Privacy Policy

Effective Date: March 2026
Last Updated: March 2026

1. Introduction

Portalupi Wine Company ("Portalupi," "we," "us," or "our") is a family-owned and operated winery founded in 2002, with our tasting room located at 107 North Street, Healdsburg, California 95448. We are committed to protecting your privacy and handling your personal information with care and transparency.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at portalupiwine.com, purchase wines, book a tasting experience, join our wine club, or otherwise interact with us online or in person.

By using our website or services, you agree to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information you voluntarily provide to us, including:

• Name, email address, phone number, and mailing or billing address (when creating an account, joining the wine club, booking a tasting, or making a purchase)
• Date of birth or age verification information (required by law for the purchase and shipment of alcoholic beverages)
• Payment information such as credit or debit card details (processed securely through our third-party payment processor; we do not store full card numbers)
• Wine preferences, tasting notes, or other information you choose to share with us
• Communications you send us by email, phone, or through our website contact forms

2.2 Information Collected Automatically

When you visit our website, we and our third-party service providers may automatically collect:

• Device and browser information (browser type, operating system, device identifiers)
• Usage data (pages visited, time spent on site, links clicked, referring URLs)
• IP address and approximate geographic location
• Cookies and similar tracking technologies (see Section 6 for more detail)

2.3 Information from Third Parties

We may receive information about you from third-party sources, such as social media platforms if you interact with our content or pages, or from analytics and advertising partners.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To process and fulfill orders, including wine shipments and tasting reservations
• To manage your wine club membership and deliver member benefits, shipments, and communications
• To communicate with you about your orders, bookings, and account activity
• To send you newsletters, new release announcements, event invitations, and other marketing communications (with your consent where required)
• To verify your age as required by California and federal law for the sale and shipment of alcohol
• To improve our website, products, and guest experiences
• To comply with legal obligations, including those under California Alcoholic Beverage Control regulations
• To detect, prevent, and address fraud, security issues, or violations of our terms

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We work with trusted third-party vendors who help us operate our business, including payment processors, email marketing platforms, shipping carriers (for direct-to-consumer wine shipments), reservation and booking systems, and website analytics providers. These parties are contractually required to protect your information and may only use it to perform services on our behalf.

4.2 Legal Compliance

We may disclose your information if required by law, regulation, subpoena, court order, or government authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our business assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website of any such change and any choices you may have regarding your information.

5. California Privacy Rights (CCPA / CPRA)

As a California-based business serving California residents, we are subject to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). California residents have the following rights:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of collection, and the purposes for which it is used or shared.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain legal exceptions.
• Right to Correct: You may request correction of inaccurate personal information we hold about you.
• Right to Opt-Out of Sale or Sharing: We do not sell your personal information or share it for cross-context behavioral advertising purposes.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to what is necessary to perform our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To submit a verified request, please contact us using the information in Section 10. We will respond within 45 days as required by California law, with a possible extension of an additional 45 days when reasonably necessary.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze site traffic, and support our marketing efforts. The types of cookies we use include:

• Essential cookies: Required for the website to function properly, including shopping cart functionality and session management
• Analytics cookies: Help us understand how visitors interact with our site (e.g., Google Analytics)
• Marketing cookies: Used to deliver relevant content and measure the effectiveness of our campaigns

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may limit the functionality of our website. California residents may also use a Global Privacy Control (GPC) browser signal to opt out of certain data sharing, which we will honor as required by the CPRA.

7. Email Marketing

If you join our wine club, subscribe to our mailing list, or opt in at the time of purchase or booking, we will send you emails about new releases, upcoming events, promotions, and winery news. You may unsubscribe at any time by clicking the "Unsubscribe" link in any email or by contacting us directly. We comply with the federal CAN-SPAM Act and all applicable email marketing regulations.

8. Age Verification and Minors

Portalupi Wine sells and ships alcoholic beverages. Our website and services are intended solely for individuals who are 21 years of age or older. We do not knowingly collect personal information from individuals under the age of 21. By using our website, placing an order, or booking a tasting, you confirm that you are of legal drinking age in your jurisdiction.

If we become aware that we have inadvertently collected information from someone under the age of 21, we will promptly delete that information from our records.

9. Data Security

We take the security of your personal information seriously and implement reasonable administrative, technical, and physical safeguards to protect against unauthorized access, disclosure, alteration, or destruction. All payment transactions on our website are encrypted using SSL/TLS technology and processed through PCI-compliant payment processors.

However, no method of data transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security and encourage you to use strong passwords and be cautious when sharing personal information online.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with our legal obligations (including California Alcoholic Beverage Control record-keeping requirements), resolve disputes, and enforce our agreements. When your information is no longer required for these purposes, we will securely delete or anonymize it.

11. Third-Party Links

Our website may include links to third-party websites, including reservation platforms, social media channels, and partner businesses. We are not responsible for the privacy practices or content of those external sites and encourage you to review their individual privacy policies before providing any personal information.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us: