Logótipo CR Distillery
Logótipo CR Distillery
EN
EN PT

Cookies and Privacy Policy

Last updated: 30 September 2026.

1. Who is responsible for your data

The controller of the personal data collected on this website is CR Distillery – Unipessoal, Lda., NIPC 515697133, with registered office in Paredes, Portugal, owner of the GREENleap Gin brand.

Contact for privacy matters: info@greenleapgin.com · Tel.: +351 911 049 871 (call to a Portuguese mobile network).

This policy applies to the greenleapgin.com website and online shop. It does not apply to third-party websites that we link to.

2. What data we collect

  • Orders and customer account: name, billing and delivery address, e-mail, telephone, tax number (if you request an invoice with it), order history and confirmation that you are of legal age.
  • Payments: card and payment details are handled directly by the payment providers (Stripe, Klarna, PayPal and ifthenpay). GREENleap Gin does not store card details.
  • Contacts: the data you send us by e-mail, contact form or WhatsApp (name, e-mail, telephone and the content of your message).
  • Newsletter and marketing: e-mail address and preferences, only if you give your consent.
  • Browsing: IP address, device and browser type, pages visited and interactions, through cookies and similar technologies (see section 8).

We do not knowingly collect data from anyone under 18. Access to this website and the purchase of alcoholic beverages are reserved for adults.

3. Why we use your data and on what legal basis

  • To process orders, payments, deliveries, returns and customer support – performance of a contract (Article 6(1)(b) GDPR).
  • To issue invoices and comply with tax and accounting obligations – legal obligation (Article 6(1)(c) GDPR).
  • To check the legal age for buying alcohol – legal obligation and legitimate interest.
  • To answer your requests and messages – legitimate interest or pre-contractual steps.
  • To send the newsletter and marketing communications – consent (Article 6(1)(a) GDPR).
  • Website statistics and advertising (Google, Meta, Pinterest) – consent, given through the cookie banner.
  • Website security and fraud prevention – legitimate interest (Article 6(1)(f) GDPR).

4. Who we share your data with

Your data is only shared with entities that help us provide our service, acting as processors or independent controllers, and only to the extent necessary:

  • Website hosting and security: Hostinger, Sucuri.
  • Online shop and payments: WooCommerce; Stripe (cards, Apple Pay and Google Pay); Klarna (pay in instalments or later); PayPal; ifthenpay (MB WAY, Multibanco and PIX).
  • Invoicing: Moloni.
  • Shipping: Nacex, MRW, CTT and other carriers used for delivery.
  • E-mail: the website e-mail service (order confirmations and replies to your messages) and the newsletter, if you subscribe.
  • Statistics and advertising (only with your consent): Google (Analytics, Ads, Merchant Center), Meta (Facebook and Instagram), Pinterest.
  • Communication: WhatsApp (Meta), if you choose to contact us that way.
  • Authorities: when required by law (for example, the Portuguese Tax Authority).

If you choose to pay with Klarna, Klarna Bank AB (Sweden) acts as an independent controller for the data needed to assess and manage that payment, in accordance with its own privacy policy, available at klarna.com. The same applies to PayPal when you pay with your PayPal account.

We do not sell your personal data.

5. Transfers outside the EU

Some of these providers (for example Google, Meta, Stripe, PayPal and Pinterest) may process data in the United States or in other countries outside the European Economic Area. In those cases, transfers are based on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.

6. How long we keep your data

  • Invoices and tax documents: 10 years, as required by tax law.
  • Order and customer account data: while the account is active and then for as long as needed to handle complaints or warranty claims (up to 3 years after the last purchase).
  • Newsletter: until you withdraw your consent or unsubscribe.
  • Messages and contacts: up to 2 years after the last contact.
  • Cookies: according to the duration of each cookie, shown in the cookie banner.

7. Your rights

At any time and free of charge, you can:

  • access your data and obtain a copy;
  • ask for incorrect or incomplete data to be corrected;
  • ask for your data to be erased, when there is no legal obligation to keep it;
  • ask for processing to be restricted, or object to processing based on legitimate interest;
  • ask for the portability of the data you provided to us;
  • withdraw any consent given (newsletter, cookies), without affecting processing already carried out.

To exercise these rights, e-mail info@greenleapgin.com. We reply within one month at the latest.

You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD) – www.cnpd.pt.

8. Cookies

Cookies are small files stored on your device when you visit the website.

  • Essential: needed for the website and shop to work (cart, payment, login, age check, security and remembering your cookie choices). They do not require consent.
  • Statistics (with consent): Google Analytics, to understand how the website is used and improve it.
  • Marketing (with consent): Meta Pixel, Google Ads and Pinterest, to measure campaigns and show relevant advertising.

Statistics and marketing cookies are only activated after you accept them in the cookie banner. You can change or withdraw your consent at any time through the “Cookie preferences” link in the website footer. The detailed list of cookies, with their name, purpose and duration, is available in the cookie banner.

You can also block or delete cookies in your browser settings. Blocking essential cookies may prevent the shop from working.

9. Security

We use appropriate technical and organisational measures to protect your data, including a secure connection (HTTPS), restricted access to management accounts with two-factor authentication, and protection of the website against unauthorised access.

10. Changes to this policy

We may update this policy whenever necessary. The version in force is always published on this page, with the date of the last update.

Contact us