top of page
LaGaleriaBlank-2-1.png

Privacy Policy

Privacy Policy - La Galería Distillery

La Galería Distillery (“La Galería”, “we”, “our”) produces tequila in Jalisco, Mexico and provides bulk tequila supply, private-label development and bottling, and distillery tours. We respect your privacy and explain here what we collect, why, and how you can exercise your rights.
 

1) What we collect

From our website and digital channels

  • Contact details you provide (name, email, phone, company/role, country).

  • Enquiry and booking information (bulk/private-label requests, tour reservations).

  • Device and usage data (IP address, browser/OS, cookies, advertising IDs, approximate location).

  • Preferences for marketing and communication.

From business relationships

  • Business contact details, job title, invoicing, banking info for payments, KYC documents where legally required, contract details.

From in-person visits

  • Visitor register (name, contact, date/time), age verification when required, CCTV images where posted, photos/videos from tours or events with consent.

We do not store full credit/debit card details—payments are processed securely by third-party providers.
 

2) Why we use your data

  • Service delivery: responding to enquiries, preparing quotes, managing contracts, fulfilling bulk/private-label orders, and organizing tours.

  • Operations & improvements: website functionality, analytics, security, fraud prevention.

  • Legal compliance: CRT/NOM tequila regulations, alcohol laws, tax and export/import rules.

  • Marketing (with consent): sharing information about new products, tours, and events.

  • Research & reporting: understanding demand for bulk/private-label services and improving customer experience.

Legal bases (where applicable): contract, legitimate interests, legal obligation, and consent.


3) Country-specific protections
 

3.1 Mexico (LFPDPPP)

As a company established in Mexico, we comply with the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP). Mexican residents may exercise their ARCO rights (Access, Rectification, Cancellation, Opposition) by contacting us (see Section 11). We will respond within statutory deadlines.
 

3.2 European Union & United Kingdom (GDPR/UK GDPR)

If you are in the EU/UK, you have rights under GDPR/UK GDPR, including access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent. Where we transfer your data outside the EEA/UK, we use safeguards such as Standard Contractual Clauses (SCCs).


3.3 United States & Other Countries

If you are in the United States (outside California) or another country, we process your data under applicable local privacy laws. You can still contact us to access or manage your data.


3.4 California Residents (CCPA/CPRA)

We do not sell personal information. We collect identifiers, commercial data, browsing/interaction data, and professional info for business purposes. California residents may request:

  • Access/know what personal info we collect.

  • Correction of inaccurate data.

  • Deletion of personal info (subject to exceptions).

  • Opt-out of sale/sharing (not applicable unless we change our practices).

  • Non-discrimination for exercising rights.

Requests may be submitted using the contact details in Section 11.

​

4) Sharing data

We share personal data only as necessary with:

  • Service providers (hosting, CRM, booking, payment processors, logistics, analytics, email/SMS, advertising networks with your consent).

  • Affiliates and partners that assist with bottling, branding, compliance, and marketing.

  • Regulators and law enforcement where required.

  • Corporate transactions (mergers, sales, restructuring), subject to safeguards.

We do not sell personal data.

5) Retention

We keep personal data only as long as needed for the purposes described and as required by law (tax, accounting, alcohol and trade compliance). After that, we securely delete or anonymize it.

6) Children & age restrictions

Our website and services are directed only to people of legal drinking age. We do not knowingly collect data from anyone under this age. If such data is found, it will be deleted.

​

7) Security

We apply technical and organizational safeguards (encryption in transit, access controls, staff training, vendor contracts). No system is 100% secure, but we strive to minimize risks.

​

8) Changes

We may update this Privacy Policy from time to time. Updates will be posted with a new effective date. Significant changes will be highlighted.

​

9) Who we are & contact details

La Galería Distillery S.A. de C.V.
C. A Manzana 1 Lote 12-B, Col. Parque Industrial, 45680. El Salto, Jalisco.
El Salto, Guadalajara, Jalisco, [CP], Mexico

bottom of page