Privacy Policy | Suncliffe Spirits

Effective date: August 27, 2026

1. Who we are and how to contact us

This website is operated by Suncliffe Spirits LLC ("Suncliffe Spirits," "we," "us," or "our"). This Privacy Policy explains what personal information we collect through this website, how we use and share it, and the choices you have.

For privacy questions or to exercise your rights, contact us at:

Suncliffe Spirits LLC
901 N Montezuma Ave, Tucson, AZ 85711
privacy@suncliffespirits.com

2. Scope of this policy

This policy covers personal information collected through this marketing and content website. It does not cover purchases of our spirits. Spirit sales are handled by a third-party platform (Flaviar Checkout) and a licensed retailer, and the merch store is hosted on a separate third-party storefront. See Section 5 and our Terms & Conditions for details, and review the relevant third party's own privacy policy for how it handles your information.

3. Information we collect

Information you give us directly:

Newsletter signup. Your email address, which you provide to receive marketing emails and a first-time-buyer discount code. Submitted through a footer form and an optional promotional popup. Email collection and delivery are handled by our email-marketing processor, Flodesk (see Section 6).
Contact and enquiry forms. We operate one or more forms on the site — including a general contact form and a stockist-specific enquiry form. Depending on the form, we collect your name, email address, message, the reason for your enquiry (for example, General, Stockist, or Press), and any business or company details you choose to provide (for example, for stockist enquiries). These submissions are stored in our content management system.
Submit-a-recipe form. If you submit a recipe, we collect your name, email address, and the recipe content you provide.

Information collected automatically:

Usage and device data. When you visit the site, we and our analytics providers collect information such as pages viewed, referring pages, approximate location, browser and device type, and similar usage data, using cookies and similar technologies (see Section 7 and our Cookie Policy). This is collected through Google Analytics and Ahrefs Analytics.
Network and security data. Our site sits behind Cloudflare, which processes IP addresses and request metadata to deliver and secure the site.
Map interactions. The store-locator map on the Find Us page is powered by Mapbox, which may collect your IP address and usage telemetry when the map loads.
Embedded content. Spirit pages embed Flaviar/Shopify buy widgets, which may set their own cookies and collect data when they load. The homepage Instagram feed is not an embed — we copy those posts and images to our own servers, so your browser never contacts Meta.

Information stored on your device (not personal data we hold):

Age-verification acknowledgement. When you confirm you are of legal drinking age, that acknowledgement is stored on your device (cookie or local storage) so we don't ask again. We do not store your date of birth on our servers.
Popup state. We use cookies, local storage, or session storage to remember whether you have seen, minimized, or dismissed the promotional/newsletter popup.

4. How and why we use your information

We use personal information to:

send you our newsletter and your first-time-buyer discount code, and manage your subscription;
respond to and manage your enquiries submitted through the contact form;
review recipe submissions and, at our discretion, consider them for publication;
operate, maintain, secure, and improve the website;
measure and analyze site traffic and performance; and
comply with legal obligations and enforce our Terms & Conditions.

5. Purchases and order data (handled by Flaviar, not by us)

We are not the seller of our spirits and do not process spirit transactions. Spirit purchases are completed through Flaviar Checkout (formerly Barcart), hosted on a Flaviar/Shopify subdomain, and the seller and merchant of record is a licensed alcohol retailer in Flaviar's network.

As a result:

Payment information, age verification at checkout, shipping details, and order management for spirit purchases are collected and processed by Flaviar, its licensed retailers, and Shopify under their own privacy policies — not by us.
We may receive limited first-party customer and order information related to your purchase (for example, so we understand interest in our products). Where we receive such information, it is also processed by Flaviar and its fulfilling retailers (via the Shopify platform) for payment, fulfilment, and support.

Please review Flaviar's and Shopify's privacy policies for how they handle your purchase information.

We do not sell your personal information for money. We share information with the following categories of service providers and third parties:

Flaviar — third-party platform and licensed-retailer network that handles all spirit sales, payment, checkout age verification, licensing, fulfilment, shipping, and order data.
Shopify — the commerce platform underlying the embedded buy widgets/cart and the separate merch storefront.
Flodesk — email-marketing platform that stores and processes newsletter subscriber emails.
Mapbox — powers the store-locator map; may receive IP address and usage telemetry.
Instagram / Meta — we fetch our own public Instagram posts from Meta's API on the server and store copies on this site. The homepage feed is served from our own servers, so your browser does not contact Meta and Meta sets no cookies through this site.
Google Analytics — website analytics; sets analytics cookies and collects usage/device data.
Ahrefs Analytics — website analytics; collects usage data (cookieless).
Cloudflare — CDN, reverse proxy, and security layer; processes IP addresses and request metadata.
Cloudflare Turnstile — the anti-spam check protecting our contact and recipe-submission forms. It runs invisibly, so you never see or complete anything. Cloudflare receives your IP address, device and browser signals, and interaction data; it never receives the contents of your message, and processes what it does receive under the Turnstile Privacy Addendum.
Resend — delivers the email our forms generate; receives your email address and the contents of your submission in order to send us the notification and send you a confirmation.
Railway — our hosting provider; runs the site and its CMS (Payload) and stores the database and every uploaded file, so it holds everything you submit through the site.
Hetzner — stores encrypted off-site backups of that database, in a form it cannot read.

We may also disclose information where required by law, to enforce our terms, or in connection with a business transfer.

7. Cookies and similar technologies

We and our third-party providers use cookies, local storage, and similar technologies for functional, analytics, and embedded-content purposes — including the age-verification acknowledgement, popup state, Cloudflare security, Google Analytics, Mapbox, and the Shopify/Flaviar buy widgets. Where required, we present a cookie-consent banner so you can accept or reject non-essential cookies. For full details, see our Cookie Policy.

8. Data retention

We keep personal information only as long as needed for the purposes described in this policy, unless a longer period is required by law:

Newsletter: until you unsubscribe.
Contact, stockist, and other enquiry-form submissions: for as long as needed to respond to and follow up on your enquiry, and for a reasonable period afterward.
Recipe submissions: we may retain the recipe content you submit indefinitely, including where we choose to publish it; we keep your associated contact details only as long as needed for that purpose.

If no period is specified, we retain data for a reasonable period necessary to fulfil the relevant purpose, then delete or anonymize it.

9. Your rights

California residents (CCPA/CPRA). You have the right to know what personal information we collect, to access and delete it, to correct inaccurate information, and to opt out of "sale" or "sharing" of personal information. Note that our use of analytics cookies (Google Analytics) may be considered "sharing" under California law; you can opt out via our cookie-consent banner. We do not discriminate against you for exercising these rights. To make a request, contact us at privacy@suncliffespirits.com.

We will respond to verified requests within the timeframe required by applicable law.

You can unsubscribe at any time using the "unsubscribe" link at the bottom of any marketing email, or by contacting us at privacy@suncliffespirits.com. Unsubscribing stops marketing emails but does not delete records we are required to keep.

11. Children and minimum age

This site and our products are intended only for individuals of legal drinking age (21 in the United States). The site is not directed to anyone under the legal drinking age, and we do not knowingly collect personal information from anyone under that age. If you believe we have collected such information, contact us at privacy@suncliffespirits.com and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the effective date above. Material changes may be communicated through the site or by email.