Privacy
Policy

Effective Date: September 16, 2025

Vine Cliff 1871 ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website www.vinecliff1871.com (the "Site"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Site.

  1. DATA CONTROLLER
    For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws:

    Data Controller:
    Vine Cliff 1871
    PO BOX 59
    Napa, CA 94559
    United States

    Contact Information:
    Email: info@vinecliff1871.com
    Phone: +1-707-944-1364

    Privacy Contact:
    If you have questions about this Privacy Policy or our data practices, please contact us at: info@vinecliff1871.com.
  2. INFORMATION WE COLLECT

    Personal Information You Provide
    We may collect personal information that you voluntarily provide when you:

    • Join our mailing list or wine club
    • Make a purchase or place an order
    • Book a tasting or experience
    • Contact us with inquiries
    • Create an account
    • Participate in surveys or promotions


    This information may include:

    • Name and contact information (email address, phone number, mailing address)
    • Date of birth (for age verification)
    • Payment information (credit card numbers, billing address)
    • Shipping information
    • Purchase history and preferences
    • Communications with us


    Information Automatically Collected
    When you access our Site, we may automatically collect:

    • IP address
    • Browser type and version
    • Operating system
    • Referring website
    • Pages visited and time spent on pages
    • Click-through rates
    • Date and time of visit
    • Device information

  3. AGE REQUIREMENT
    Our Site is intended for individuals 21 years of age or older. We do not knowingly collect personal information from anyone under the age of 21. If we learn that we have collected personal information from a person under age 21, we will delete that information as quickly as possible.
  4. HOW WE USE YOUR INFORMATION
    We may use the information we collect from you to:

    • Process and fulfill your orders
    • Send you order confirmations and shipping notifications
    • Verify your age and identity
    • Send marketing communications (with your consent)
    • Respond to your inquiries and provide customer service
    • Personalize your experience on our Site
    • Improve our Site and offerings
    • Comply with legal obligations
    • Prevent fraud and enhance security
    • Administer contests, promotions, and surveys

  5. LEGAL BASIS FOR PROCESSING (GDPR)
    For users in the EU, EEA, and UK, we process your personal information based on the following legal grounds under GDPR:

    Consent
    We process your personal information based on your consent when you:

    • Subscribe to marketing communications
    • Join our waitlist
    • Participate in surveys or promotions


    You may withdraw your consent at any time by clicking "unsubscribe" in our emails or contacting us at info@vinecliff1871.com.

    Contractual Necessity
    We process your personal information to fulfill our contract with you when you:

    • Place an order
    • Book a tasting or experience
    • Join our wine club


    Performance of Contract is necessary to provide you with the products and services you have requested.

    Legal Obligation
    We process your personal information to comply with legal obligations, including:

    • Age verification (required by law for alcohol sales)
    • Tax and accounting requirements
    • Responding to law enforcement requests


    Legitimate Interests
    We process your personal information based on our legitimate interests when we:

    • Prevent fraud and enhance security
    • Improve our website and services
    • Conduct analytics to understand user behavior
    • Protect our rights and property


    We have assessed that these legitimate interests are not overridden by your rights and freedoms.

  6. HOW WE SHARE YOUR INFORMATION

    Service Providers
    We may share your information with third-party service providers who perform services on our behalf, including:

    • Payment processing
    • Shipping and fulfillment
    • Email delivery
    • Marketing services
    • Analytics
    • Customer service


    Legal Requirements
    We may disclose your information where required by law or subpoena or if we believe such action is necessary to:

    • Comply with the law and reasonable requests of law enforcement
    • Protect our rights, property, or safety
    • Prevent fraud or cybersecurity incidents
    • Protect the rights, property, or safety of our users or others


    Business Transfers
    If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

    With Your Consent
    We may share your information for other purposes with your consent.

  7. CALIFORNIA RESIDENTS - YOUR RIGHTS UNDER CCPA
    If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

    Right to Know
    You have the right to request that we disclose:

    • The categories of personal information we collect
    • The sources of personal information
    • Our business purpose for collecting personal information
    • The categories of third parties with whom we share personal information
    • The specific pieces of personal information we have collected about you


    Right to Delete
    You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.

    Right to Opt-Out
    You have the right to opt-out of the sale of your personal information. We do not sell personal information.

    Right to Non-Discrimination
    We will not discriminate against you for exercising any of your CCPA rights.

    To exercise these rights, please contact us at:

    Vine Cliff 1871
    PO BOX 59
    Napa, CA 94559
    Email: info@vinecliff1871.com
    Phone: +1-707-944-1364

  8. EUROPEAN UNION, EEA, AND UK RESIDENTS - YOUR GDPR RIGHTS
    If you are located in the European Union, European Economic Area, or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:

    Right to Access
    You have the right to request a copy of the personal information we hold about you.

    Right to Rectification
    You have the right to request that we correct any inaccurate personal information or complete any incomplete personal information.

    Right to Erasure ("Right to be Forgotten")
    You have the right to request that we delete your personal information under certain circumstances, such as when:

    • The data is no longer necessary for the purposes for which it was collected
    • You withdraw consent (where processing is based on consent)
    • You object to processing and there are no overriding legitimate grounds
    • The data has been unlawfully processed


    Right to Restrict Processing
    You have the right to request that we restrict the processing of your personal information under certain circumstances, such as when you contest the accuracy of the data or object to processing.

    Right to Data Portability
    You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller.

    Right to Object
    You have the right to object to our processing of your personal information based on legitimate interests, including for direct marketing purposes.

    Right to Withdraw Consent
    Where we process your personal information based on consent, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

    Right to Lodge a Complaint
    You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

    To exercise any of these rights, please contact us at:

    Email: info@vinecliff1871.com
    Phone: +1-707-944-1364
    Address: Vine Cliff 1871, PO BOX 59, Napa, CA 94559

    We will respond to your request within one month. In some cases, we may extend this period by two additional months where necessary, taking into account the complexity and number of requests.

  9. DO NOT TRACK SIGNALS
    We do not currently respond to Do Not Track signals.
  10. COOKIES AND TRACKING TECHNOLOGIES
    We use cookies and similar tracking technologies to track activity on our Site and hold certain information. Cookies are files with small amounts of data which may include an anonymous unique identifier.

    You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site.

    Types of Cookies We Use:

    • Essential Cookies: Required for the Site to function properly
    • Analytics Cookies: Help us understand how visitors interact with our Site
    • Marketing Cookies: Used to deliver relevant advertisements

  11. DATA SECURITY
    We use administrative, technical, and physical safeguards designed to protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable.
  12. DATA RETENTION
    We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

    Specific Retention Periods:

    Order and Transaction Data: 7 years
    We retain order information, transaction records, and related data for seven years to comply with tax and accounting requirements.

    Marketing Consent Records: Until withdrawal + 3 years
    We retain records of your marketing consent until you withdraw consent, plus an additional three years to demonstrate compliance with applicable laws.

    Customer Account Information: Duration of relationship + 3 years
    We retain account information for the duration of your customer relationship, plus three years after account closure or last activity.

    Analytics and Cookie Data: 26 months
    We retain website analytics data for up to 26 months in accordance with industry best practices.

    Communication Records: 3 years
    We retain email correspondence and customer service communications for three years to maintain service quality and resolve disputes.

    Age Verification Records: 3 years
    We retain age verification records for three years to demonstrate compliance with alcohol sale regulations.

    When we no longer need your personal information, we will securely delete or anonymize it in accordance with our data retention and destruction policies.
  13. THIRD-PARTY WEBSITES
    Our Site may contain links to third-party websites. We are not responsible for the privacy practices of these other sites. We encourage you to read the privacy policies of any third-party sites you visit.
  14. MARKETING COMMUNICATIONS
    You may opt out of receiving marketing emails from us by following the unsubscribe instructions in those emails or by contacting us. Even if you opt out of marketing emails, we may still send you non-promotional emails, such as those about your account or our ongoing business relations.
  15. CHILDREN'S PRIVACY
    Our Site is not intended for children under 21 years of age. We do not knowingly collect personal information from children under 21.
  16. INTERNATIONAL USERS AND DATA TRANSFERS
    If you are accessing our Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

    For Users in the EU, EEA, and UK:
    The United States does not have the same data protection laws as the European Union, EEA, or United Kingdom. However, we are committed to protecting your personal information regardless of where it is processed.

    When we transfer your personal information from the EU, EEA, or UK to the United States, we rely on the following safeguards:

    Standard Contractual Clauses (SCCs)
    We use Standard Contractual Clauses approved by the European Commission to ensure your personal information receives an adequate level of protection when transferred outside the EU/EEA/UK.

    Data Processing Agreements
    We require all third-party service providers who process personal information on our behalf to enter into data processing agreements that include appropriate security measures and GDPR-compliant terms.

    Additional Security Measures
    We implement technical and organizational measures to protect your personal information, including encryption, access controls, and regular security assessments.

    By using our Site and providing your personal information, you acknowledge and consent to such transfers. If you do not wish for your information to be transferred outside your country, please do not use our Site or provide your personal information.
  17. CHANGES TO THIS PRIVACY POLICY
    We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this Privacy Policy.

    You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
  18. CONTACT US
    If you have questions or comments about this Privacy Policy, please contact us at:

    Vine Cliff 1871
    Attn: Privacy Policy
    PO BOX 59
    Napa, CA 94559

    Email: info@vinecliff1871.com
    Phone: +1-707-944-1364
  19. CALIFORNIA PRIVACY RIGHTS
    California Civil Code Section 1798.83 permits users of our Site that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us using the information above.