PRIVACY POLICY
— WEBSITE & ONLINE SHOP
The trust of those who discover our Maison, connect with us or choose our creations deserves the utmost care.
At Archibald, respect for privacy and the protection of personal data are an integral part of that commitment.
This Privacy Policy explains, in a clear and transparent manner, what information we collect when you browse our website, communicate with our Maison or make purchases through our online shop. It also explains how this information is used, protected and retained, as well as the rights you have regarding your personal data.
Last updated: 31 October 2026
01
—
Data controller
The website www.archibald-distillations.com is operated by TOFC, a French simplified joint-stock company (SAS) with a share capital of €111,490, registered with the Bordeaux Trade and Companies Register under number 791 242 159, whose registered office is located at:
L'Annexe de la Distillerie
37 rue de Béarn
33700 Mérignac – France
This address is the administrative headquarters of our Maison, separate from our historic distillery, founded in 1830 in Charente-Maritime, between Cognac and Bordeaux, where our creations are crafted.
TOFC, operating under the commercial name Archibald Distillations, is the data controller responsible for the processing of personal data in connection with the activities described in this Privacy Policy.
For any questions regarding your personal data:
contact@archibald-distillations.com
02
—
Personal data we collect
Depending on how you use our website and services, Archibald may collect different categories of personal data:
Identification and contact information: first name, surname, email address, telephone number, billing and delivery addresses.
Order information: products purchased, order history, amounts paid, delivery arrangements and information required to process and track your purchases. Payment card information is processed by secure payment service providers.
Member account information: contact details, login credentials and information associated with your personal account.
Information you voluntarily provide: enquiries submitted through contact forms, newsletter subscriptions, communication preferences and, where applicable, professional information.
Browsing data: technical information relating to your connection, device, browsing activity and interactions with our website, including information collected through cookies and audience measurement tools.
We aim to collect only the information necessary for the purposes described below.
03
—
How we use your data and legal bases for processing
The information collected enables Archibald to provide attentive, personalised service, facilitate communication with our customers and continually improve the experience offered through our website and online shop.
Personal data is processed for the following purposes:
-
Order management and customer service
To process purchases, payments, shipments, deliveries, returns and after-sales enquiries.
These activities are primarily based on the performance of a sales contract and, where applicable, compliance with legal obligations.
-
Member account management
To enable the creation and use of personal accounts, access to order history and related features.
These activities are necessary to provide the services requested.
-
Enquiries and customer communication
To respond to messages addressed to our Maison, assist customers with their enquiries and maintain continuity in our exchanges.
Depending on their nature, these activities are based on pre-contractual measures, the performance of a contract or the company's legitimate interest in maintaining high-quality customer relationships.
-
Newsletters and communications
To share Archibald creations, distillery news, events, tasting recommendations and information likely to be of interest to recipients.
These communications are based on consent when required by law, or on legitimate interests where commercial communications are legally permitted without prior consent.
Information about interactions with our communications, including email opens and clicks, may also be used to assess their relevance and better understand recipients' interests, subject to applicable rules governing tracking technologies.
Every commercial email includes an easy way to unsubscribe.
-
Improving the website experience
To understand website traffic, identify the most useful content, improve navigation and enhance the services offered through our online shop.
These insights help us develop a website that better reflects our visitors' expectations.
Where these activities rely on tracking technologies requiring consent, they are carried out only with the visitor's prior agreement.
-
Security and legal obligations
To maintain website security, prevent fraudulent activity and comply with accounting, tax and regulatory requirements.
These activities are based on applicable legal obligations or the company's legitimate interests.
04
—
Who we share your data with
Personal data is accessible only to authorised members of the Archibald team, within the scope of their responsibilities.
It may also be shared with service providers necessary for the operation of our website and the delivery of our services, including:
Website hosting and operation: Wix, for website hosting, online shop services, member account management and related features.
Email communications: Mailchimp, for contact management and newsletter distribution.
Audience measurement and marketing tools: Google Analytics 4, Wix analytics services and, depending on the features enabled, Meta tools associated with Facebook and Instagram.
Cookie management: Usercentrics, for collecting and managing cookie consent preferences.
Secure payments: payment service providers, including Stripe and PayPal, as well as services associated with available payment methods, such as Apple Pay and Google Pay, depending on the customer's chosen method.
Shipping and delivery: service providers responsible for organising and delivering orders, including Expedeasy and DPD. These providers may change depending on the delivery services offered.
Other technical, accounting or legal service providers may also access information strictly necessary to fulfil their responsibilities.
Personal data may also be disclosed to competent authorities where required by law.
Archibald does not sell the personal data of its customers or website visitors.
05
—
How long we keep your data
Personal data is retained for periods appropriate to the purposes for which it is collected, in accordance with applicable regulations.
-
Orders and invoicing
Information required to manage purchases is retained throughout the customer relationship and may subsequently be archived where necessary to comply with legal obligations or protect the company's rights.
Accounting records are retained for ten years.
-
Member accounts
Information associated with personal accounts is retained for as long as the account remains in use, subject to any legal obligations requiring certain information to be kept for longer.
Customer relationships and marketing
Personal data used for commercial prospecting is subject to the retention periods applicable to this purpose.
As a general reference, prospect data may be retained for three years from its collection or the last contact initiated by the prospect. For customers, this reference period is three years after the end of the commercial relationship.
-
Newsletters
Information required to send communications is retained until the recipient unsubscribes or until the applicable retention period expires.
Certain information may be retained to respect an objection to marketing communications or to demonstrate that consent was obtained.
-
Cookies and browsing data
Retention periods depend on the nature of the tracking technologies, their purposes and the settings of the services used.
Consent preferences are retained for an appropriate period to avoid unnecessarily requesting visitors' choices each time they browse our website.
Once the applicable retention periods have expired, personal data is deleted or anonymised, unless further retention is required by law.
06
—
Cookies and audience measurement
The Archibald website uses cookies and similar technologies to ensure its proper functioning, facilitate navigation and, with your consent where required, better understand our visitors' expectations.
These technologies serve different purposes.
-
Strictly necessary cookies
These cookies support essential website and online shop functions, including navigation, security, shopping basket management, member account access and the storage of privacy preferences.
They do not require prior consent where they meet the conditions established by applicable regulations.
-
Analytics cookies
These cookies help us understand website traffic, visitor journeys and the performance of our online shop.
The information collected contributes to improving the clarity of our content, the ease of navigation and the quality of the services we provide.
Archibald uses Google Analytics 4 and Wix analytics tools for these purposes.
Analytics tracking technologies that do not qualify for a legal exemption are subject to the visitor's prior consent.
-
Marketing cookies and technologies
Certain tools, particularly those provided by Meta, may be used to measure the effectiveness of our communications and campaigns and, depending on their configuration, deliver more relevant advertising content.
Their use is subject to prior consent where required by applicable regulations.
-
Managing your preferences
Our website uses Usercentrics to collect and manage cookie consent preferences.
When you first visit our website, a banner allows you to accept, reject or customise the use of non-essential cookies.
You remain free to change your preferences or withdraw your consent at any time through the cookie settings available on our website.
Further information about the tracking technologies used, their purposes and retention periods can be found in the cookie management interface.
07
—
International data transfers
Some of the technical service providers used by Archibald operate internationally.
Their services may involve transfers of personal data to countries outside the European Economic Area (EEA), including the United States, as may be the case with Mailchimp services.
Such transfers must comply with the General Data Protection Regulation (GDPR).
Depending on the service provider and the country concerned, the applicable safeguards may include an adequacy decision issued by the European Commission, including the EU–US Data Privacy Framework for certified organisations, or Standard Contractual Clauses accompanied, where necessary, by additional protective measures.
For further information about international data transfers associated with the services used by Archibald and the safeguards in place, please contact our Maison using the details provided in this Privacy Policy.
08
—
Your personal data rights
Under the General Data Protection Regulation (GDPR), you have the following rights, subject to the conditions established by applicable law:
Right of access: to obtain information about the personal data we hold about you.
Right to rectification: to request the correction of inaccurate or incomplete personal data.
Right to erasure: to request the deletion of your personal data where the legal conditions are met.
Right to object: to object to certain types of processing, particularly direct marketing.
Right to restriction of processing: to request that certain processing activities be temporarily restricted.
Right to data portability: to receive the relevant personal data in a structured format and, where provided for by law, transfer it to another organisation.
Right to withdraw consent: to withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before its withdrawal.
To exercise your rights or ask a question about your personal data, simply contact us at:
contact@archibald-distillations.com
Every request is reviewed with care and answered within the time limits established by applicable regulations.
You also have the right to lodge a complaint with the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés — CNIL) through its website: www.cnil.fr.
09
—
Data security and updates to this policy
Archibald implements appropriate technical and organisational measures to protect the confidentiality and security of personal data.
This Privacy Policy may be updated to reflect changes to our services, the technologies we use or applicable regulations.
The date of the latest update, shown at the top of this page, identifies the current version.
For any questions regarding this Privacy Policy or the protection of your personal data: