Destilo Drink Studio.
Coming soon to Madrid.

LAST UPDATED: 15/07/2026

This privacy policy (the “Privacy Policy”) governs the processing of personal data carried out by KITSUNE INVESTMENTS, S.L., under the trade name DESTILO DRINKS, in relation to the website hosted under the domain name destilodrinks.com and, where applicable, any subdomains or dependent sections thereof (the “Website”), the online store incorporated into the Website (the “Online Store”) and the associated services, experiences, communications and functionalities.

This Privacy Policy is complemented by the Legal Notice, the Cookies Policy and the Sales Policy. This Privacy Policy does not govern the commercial conditions of purchase, payment, delivery, return, warranty, cancellation or complaint, which shall be governed by the Sales Policy and by the applicable particular conditions.

Merely browsing the Website does not, in itself, imply the giving of consent for processing operations that legally require consent, nor for the installation or use of non-technical or non-exempt cookies. Where processing requires consent, DESTILO DRINKS shall request it by means of specific, differentiated, informed and revocable mechanisms.

1. BASIC INFORMATION ON DATA PROTECTION.

2. IDENTIFICATION OF THE DATA CONTROLLER.

2.1 The controller of the personal data processed through the Website, the Online Store, DESTILO Club, bookings, events, communications and other enabled channels is KITSUNE INVESTMENTS, S.L. (hereinafter, “DESTILO DRINKS”).

• The identifying details of the controller are as follows:
  
  
• Controller: KITSUNE INVESTMENTS, S.L.
  
  
• Trade name: DESTILO DRINKS / DESTILO.
  
  
• NIF: B75480475.
  
  
• Registered office: Calle de Castelló 66, 3.º A, 28001 Madrid, España.
  
  
• Privacy email address: legal@destilodrinks.com
  
  
• Customer service telephone: +34 911 387 708
  
  
• Contact form: here
  

2.3 For the sake of documentary consistency, the identity of the controller coincides with the ownership of the Website indicated in the Legal Notice. If the registry details, contact channels or trade names are updated in the Legal Notice, they must be correspondingly updated in this Privacy Policy.

3. PURPOSE, SCOPE AND RELATIONSHIP WITH OTHER LEGAL TEXTS.

3.1 This Privacy Policy provides information on the processing of the personal data of Users, Customers, order recipients, attendees at tastings, experiences, workshops, events or activities, members or applicants for access to DESTILO Club, B2B contact persons, suppliers, collaborators, media and third parties who engage with DESTILO DRINKS.

3.2 In the event of a contradiction between this Privacy Policy and other legal texts of the Website, this Policy shall prevail solely with respect to the information relating to the processing of personal data. The conditions of access, use, purchase, payment, delivery, return, warranties and complaints shall be governed by the specific contractual documents that apply.

4. PERSONAL DATA THAT DESTILO DRINKS MAY PROCESS.

4.1 DESTILO DRINKS shall process only data that is adequate, relevant and limited to what is necessary in relation to the stated purposes.

4.2 Depending on the relationship held with the User or Customer, DESTILO DRINKS may process the following categories of data:

• Identifying and contact data: name, surname, postal address, billing address, delivery address, email address, telephone and other data provided.
  
  
• Account data: user identifiers, credentials, preferences, account history, favourites or equivalent functionalities, where enabled.
  
  
• Purchase and contracting data: products or services acquired, bookings, experiences, dates, times, prices, order status, deliveries, returns, refunds, incidents and complaints.
  
  
• Payment data: payment confirmation, transaction identifiers and data necessary to manage charges, returns or refunds. Unless otherwise indicated, DESTILO DRINKS does not retain full payment card data.
  
  
• Delivery and logistics data: delivery address, contact telephone, delivery instructions, logistics incidents and, where applicable, information strictly necessary to verify the age of the recipient.
  
  
• Age-related data: declaration of legal age, results of age checks, acceptance of the corresponding checkbox, date, time, version of the accepted text and the minimum evidence necessary to substantiate the verification.
  
  
• Event and experience data: booking data, attendees, communicated preferences, accessibility needs and, where applicable, allergies, intolerances or dietary needs communicated voluntarily.
  
  
• Communications data: enquiries, requests, complaints, communications with customer service and messages sent through forms, email, telephone or other enabled channels.
  
  
• Commercial, promotional and DESTILO Club data: consents, communication preferences, newsletter subscription, invitations, participation in promotions, pre-sales, exclusive products, events, campaigns, unsubscriptions and objections.
  
  
• Technical and browsing data: IP address, online identifiers, device type, browser, operating system, pages visited, interaction with the Website, technical logs, cookies and similar technologies, in accordance with the Cookies Policy.
  
  
• Professional data: professional contact details, entity, position or role, and the content of the relationship where the contact takes place on behalf of a company, supplier, media outlet, collaborator, distributor, B2B customer or partner
  

4.3 DESTILO DRINKS does not generally request special categories of data. However, in the context of tastings, experiences, workshops, events or services involving tasting, food or drink, the Customer or attendee may voluntarily communicate allergies, intolerances, dietary restrictions, accessibility needs or other information that may reveal health data. In such a case, the processing shall be limited to managing the requested service, protecting the safety of the data subject and reasonably attending to the communicated need.

5. ORIGIN OF THE DATA.

5.1 DESTILO DRINKS may obtain personal data from the following sources:

• Directly from the User or Customer, when they browse the Website, place an order, book an experience, subscribe to commercial communications, request access to DESTILO Club, take part in a promotion, use forms or communicate with DESTILO DRINKS.
  
  
• Automatically, by means of cookies, similar technologies, technical logs, security tools, analytics or the operation of the Website, in accordance with the Cookies Policy.
  
  
• From providers that render services to DESTILO DRINKS, such as Shopify, payment providers, logistics operators, email marketing tools, customer service tools, hosting, analytics, security or consent management.
  
  
• From third parties or platforms where the User uses third-party functionalities, social media, integrations, payment systems, authentication services or other tools connected to the Website.
  
  
• From companies, suppliers, collaborators, media, event organisers or third parties who contact DESTILO DRINKS in the context of B2B relationships, press, events, collaborations or partnerships.

5.2 Where the User or Customer provides personal data of third parties, such as order recipients, event attendees or contact persons, they declare that they are entitled to do so and that they have informed such third parties of the essential aspects of this Privacy Policy, unless another legal basis or legal exception applies.

6. PURPOSES AND LEGAL BASES.

7. CHECKBOXES, CONSENTS AND RECORD PRIOR TO PAYMENT.

7.1 In the phase prior to payment, DESTILO DRINKS may ask the Customer to tick a mandatory, non-pre-ticked checkbox by means of which they declare that they are at least 18 years of age, accept the Sales Policy and confirm that they have read the Privacy Policy.

7.2 The reference to the Privacy Policy in that checkbox shall serve an informational and evidentiary purpose of making the data protection information available, without turning the Privacy Policy into a contractual condition of purchase.

7.3 Subscription to commercial communications, newsletters, invitations, pre-sales, promotions or DESTILO Club communications shall be carried out by means of a separate, optional and non-pre-ticked checkbox.

7.4 DESTILO DRINKS may retain, associated with the order or the Customer's account, evidence of the date, time, version of the accepted or read text, declaration of age and commercial consent given, where applicable, for the periods necessary to substantiate legal and contractual compliance.

8. RELATIONSHIP WITH SHOPIFY AND ONLINE STORE TOOLS.

8.1 The Online Store is built on Shopify technology. Shopify may process personal data to enable the operation of the store, cart, checkout, technical infrastructure, security, fraud prevention, orders, analytics, privacy consent, payments or other functionalities associated with the platform.

8.2 Depending on the functionalities enabled, Shopify and its group entities may act as data processors for DESTILO DRINKS or as independent controllers with respect to certain of their own processing operations, in accordance with their applicable terms, policies and contractual documentation.

8.3 Where Shopify's native checkout cannot be customised, the legally relevant consents and confirmations may be collected in the cart or the step immediately prior to payment, being recorded as order attributes.

8.4 DESTILO DRINKS must review and update this Policy if it activates new applications, pixels, marketing, analytics, CRM or customer service tools, profiles, automations, payment gateways, age verification systems or Shopify functionalities that entail additional processing operations.

9. MINORS AND AGE VERIFICATION.

9.1 The Website and the Online Store are directed at persons who meet the minimum legal age to purchase and receive alcoholic beverages in the territory of delivery. In Spain, DESTILO DRINKS does not sell or deliver alcoholic beverages to persons under 18 years of age, without prejudice to more restrictive requirements that may apply in other territories of delivery.

9.2 In order to place orders that include alcoholic beverages, the Customer must declare that they meet the applicable minimum age. The acceptance, preparation or delivery of the order may be conditional upon age verification by means of the reasonable mechanisms enabled by DESTILO DRINKS or its logistics operators.

9.3 Where necessary, the recipient may be required to show an official identity document to the logistics operator. Save where legally required or specifically justified, DESTILO DRINKS shall not retain copies of official documents, limiting itself, where applicable, to retaining the minimum evidence that the verification has been carried out, has been attempted or that delivery could not be completed.

10. HEALTH DATA, ALLERGIES, INTOLERANCES AND ACCESSIBILITY NEEDS.

10.1 At tastings, experiences, workshops, events or services involving tasting, food or drink, the Customer or attendee may voluntarily communicate allergies, intolerances, dietary restrictions, accessibility needs or other special needs.

10.2 Where such information allows health data or other special categories of data to be inferred, DESTILO DRINKS shall process it only if it is necessary to manage the activity, protect the safety of the data subject, reasonably adapt the requested service or attend to the communicated need, and on the basis of explicit consent where applicable.

10.3 The data subject may communicate only the practical need that must be attended to, without providing medical, diagnostic or particularly sensitive information that is not necessary for the provision of the service.

11. DESTILO CLUB, PRE-SALES, PROMOTIONS AND COMMERCIAL COMMUNICATIONS.

11.1 DESTILO DRINKS may process personal data to manage registration, requests for access, participation or communications relating to DESTILO Club, private pre-sales, exclusive products, limited-availability products, codes, invitations, discounts, events, tastings, experiences, campaigns or commercial advantages.

11.2 Electronic commercial communications shall be sent where there is consent from the data subject or, where applicable, a prior contractual relationship regarding similar products or services in accordance with the applicable regulations. Each communication shall provide a simple and free mechanism to unsubscribe or object.

11.3 DESTILO DRINKS shall not direct commercial communications about alcoholic beverages to minors, nor design its communications to encourage irresponsible or immoderate consumption or consumption contrary to the applicable regulations.

11.4 Promotions, prize draws, discounts, invitations, codes or special campaigns may be subject to particular conditions and, where applicable, to specific legal bases, which shall provide information about any additional processing of personal data that applies.

12. COOKIES AND SIMILAR TECHNOLOGIES.

12.1 The Website uses cookies and similar technologies. The processing of personal data arising from such technologies is governed by the Cookies Policy, which shall be permanently, freely and readily available on the Website.

12.2 DESTILO DRINKS may use technical or strictly necessary cookies to enable browsing, ensure security, manage the cart, verify age, process orders or provide essential functionalities of the Online Store.

12.3 Non-technical or non-exempt cookies, including analytics, advertising, personalisation or third-party cookies, shall only be installed or used where there is a valid legal basis and, where applicable, the User's consent.

12.4 The User may accept, reject or configure non-necessary cookies through the panel provided for that purpose and may modify their preferences at any time through the initial window (initial pop-up)

13. RECIPIENTS, DATA PROCESSORS AND THIRD PARTIES.

13.1 DESTILO DRINKS shall not sell the personal data of Users or Customers. However, it may disclose data or allow access to personal data to third parties where necessary to provide services, manage the Online Store, comply with legal obligations, pursue legitimate purposes or perform the contractual relationship.

13.2 The following categories of recipients or providers may access personal data where necessary:

• Shopify and e-commerce platform.
  
  
• Payment providers and financial institutions.
  
  
• Logistics operators and carriers.
  
  
• Technology providers, hosting, security, analytics, forms, CRM, customer service and consent management.
  
  
• Marketing, newsletter, DESTILO Club, promotions and communication preferences providers.
  
  
• Professional advisers, insurers, auditors or consultants.
  
  
• Public authorities, authorities, courts and tribunals where there is a legal obligation, request or need to defend rights.
  
  
• Experience and event collaborators where they take part in the provision of the service.

13.3 Providers that process personal data on behalf of DESTILO DRINKS shall act as data processors in accordance with Article 28 GDPR and must offer sufficient guarantees to implement appropriate technical and organisational measures.

13.4 Certain third parties, such as payment providers, Shopify with respect to its own functionalities, social media, advertising tools, authentication services or external platforms, may act as independent controllers with respect to the processing operations they carry out for their own purposes.

14. INTERNATIONAL DATA TRANSFERS.

14.1 Some of DESTILO DRINKS's providers, including Shopify, technology tools, marketing, analytics, support, payments or infrastructure, may be located outside the European Economic Area or process data from countries that do not offer a level of protection equivalent to that of the European Union.

14.2 Where it is necessary to carry out international transfers of personal data, DESTILO DRINKS shall adopt the safeguards required by the applicable regulations, including, where applicable, adequacy decisions, standard contractual clauses approved by the European Commission, binding corporate rules, supplementary measures or other legally valid mechanisms.

14.3 The User or Customer may request additional information about the safeguards applied by writing to DESTILO DRINKS.

15. RETENTION PERIODS.

15.1 DESTILO DRINKS shall retain personal data for the time necessary to fulfil the purposes for which it was collected and, thereafter, for the periods necessary to attend to legal obligations or possible liabilities.

• Browsing and cookies: as provided for in the Cookies Policy and, where applicable, until the User withdraws consent or configures their preferences.
  
  
• User account: while the account remains active and, thereafter, for the period necessary to attend to liabilities, incidents, legal obligations or requests from the data subject.
  
  
• Orders, purchases, invoicing and payments: during the contractual relationship and, thereafter, for the periods legally required in tax, accounting, commercial, consumer, complaints and defence of rights matters.
• Bookings, experiences and events: during the management of the booking, experience or event and, thereafter, for the period necessary to attend to incidents, complaints or liabilities.
  
  
• Newsletter, DESTILO Club and commercial communications: until the withdrawal of consent, unsubscription or objection, without prejudice to retaining proof of the consent, unsubscription or objection for the period necessary to attend to liabilities.
  
  
• Age verification: for the time strictly necessary to substantiate compliance with the applicable obligations and to manage incidents or liabilities, avoiding retaining copies of identity documents save where legally required or specifically justified.

15.2 Once the applicable periods have elapsed, the data shall be securely deleted, anonymised or blocked, as appropriate, to prevent its processing except for attending to legal liabilities.

16. DATA SUBJECT RIGHTS.

16.1 The User or Customer may exercise, on the terms provided for by the applicable regulations, the rights of access, rectification, erasure, objection, restriction, portability, withdrawal of consent and the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect them, save in the cases permitted by the applicable regulations.

16.2 To exercise their rights, the data subject may contact DESTILO DRINKS by written request to:

• Email: legal@destilodrinks.com
  
  
• Postal address: Calle de Castelló 66, 3.º A, 28001 Madrid, España.
  
  
• Contact form: here

16.3 The request must clearly identify the data subject and the right they wish to exercise. DESTILO DRINKS may request additional information to verify the identity of the applicant where necessary.

17. COMPLAINTS TO THE SUPERVISORY AUTHORITY.

17.1 If the User or Customer considers that DESTILO DRINKS has processed their personal data in a manner contrary to the applicable regulations, they may lodge a complaint with the Spanish Data Protection Agency, without prejudice to their being able to contact DESTILO DRINKS beforehand in order to try to resolve the matter.

17.2 AEPD website: www.aepd.es. 

18. SECURITY OF PERSONAL DATA.

18.1 DESTILO DRINKS shall adopt appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, unauthorised disclosure or access, taking into account the state of the art, the nature of the data processed, the risks and the purposes of the processing.

18.2 However, no information system or transmission of data over the Internet can guarantee absolute security. The User must use secure passwords, safeguard their credentials and notify DESTILO DRINKS of any unauthorised use or security incident of which they become aware.

19. AUTOMATED DECISIONS, PERSONALISATION AND PROFILING.

19.1 DESTILO DRINKS shall not take decisions based solely on automated processing that produce legal effects on the User or Customer or similarly significantly affect them, unless this is expressly notified and a valid legal basis applies.

19.2 Some Shopify, analytics, advertising or email marketing tools may allow content to be personalised, interaction to be measured or campaigns to be segmented. Such processing shall be carried out in accordance with the applicable legal basis and, where applicable, the consent given.

20. PHOTOGRAPHS, VIDEOS AND EVENT CONTENT.

20.1 In the event that DESTILO DRINKS wishes to capture or use photographs, videos or other identifiable audiovisual content of attendees at tastings, experiences, workshops or events for promotional, informational or commercial purposes, the data subjects shall be informed beforehand and, where necessary, their specific consent shall be obtained.

20.2 This Privacy Policy does not, in itself, authorise the use of attendees' images for promotional purposes. Such use must be governed by a specific notice, consent, informational sign, registration clause or separate document, as appropriate.

21. SOCIAL MEDIA, THIRD-PARTY PLATFORMS AND EXTERNAL LINKS.

21.1 The Website may contain links to social media, websites, gateways, platforms, tools or services of third parties. Where the User accesses such third parties or interacts with DESTILO DRINKS's profiles on social media, the processing of their personal data shall also be governed by the privacy policies of those third parties, unless DESTILO DRINKS jointly determines the purposes and means of the processing.

21.2 The inclusion of third-party links or integrations does not imply that DESTILO DRINKS is responsible for their privacy policies, legal terms, security, availability, content or independent processing operations.

22. AMENDMENTS TO THE PRIVACY POLICY.

22.1 DESTILO DRINKS may amend this Privacy Policy where necessary due to regulatory, technical, organisational, commercial, processing or provider changes.

22.2 Amendments shall be published on the Website, indicating the date of last update. Where the amendments substantially affect the processing of personal data or require consent, DESTILO DRINKS shall adopt the appropriate measures to inform the User or Customer and, where applicable, obtain again the consent that may be required.

23. LANGUAGE AND INTERPRETATION.

23.1 This Privacy Policy may be available in several languages. In the event of a discrepancy between versions, the Spanish version shall prevail, without prejudice to the inalienable rights that may correspond to data subjects under the mandatory applicable regulations.

23.2 The clause headings are for guidance purposes only and shall not affect the interpretation of the Privacy Policy.

24. PRIVACY CONTACT.

24.1 For any matter relating to this Privacy Policy or to the processing of personal data, the User or Customer may contact DESTILO DRINKS through:

• Email: legal@destilodrinks.com
  
  
• Contact form: here
  
  
• Postal address: Calle de Castelló 66, 3.º A, 28001 Madrid, España.

24.2 DESTILO DRINKS may request additional information where necessary to verify the identity of the applicant, properly process the request or prevent unauthorised disclosures of personal data.