Privacy policy
Last updated: 19 September 2026
Who we are
This website is operated by Lambouri Winery Ltd, trading as LionSpirit Winery & Distillery, registered in Cyprus under company number HE106014. Its registered office is Ag. Demetrius Str. 24A, Kato Platres, 4815 Limassol, Cyprus. Lambouri Winery Ltd is the data controller for the personal data described here.
For anything to do with your data, use our online enquiry form or call +357 25 42 2525.
What we collect, and why
We collect personal data when you send us a booking request, table reservation or enquiry through a form on this site, or by email or telephone. We also collect your name and email address if you separately choose to join our newsletter list.
For bookings and enquiries, that data is your name, email address, telephone number, the date, time and size of your booking, and anything you choose to write in the notes field — which may include dietary requirements or allergies. We use it to confirm and hold your booking, to reach you if something changes, and to prepare for your visit.
The legal basis is Article 6(1)(b) of the GDPR: taking steps at your request before entering into a contract, and performing that contract. Where you tell us about an allergy or a health-related dietary need, we rely on your explicit consent under Article 9(2)(a) — you give that consent by choosing to write it in the form, and you do not have to.
Newsletter consent
The newsletter choice is separate from your booking and is never required. If you tick the newsletter box, we record your name, email address, the date and source of your consent, and the version of the consent wording you accepted. We use this information to send occasional LionSpirit news, events and offers by email.
The legal basis is your consent under Article 6(1)(a) of the GDPR. You may withdraw that consent at any time through our online enquiry form, by calling +357 25 42 2525, or through the unsubscribe option included in every newsletter. Withdrawing consent does not affect your booking or the lawfulness of messages sent before you withdrew it.
Website statistics and age confirmation
After you confirm that you are 18 or over, we record broad website statistics to understand which pages people use and how they find us. Your browser sends the page name and, where available, only the domain name of the website that referred you. Our hosting network supplies an approximate country based on your connection. We store daily totals for pages, countries and referral sources; we do not store your IP address, full referring URL, search terms, exact location or a visitor identifier in these statistics.
We use these aggregate figures to improve the website, based on our legitimate interest under Article 6(1)(f) of the GDPR. Counts of visits are estimates, as we cannot recognise an individual across pages or visits. The statistics are accessible only to authorised Booking Desk users.
We set no advertising or analytics cookies. When you confirm that you are 18 or over, your browser stores that confirmation locally so the age question is not shown on every visit. It contains no name, contact detail or advertising identifier. There are no third-party analytics or social-media trackers.
Who else sees your data
Our website and booking-service providers process form submissions and standard security logs on our behalf. Our transactional email and mailbox providers transmit the booking and confirmation messages we send and receive. These providers act only as necessary to supply their services to us.
We do not sell your data, and we do not share it with anyone else unless the law requires it.
How long we keep it
We keep booking, reservation and enquiry records only for as long as they are needed to manage your visit, answer the enquiry, resolve a dispute or meet a legal obligation. Where accounting or tax law in Cyprus requires us to keep a transaction record, we retain it for the period required by law and no longer.
Newsletter subscriber details are kept while you remain subscribed. If you withdraw consent, we stop using your details for newsletters and retain only the minimum record needed to respect your opt-out and demonstrate that it has been actioned.
Your rights
You can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict how we use it, or object to our using it. You can also ask us to send it to you or to someone else in a portable format, and you may withdraw newsletter consent at any time. Use our online enquiry form and we will respond within one month.
If you are not satisfied with how we have handled your data, you can complain to the Office of the Commissioner for Personal Data Protection, 15 Kypranoros Street, 1061 Nicosia, Cyprus.
Children
This site is intended for people of legal drinking age. We do not knowingly collect data from anyone under 18.
Changes
If we change this policy we will update the date at the top. Material changes will be noted on this page.