Privacy Policy

This policy explains what personal data we collect when you use this website, why we collect it, and the rights you have over it.

01Who we are

This website, toriiwhisky.com, and the TORII whisky brand are operated by LVI Holdings Private Limited (CIN U11011KA2023PTC181472), a company incorporated in India and registered in Bengaluru, Karnataka (“TORII”, “we”, “us”). We are the data fiduciary responsible for the personal data described in this policy. For any privacy question, write to connect@toriiwhisky.com.

02What we collect

We only collect what we need for the purpose you engaged us for.

Information you give us

• Founding Circle applications — your name, email, city, social handle, how you heard of us, and your confirmation that you are of legal drinking age.
• “Own a Part” investor enquiries — your name, email, phone, city, PAN, indicative income band and ticket size, and any amount you note.
• Trade & wholesale enquiries — your business name, contact name, email, phone, location and message.
• Member accounts — the email and name on your account and a securely hashed password (we never store your password in readable form).
• Correspondence — anything you send us by email or through a form.

Information collected automatically

• Basic technical data such as your IP address, browser type and the pages you view, kept in server logs for security and to keep the site running.
• A small number of essential cookies — see our Cookie Policy.

03How we use it

• To respond to your enquiry and, where relevant, review a Founding Circle, investor or trade request.
• To create and run your member account and the members’ area.
• To contact you about your application, tastings, events and the round you expressed interest in.
• To keep the site secure, prevent abuse, and meet legal, tax and regulatory obligations that apply to an alcoholic-beverage business in India.

We do not sell your personal data, and we do not use it for third-party advertising.

04Consent & legal basis

We process your data on the basis of your consent — given when you submit a form or create an account — and, where permitted, for the “legitimate uses” recognised under India’s Digital Personal Data Protection Act, 2023, such as responding to a request you have made. You may withdraw your consent at any time by writing to us; this will not affect processing already carried out, and some records may be retained where the law requires.

05Sharing & disclosure

We share personal data only with:

• Service providers who help us operate — for example email delivery and hosting — under confidentiality obligations and only as needed.
• Professional advisers (legal, accounting) where necessary for the investor or trade process.
• Authorities where we are required to disclose by law, regulation or valid legal process.

06Retention

We keep personal data for as long as needed for the purpose it was collected and for any period required by law (for example tax and company-law records). When it is no longer needed, we delete or anonymise it.

07How we protect data

Sensitive fields such as your PAN and phone number are encrypted at rest, passwords are stored only as a strong one-way hash, the site runs over encrypted HTTPS, and access to personal data is limited to authorised administrators. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.

08Your rights

Subject to applicable law, you may ask us to:

• access a summary of the personal data we hold about you;
• correct or update inaccurate or incomplete data;
• erase data that is no longer required;
• withdraw consent; and
• nominate another person to exercise your rights in the event of death or incapacity.

To exercise any of these, email connect@toriiwhisky.com. We may need to verify your identity before we act.

09Cookies

We use a small number of strictly necessary cookies to keep you signed in and to protect forms. We do not use advertising or cross-site tracking cookies. Full detail is in our Cookie Policy.

10Data storage & transfers

Our systems are hosted on secured servers. Some of our service providers (for example email delivery) may process limited data outside India; where they do, we take steps consistent with applicable Indian law to keep your data protected.

11Age & minors

This site is intended only for adults of legal drinking age in their jurisdiction and is not directed at children. We do not knowingly collect data from anyone below the legal drinking age. If you believe a minor has provided us data, contact us and we will delete it.

12Contact & grievances

Questions, requests or complaints about your data can be sent to us and we will respond within a reasonable time. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.