Privacy policy
Last updated 15 September 2026.
This policy explains what personal data SIA “Rudy’s Brewing Co.” collects when you visit rudyskombucha.com, buy from us, subscribe, write a review or contact us, and what we do with it. Questions: woof@rudyskombucha.com.
1. Who is responsible
The controller is SIA “Rudy’s Brewing Co.”, registration number 40203226650, Tehnikas iela 2B, Kuldīga, Kuldīgas novads, LV-3301, Latvia, woof@rudyskombucha.com.
2. What we collect
- Orders and accounts: name, email, phone, delivery and billing address, chosen parcel locker or pickup point, products bought, order history, and your login if you create an account. If you ask for a company invoice: company name, registration and VAT number.
- Payments: handled by our payment providers. We see the method, amount and status, never your full card number.
- Consent records: that you accepted the terms in the cart, and - for Hard Kombucha - that you confirmed you are 18 or over.
- Subscriptions: plan, frequency, renewal dates.
- Marketing: whether you agreed to email or SMS, and opens and clicks.
- Reviews and messages: what you write in reviews, forms, chat or email.
- Technical data: IP address, device and browser, pages viewed, referrer and cookie identifiers - see the Cookie policy.
3. Why we use it (GDPR Article 6)
| Purpose | Legal basis |
|---|---|
| Taking, delivering and supporting orders; subscriptions; returns and refunds | Contract |
| Invoices, accounting, tax, excise and deposit records; age checks for alcohol | Legal obligation |
| Security, fraud prevention, keeping the shop working | Legitimate interest |
| Analytics to improve the site | Consent (cookie banner) |
| Email and SMS marketing | Consent - withdraw any time via the unsubscribe link or by email |
| Review requests after a purchase; publishing reviews you submit | Legitimate interest |
| Measuring our advertising on Meta and Google | Consent (cookie banner) |
| Replying to shops, cafés and partners | Legitimate interest / pre-contract steps |
4. How long we keep it
- Orders, invoices and payment records: as long as Latvian accounting and tax law requires.
- Accounts: until you delete your account or ask us to.
- Marketing: until you unsubscribe, or after three years without any interaction.
- Reviews: while the product is sold, or until you ask us to remove yours.
- Enquiries: up to two years after the last contact.
5. Who processes it for us
We use service providers for hosting and payments (Shopify and the payment methods shown at checkout), delivery (DPD and other carriers, Parcely for locker choice), email, SMS and reviews (Klaviyo), subscriptions (Appstle), product videos (Tolstoy), analytics and advertising (Google, Meta - only with your consent), and our accountants and IT providers. Each receives only what it needs, under a data-processing agreement. The full list, with what each processes and where, is on Data processing. We do not sell personal data.
6. Transfers outside the EU
Some providers process data in the United States. Those transfers rely on the EU–US Data Privacy Framework where the provider is certified, otherwise on the European Commission’s Standard Contractual Clauses.
7. Your rights
You can ask to access, correct, delete or export your data, restrict or object to its use, and withdraw consent at any time. Email woof@rudyskombucha.com; we reply within one month. You can also complain to the Data State Inspectorate of Latvia (dvi.gov.lv) or the supervisory authority in your EU country.
8. Children
The shop is not aimed at children. Hard Kombucha is sold only to adults aged 18 or over.
9. Security
The site runs over encrypted connections, payments are processed by PCI-DSS-certified providers, and access to customer data at Rudy’s is limited to the people who need it.
10. Changes
We update the date above when this policy changes, and announce material changes on the site or by email.