Privacy Policy

Last updated: April 2026

1. Who We Are

DUA SPIRITS, INC. ("Dua Spirits", "we", "us", "our") operates the website duaspirits.com. We are committed to protecting your personal information and your right to privacy.

Contact: hello@duaspirits.com

2. Information We Collect

We collect information you voluntarily provide:

Email address — when you subscribe to our newsletter or waitlist.
Date of birth — to verify you are of legal drinking age. This is not stored.

We also collect certain information automatically:

Cookies — session cookies for age verification and cookie consent preferences.
Usage data — anonymised analytics data including pages visited, referral source, and device type.

3. How We Use Your Information

To send you marketing communications you have opted into (newsletters, product updates, events).
To verify you are of legal drinking age.
To improve our website and understand how visitors use it.

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we process your personal data under the following lawful bases:

Consent (Art. 6(1)(a)) — Newsletter subscription and marketing communications. You may withdraw consent at any time.
Consent (Art. 6(1)(a)) — Analytics and non-essential cookies, collected only after you accept via our cookie consent banner.
Legitimate Interest (Art. 6(1)(f)) — Age verification, as we are legally required to prevent minors from accessing alcohol-related content.
Legitimate Interest (Art. 6(1)(f)) — Website security and basic operational functionality.

5. Cookies

We use the following cookies, categorised by purpose:

Essential Cookies (always active)

dua_age_verified — Session cookie to remember age verification during your visit. Strictly necessary for legal compliance.
dua_cookie_consent — Persistent cookie (1 year) to remember your cookie preferences.
dua_geo — Session cookie set by our hosting provider to detect your country for age-gate compliance. Contains only your country code.

Analytics Cookies (requires consent)

Google Analytics (GA4) — Anonymised usage data including pages visited, referral source, and device type. Only loaded when you consent to analytics cookies.
Microsoft Clarity — Session replay and heatmap data for improving user experience. Only loaded when you consent to analytics cookies.

Marketing Cookies (requires consent)

Meta Pixel — Tracks conversions and enables remarketing on Meta platforms. Only loaded when you consent to marketing cookies.
TikTok Pixel — Tracks conversions and enables remarketing on TikTok. Only loaded when you consent to marketing cookies.

You can manage your cookie preferences at any time through your browser settings or our cookie consent banner.

Our site does not currently respond to Do Not Track (DNT) browser signals. You can manage tracking preferences via our cookie consent banner.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

European Economic Area & UK (GDPR)

Access, correct, or delete your personal data.
Withdraw consent for marketing communications at any time.
Object to or restrict the processing of your personal data.
Data portability — receive your data in a structured, machine-readable format.
Lodge a complaint with a supervisory authority (e.g. the UK ICO).

California, USA (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

Right to Know — You may request the categories and specific pieces of personal information we have collected about you.
Right to Delete — You may request that we delete the personal information we have collected from you.
Right to Correct — You may request correction of inaccurate personal information.
Right to Opt-Out of Sale/Sharing — We do not sell or share your personal information as defined under the CCPA/CPRA.
Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights.

Categories of personal information collected: Identifiers (email address); internet activity information (usage data, cookies); age verification data (date of birth — not stored).

To exercise any of these rights, contact us at hello@duaspirits.com. We will respond within 45 days as required by law.

Philippines (Data Privacy Act of 2012, RA 10173)

If you are located in the Philippines, you have the following rights under the Data Privacy Act:

Right to be Informed — You are entitled to know how your data is being processed.
Right to Access — You may request a copy of the personal data we hold about you.
Right to Correct — You may request correction of inaccurate or incomplete data.
Right to Erasure — You may request deletion of your data when it is no longer necessary for the purpose it was collected.
Right to Object — You may object to the processing of your personal data.
Right to File a Complaint — You may lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph.

Data Protection Officer: For data privacy concerns related to Philippine law, contact us at hello@duaspirits.com.

7. Data Sharing & Third-Party Processors

We do not sell your personal information. We may share data with trusted service providers who assist in operating our website and email campaigns, subject to strict data processing agreements.

Our current service providers include:

Netlify, Inc. (United States) — Website hosting and form submissions.

Additional processors will be disclosed here as they are implemented.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence, including the United States (where our hosting provider Netlify, Inc. is based).

Where we transfer data outside the European Economic Area or the United Kingdom, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or the UK International Data Transfer Agreement.

For users in the Philippines, cross-border data transfers are conducted in accordance with the requirements of the Data Privacy Act of 2012 (RA 10173), Section 20(c).

9. Data Retention

We retain your email address for as long as you remain subscribed. You may unsubscribe at any time using the link in any email.

10. Children's Privacy

This website is not intended for individuals under the legal drinking age in their jurisdiction. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

11. Contact Us

For privacy-related enquiries, please contact us at: hello@duaspirits.com