Privacy Policy

Scope

This Privacy Policy applies to personal information we collect through:

• Our website and related digital properties;
• Customer accounts;
• Checkout and order processing;
• Newsletter signup forms;
• Customer support communications; and
• Other interactions connected to Holy Grail Wine Company.

This Privacy Policy does not apply to third-party websites, platforms, or services that we do not control, even if they are linked from our Site.

Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

A. Identifiers and Contact Information

Examples include your name, email address, billing address, shipping address, phone number, account username, and similar contact details.

B. Account Information

Examples include login credentials, saved preferences, account settings, and records associated with your customer account or wine club membership.

C. Transaction and Commercial Information

Examples include order details, products viewed or purchased, cart activity, transaction history, payment status, refund or customer service records, and fulfillment-related details.

D. Payment Information

When you make a purchase, payment card and related payment information are processed by our third-party payment processor. We generally do not store full payment card numbers on our own systems.

E. Device, Usage, and Internet Activity Information

Examples include IP address, browser type, device identifiers, operating system, referring URLs, pages viewed, interactions with the Site, approximate location derived from IP, and cookie or similar technology data.

F. Communications and Support Information

Examples include the contents of messages you send to us, your support inquiries, survey responses, review submissions, and other records of communication.

G. Marketing Information

Examples include newsletter subscription status, email engagement data, and your marketing preferences.

H. Age-Gate Confirmation

If you access the Site through our age gate, we may record that you confirmed you are at least 21 years old, along with associated session or device information.

Sources of Personal Information

We may collect personal information:

• Directly from you, such as when you create an account, place an order, join our wine club, sign up for emails, or contact us;
• Automatically from your browser or device through cookies, logs, analytics, and security tools;
• From payment processors, ecommerce vendors, shipping partners, and other service providers that help us operate the Site and fulfill orders; and
• From other lawful sources as needed to protect our business, prevent fraud, or comply with legal obligations.

How we use personal information

We may use personal information for the following purposes:

• To provide and operate the Site;
• To create and manage accounts;
• To process, fulfill, and support orders;
• To communicate with you about your account, orders, wine club membership, or customer support requests;
• To send you newsletters and marketing emails you have requested or consented to receive;
• To personalize your experience and improve the Site;
• To measure performance and understand how the Site is used;
• To detect, investigate, and prevent fraud, abuse, security incidents, and other harmful activity;
• To enforce our Terms and other policies;
• To comply with legal, regulatory, tax, accounting, and reporting obligations; and
• To establish, exercise, or defend legal claims.

Cookies and Similar Technologies

We use cookies and similar technologies to operate the Site, remember preferences, maintain security, measure traffic, and support core ecommerce functionality.

At this time, the Site uses tools that may include:

• Google Analytics 4 for website analytics; and
• Google reCAPTCHA or similar tools for spam prevention and security.

We use Complianz to manage cookie notices and preferences. As a result:

• The specific cookies and similar technologies in use may be described dynamically in our cookie banner, cookie policy, or preference center;
• Cookie categories and provider details may change as tools are enabled, disabled, or updated; and
• Your non-essential cookie preferences may be managed through the Site’s consent tools where required by law.

You can also control certain cookies through your browser settings, though doing so may affect Site functionality.

Marketing Communications

If you subscribe to our newsletter or otherwise opt in to receive marketing emails, we may send you promotional communications about our products, content, and updates.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the message or contacting us at support@holygrailwine.com.

We do not currently send SMS marketing messages.

How We Disclose Personal Information

We may disclose personal information to the following categories of recipients:

• Service providers and processors that help us operate the Site and business, such as website hosting providers, ecommerce platforms, payment processors, email providers, analytics providers, security vendors, and customer support vendors;
• Order fulfillment and logistics partners, including carriers and vendors involved in shipping, delivery, tax, fraud prevention, and compliance;
• Professional advisors, such as lawyers, accountants, auditors, insurers, and consultants;
• Government authorities, regulators, law enforcement, or other third parties when required by law or when reasonably necessary to protect rights, safety, or property; and
• Parties involved in a business transaction, such as a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.

We may also disclose information at your direction or with your consent.

Sale or Sharing of Personal Information

We do not sell personal information for money.

However, some disclosures involving cookies, analytics, or similar technologies may be considered “sharing” or a “sale” under California privacy law, depending on how the law applies and how a particular technology operates.

You may have the right to opt out of such sale or sharing. You can do so by using available cookie or privacy controls on the Site or by contacting us at support@holygrailwine.com.

Sensitive Personal Information

We do not intentionally collect or use sensitive personal information for purposes that would require a separate “limit use” right beyond what is reasonably necessary to provide requested services, maintain security, process transactions, comply with law, or otherwise as permitted by applicable law.

Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain business records, comply with legal obligations, resolve disputes, and enforce agreements.

Our general retention approach is as follows:

• Order and transaction records: up to 7 years, or longer if required by law, tax, accounting, or compliance obligations;
• Customer support and contact inquiries: generally up to 2 years after the last interaction;
• Newsletter and marketing records: until you unsubscribe, withdraw consent, or request deletion, subject to records we may keep to maintain suppression lists and compliance records;
• Account information: while your account remains active and for a reasonable period afterward as needed for recordkeeping, fraud prevention, dispute resolution, and legal compliance; and
• Technical logs and analytics records: for as long as reasonably necessary for security, operations, and analytics purposes, subject to our vendors’ settings and legal requirements.

Retention periods may be longer where needed to comply with law, prevent fraud, enforce agreements, or defend legal claims.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No data transmission or storage system can be guaranteed to be 100% secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for using secure devices and networks when accessing the Site.

Children and Age Restrictions

The Site is intended only for individuals who are at least 21 years old. We do not knowingly market to, or intentionally collect personal information from, anyone under 21.

If you believe a person under 21 has provided us personal information, please contact us at support@holygrailwine.com so we can review and take appropriate action.

California Privacy Rights

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the rights to know and access personal information, correct inaccurate personal information, delete personal information, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive non-discriminatory treatment for exercising those rights. Covered businesses that sell or share personal information must also honor Global Privacy Control where applicable.

Subject to applicable law and verification requirements, California residents may request that we:

• Disclose the categories of personal information we collected about them;
• Disclose the categories of sources from which we collected personal information;
• Disclose the business or commercial purposes for collecting, using, disclosing, selling, or sharing personal information;
• Disclose the categories of third parties to whom we disclosed personal information;
• Provide access to specific pieces of personal information, where required;
• Correct inaccurate personal information;
• Delete personal information, subject to legal exceptions;
• Opt them out of the sale or sharing of personal information; and
• Limit certain uses of sensitive personal information, where applicable.

We will not discriminate against you for exercising applicable privacy rights.

How to Submit a Request

To submit a privacy request, contact us at:

support@holygrailwine.com

Please describe your request with enough detail for us to understand, evaluate, and respond to it. We may need to verify your identity before processing certain requests.

Authorized Agents

If permitted by law, you may designate an authorized agent to make a request on your behalf. We may require proof of the agent’s authority and may ask you to verify your identity directly.

Global Privacy Control

Where required by applicable law, we will process recognized Global Privacy Control (GPC) signals as requests to opt out of sale or sharing for the browser or device sending the signal.

Do Not Track

Some browsers offer a “Do Not Track” setting. Because there is not a universally accepted standard for responding to those signals, we do not respond to generic Do Not Track signals. However, we do recognize Global Privacy Control signals where required by law.

Third-Party Services

The Site may include or rely on third-party services, plugins, embedded content, or ecommerce tools. Those third parties may collect information according to their own privacy policies and terms. We encourage you to review those third-party policies.

International and Cross-Border Processing

We are based in the United States. Your information may be stored or processed in the United States or other jurisdictions where our service providers operate. By using the Site, you understand that your information may be transferred to and processed in jurisdictions that may have different data protection rules than your place of residence.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on the Site and revise the “Last Updated” date above. Your continued use of the Site after an updated Privacy Policy becomes effective means you acknowledge the revised policy.

Contact Us

If you have questions about this Privacy Policy or want to exercise privacy rights, contact us at:

• Veritas Imports
• 929 South Brand Blvd Glendale, CA 91204
• support@holygrailwine.com