Privacy Policy

Effective Date: September 16, 2026

Hawley Tasting Room & Gallery / Hawley Winery (“Hawley Winery,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what personal information we collect through hawleywine.com and our tasting rooms, how we use and share it, the tracking technologies and communication tools we use, and the choices and rights available to you, including under the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”) and the California Invasion of Privacy Act (“CIPA”).

1. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

•          Identifiers: name, email address, mailing address, phone number, date of birth (to verify legal drinking age), account username.

•          Commercial information: wine club membership details, orders, purchase history, reservations, and event or tour bookings.

•          Internet or other electronic network activity: browsing activity on our site, pages viewed, links clicked, approximate location inferred from IP address, and device/browser information, collected through cookies and similar technologies described in Section 4.

•          Communications: the content of messages you send us through our contact form, email, and the on-site chat/text (“Text Us”) feature, as described in Section 5.

•          Inferences: preferences and interests we infer from the above (for example, wine preferences) in order to personalize offers.

We do not intentionally collect Social Security numbers, financial account credentials, or precise geolocation. Payment card information submitted through our online store or ticketing partner (FareHarbor) is collected and processed directly by our payment processor / FareHarbor, not stored on our servers.

2. Sources of Personal Information

We collect personal information directly from you (forms, purchases, wine club sign-up, chat/text messages, in-person visits), automatically through your use of our website (cookies and similar technologies), and from service providers who help us operate our site and business (for example, our booking platform and chat provider).

3. How We Use Personal Information

•          To process orders, reservations, tastings, tours, and wine club memberships, and to verify you are of legal drinking age.

•          To respond to inquiries submitted through our contact form or chat/text feature.

•          To send marketing communications, newsletters, and event invitations, where you have signed up or as otherwise permitted by law, and to allow you to opt out at any time.

•          To maintain, secure, and improve our website and services, including fraud and bot prevention.

•          To measure the effectiveness of our advertising and marketing, including through analytics and advertising partners described below.

•          To comply with legal obligations, including alcohol beverage control and tax laws.

4. Cookies, Pixels, and Other Tracking Technologies

Our website uses cookies, pixels, tags, and similar technologies operated by us and by the third parties below. You can accept, decline, or manage non-essential cookies through the cookie banner displayed on our site, and through your browser settings.

Technology / Vendor

Purpose

How it works

Google Analytics / Google Ads (gtag.js, doubleclick.net)

Site analytics; ad conversion tracking & remarketing

Cookies, tags, pixels

Meta (Facebook) Pixel / Conversions API

Ad measurement & retargeting on Facebook/Instagram

Cookies, pixel, browser + server-side signals

RedChirp — “Text Us” chat/SMS widget

Live chat and text-message customer communication

Embedded widget; message content transmitted to RedChirp

FareHarbor

Tour, tasting, and falconry-experience booking & payment

Embedded booking iframe

Squarespace (site platform analytics “Census,” Visitor Sentry, cookie banner)

Built-in site analytics, error monitoring, cookie consent

Cookies, first-party scripts

Google reCAPTCHA Enterprise

Bot / fraud prevention on forms

Script, invisible challenge

 

Some of these technologies (in particular the Google and Meta advertising tags) allow those companies to receive information about your visit and may constitute a “sale” or “sharing” of personal information for cross-context behavioral advertising under the CPRA. See Section 8 for how to opt out.

5. Website Chat and Text Messaging Communications

Our website offers a “Text Us” chat feature, provided by our vendor RedChirp, that allows you to send us a message by chat or SMS text message. By starting a conversation through this feature, you acknowledge and agree that:

•          the content of your communication is transmitted to and may be stored by RedChirp on our behalf, solely to enable and improve our ability to respond to you;

•          we and RedChirp may record, log, or retain the conversation for customer service, quality assurance, training, and legal-compliance purposes; and

•          standard message and data rates may apply to text messages, and message frequency may vary.

If you do not agree to have your chat or text conversation recorded and shared with our chat vendor as described above, please contact us instead by phone or by email using the details in Section 12, rather than using the chat/text widget. You may opt out of future text messages at any time by replying “STOP,” or by asking a staff member to remove your number.

6. How We Share Personal Information

We do not sell your personal information for money. We do share personal information in the following ways:

•          Service providers: companies that perform services on our behalf, such as our website platform (Squarespace), booking and ticketing (FareHarbor), chat/text messaging (RedChirp), payment processing, email/newsletter delivery, and bot/fraud prevention (Google reCAPTCHA).

•          Advertising partners: Google and Meta (Facebook/Instagram), for analytics and to show you and similar audiences relevant advertising. Sharing information with these partners for cross-context behavioral advertising may be considered “sharing” under the CPRA — see Section 8 to opt out.

•          Legal and safety: when required by law, legal process, or to protect the rights, property, or safety of Hawley Winery, our guests, or others.

•          Business transfers: in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

7. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

•          Know what personal information we have collected, used, disclosed, and (where applicable) sold or shared about you in the past 12 months.

•          Delete personal information we have collected from you, subject to certain exceptions.

•          Correct inaccurate personal information we maintain about you.

•          Opt out of the “sale” or “sharing” of your personal information, including for cross-context behavioral advertising.

•          Limit the use of sensitive personal information, to the extent we collect it.

•          Not be discriminated against for exercising any of these rights.

To exercise your right to know, delete, or correct, contact us using the details in Section 12. We will verify your request using information you provide before responding, and you may designate an authorized agent to submit a request on your behalf.

8. Do Not Sell or Share My Personal Information / Your Privacy Choices

To opt out of the sharing of your information with advertising partners such as Google and Meta for cross-context behavioral advertising, click “Your Privacy Choices” in our website footer, use the cookie-management banner to decline non-essential/advertising cookies, or contact us using the details in Section 12. Where technically supported, we honor the Global Privacy Control (GPC) browser signal as a valid opt-out request for the browser and device sending it.

9. Do Not Track

Some browsers offer a “Do Not Track” signal. Because there is no common industry standard for responding to it, our site currently does not respond differently to Do Not Track signals; please use the cookie banner and opt-out options described above instead.

10. Data Retention

We retain personal information for as long as needed to provide our services, comply with legal, tax, and alcohol beverage control obligations, resolve disputes, and enforce our agreements, after which it is deleted or de-identified.

11. Age Restriction and Children’s Privacy

Our products and services relate to alcoholic beverages and are intended for individuals 21 years of age or older. We do not knowingly collect personal information from anyone under 21. If you believe a minor has provided us with personal information, please contact us so we can delete it.

12. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Effective Date” above reflects the date of the last revision. Material changes will be posted on this page.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

Hawley Winery / Hawley Tasting Room & Gallery

36 North Street, Healdsburg, CA 95448

Phone: (707) 431-2705

Or use the contact form at hawleywine.com/contact-us