This Privacy Policy explains how we collect, use, share and protect personal information about California residents. It incorporates the requirements of the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). It applies to information collected online and offline and supplements any notice provided at the time of collection.

1. Categories of Personal Information Collected

Within the last 12 months we have collected the following categories of personal information:

Identifiers: name, postal address, email, telephone number and other contact details.
Commercial information: records of products or services purchased (vessels), purchase histories, billing and shipping information, and order preferences.
Internet activity: interactions with our Site, device identifiers and IP addresses.
Geolocation data: general location derived from IP address or shipping address.
Audio/visual information: customer service recordings or images you provide.
Inferences: preferences inferred from your interactions, used to tailor marketing.
Sensitive personal information: if you purchase alcoholic beverages, we may collect date of birth or driver’s license number solely to verify age; this information is used only for verification and fraud prevention and is not sold or sharedsecureprivacy.ai.

2. Sources of Personal Information

We collect personal information:

Directly from you when you create an account, purchase vessels, request customer support, or submit an order for alcoholic beverages (which is forwarded to the licensed retailer).
Automatically through cookies and similar technologies when you browse our Site.
From service providers and partners, such as payment processors, shipping carriers, age-verification vendors and analytics providerssecureprivacy.ai. When you order alcohol, we share necessary information with the licensed retailer to process your order.

3. Purposes for Collection and Use

We use personal information for the following purposes:

Process and fulfill orders for our vessels: Identifiers, commercial information.
Transmit alcohol orders to licensed retailers:Identifiers, age information, payment details (on behalf of the retailer).
Age verification and fraud prevention: Date of birth, driver’s license number, IP address.
Customer service and account management: Contact details, purchase history, communications.
Shipping and logistics for our vessels: Name, address, phone number, order details.
Marketing and promotions (with opt-out options): Email address, browsing data, purchase history.
Analytics and website improvement: IP address, browsing data, inferences.
Legal compliance and record-keeping: Order records and age-verification records, retained for at least two yearssovos.com

4. Categories of Third Parties Receiving Data

We disclose personal information to the following categories of third partiessecureprivacy.ai:

Service providers: payment processors, order management vendors, customer support providers and cloud hosting services.
Licensed retailers: we share information necessary to process your alcohol order; the retailer may use this information to fulfil the order and comply with legal obligations.
Shipping carriers: to deliver our products and, where applicable, alcoholic beverages; carriers must obtain adult signatures and verify ageabc.ca.gov.
Analytics and advertising partners: to improve our Site and deliver marketing; this may constitute “sharing” under the CPRAsecureprivacy.ai.
Professional advisors and government authorities: to comply with law or protect rights and safety.

5. Sale or Sharing of Personal Information

We do not sell personal information for monetary consideration. We may share identifiers and browsing data with advertising partners for cross-context behavioral advertising, which may be considered “sharing” under the CPRAsecureprivacy.ai. You may opt out of such sharing as described below.

6. Use and Disclosure of Sensitive Personal Information

We collect sensitive personal information (e.g., driver’s license numbers) only for age verification when you order alcoholic beverages. We do not use or disclose sensitive information for purposes unrelated to verification or fraud preventionsecureprivacy.ai.

7. Data Retention

We retain personal information as long as necessary to fulfil the purposes described above, to comply with legal obligations, and to enforce our agreements. Records of orders and age verification are retained for at least two years (often three to four years) to satisfy audit and regulatory requirementssovos.com. We securely delete or de-identify information when it is no longer needed.

8. Your Rights Under the CCPA/CPRA

California residents have rights to know, delete, correct and limit the use of personal information, to opt out of sale or sharing, and to be free from discriminationoag.ca.gov oag.ca.gov. You may exercise these rights by submitting a request via our online form, calling our toll-free number or emailing us. We will verify your identity before responding. We honour Global Privacy Control signals and provide a “Do Not Sell or Share My Personal Information” link on our homepagesecureprivacy.ai. We will not discriminate against you for exercising your rightssecureprivacy.ai.

9. Policy Updates

We may update this Policy to reflect changes in our practices or legal requirements. We will post the effective date and last updated date at the top of the Policy and provide notice of material changes. The CPRA requires annual updates and record-keepingsecureprivacy.ai.

10. Contact Information

For questions or to exercise your privacy rights, please contact us using the methods listed on our Site.