AB Craft Brau Privacy Policy

Last updated: 22 July 2025

AB Craft Brau Private Limited (“AB Craft Brau“, “ABCraft“, “we“, “our“, or “us“) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit abcraftbrau.com (the “Site“) or interact with us through our social media pages, events, or other services (collectively, the “Services“).

We process personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and, where applicable, the EU General Data Protection Regulation (“GDPR”).

1. Scope and Applicability

This Policy applies to personal data processed in digital form, whether collected online or digitised from offline interactions, in connection with offering our craft beer products and related services. By accessing the Site or using the Services, you acknowledge that you have read and understood this Policy.

2. Information We Collect

2.1 Information You Provide Directly

Contact Information – name, email address, phone number, postal address.
Age Verification Data – date of birth (to confirm that you meet the legal drinking age of 21+ in Maharashtra).
Account Details – username, password, preferences, and any information you volunteer in forms or surveys.
Payment & Order Data – billing/shipping address and limited payment details (processed via our payment partners; we do not store full card details).
Marketing Communications – your preferences for receiving promotional emails, newsletters, or event invitations.

2.2 Information Collected Automatically

Device & Log Data – IP address, browser type, operating system, referring URLs, pages visited, and the date/time of each visit.
Usage Data – interactions with Site features, clickstream patterns, and performance metrics.
Cookies & Similar Technologies – session cookies, analytics cookies (e.g., Google Analytics), and pixels to understand user behaviour and improve user experience. See Section 7.

2.3 Information from Third Parties

We may receive limited personal data (e.g., age verification, public social media profile data) from:

Payment and fulfilment partners
Social media platforms (when you engage with our content)
Event ticketing providers

3. How We Use Your Information

We process personal data only for specific, lawful, and defined purposes, including:

Providing our Services – fulfilling orders, processing payments, responding to enquiries, and delivering customer support.
Marketing & Promotions – sending you information about new brews, tap takeovers, events, or special offers, with your consent.
Age & Identity Verification – ensuring that visitors meet the legal drinking age and preventing fraud.
Legal Compliance – complying with applicable laws, including excise and licensing regulations, and responding to lawful requests.
Analytics & Improvements – analysing Site traffic and usage to improve our products, services, and user experience.
Safety & Security – detecting, preventing, and addressing security incidents or violations of our terms.

4. Legal Bases for Processing

Under the DPDP Act and (where applicable) the GDPR, our lawful bases include:

Consent – for sending marketing communications, placing certain cookies, or collecting age verification data.
Contractual Necessity – to process orders and deliver Services you request.
Legitimate Interests – to maintain and improve our Site, prevent fraud, and market similar products to existing customers.
Legal Obligation – to comply with excise, taxation, or data‑protection regulations.

You may withdraw your consent at any time (see Section 5).

5. Your Rights

Subject to applicable law, you have the right to:

Access – request a copy of the personal data we hold about you.
Correct – update or correct inaccurate or incomplete data.
Delete/Erase – request deletion of your personal data.
Data Portability – obtain a copy of your data in a structured, commonly used format.
Withdraw Consent – opt out of marketing or revoke any consent previously given.
Grievance Redressal – lodge complaints with our Data Protection Officer (DPO) or the Data Protection Board of India.

To exercise your rights, email us at sales@abcraftbrau.com.

6. Age Restrictions

We do not knowingly collect personal data from individuals under the legal drinking age (21 in Maharashtra). If we learn that we have collected such data, we will delete it promptly and, where appropriate, disable the associated account.

7. Cookies and Similar Technologies

We use cookies to:

Remember user preferences and sessions
Perform traffic analytics (e.g., via Google Analytics)
Measure marketing campaign effectiveness

You can manage or disable cookies through your browser settings. However, disabling cookies may affect the functionality of the Site.

8. Sharing and Disclosure of Information

We may share your data with:

Service Providers – payment processors, logistics partners, marketing agencies, and IT service providers under contractual confidentiality obligations.
Affiliates & Subsidiaries – for internal administration and cross‑brand promotions (Alpine Bruck, Sura Brau).
Regulators & Law Enforcement – to comply with legal requests or defend legal claims.
Business Transfers – if we undergo a merger, acquisition, or asset sale; your data may be transferred to the new entity subject to this Policy.

We do not sell your personal data.

9. International Data Transfers

Where we transfer personal data outside India (e.g., cloud hosting), we ensure compliance with the DPDP Act’s cross‑border transfer rules and rely on adequacy decisions or standard contractual clauses, as applicable.

10. Data Security

We implement reasonable security practices, including:

TLS encryption in transit
Encrypted storage of passwords (hashed and salted)
Access controls and role‑based permissions
Regular security audits and vulnerability assessments

11. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

12. Third‑Party Links

Our Site may contain links to third‑party websites or services. We are not responsible for the privacy practices of such external sites. We encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Policy periodically. We will notify you of any material changes by posting the updated Policy on this page and updating the “Last updated” date. Your continued use of the Services after any amendments constitutes acceptance of the revised Policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact:

Data Protection Officer (DPO)

GUT NUMBER : 281/1,
MILKAT NUMBER : 318,, Ghotawade Road, Kasar Amboli , District : Pune,Pin – 412115 Email: sales@abcraftbrau.com