Amista Vineyards Privacy Policy

Last Modified: June 30, 2025

This Privacy Policy describes Amista Vineyards’ policies and procedures on the collection, use, and disclosure of Your information when You use our services. It also informs You about Your privacy rights and how the law protects You.

At Amista Vineyards, we are deeply committed to protecting your privacy. This Privacy Policy applies when you visit our website, www.amistavineyards.com, and when you make a purchase from us, participate in a sales or marketing promotion, subscribe to any of our mailing lists, newsletters, or wine club programs, request a tasting, sign up for any of our events, or otherwise interact with us.

We refer to these interactions and offerings collectively as the “Services.”

Not Directed To Individuals Under The Legal Drinking Age

Our Site and Services are not intended for, nor directed at, individuals under the legal drinking age of 21. We do not seek or knowingly collect any Personal Information (as defined below) from or about individuals under the age of 21. If we become aware that we have unknowingly collected Personal Information from an individual under the legal drinking age, we will make commercially reasonable efforts to promptly delete such information from our databases.

Personal Information We Collect

While using Our Services, we may collect various types of information that identify, relate to, describe, are reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“Personal Information“).

Categories of Personal Information We Collect:

The Personal Information we collect generally falls into the following categories:

• Identifiers: Such as your real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, phone number, date of birth, driver’s license number (for age verification/shipping), or other similar identifiers.
• Customer Records Information (Cal. Civ. Code § 1798.80(e)): Name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. (Note: We primarily collect name, address, phone, and payment info.)
• Commercial Information: Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies (e.g., wine club preferences, past orders).
• Internet or Other Electronic Network Activity Information: Browse history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement (e.g., pages visited, links clicked, non-sensitive text entered, mouse movements, referring URL, browser, operating system).
• Geolocation Data: Approximate geographic region and Internet Service Provider based on your IP address. We do not collect precise geolocation.
• Inferences: Derived from other personal information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes (e.g., product recommendations based on past purchases).

We refer to information about your use of the Site collected automatically as “Usage Data.” While some Usage Data may constitute Personal Information (like IP addresses), we generally use this data to understand how our visitors use the Site and improve your experience.

Sources of Personal Information

We collect Personal Information from the following sources:

• Directly from You: When you provide it to us through our website, during a purchase, when you sign up for our wine club or mailing lists, attend an event, or contact us directly via phone, email, or in person.
• Through Automated Means: As you navigate and interact with our Services, we (and our service providers) automatically collect certain information about your equipment, Browse actions, and patterns using cookies, web beacons, and other tracking technologies.
• From Third Parties: We may receive information from third-party service providers (e.g., payment processors, shipping carriers) necessary to fulfill your orders or provide our Services.

How We Use Your Personal Information

We collect and use your Personal Information to provide and improve our Services, to fulfill our contractual obligations, for our legitimate business interests, and to comply with legal requirements. Our specific purposes include:

• Performing Services & Fulfilling Orders: To process your transactions, maintain and service your account(s), schedule tastings, manage your wine club membership, process returns, and facilitate shipping and delivery.
• Communication: To communicate with you about your orders, respond to your inquiries, send you administrative notices, and inform you about changes to our Sites or Services.
• Marketing and Personalization: To notify you of new wines and releases, special offers, and events we think you will find valuable or of interest. This may include customizing our Services and offerings based on your purchasing history and preferences.
• Service Improvement: To operate, maintain, improve, and customize our Sites and Services, for example, by conducting analytics and understanding how our services are used.
• Security & Fraud Prevention: To detect, prevent, and respond to potential fraud, unauthorized access, or other illegal activities.
• Legal Compliance: To comply with legal or regulatory obligations, respond to law enforcement requests, court orders, and legal investigations.
• Business Operations: For our everyday business purposes such as managing records, auditing our processes, and administering our business.

We may also use your Personal Information for other purposes for which we provide specific notice at the time of collection, or with your consent.

How We Disclose Your Personal Information

We may disclose your Personal Information to third parties for business purposes. When we disclose Personal Information for a business purpose, we enter into a contract that describes the purpose and requires the recipient to keep that Personal Information confidential and not use it for any purpose except performing the contract.

We may disclose your Personal Information in the following situations:

• With Service Providers: We share your Personal Information with third-party companies that perform services on our behalf (e.g., payment processing, shipping carriers, website hosting, analytics providers like Google Analytics, marketing services, IT support). These service providers are contractually obligated to protect your data and only use it for the purposes for which we disclose it to them.
• For Business Transfers: We may share or transfer your Personal Information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• With Affiliates: We may share your information with our affiliates, subsidiaries, joint venture partners, or other companies that we control or that are under common control with us. In such cases, we will require those affiliates to honor this Privacy Policy.
• With Business Partners: We may share your information with our business partners to offer you certain products, services, or promotions that may be of interest to you.
• With Other Users (Public Areas): If you interact in public areas of our Services (e.g., product reviews, comments), any information you share may be viewed by other users and may be publicly distributed. If you interact or register through a Third-Party Social Media Service, your contacts on that service may see your name, profile, pictures, and description of your activity.
• Legal Obligations and Protection: When we believe it is necessary to comply with a legal obligation, enforce our terms and conditions, or protect the rights, property, or safety of Amista Vineyards, our customers, or others.

We do not “sell” or “share” your Personal Information in exchange for monetary compensation. However, under California law (CPRA), “sharing” can include disclosures for cross-context behavioral advertising (e.g., targeted advertising across different websites). While we aim to minimize such sharing, some third-party analytics and advertising partners, through their use of cookies and other technologies, may receive information that could be considered “sharing” for cross-context behavioral advertising purposes. We provide opt-out mechanisms below.

Cookies and Related Technologies

As part of our ongoing efforts to ensure the best possible experience for all users of our Sites, we may use “cookies” and related technologies, such as tags, SDKs, tracking pixels, and other similar technologies, to collect the information described under “Internet or Other Electronic Network Activity Information.” “Cookies” are small pieces of data stored by your browser on your computer’s hard drive. Cookies enable us to provide special features such as storing items in your shopping cart between visits, tailoring products or services offered to you based on past preferences or geographic location, and remembering your preferences.

Most web browsers automatically accept cookies but allow you to turn off cookies as part of the browser options. Even without cookies, you can still use most of the features of our Sites, but you may be unable to place items in your shopping cart or make purchases, and your site experience may be less personalized.

We may use third-party web analytics services (such as Google Analytics) on our Services to collect and analyze usage information through cookies and similar tools; engage in auditing, research, or reporting; assist with fraud prevention; and provide certain features to you. To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-out Browser Add-on by clicking here.

Advertising and Third-Party Data Collection

We may partner with third-party advertising companies to drive traffic to and serve ads on our Sites, or manage our advertisements on other sites. These third-party companies may also collect information through the use of their own cookies, web beacons, and other technologies to measure the effectiveness of their ads and to personalize advertising content. We do not have access to or control over cookies or other features used by these advertisers, and their information practices are not covered by this Privacy Policy. Please contact them directly for more information about their privacy practices.

In addition, the Network Advertising Initiative offers useful information about Internet advertising companies (also called “ad networks” or “network advertisers”), including information about how to opt-out of their information collection, here.

Notice Concerning Do Not Track

Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. While we are committed to providing you with meaningful choices about the information collected on our website for third-party purposes, and that is why we provide the variety of opt-out mechanisms listed above, we do not currently recognize or respond to browser-initiated DNT signals. To learn more about Do Not Track, you can do so here.

Your Privacy Rights (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights regarding your Personal Information. These rights include:

• Right to Know: You have the right to request that we disclose to you the categories and specific pieces of Personal Information we have collected about you, the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom we disclose Personal Information, and the categories of Personal Information that we have “sold” or “shared” (as defined by CPRA) or disclosed for a business purpose.
• Right to Delete: You have the right to request the deletion of Personal Information that we have collected from you, subject to certain exceptions allowed by law (e.g., to complete a transaction, comply with a legal obligation).
• Right to Correct Inaccurate Personal Information: You have the right to request the correction of inaccurate Personal Information about you.
• Right to Opt-Out of the Sale or Sharing of Personal Information: You have the right to direct us not to “sell” or “share” your Personal Information (which includes sharing for cross-context behavioral advertising).
• Right to Limit the Use and Disclosure of Sensitive Personal Information (SPI): While we do not collect Sensitive Personal Information that would require this right (such as precise geolocation or health information), if our practices change, you would have the right to limit its use and disclosure.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. This means we will not deny you goods or services, charge you different prices or rates, or provide a different level or quality of goods or services because you exercised these rights. However, we may offer a different price or rate or provide a different level or quality of goods or services when that difference is reasonably related to the value provided to us by your data.

How to Exercise Your California Privacy Rights

To exercise your Right to Know, Delete, Correct, or Opt-Out of Sale/Sharing, please submit a verifiable consumer request to us by:

1. Phone Number: Call us at 707.431.9200
2. Email: Send an email to Friends@amistavineyards.com with “California Privacy Request” in the subject line.
3. Web Form (Recommended): CONTACT US

Verifiable Consumer Request: Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child.

We will verify your request by asking you to provide information that matches the Personal Information we have on file about you. This may include your name, email address, phone number, and postal address. We may also ask for additional information or documentation depending on the nature of the request. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.

Do Not Sell or Share My Personal Information

As stated, we do not “sell” your Personal Information in the traditional sense for monetary compensation. However, some sharing of data for cross-context behavioral advertising (e.g., through certain cookies and tracking technologies used by third-party advertisers) may be considered “sharing” under California law.

To opt-out of the “sharing” of your Personal Information for cross-context behavioral advertising, you can:

• Visit our “Do Not Sell or Share My Personal Information” page: [Link to your dedicated “Do Not Sell or Share” page on your website, if you create one. This is highly recommended by CPRA.]
• Email: Send an email to Friends@amistavineyards.com with the subject line “Do Not Sell or Share My Personal Information.”
• Adjust Cookie Preferences: You can also manage your cookie preferences directly through your browser settings or by utilizing any cookie consent tool we provide on our website.

Other California Privacy Rights (Shine the Light)

In addition to the rights already described, California’s “Shine the Light” law (Civil Code Section § 1798.83) permits customers in California to request certain details about how their information is shared with third parties and, in some cases, affiliates, for those third parties’ and affiliates’ own direct marketing purposes.

We may from time to time elect to share certain information about you collected by us on the Service with third parties or affiliates for those third parties’ or affiliates’ own direct marketing purposes. If you are a California resident, you may opt out of such future sharing of your personal information (as defined by the California Shine the Light Act) by contacting us at Friends@amistavineyards.com with the phrase “Do Not Share” in the subject line. You may also send a postcard to Amista Vineyards, 3310 Dry Creek Road, Healdsburg, CA 95448.

Data Security

We implement reasonable administrative, technical, and physical measures designed to protect the Personal Information we collect from unauthorized access, use, alteration, and disclosure. However, no internet transmission or electronic storage system can be guaranteed to be 100% secure. Therefore, we cannot guarantee the absolute security of your Personal Information.

Data Retention

We retain Personal Information pursuant to our records retention program, for as long as is necessary for the purposes set out in this Privacy Policy, unless a longer period is required or permitted by applicable law (e.g., for legal, accounting, or reporting requirements), or is needed to resolve disputes or protect our legal rights.

The criteria used to determine the period for which Personal Information about you will be stored varies depending on why we process such Personal Information:

• Legitimate Business Interests: For a reasonable period of time based on the particular interest, taking into account the fundamental interests and the rights and freedoms of the data subjects.
• Contractual Necessity: For the duration of the contract plus some additional limited period of time that is necessary to comply with law or that represents the limitation period for legal claims that could arise from the contractual relationship.
• Legal Obligation: For the duration of time we are legally obligated to keep the information.
• Consent: For the period of time necessary to fulfill the underlying agreement with you, subject to your right, under certain circumstances, to have certain Personal Information about you erased (see Your Privacy Rights).

In the event of a threat of a legal claim, we may need to apply a “legal hold” that retains information beyond our typical retention period. In that case, we will retain the information until the hold is removed, which typically means the claim or threat of claim has been resolved.

Links to Other Sites

Occasionally we provide links to other websites for your convenience and information. These sites operate independently from our Sites and are not under our control. These sites may have their own privacy notices or terms of use, which you should review if you visit any sites linked through our Sites. We are not responsible for the content or privacy practices of these unrelated sites.

Updates To This Policy

The terms of this Privacy Policy may change from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes to this Privacy Policy by changing the “Last Modified” date at the top of this Privacy Policy and, if appropriate, by sending you an email notification or posting a prominent notice on our website. We encourage you to check this page periodically for any changes. Your continued use of this Site following the posting of changes to this Privacy Policy will mean you accept those changes.

Governing Law and International Users

This Privacy Policy and our privacy practices will be subject exclusively to the laws of the State of California within the United States of America. We make no representation that this Privacy Policy and such practices comply with the laws of any other country.

Visitors who use this Site and reside outside the United States do so on their own initiative and are responsible for compliance with local laws, if and to the extent local laws are applicable. If you reside outside of the United States, by using our Site, you consent to the transfer and use of your information outside your country, including to the United States, where data protection laws may differ from those in your jurisdiction.

Individuals With Disabilities

If you have a disability and would like to access this Privacy Policy in a different format, you may contact us at Friends@amistavineyards.com  with the phrase “Alternative Format Privacy Policy” in the subject line.

Contact Us

For any questions regarding this Privacy Policy or our privacy practices, or to exercise your privacy rights, please contact us at:

Amista Vineyards Email: Friends@amistavineyards.com Phone: 707.431.9200 Postal Address: 3320 Dry Creek Road, Healdsburg, CA 95448