Privacy Policy
Last updated: 21 July 2026
This policy explains how C.N.A. Companhia Nova de Aguardente Unipessoal Lda ("Canning's", "we", "us") collects, uses and protects your personal data when you visit this website or place an order, and your rights under the EU General Data Protection Regulation (GDPR) and Portuguese data-protection law.
Who we are
The data controller is C.N.A. Companhia Nova de Aguardente Unipessoal Lda (trading as Canning's), Parque Empresarial da Ribeira Brava, Pavilhão 18, 9350-104 Ribeira Brava, Madeira, Portugal.
For any privacy question or to exercise your rights, contact us at info@canningsgin.com.
What we collect
Order data you provide at checkout: name, delivery and billing address, email address and phone number.
Payment data: card payments are processed by our payment provider, Stripe. We do not see or store your full card number - Stripe handles it under its own security standards.
Usage data: basic, privacy-friendly analytics about pages visited, navigation and device type - via Vercel Analytics and PostHog (a product-analytics service whose data is hosted in the EU and which we run without cookies) - used in aggregate to understand how the site is used and improve it.
Enquiry data you choose to send us (for example through the international delivery enquiry form): your email address, country and message - used solely to answer your enquiry.
Why we use it, and the legal basis
To process and deliver your order and handle returns - performance of our contract with you.
To meet tax, accounting and consumer-law obligations - compliance with a legal obligation.
To keep the site secure and improve it - our legitimate interests, balanced against your rights.
We do not sell your personal data, and we do not use it for automated decision-making or profiling.
Who we share it with
Stripe (payment processing), our delivery courier (to fulfil your order), Resend (to send order and enquiry emails), and our hosting and analytics providers (Vercel, and PostHog - whose data is hosted in the EU). Each acts under a data-processing agreement and only for the purposes above.
We may disclose data where required by law or a valid authority request.
How long we keep it
Order and invoicing records for the period required by Portuguese tax law (currently 10 years). Analytics data is retained only in aggregate. Anything no longer needed is deleted.
Cookies
We use only essential storage needed for the site to work. We do not use advertising or cross-site tracking cookies.
Your rights
You may request access to, correction or erasure of your data, restriction or objection to processing, and data portability. To exercise any right, email us at info@canningsgin.com.
You also have the right to complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.