Privacy Policy

Effective Date: October 16, 2026

GrapeHeart Vineyards (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit GrapeHeartVineyards.com (the “Website”), contact us, subscribe to our emails, or purchase wine through our Website.

We aim to collect only the information reasonably necessary to operate our business, fulfill orders, communicate with customers, and maintain the Website.

1. Information We Collect

The information we collect depends on how you interact with our Website.

Information You Provide

You may voluntarily provide personal information when you contact us, subscribe to our newsletter, place an order, request information about our vineyard, wines, products, or events, or communicate with us about an order.

This information may include your name, email address, telephone number, billing and shipping address, order details, and messages you send us.

Please do not submit sensitive or confidential personal information through general contact forms.

Information Collected Automatically

Our hosting provider, WordPress environment, and certain website services may process limited technical information necessary to operate and secure the Website. Depending on the services used and their configuration, this information may include your IP address, browser type, device information, operating system, dates and times of access, and technical information related to website security or error diagnosis.

Google Analytics is installed on the Website but is not currently configured to record website analytics data. We do not currently use Google Analytics to actively analyze visitor behavior or build visitor profiles.

Jetpack is also installed on the Website. We do not currently use Jetpack for active visitor analytics or behavioral profiling. Certain Jetpack features or other website components may nevertheless process technical information as necessary for their operation.

Age Verification Information

The Website uses the Age Gate plugin to present an age-verification prompt before access to designated wine-related content. Depending on its configuration, Age Gate may use cookies or similar browser storage to remember whether a visitor has completed the age prompt.

The age gate should not be understood as independent verification of a visitor’s identity or legal eligibility to purchase or receive alcohol.

2. How We Use Information

We may use personal information to:

  • Process and fulfill wine orders.
  • Coordinate payment, shipping, delivery, returns, and customer service.
  • Respond to questions and other communications.
  • Send promotional emails where permitted by law and consistent with your preferences.
  • Maintain, operate, and secure the Website.
  • Remember age-gate completion and website preferences.
  • Detect fraud, unauthorized activity, or security problems.
  • Maintain business, accounting, and tax records.
  • Comply with applicable laws and protect our legal rights.

We do not currently use Google Analytics to record website analytics data or use Jetpack for active visitor analytics or behavioral profiling.

3. Cookies and Similar Technologies

The Website may use cookies, browser storage, or similar technologies to support essential website functions, including age-gate preferences, shopping cart and checkout functionality, security, payment processing, and cookie-banner preferences.

The Website uses Jetpack’s Cookies & Consent Banner widget to display a notice concerning cookies and similar technologies.

Google Analytics is installed but is not currently configured to record website analytics data. Jetpack is installed, but we do not currently use it for active visitor analytics or behavioral profiling.

The actual cookies and technical information processed may depend on the configuration of WordPress, Age Gate, Jetpack, PayPal, our hosting provider, and other website components.

You can manage or delete cookies through your browser settings. Blocking certain cookies may affect age verification, shopping cart functionality, checkout, or other features of the Website. Where applicable law requires consent or an opt-out mechanism for particular tracking technologies, we will take appropriate steps to meet those requirements.

4. Google Analytics

Google Analytics is installed on the Website but is not currently configured to record website analytics data. We do not currently use it to actively analyze visitor behavior, build visitor profiles, or target visitors based on browsing activity.

If our analytics configuration changes, we will update this Privacy Policy as appropriate and provide any notices or choices required by applicable law.

For more information, visit Google’s Privacy Policy.

5. Jetpack

Jetpack is installed on the Website to provide website functionality. We do not currently use Jetpack for active visitor analytics or behavioral profiling. Depending on the features enabled and their configuration, Jetpack or its service provider may process technical information needed to provide website features, security, or other services.

6. Contact Form 7

We use Contact Form 7 to allow visitors to contact us through the Website. Information submitted through a contact form, such as your name, email address, and message, is transmitted to us so that we can respond to your inquiry.

We do not intentionally store Contact Form 7 submissions in the Website’s database. However, messages may be retained in our email accounts or email service provider’s systems. Hosting systems, security logs, or other integrations may also process limited technical information associated with a submission.

We use contact information for communication, customer service, and related business purposes. We do not use general contact form submissions to create marketing lists without an appropriate basis.

7. Mailchimp and Email Marketing

We use Mailchimp to manage newsletter subscriptions and send promotional emails, where applicable.

If you subscribe to our mailing list, we may collect your email address, name, subscription status, and information associated with your subscription preferences. Mailchimp may process additional technical or engagement information depending on our configuration and the features used.

You may unsubscribe from promotional emails at any time by using the unsubscribe link included in our emails. You may also contact us to request removal from our marketing list.

We may retain limited information necessary to honor your unsubscribe request and maintain appropriate records.

Unsubscribing from marketing emails does not necessarily prevent us from sending transactional or service-related messages concerning an order you have placed.

Mailchimp’s privacy practices are described in Intuit’s Privacy Statement.

8. Online Orders and PayPal Payments

We accept wine orders through the Website and use PayPal to process payments.

When you place an order, we may collect information necessary to complete and fulfill the transaction, including your name, email address, billing and shipping address, telephone number, products ordered, order total, and payment status.

PayPal processes payments and may collect payment card details, account information, and other personal information directly from you. We receive information necessary to administer and fulfill your order, which may include payment confirmation, transaction references, contact details, and shipping information.

We do not intend to collect or store full payment card numbers or security codes on our own Website. Payment information is handled through PayPal’s payment services, subject to the checkout method and configuration.

We use order information to:

  • Process and fulfill purchases.
  • Confirm payments and communicate order status.
  • Arrange shipping and delivery.
  • Respond to questions, returns, or order issues.
  • Maintain accounting, tax, and transaction records.
  • Help prevent fraud and comply with applicable laws.

We may share necessary information with PayPal, shipping and delivery providers, and other service providers involved in completing your order.

PayPal’s processing of personal information is subject to its own privacy practices. Please review PayPal’s Privacy Statement for more information.

9. Alcohol and Age Restrictions

The Website promotes and sells wine. Visitors must meet applicable legal age requirements to purchase or receive alcoholic beverages.

The Age Gate plugin helps restrict access to designated content but does not necessarily independently verify a visitor’s actual age or identity. Additional age-verification procedures may apply to purchases, shipping, delivery, or other activities as required by law.

We do not knowingly use the Website to solicit personal information from children for wine marketing. If you believe a child has provided personal information to us, please contact us so that we can review the situation and take appropriate action.

10. How We Share Information

We do not sell personal information for monetary consideration.

We may disclose personal information in the following circumstances:

  • Service providers: Companies that help us operate the Website, host content, process payments, deliver email, fulfill orders, arrange shipping, or provide customer support.
  • Order fulfillment: PayPal, shipping providers, and delivery services when reasonably necessary to complete a purchase.
  • Legal obligations and safety: When reasonably necessary to comply with applicable law, respond to lawful requests, prevent fraud, or protect our rights, property, or safety.
  • Business transfers: In connection with a proposed or completed sale, merger, restructuring, or transfer of our business, subject to applicable law.
  • With your direction or consent: When you request or authorize a disclosure.

Third-party providers may process information under their own privacy policies and terms. We do not control the privacy practices of independent third-party services.

Some disclosures involving analytics, cookies, or advertising technologies may be treated as regulated sharing under certain privacy laws even when no money changes hands. We do not currently use Google Analytics to record analytics data or Jetpack for active visitor analytics or behavioral profiling.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Contact inquiries: Retained as needed to respond to inquiries and maintain appropriate business records.
  • Email subscriptions: Retained while you remain subscribed, with limited records kept as needed to honor unsubscribe requests.
  • Order records: Retained as necessary for order fulfillment, customer service, accounting, tax, fraud prevention, and legal obligations.
  • Technical information: Retained according to applicable hosting, security, and service-provider practices.
  • Age-gate preferences: Retained according to the behavior and configuration of the Age Gate plugin and related browser storage.

When information is no longer reasonably necessary and we are not legally required to retain it, we will take reasonable steps to delete, de-identify, or securely dispose of it.

12. Data Security

We use reasonable administrative, technical, and organizational measures intended to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

No website, electronic transmission, or storage system can be guaranteed to be completely secure. We cannot guarantee absolute security.

You should exercise caution when transmitting information online and avoid submitting sensitive information through general contact forms.

13. Your Privacy Choices and Rights

Depending on where you live and which laws apply, you may have certain rights concerning your personal information, including the ability to:

  • Request access to personal information we hold about you.
  • Request correction of inaccurate personal information.
  • Request deletion of personal information, subject to legal exceptions.
  • Obtain information about certain collection, use, or disclosure practices.
  • Withdraw consent where processing is based on consent.
  • Opt out of promotional emails.
  • Exercise applicable rights concerning the sale, sharing, or targeted advertising use of personal information.
  • Appeal certain privacy-request decisions where required by law.

To submit a request, please contact us using the details in the Contact Us section. We may need to verify your identity before processing certain requests. Some requests may be limited by legal, accounting, security, or other applicable exceptions.

We will not unlawfully discriminate against you for exercising privacy rights available to you under applicable law.

14. California Residents

California residents may have additional privacy rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), if our business is subject to those laws.

The CCPA applies to businesses meeting specified statutory criteria. Our business has relatively low annual revenue, and we do not assume that the CCPA applies to us solely because we operate a website or sell wine online. Applicability depends on the relevant legal criteria and circumstances.

Where applicable, California privacy rights may include the right to know about personal information collected, request access or deletion, request correction, and opt out of the sale or sharing of personal information, subject to statutory requirements and exceptions.

Depending on how website technologies are configured, certain disclosures of personal information may be treated as “sharing” under California law even when no money is exchanged.

We do not sell personal information for monetary consideration. Google Analytics is installed but is not currently configured to record analytics data, and Jetpack is not currently used for active visitor analytics or behavioral profiling.

If you have a privacy question or wish to submit a request, contact us using the details in the Contact Us section. We will review requests in accordance with applicable law.

Where required by law, we will provide applicable opt-out mechanisms and honor relevant browser-based privacy preference signals, such as Global Privacy Control.

15. Third-Party Websites and Services

The Website may link to third-party websites or services, including PayPal and email service providers.

When you visit or interact with a third-party website or service, that provider’s privacy policy and terms may apply. We do not control the privacy practices, security, or content of third-party services.

We encourage you to review third-party privacy notices before submitting personal information to those providers.

16. International Visitors

Our service providers may process or store information in the United States or other countries where they or their service providers operate.

Privacy laws in those countries may differ from the laws in your place of residence. Where applicable law requires safeguards for international transfers of personal information, we will take the steps required by that law.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Website, business operations, service providers, technology, or legal obligations.

When we make changes, we will update the Effective Date at the top of this page. Where required by law, we will provide additional notice or obtain consent for material changes.

We encourage you to review this Privacy Policy periodically.

18. Contact Us

If you have questions about this Privacy Policy or wish to make a privacy-related request, please contact:

GrapeHeart Vineyards
Website: https://GrapeHeartVineyards.com
Email: Info@GrapeHeartVineyards.com
Mailing Address:
GrapeHeart Vineyards
50 Lighthouse Court
Napa, CA 94559