Privacy notice

Version 1.0

Effective from: 19 September 2026

Applies to: personal data we handle from this date

This notice explains how Globev Duty Free Limited uses personal data. Almost everything we hold is business contact information about people who work for our trade customers, prospects and suppliers. Last updated 19 September 2026.

1. Who is responsible

Globev Duty Free Limited, Registered office: Bornaltra, Coonanstown, Dunlavin, Co. Wicklow, W91 F5H6, Ireland, company number 563408, is the data controller. Contact sales@globevdutyfree.com for anything about your data. We share systems and staff with Drinks21 Ltd (UK), which acts as our processor for order administration.

2. What we collect and why

In short: your name, work contact details and what you enquire about, so that we can quote, trade and stay in touch. No consumer data, no profiling.

Data	Purpose	Lawful basis
Name, job title, company, work email and phone	Answering enquiries, issuing quotations and pro forma invoices, managing your account	Contract, or steps before a contract
Company registration, VAT and excise authorisation details, identity of directors and beneficial owners	Know-your-customer checks, sanctions and anti-corruption screening, excise compliance	Legal obligation and legitimate interests
Order, payment and shipping history	Fulfilling orders, accounting, tax and excise records	Contract and legal obligation
Business contact details of trade prospects	Occasional trade mailings about our range and offers	Legitimate interests (B2B marketing); you can opt out at any time
Website usage: pages visited, device type, approximate location	Keeping the site secure and understanding what buyers look for	Legitimate interests

We do not sell personal data and do not use it for automated decision-making.

3. Cookies and storage

The site sets no advertising or third-party tracking cookies. Your browser stores one item locally: your confirmation of the age gate, so you are not asked again on every page. Our hosting provider records standard server logs (IP address, browser, pages requested) for security and to measure traffic.

4. Where data goes

In short: to the systems we run the business on, and to the carriers and authorities involved in moving excise goods.

Hosting and forms: Cloudflare (website) and Supabase (secure storage of enquiries and account data), both under GDPR-compliant terms with EU data-residency options.
Business systems: our ERP and email providers.
Logistics and compliance: our bonded warehouse in the Netherlands, carriers, customs and excise authorities, and sanctions-screening providers, to the extent needed to move goods lawfully.
Professional advisers and authorities where the law requires.

Where a recipient is outside the European Economic Area we rely on an adequacy decision or the European Commission's standard contractual clauses.

5. How long we keep it

Enquiries that do not lead to trade are deleted after two years. Customer and transaction records are kept for six years after the last transaction, as Irish tax and excise law requires. Compliance screening records are kept for five years after the relationship ends. Marketing contacts are removed when you opt out or after three years without engagement.

6. Your rights

You can ask for a copy of your data, have it corrected or deleted, restrict or object to its use, or receive it in a portable format. Email sales@globevdutyfree.com; we respond within one month. If you are unhappy with our answer you can complain to the Irish Data Protection Commission at dataprotection.ie, or to the supervisory authority in your own EU country.

7. Changes

We will post any changes to this notice here and update the date at the top.