable;
  • Delivery or logistics partners, where applicable;
  • Email, marketing or analytics service providers, where applicable;
  • Professional advisers such as accountants, auditors or legal advisers;
  • Public authorities, where required by law.

8. International data transfers

Some of our service providers may be located outside the European Economic Area. Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place, such as European Commission Standard Contractual Clauses or other legally approved transfer mechanisms.

9. How long we keep your personal data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Inquiry and contact form data may be kept for as long as needed to respond and manage the communication;
  • Order, payment and accounting records may be kept for the period required by applicable tax and accounting laws;
  • Marketing consent records are kept until you withdraw your consent or unsubscribe;
  • Technical and analytics data may be kept for a limited period depending on the tools used.

10. How we protect your personal data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures may include access control, secure hosting, encrypted connections, regular updates and limited access to personal data by authorised persons only.

However, no online service can be guaranteed to be completely secure. If we become aware of a data breach that may affect your rights and freedoms, we will take appropriate steps in accordance with applicable law.

11. Your rights

Under GDPR, you have the following rights regarding your personal data:

  • The right to be informed about how your personal data is processed;
  • The right to access your personal data;
  • The right to request correction of inaccurate or incomplete data;
  • The right to request deletion of your personal data;
  • The right to request restriction of processing;
  • The right to object to processing based on legitimate interest;
  • The right to withdraw consent at any time, where processing is based on consent;
  • The right to data portability, where applicable;
  • The right not to be subject to decisions based solely on automated processing, where applicable.

To exercise your rights, please contact us at contact@papabenny.com.

12. Marketing communications

If you subscribe to our newsletter or agree to receive marketing communications, we may send you information about Papa Benny products, services, offers, events or updates.

You can withdraw your consent or unsubscribe at any time by using the unsubscribe link in our emails or by contacting us at contact@papabenny.com.

13. Children’s personal data

Our website and services are intended only for persons who are legally permitted to access and purchase such products under applicable law. We do not knowingly collect personal data from minors.

If we become aware that we have collected personal data from a minor without the required consent, we will take reasonable steps to delete such data.

14. Links to third-party websites

Our website may contain links to third-party websites, social media pages or external services. We are not responsible for the privacy practices, content or security of such third-party websites. We recommend reviewing their privacy policies before providing any personal data.

15. Complaints

If you believe that your personal data has been processed unlawfully or that your privacy rights have been violated, please contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate:

Andmekaitse Inspektsioon
Website: www.aki.ee
Email: info@aki.ee

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website, legal requirements or business operations. The latest version will always be available on this page.

Last updated: May 2026