Privacy Policy

1. Who We Are

BLI55 Ltd ("BLI55", "we", "us", or "our") is a United Kingdom-based company that produces and distributes premium champagne in 250ml slim cans. We are the data controller responsible for your personal data as described in this Privacy Policy.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at bli55.co.uk (the "Site") and interact with our services.

We are committed to ensuring that your privacy is protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

We may collect and process the following categories of personal data:

Information you provide directly

• Contact form submissions -- your name, email address, and the content of any messages you send us through our website contact forms
• Waitlist registrations -- your email address when you sign up to be notified about product launches and availability
• Newsletter subscriptions -- your email address and communication preferences

Information collected automatically

• Browsing data -- pages visited, time spent on pages, click patterns, scroll depth, and navigation paths through our Site
• Technical data -- your IP address (anonymised where possible), browser type and version, operating system, device type, screen resolution, and language preferences
• Referral data -- the website or source that directed you to our Site

Age verification consent

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• To operate and improve our Site -- ensuring our content is presented effectively and our Site functions correctly across devices
• To respond to enquiries -- processing and replying to messages submitted via contact forms
• To manage our waitlist -- notifying you when BLI55 products become available for purchase
• To send marketing communications -- with your explicit consent, sending newsletters and promotional material about BLI55 products, events, and offers
• To analyse usage patterns -- understanding how visitors interact with our Site so we can improve the user experience
• To comply with legal obligations -- including age verification requirements for alcohol-related content under UK law
• To protect our Site -- detecting and preventing fraud, abuse, or security incidents

4. Legal Basis for Processing

Under the UK GDPR, we rely on the following legal bases to process your personal data:

• Consent (Article 6(1)(a)) -- for marketing communications, newsletter subscriptions, and non-essential cookies. You may withdraw your consent at any time.
• Legitimate interests (Article 6(1)(f)) -- for website analytics, Site improvement, and fraud prevention. We have assessed that these interests do not override your fundamental rights and freedoms.
• Legal obligation (Article 6(1)(c)) -- for age verification and compliance with alcohol advertising regulations.
• Contractual necessity (Article 6(1)(b)) -- for processing waitlist registrations and responding to your enquiries.

5. Cookies and Tracking

Our Site uses cookies and similar technologies to enhance your browsing experience. Cookies are small text files placed on your device that help us recognise you and remember your preferences.

Essential cookies

These cookies are necessary for the Site to function properly. They enable core features such as page navigation and access to secure areas. The Site cannot function correctly without these cookies, and they cannot be disabled.

Analytics cookies

With your consent, we use analytics cookies to collect anonymised information about how visitors use our Site. This data helps us understand which pages are most popular, how visitors navigate between pages, and whether they encounter any errors. All analytics data is aggregated and anonymised.

SessionStorage

We use your browser's sessionStorage (not a cookie) to store your age verification confirmation. This data is never transmitted to our servers and is automatically cleared when you close your browser session.

Managing cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete cookies that have already been set. Please note that disabling essential cookies may affect the functionality of our Site.

6. Third-Party Services

We may use the following third-party services that process personal data on our behalf:

• Google Fonts -- to serve web fonts (Outfit and Inter). Google may collect your IP address and browser data when fonts are loaded. For more information, see Google's Privacy Policy.
• Web hosting providers -- our Site is hosted by third-party hosting services that may process server logs containing IP addresses and request data.
• Email service providers -- we use third-party platforms to manage our waitlist and send marketing communications. These providers process your email address on our behalf under a data processing agreement.
• Analytics providers -- we may use analytics services to help us understand Site usage. Where used, these services collect anonymised browsing data.

We ensure that all third-party service providers are contractually bound to protect your data and process it only in accordance with our instructions and applicable data protection law.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Contact form submissions -- retained for up to 12 months after your enquiry has been resolved, then securely deleted
• Waitlist registrations -- retained until you unsubscribe or until the waitlist is no longer active, whichever occurs first
• Marketing communications -- retained until you withdraw your consent or unsubscribe
• Analytics data -- aggregated and anonymised data may be retained indefinitely as it cannot be linked back to an individual
• Age verification (sessionStorage) -- automatically deleted when your browser session ends
• Server logs -- retained for up to 90 days for security and diagnostic purposes

When personal data is no longer required, we securely delete or anonymise it in accordance with our data retention procedures.

8. Your Rights Under GDPR

Under the UK GDPR, you have the following rights regarding your personal data. You may exercise any of these rights free of charge by contacting us at the details provided below.

• Right of access (Article 15) -- you have the right to request a copy of the personal data we hold about you
• Right to rectification (Article 16) -- you have the right to request that we correct any inaccurate or incomplete personal data
• Right to erasure (Article 17) -- you have the right to request that we delete your personal data, subject to certain legal exceptions
• Right to restrict processing (Article 18) -- you have the right to request that we limit how we use your data in certain circumstances
• Right to data portability (Article 20) -- you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller
• Right to object (Article 21) -- you have the right to object to the processing of your personal data where we rely on legitimate interests
• Right to withdraw consent -- where we rely on your consent to process data, you may withdraw it at any time without affecting the lawfulness of prior processing

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

• Website: ico.org.uk
• Telephone: 0303 123 1113

9. Age Verification

When you first visit our Site, you will be presented with an age verification gate that asks you to confirm you are 18 or over. This confirmation is:

• Stored locally in your browser's sessionStorage
• Not transmitted to or stored on our servers
• Automatically cleared when you close your browser session
• Required each time you begin a new browsing session

We do not knowingly collect or solicit personal data from anyone under the age of 18. If we become aware that we have collected personal data from a person under 18, we will take steps to delete that information as quickly as possible.

If you believe that we may have collected information from a person under 18, please contact us immediately at privacy@bli55.co.uk.

10. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all data transmitted between your browser and our servers
• Regular security assessments and updates to our systems
• Access controls limiting who within our organisation can view personal data
• Secure data storage with encryption at rest
• Staff training on data protection responsibilities

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining the highest reasonable standard of protection.

11. International Transfers

Some of our third-party service providers may be located outside of the United Kingdom. Where your personal data is transferred outside the UK, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements, including:

• Transfers to countries recognised by the UK government as providing an adequate level of data protection
• Standard contractual clauses approved by the Information Commissioner's Office
• Other legally recognised transfer mechanisms

You may contact us for further details about the specific safeguards applied to the transfer of your data.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Post a notice on our Site where appropriate
• Where required by law, seek your consent for any new processing activities

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

We aim to respond to all data protection enquiries within 48 hours and to resolve any requests within the statutory one-month timeframe.