
PRIVACY
POLICY.
Global privacy notice for marrqgin.com, approved commerce, trade relationships and MARRQ communications.
Last updated: 15 September 2026
This Privacy Policy applies to marrqgin.com and MARRQ-related digital services operated by Monarca Vino S.R.L., Via Fratelli Cervi 31, 56045 Pomarance (PI), Italy. Monarca Vino is the controller or equivalent responsible business for the processing described here. Privacy requests may be sent to legal@monarcavino.com.
1. Scope and regional laws
This notice is written to address the GDPR and related European rules, applicable U.S. state privacy laws including California where they apply, Hong Kong's Personal Data (Privacy) Ordinance, Japan's APPI, Brazil's LGPD, Argentina's personal-data law, South Korea's PIPA, and other mandatory privacy laws that may apply. A local law may provide additional or different rights. Where a mandatory local rule conflicts with this notice, the mandatory rule prevails.
2. Personal data we collect
Depending on your interaction with MARRQ, we may collect:
- Identity and contact data: name, email, telephone number, billing or delivery address and account identifiers.
- Trade and business data: company, role, business type, VAT/tax identifier, website, territory, route-to-market, licensing or compliance information.
- Purchase and transaction data: cart, product, order, pricing tier, payment status, invoice, delivery and fulfilment information. Payment-card data entered on a hosted payment page is processed by the payment provider rather than stored by MARRQ.
- Technical and security data: IP address, browser and device information, session data, timestamps, security logs and information needed to protect accounts and the website.
- Preference and marketing data: language, cookie/storage preference, newsletter subscription and communication preferences.
- Communications: enquiries, trade applications, support requests and correspondence.
- Age-gate status: the public age gate evaluates the entered date in the browser; the current implementation stores a successful-verification flag rather than intentionally retaining the full date of birth in local storage.
3. Sources of data
We obtain data directly from you, from your employer or business where you act on its behalf, from payment and logistics providers, and from legitimate business/compliance sources used to assess trade applications, fraud, sanctions, territory or delivery feasibility where permitted by law.
4. Purposes of processing
We use personal data to operate the website; verify age and account access; review trade and private-purchase applications; create and secure accounts; communicate with applicants and customers; provide approved catalogues and pricing; process and document orders; arrange payment, tax, shipping, customs and fulfilment; manage commercial relationships; protect the MARRQ brand; prevent fraud and misuse; comply with alcohol, tax, accounting, customs, sanctions and legal obligations; establish, exercise or defend legal claims; and send marketing where lawfully permitted.
5. Legal bases under the GDPR / UK GDPR
Where European data-protection law applies, processing may rely on: steps requested before entering a contract; performance of a contract; compliance with a legal obligation; legitimate interests such as fraud prevention, security, B2B relationship management, brand protection and business administration; or consent where consent is required, including for certain marketing or non-essential technologies. Where we rely on legitimate interests, we assess those interests against the individual's rights and reasonable expectations.
6. Notice at collection for California
Where the California Consumer Privacy Act / CPRA applies, this section serves together with the rest of this Policy as our Notice at Collection. We may collect identifiers/contact information, customer records, commercial information, internet/network activity, approximate location inferred from IP or delivery region, professional/business information and account/security data for the purposes described above. We do not sell these categories and do not currently share them for cross-context behavioural advertising. Retention is based on the periods and criteria in section 13 below. We do not use sensitive personal information to infer characteristics about individuals.
7. Trade and private-purchase review
Trade applications may be reviewed using company identity, tax/VAT information, route-to-market, territory, licensing, reputation, fraud and compliance considerations. Private-purchase review may consider identity, age status, destination and delivery feasibility. We do not currently make a decision producing legal or similarly significant effects solely by automated processing without meaningful human involvement.
8. Payments
Approved online checkout may be handled by Stripe or another payment provider. The provider processes payment credentials, fraud signals and related data under its own privacy terms. We receive transaction identifiers, status and other information needed to administer the order, accounting and disputes.
9. Marketing and direct communications
Newsletter and brand communications are sent only where permitted by applicable law. Where consent is required, it may be withdrawn at any time without affecting earlier lawful processing. In jurisdictions such as Hong Kong where direct-marketing rules require specific notice or consent, we will provide the required information before using personal data for direct marketing. Unsubscribe and objection requests are free of charge.
10. Sharing and recipients
We may disclose personal data where necessary to hosting and IT providers, email/newsletter providers, payment processors, fraud and compliance providers, producers or fulfilment partners, warehouses, logistics providers, carriers, customs brokers, insurers, professional advisers, accountants, auditors and competent public authorities. We require service providers to process data under appropriate contractual, confidentiality and security obligations according to their role.
11. International transfers
MARRQ is operated from Italy and providers or recipients may be located in other countries. Where the GDPR applies, transfers outside the EEA use an available lawful mechanism such as an adequacy decision, Standard Contractual Clauses or another permitted safeguard. Where Japanese, Korean, Brazilian, Hong Kong, Argentine or other cross-border-transfer rules require notice, consent, contractual safeguards, transfer information or other measures, those measures will be applied before the relevant transfer where required.
12. Security and incidents
We use measures appropriate to the nature and risk of the data, including HTTPS where enabled by the host, restricted administration, password hashing, server-side validation, session protections, least-privilege access and provider controls. No internet service is risk-free. Where a personal-data breach triggers a statutory notification or reporting obligation, we will make the required notifications within the applicable legal timeframe.
13. Retention
Actual periods may be longer or shorter where a law, legal claim, regulatory request or demonstrable business need requires it. We do not retain personal data merely because it may be useful someday.
14. Your rights by region
15. Exercising privacy rights
Send requests to legal@monarcavino.com. Please identify the right you wish to exercise and the relevant account or relationship. We may request proportionate information to verify identity or authority. An authorized agent may act where applicable law permits. We will respond within the timeframe required by the law that applies to the request.
16. Minors
MARRQ is an alcohol brand and is not directed to minors. We do not knowingly seek member accounts, purchase applications or direct-marketing subscriptions from persons below the applicable legal drinking age. If we learn that data was collected from a minor contrary to law, we will take appropriate steps.
17. Third-party websites and resources
The site may load third-party resources or link to third-party services, including payment, map, font or corporate resources. Those parties may receive ordinary technical request data and operate under their own terms and privacy notices. We select providers with regard to privacy and security but do not control independent third-party processing.
18. Changes and contact
We may update this Policy to reflect legal, technical or operational changes. Material changes will be highlighted where required. Privacy contact: legal@monarcavino.com.
Language note. English is the controlling website version. Where law requires a local-language privacy notice or collection statement before processing in a market, that notice must be provided before the relevant processing is activated.