1. Information We Collect

We collect information to provide better services to you. This includes:

Personal Information

• Contact Information: Email address when you sign up for our newsletter
• Age Verification: Birth date information to verify you are 21 or older
• Communications: Messages you send us through contact forms or email

Technical Information

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on site, referring websites, clickstream data
• Location Data: General geographic location derived from IP address

2. How We Use Your Information

We use the information we collect to:

• Verify your age as required by law
• Provide and improve our website and services
• Send you marketing communications (with your consent)
• Analyze website usage and performance
• Comply with legal obligations
• Protect our rights and prevent fraud
• Personalize your experience on our website

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for processing your personal information includes:

• Consent: You have given consent for specific purposes
• Contract: Processing is necessary to perform a contract with you
• Legal Obligation: Processing is required by law (e.g., age verification)
• Legitimate Interests: Processing is necessary for our legitimate business interests

4. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Essential Cookies (Always Active)

• Age verification storage
• Session management
• Website functionality
• Security features

Analytics Cookies (Optional)

• Measure website traffic and usage
• Understand user behavior
• Improve our services
• Generate anonymized statistics

Marketing Cookies (Optional)

• Personalize advertising
• Track ad performance
• Retarget interested users
• Limit ad frequency

5. Your Choices and Rights

You have the right to:

• Accept or decline non-essential cookies through our cookie banner
• Opt out of marketing communications at any time
• Request access to, correction of, or deletion of your personal data
• Set browser to refuse cookies (may affect website functionality)
• Request data portability
• Withdraw consent at any time

6. Data Sharing

We do not sell your personal information. We may share data with:

• Service Providers: Companies that help us operate our website (hosting, email services)
• Analytics Providers: Google Analytics for website analysis (with IP anonymization)
• Advertising Partners: Facebook/Meta for targeted advertising (with your consent)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers, acquisitions, or asset sales

7. Data Security

We implement appropriate technical and organizational security measures to protect your information:

• Secure transmission of data using SSL/TLS encryption
• Access controls and authentication
• Regular security assessments and updates
• Employee training on data protection
• Secure data storage with encryption at rest

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

• Newsletter Data: Retained until you unsubscribe or request deletion
• Age Verification Data: Retained for the duration of your session, then anonymized
• Analytics Data: Retained for up to 26 months, then automatically deleted
• Marketing Data: Retained for up to 3 years from last interaction, then deleted
• Legal Requirements: Retained as required by applicable laws

9. Data Breach Notification

In the event of a data breach that compromises your personal information, we will:

• Notify affected individuals via email within 30 days of discovering the breach
• Notify relevant supervisory authorities as required by law
• Take immediate steps to contain and remediate the breach
• Provide information about steps you can take to protect yourself

10. Third-Party Links

Our website may contain links to other websites. We are not responsible for the privacy practices of these sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our website is intended for adults of legal drinking age (21+ in the United States). We do not knowingly collect information from:

• Children under 13 years of age (COPPA compliance)
• Individuals under 16 years of age (GDPR compliance)
• Individuals under the legal drinking age in their jurisdiction

If you believe we have collected information from a minor, please contact us immediately.

12. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and sell
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information
• Non-discrimination for exercising your privacy rights
• Correct inaccurate personal information
• Limit use of sensitive personal information

We do not sell or share personal information for cross-context behavioral advertising. California residents may exercise their rights by contacting us at privacy@luckylemonbeer.com.

13. International Data Transfers

If you are located outside the United States, your information may be transferred to and processed in the United States. We ensure appropriate safeguards are in place:

• EEA/UK Users: We use Standard Contractual Clauses approved by the European Commission
• Other International Users: We comply with applicable data protection laws

14. Your Rights in Other Jurisdictions

European Economic Area (GDPR)

If you are in the EEA, you have additional rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

United Kingdom (UK GDPR)

UK residents have the same rights as EEA residents under the UK GDPR, with the Information Commissioner's Office (ICO) as the supervisory authority.

Canada (PIPEDA)

Canadian residents have the right to:

• Access their personal information
• Challenge the accuracy and completeness of their information
• Withdraw consent (subject to legal restrictions)
• File a complaint with the Office of the Privacy Commissioner of Canada

Other US States

Residents of Virginia, Colorado, Connecticut, Utah, and other states with privacy laws have similar rights to California residents. Contact us to exercise your rights.

15. Do Not Track

Our website does not currently respond to "Do Not Track" signals in browsers. However, you can control tracking through our cookie consent banner and browser settings.

16. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Providing notice through our website or email (for significant changes)

17. Contact Us

If you have questions about this privacy policy or wish to exercise your rights, please contact us:

Email: privacy@luckylemonbeer.com
Mail: Lucky Lemon Beer, Attn: Privacy Officer, Orlando, Florida
Data Protection Officer: dpo@luckylemonbeer.com (for EEA/UK inquiries)