Skip to main content

Paolo's

Legal

Privacy & Cookies

This notice covers the marketing website at www.paolosliqueurs.co.uk. Checkout, payment, and order fulfilment run on Shopify — see their policies for that processing.

Draft for launch — client confirmation pending. Last updated: 21 July 2026.

Who we are

The data controller is Paolo's Liqueurs LTD (company number 15649161), registered in England and Wales. Registered office: 18 Links Avenue, Norwich, NR6 5PE, United Kingdom.

Contact: drinks@paolosliqueurs.co.uk or Contact.

What we collect

  • Page views — page path and referrer hostname only, after you confirm you are 18+. Used for aggregate website improvement. Lawful basis: legitimate interests (UK GDPR) and PECR statistical-purposes exception with a free objection control above.
  • Guest-book reviews — name, rating, review text, optional photo. Held pending moderation; approved reviews may be published on the site. Lawful basis: consent / publication permission given when you submit.
  • Spam checks — the review form includes a hidden honeypot field to reject automated bots. No third-party CAPTCHA provider is used.
  • Checkout — when you leave for Shopify checkout, Shopify collects order, delivery, and payment details under its own policies.

Device storage (not a cookie banner)

This site does not use advertising, social, or marketing pixels. We do not show a cookie consent banner while that remains true. If we add non-exempt tracking later, we will ask for consent with equally easy Accept and Reject controls first.

  • Age confirmation (18+) — asked on each visit; not stored on your device.
  • paolos-cart — shopping basket contents (strictly necessary for the cart).
  • paolos-motion-preference — reduced-motion preference (appearance / function).
  • paolos-analytics-opt-out — stores your analytics objection.

Admin login uses Supabase authentication cookies on admin routes only.

Processors

  • Supabase — hosting database, storage, and auth.
  • Vercel — website hosting.
  • Shopify — catalogue sync and hosted checkout / commerce policies.
  • Resend — optional email to admins when a new review is pending (review ID / admin link only).

Some processors may process data outside the UK. Where required, we rely on appropriate safeguards (for example UK IDTA / SCCs) provided by those vendors.

Retention

  • Page views: up to 12 months, then deleted automatically.
  • Pending or rejected reviews: up to 90 days, then deleted (including uploaded photos).
  • Approved published reviews: until you ask us to remove them or we take them down.

Your rights

Under UK GDPR you may request access, correction, erasure, restriction, portability, or objection (including absolute objection to direct marketing, which we do not run from this site at launch). Contact drinks@paolosliqueurs.co.uk. You may also complain to the Information Commissioner's Office (ico.org.uk).

Commerce policies

Terms of sale, refunds, and shipping live on our Shopify commerce host:

Prefer shopping? Browse the shop.