Privacy policy
What we know about you, why, who sees it, and how to have it changed or forgotten.
IWhat we collect
- What you give us: your name, email, shipping address, and, if you create one, your account and password (kept only as a one-way hash).
- Your orders and what you keep, rate, put in your cart, look at and tell the Sommelier, so the site can choose for you. Without an account this stays in your browser; with one it is kept with your account, so it follows you between devices.
- Questions the Sommelier could not answer and scents it was asked for that we do not pour, with no name attached and with email addresses and phone numbers removed, so we can improve it and decide what to pour next. Please do not type anything personal in the chat.
- If you share your portrait, its link carries your consultation answers and, if you are signed in, your first name. Anyone who has the link can see them.
- Payment is handled by Stripe. We see only the card's brand and last four digits, never the number.
- Basic technical data: your browser, device and pages visited, to keep the site working and safe.
IIHow we use it
- To pour, send and track your order, and to write to you about it.
- To run your account, your shelf and your portrait of taste.
- To answer you, put things right, and keep the records the law asks of us (orders, taxes, reactions).
- To send news and offers, only if you said yes; every letter has a way out.
VHow long we keep it
Order records as long as tax law asks (usually seven years); reaction reports six years; account data until you ask us to delete the account; letters you opted into until you opt out.
VIYour rights
Wherever you live in the U.S., you may ask us to tell you what we hold about you, correct it, give you a copy, or delete it, and to stop any sharing for advertising. Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with privacy laws have these rights by law; we give them to everyone.
Write to privacy@stashspritz.com. We answer within 45 days and will not treat you differently for asking. You may use an authorised agent. If we decline, you may appeal by replying to our answer.
VIIChildren
The site is not meant for children under 13, and we do not knowingly collect their information.
VIIIKeeping it safe
Passwords are stored only as strong one-way hashes, sign-in uses secure cookies, and access on our side is limited to those who need it. No system is perfect; if something ever went wrong we would tell you.
IXContact
Progress Lab Inc., a Illinois corporation, 116 Somerset Dr, Streamwood, IL 60107. Privacy questions: privacy@stashspritz.com.