Last updated: 2025-10-22

This Privacy Policy explains how Cork & Cask (“Cork & Cask,” “we,” “us,” or “our”) collects, uses, and shares information when you visit our website, join our Wine Club or Bourbon Club, RSVP to tastings and events, or otherwise interact with us online or in person. It also describes your privacy rights and choices.

By using our services, you agree to this Policy. If you do not agree, please do not use our services.

1) Who we are & how to contact us

Cork & Cask
Columbia, Missouri (USA)
Email: privacy@corkandcask.com (privacy questions)
Email: support@corkandcask.com (membership & events)
Contact page: https://corkandcask.com/contact

This Policy applies to our website (including subpages like /join, /events, /locations), newsletters, membership portal, and event registrations.

2) Key terms

  • Account – Your profile used to manage newsletters, membership tiers, and RSVPs.
  • Personal Data – Any information that identifies or can reasonably identify you (e.g., name, email, phone, ID for age verification).
  • Usage Data – Technical data collected automatically (e.g., IP address, device/browser, pages viewed, referring URLs, timestamps).
  • Service Providers – Vendors we use to run our service (for example, email delivery, payments, analytics, fraud prevention).
  • Sell/Share – As used in some state privacy laws (e.g., California CPRA). We do not sell Personal Data for money; we may “share” limited data for advertising/analytics as explained below, and you can opt out.

3) What we collect

Information you provide

  • Contact & profile: name, email, phone, mailing address (if needed for fulfillment), club preferences (Wine/Bourbon), and communication choices.
  • Membership & purchases: selected tiers, billing details (processed by our payment provider), and order history.
  • Events: RSVPs, ticket purchases, guest names, preferences (e.g., seating/food notes).
  • Age verification: We serve alcohol; attendees must be 21+ with valid ID. We may verify age at pickup or at events.
  • Communications: messages you send us (email, forms, social replies).

Information collected automatically

  • Usage Data: IP address, device and browser type/version, pages visited, time on page, links clicked, referring/exit pages, and general location (derived from IP).
  • Cookies & similar tech: used for site operation, preferences, performance, analytics, and marketing (see §7).

Information from third parties

  • Payments: payment intent/outcome from Stripe (we don’t store full card numbers).
  • Email & membership platform: delivery/open events for newsletters and portal actions.
  • Maps & embeds: when you view maps (e.g., Google Maps) or videos, those providers may collect data under their policies.

4) How we use information

  • Provide services: operate the website, manage accounts, memberships/tiers, event RSVPs, and pickups.
  • Communicate: send transactional messages (receipts, RSVP confirmations), service notices, and marketing emails you opt into (e.g., Wine Club Newsletter or Bourbon Club Bulletin).
  • Personalize: remember preferences (e.g., which club you follow) and show relevant content.
  • Improve & secure: analyze site performance, detect/prevent fraud or abuse, debug issues, and develop new features.
  • Legal & compliance: meet record-keeping requirements, respond to lawful requests, and enforce terms.
  • Business changes: if we explore a merger, acquisition, financing, or sale of assets, data may be evaluated and transferred subject to this Policy.

5) When we share information

We share Personal Data only as needed:

  • Service Providers (bound by contract): website hosting, email delivery, payments (Stripe), customer support, analytics, marketing measurement, security/fraud prevention.
  • Legal/rights protection: to comply with law or protect our rights, users, the public, or our business.
  • Business transfers: as described above.
  • With your direction: for example, if you ask us to coordinate group bookings or gift deliveries.

We do not sell Personal Data for money. We may use analytics/advertising cookies that could be considered “sharing” under certain state laws; see Your choices (§9).

6) Payments

Paid memberships and ticketing are processed by Stripe. Stripe acts as an independent controller for your payment data. Review Stripe’s privacy notice for details. We receive limited billing metadata (e.g., last 4 digits, card brand, payment status).

7) Cookies, analytics & ads

We use:

  • Necessary cookies – site and membership portal to function.
  • Preferences – remember choices (e.g., club, newsletter).
  • Performance/analytics – measure traffic and improve the site.
  • Marketing – measure campaign effectiveness and prevent spam/abuse.

Your browser may offer Do Not Track or Global Privacy Control (GPC) signals. Where required, we honor GPC for opt-out of “sale/share” for advertising. You can also manage cookies via our banner or your browser settings.

8) Data retention

We keep data only as long as needed for the purposes above:

  • Account & membership: while your account is active and for up to 3 years after inactivity (tax/audit/legal).
  • Event RSVPs & ticketing: up to 24 months after the event.
  • Operational logs: 30–180 days unless we need them longer for security, legal, or debugging.
    We may anonymize/de-identify data and use it indefinitely.

9) Your choices & rights

  • Email preferences: use the “Manage preferences” or “Unsubscribe” links in our newsletters, or email support@corkandcask.com.
  • Cookie controls: adjust via our banner and your browser.
  • Access, correction, deletion: email privacy@corkandcask.com to request a copy, correction, or deletion of your Personal Data (subject to legal exceptions).
  • Opt-out of sale/share & targeted ads (US states with such rights): use our “Do Not Sell or Share My Personal Information” link (or email us).
  • GDPR/UK rights (if applicable): access, rectify, erase, restrict, object, and data portability; you may also lodge a complaint with your supervisory authority.
  • Nevada “sale” opt-out: email support@corkandcask.com with subject “Nevada Do Not Sell Request”.

We may verify your request and, where permitted, respond through an authorized agent you designate.

10) Age limits & alcohol service

Our online content is intended for adults. Event participation and alcohol purchases require age 21+ with valid government ID. We do not knowingly collect Personal Data from children under 13; if you believe a child provided data, contact us to delete it.

11) Security

We use commercially reasonable safeguards (encryption in transit, access controls, secure hosting). No system is 100% secure; please use strong, unique passwords and keep them confidential.

12) International transfers

If you access our services from outside the United States, your information may be processed in the U.S. and other locations with different data-protection laws. We take steps to protect your data consistent with this Policy.

Our site may link to third-party websites or embeds (e.g., maps). We are not responsible for their content or privacy practices. Review their policies before using those services.

14) Changes to this Policy

We may update this Policy from time to time. We’ll post the new date at the top and, if changes are material, we’ll provide additional notice (e.g., email or banner).

15) How to contact us

Questions, requests, or complaints about privacy?
Email privacy@corkandcask.com or write to us at our Columbia, MO address on the Contact page.

Create a page at /privacy/opt-out explaining cookie/ad choices and offering an email form to support@corkandcask.com. Link it in your footer as “Do Not Sell or Share My Personal Information