We do not collect sensitive personal information (such as social security numbers or precise geolocation) unless required for legal compliance.

2. Sources of Personal Information

We collect personal information from the following sources:

• Directly from you (for example, when you make a purchase or sign up for our newsletter)

• Automatically from your interactions with our website (cookies, analytics, etc.)

• From third-party partners who support our e-commerce, marketing, or analytics systems

3. How We Use Personal Information

We use personal information for purposes consistent with those described in our Privacy Policy, including:

• Processing orders and payments

• Providing and improving our website and customer experience

• Sending promotional communications (if you opt in)

• Performing analytics, marketing, and advertising

• Preventing fraud and ensuring legal compliance

We do not use or disclose sensitive personal information for any purpose other than those permitted under the CCPA/CPRA.

4. Disclosure of Personal Information

We may disclose personal information to service providers and contractors who assist in operating our business (e.g., payment processors, shipping companies, and analytics providers). These entities are contractually required to keep your information secure and use it only for legitimate business purposes.

We do not sell your personal information for money. However, we may share limited data (such as cookies or device identifiers) with advertising or analytics partners in ways that may be considered a “sale” or “sharing” under the CCPA. You can opt out of this sharing as described below.

5. Your California Privacy Rights

Under the CCPA/CPRA, California residents have the following rights:

a. Right to Know / Access

You have the right to request the categories and specific pieces of personal information we have collected about you, the purposes for which we collected it, and the categories of third parties with whom it is shared.

b. Right to Deletion

You have the right to request that we delete the personal information we have collected from you, subject to certain legal exceptions.

c. Right to Correction

You may request that we correct inaccurate personal information we maintain about you.

d. Right to Opt Out of Sale or Sharing

You may request that we stop “selling” or “sharing” your personal information as defined under the CCPA/CPRA. If applicable, we will provide a “Do Not Sell or Share My Personal Information” link on our website footer.

e. Right to Limit Use of Sensitive Personal Information

We currently do not collect or use sensitive personal information in a manner subject to this right.

f. Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

6. Submitting a Request

You may exercise your rights by contacting us through one of the following methods:

• Email: patrick@blackwoodwine.com

We will verify your identity before processing your request to protect your privacy. Authorized agents may make a request on your behalf if you provide proof of authorization.

We will confirm receipt of your request within 10 business days and respond within 45 calendar days, or notify you if an extension (up to 90 days total) is required.

7. Retention of Personal Information

We retain personal information only as long as necessary to fulfill the purposes outlined in our Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements.

8. Changes to This Notice

We may update this Notice from time to time to reflect changes in our practices or legal requirements. The “Effective Date” above will indicate the latest revision. We encourage you to review this Notice periodically.

9. Contact Us

If you have questions or concerns about this Notice or our data practices, please contact us at:

Blackwood Wines

Attn: Privacy / CCPA Compliance

Email: patrick@blackwoodwine.com