Privacy Policy – Caymus Vineyards

CAYMUS VINEYARDS PRIVACY NOTICE AT COLLECTION

Last Updated: Dec 5, 2025

Your privacy is important to us. This Caymus Vineyards Privacy Policy applies to Caymus, Wagner Family of Wine, Emmolo, Sea-Sun, Mer Soleil, and Conundrum (collectively referred to herein as “Caymus,” “we,” or “our”). The policy governs our practices regarding the collection, use and disclosure of personal information that we collect offline and online, including via our website at (www.caymus.com, www.wagnerfamilyofwine.com, www.conundrumwines.com.
www.mersoleilwines.com, emmolowines.com, www.caymus-suisun.com, and seasunvineyards.com (collectively, the “Website”), by email, marketing communications, social media, mail, telephone or other methods.

This Privacy Policy is subject to our Terms of Use located at www.caymus.com/terms-of-use/. We may update this Privacy Policy from time to time, as specified in the “Changes to This Privacy Policy” section below.

Caymus is an independent controller of personal information collected in connection with the Website. Information about our collection, use, and disclosure of your personal information is provided in Annex 1 below.

Protecting your privacy is very important to us. We will only use the information you share with us for the purposes set forth in this Policy. Because we respect your privacy and your preferences in how we use your information, our goal is to be transparent about our practices regarding the collection, use and disclosure of your information.

If you are a resident of Canada, the European Union, or Mexico, please see our Notice to International Data Subjects below.

If you are a California resident, please also see our California Notice immediately below.

If you are a Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, OR Virginia resident, please also see our Privacy Notice below at: Multi-State Notice section.

Your Consent

Please review this Policy periodically. You should read this entire Policy before submitting information, including personal information, to us in any form or using our Website. Whenever you submit personal information to us, you consent to the collection, use, disclosure, transfer, and storage of that information in accordance with this Policy.

We may make full use of all information that is de-identified, aggregated, or otherwise not in personally identifiable form.

COLLECTION OF PERSONAL INFORMATION

We collect personal information about you in the following ways: 1) from you when you voluntarily submit information directly to us; 2) using automated technology, including when you visit our Website or interact with our electronic advertisements or communications; and 3) using third-party sources including but not limited to our brand partners and their shopping sites, service providers, analytics providers, or through social media and other websites or services we interact with. Automated technology collects information from your computer or mobile device and includes cookies, web beacons, local shared objects, or other similar technology. More information is given below in the “Cookies and Other Technology” section below.

All personal information may be used for the purposes stated in this Policy. We may combine data collected from third-party sources. We will retain your personal information for the period necessary to fulfill that purpose and as otherwise needed to comply with applicable law and internal company policies.

We collect, use, and disclose your personal information as described in the chart in Annex 1 below.

Personal Information

We collect Personal Information, such as your email address, name, billing and shipping address, telephone number, and other information you provide on the Website, as well as credit card information, including credit card number and expiration date, based on your communications with us including submission of forms on the Website and communications via email, telephone call, and other electronic messages.

We collect information about you through your browser, computer hardware and software. This information can include your IP address, device ID, browser type, domain names, access times and dates, number of clicks, pages viewed, one or more cookies (as described below) that may uniquely identify your browser, and referring website addresses. This information is used by us for the improvement of our Website.

We also collect information from you in person when you visit our wineries. This may include name, email address, address, telephone number, and other information you provide.

Video Surveillance and Security

We utilize video surveillance to monitor our tasting rooms solely for security purposes. We will retain these records for the period necessary to fulfill that purpose and as otherwise needed to comply with applicable law and internal company policies.

HOW WE USE YOUR PERSONAL INFORMATION

We use Personal Information of customers for a wide range of purposes, including:

to process and fulfill your orders, and to notify you of your order status;
to respond to your requests for newsletters;
to notify you about important changes to our web sites, new services, or special offers;
to provide you with a customized user experience;
to improve our business operations, properties, communities, services, Site, and social media;
to send promotional communications or offers (unless you have requested that we not send such communications);
for marketing, research, legal, and other business purposes;
to analyze and track usage of our services including the Site, our brand partner sites, and social media accounts;
to better understand how you use the Website and our services;
to enhance, modify, or improve the Website, our business, our services, and our products;
to comply with our policies, procedures, and legal obligations, including complying with law enforcement or governmental authority requests, investigating fraudulent activity, resolving disputes, and enforcing our legal agreements and policies; and
as otherwise specified at the point of Personal Information collection.

HOW WE DISCLOSE YOUR PERSONAL INFORMATION

Service Providers and Contractors

We may disclose your personal information with our vendors, subsidiaries, partners, and third-party independent contractors for purposes of: (1) performing functions on behalf of us, such as processing credit card transactions; (2) providing you with product offers, marketing or promotional materials through phone, text, or electronic and/or postal mail; and 3) tracking consumer complaints. Our vendors, partners and third-party independent contractors are obligated contractually not to use or share your personal information for unauthorized purposes.

Outside Parties

We disclose Personal Information to third parties we work with who help us gather information from you and or help us to communicate with you and assist with data analytics. We may also provide aggregate statistics about our sales, traffic patterns, and related site information to reputable third parties, but these statistics are fully and permanently anonymized and do not include any personally identifiable information.

Legal Obligations

We may disclose Personal Information to outside parties (including, without limitation, governmental agencies) if required to do so by law, regulation or court order; to respond to governmental and/or law enforcement requests; to comply with the legal process; to enforce our terms and conditions; to protect our operations; to protect our rights, privacy, safety or property, and/or you or others; to allow us to pursue available remedies or limit the damages that we may sustain; to identify, contact or bring legal action against someone who may be causing injury to or interfering with our (or others’) rights or property; to support any actual or threatened claim, defense or declaration in a case or before any jurisdictional and/or administrative authority, arbitration or mediation panel; or in connection with disciplinary actions/investigations.

Sale or Corporate Restructuring

We may disclose Personal Information to third parties, such as an acquirer or successor-in-interest, in connection with the sale, assignment or other transfer of the business of our website or the sale, assignment, merger, reorganization, change of control, consolidation, joint venture, transfer or other disposition of all or any part of Caymus or its affiliates including any negotiation thereof.

COOKIES AND OTHER TECHNOLOGY

How does the Site use cookies?

Caymus and its analytics and other service providers use technologies such as cookies, web beacons, tags, scripts and other similar technologies (collectively, “Cookies”) to collect certain information. These technologies are used to help us and our business partners analyze trends, administer the Sites, remember preferences, track users’ movements around the Sites and gather demographic information about our customer base as a whole. Some types of Cookies, like web beacons, allow us or third parties working on our behalf to gauge and enhance the effectiveness of our marketing by allowing us to understand whether users follow links in our e-mails or on our Sites, and by gathering information about other sites users visit before and after visiting our Sites. Certain other Cookies are used to store preferences on a user’s computer or mobile device, or display content based upon what a user viewed on the Site to personalize their visit. Currently, Caymus employs cookies and tracking technologies on its Sites, including the following:

Essential cookies are crucial for basic website operations, ensuring that the site functions correctly by managing actions such as setting privacy preferences, logging in, or filling in forms. Without these cookies, key features of the website may not work properly.
Personalization cookies improve website functionality and personalization. They remember choices like language preferences, themes, and other settings, ensuring a more customized and seamless user experience. These cookies also remember user-specific settings and preferences, such as preferred language and region. This ensures that users receive content and services tailored to their personal preferences and location, providing a more personalized experience on the website.
Analytics cookies gather data on how visitors interact with the website. They track page visits, user behaviors, and any errors encountered. This information is used to improve the website’s performance and usability, with all data collected being anonymous and aggregated.

Because technology is constantly changing, however, we may change the types of Cookies that are used with the Sites from time to time. We will update this Policy in accordance with applicable law and if we materially change the manner in which we collect information.

Disabling Cookies and Tracking Technology

Some, but not all, Cookies may be disabled or removed through cookie management tools provided by your browser. If you are concerned about cookies and tracking technologies, we encourage you to visit the websites www.allaboutcookies.org to better understand what Cookies are set on your computer or mobile device and how to manage, disable or delete them.

If you choose to disable or delete Cookies, you should know that you may not be able to take advantage of all the features of our Sites, including certain personalized features. Rejecting Cookies may also affect your ability to perform certain transactions on the Sites, and our ability to recognize your browser from one visit to the next. Note, also, that we will keep a cookie on your computer to remember that you have opted out. That opt-out cookie (like all Cookies) is associated with a particular computer and browser. So if you get a new computer, install a new browser, or clear your Cookies, you’ll need to opt-out again.

How We Respond to “Do Not Track” Settings

Our Sites do not respond to or alter the practices detailed herein based upon your selection of the “Do Not Track” setting or feature that may be offered by your browser.

RETENTION OF PERSONAL INFORMATION

We will retain your personal information (collected through offline and online methods) for as long as it is necessary for the purposes described in this Policy. We will retain and use your personal information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies. For more information regarding retention of personal information see Annex 1.

Intended Audience of Websites; COPPA Compliance

The Children’s Online Privacy Protection Act (“COPPA”) does not apply to us. Our products and services are not directed toward minors, and we do not knowingly collect information from minors in the United States or elsewhere with or without the consent of their parents or guardians. If you are not 16 or older, you should not visit or use our Site or social media accounts. If you become aware that a child has provided us with personal information without appropriate consent, then please contact us using the details below so that we can take the appropriate steps in accordance with our legal obligations and this Policy.

Email/Text Marketing

If you no longer wish to receive email marketing communications from us, you may opt-out of receiving marketing-related emails by using the unsubscribe method provided in our communications (e.g., by clicking on the “unsubscribe” link in the email to unsubscribe). Please note that unsubscribing from our promotional material will not prevent us from contacting you for other reasons, such as responses to customer service inquiries, or information about products you have purchased or about which you have requested information.

You may also choose to participate in certain text or SMS/MMS marketing. If you opt in to such marketing, we may collect and use certain personal information, including phone number, email, product browsing behavior, purchase behavior, device type, cellular carrier, and location to contact you and provide you marketing communications or promotions.

Security

We take reasonable steps to secure your information from loss, misuse, interference and unauthorized access, modification and disclosure. However, you should be aware that transmission of information via the internet is not completely secure, that no security procedures or protocols are ever guaranteed to be 100% secure from intrusion or hacking, and there is always some risk assumed by sharing information online. Although we strive to protect your personal information in accordance with this Policy, we will not be liable for disclosure of personal information obtained due to errors in transmission or security breaches. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your account has been compromised), please immediately notify us.

Third Party Sites

The Site permits you to link to other websites on the Internet through direct links or through applications such as “share” or “like” buttons, and other websites likewise may contain links to the Site. Unless otherwise indicated, prior to visiting our Site or social media accounts, or once you have left our Site or social media accounts, all collection and use of your information you provide is governed by the privacy policy of the other website’s or social media account’s operators and not by this Policy. We are not responsible for any transactions that occur between you and a third-party website or social media account. We encourage you to review the privacy policies found on such other websites, services, and applications to understand how your information is collected and used by them.

Governing Law

This Policy and our privacy practices will be subject exclusively to the laws of the State of California, United States of America. We make no representation that this Policy and its practices comply with the laws of any other jurisdiction.

Contact Us

We value your business and welcome your feedback. Any concerns you have are important to us. If you have further questions about your privacy, please contact us:

Address: P.O. Box 268, Rutherford, CA 94573

Phone Number: 707-963-4204

Email: [email protected]

NOTICE TO INTERNATIONAL DATA SUBJECTS

PERSONAL INFORMATION

With respect to international data subjects, “personal information,” as used in this Privacy Policy, is equivalent to “personal data” as defined in the European Union General Data Protection Regulation (GDPR) and the Federal Law for the Protection of Personal Data Held by Private Parties (FLPPDHPP) in Mexico, and “personal information” as defined by The Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada.

HOW INFORMATION IS COLLECTED, USED AND DISCLOSED

We may collect certain personal information for various purposes, and we may disclose such information to various third parties. For more information on what types of personal information is collected, from what sources, for which purposes, and how that information is disclosed, please click here

LEGAL BASIS FOR PROCESSING PERSONAL INFORMATION

If you provide Personal Information to Caymus, you agree to the use, collection and disclosure of the Personal Information by Caymus for the purposes described in this privacy policy.

If you are a resident of the European Economic Area (EEA), Mexico or Canada, the legal basis for collecting and using the Personal Information described in this Privacy Policy depends on the Personal Information we collect and the specific context in which we collect it. In addition, we process Personal Information with the principle of data minimization in mind. This means that we limit ourselves to the minimum amount of Personal Information which is needed to achieve the particular purpose for which we process the Personal Information. Below are the legal bases for which your Personal Information may be processed.

Caymus may process your Personal Information because:

The processing is necessary to provide the services and features you have requested;
The processing is necessary to perform a contract with you;
The processing is necessary for the legitimate interests of our business, such as fraud prevention, information security, direct marketing, or to comply with the law;
To fulfill a legal obligation;
As permitted by applicable law;
You have provided consent for us to do so.

RETENTION OF PERSONAL INFORMATION

We will retain your Personal Information for as long as it is necessary for the purposes set out in this Policy and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. For more details on data retention periods, please click here

SECURITY

We have adopted reasonable and appropriate security procedures to help protect against loss, misuse, and unauthorized access to the information you provide to us. Please note, however, that no data transmission or storage can be guaranteed to be 100% secure. As a result, while we strive to protect your information and privacy, we cannot guarantee or warrant the security of any information you disclose or transmit to the Site and cannot be responsible for the theft, destruction, or inadvertent disclosure of your information.

COOKIES

As explained in our “COOKIES AND OTHER TECHNOLOGY” section, you can opt out of cookies using your browser.

Please Note:

Opt-outs are device and browser based. You must opt out on each device and each browser where you want your choice to apply.
Opt-outs maybe stored via cookies. If you clear cookies, your opt-out may no longer be valid and you must opt out again where you want your choices to apply.
We may still share your Personal Information with our service providers that help us perform functions that are necessary for our business such as vendors that host our Site, analytics processors, etc. These entities are contractually obligated to keep this information confidential and not use it for any purpose other than for the services they provide to our business.

To find more information about cookies please visit www.allaboutcookies.org. Most browsers are initially set to allow cookies, but also offer the option to restrict cookies or warn you of their use. By disabling cookies, you won’t be able to enjoy the convenience provided by our customization.

CROSS-BORDER DATA TRANSFERS

Your information, including Personal Information, may be transferred to—and maintained on—computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside of the United States and choose to provide information to us, please be aware that your personal data will be transferred to, processed, and stored in the United States. Data protection laws in the U.S. may be different from those in your country of residence. We transfer your personal information out of your country of residence only upon your consent. You consent to the transfer of your information, including personal information, to the U.S. as set forth in this Privacy Policy by visiting our Site.

[EU Residents only] Whenever we transfer your personal information to the U.S. or countries not deemed by the European Commission to provide an adequate level of personal information protection, the transfer will be based on a data transfer mechanism recognized by the European Commission as providing adequate protection for personal information.

[Canada Residents only] Whenever we transfer your personal information to the U.S. we make sure to provide an adequate level of personal information protection.

Transfers to Third Parties

YOUR DATA PROTECTION RIGHTS

The Data Controller

The Data Controller who collects and processes your Personal Information is:

Caymus Vineyards

8700 Conn Creek Road / P.O. Box 268

Rutherford, CA 94573

707-967-3010

[email protected]

Data Subject Rights

If you are a resident of the European Economic Area (EEA), Canada, or Mexico, you have certain data protection rights. Barring certain exceptions and depending on the country where you reside, you have the following data protection rights:

The right to access, update or erasure of the information we have on you. You have the right to access, update and erase your Personal Information.
The right of rectification. You have the right to have your Personal Information corrected if that information is inaccurate or incomplete.
The right to object. You have the right to object to our processing of your Personal Information.
The right of restriction. You have the right to request that we restrict the processing of your Personal Information.
The right to data portability. You have the right to be provided with a copy of the information that we have on you in a structured, machine-readable and commonly used format.
The right to withdraw consent. You have the right to withdraw your consent at any time where Caymus relied on your consent to process your Personal Information.
The right to know about automated decisionmaking. As a data subject you also have the right to not be subject to decisions based on automated decision making alone, including profiling, and which may lead to legal consequences for you. This right does not apply if such processing is necessary in order for Caymus to enter into or fulfil an agreement with you, if such processing is allowed according to applicable legislation, or if the legal basis for such processing is your consent.

Caymus has implemented reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Information via the online submission form at: [ ]. If you wish to be informed of the type of Personal Information we hold about you and/or if you wish to remove such Personal Information from our systems, please contact us at: +1 (833) 348-3649 . Please note that for your safety and security, we may ask you to verify your identity before responding to such requests.

CALIFORNIA NOTICE AT COLLECTION

This Notice provides information to California residents whose Personal Information is collected pursuant to the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”).

Information Collected, Used and Disclosed

We collect, use and disclose personal information, collected in connection with this Website as described in Annex 1 to this Notice. To review the categories of personal information collected, purposes for collection, and third parties to whom personal information is disclosed, click here.

Information Sold or Shared

We have not sold or shared your personal information in the last 12-months and are not doing so at this time.

We have disclosed the following categories of personal information for a business or commercial purpose in the preceding 12 months:

Personal Identifiers
Commercial Information
Audio, Electronic, or Visual Information
Internet Activity

For details regarding the categories of third parties with whom we have shared, sold, or disclosed personal information, please see Annex 1.

RIGHTS UNDER THE CCPA AND CPRA

Under California law, you are afforded several rights about the personal information collected about you, and you can make certain requests with regard to those rights as follows:

Right to Know about the Categories of Personal Information Collected or Disclosed (“Right to Know”)

Right to Request Deletion of Personal Information (“Right to Delete”)

Right to Correct or Rectify Inaccurate Information About You (“Right to Correct”)

HOW TO MAKE YOUR REQUESTS TO KNOW, DELETE, OR CORRECT.

You have the right to make requests for the aforementioned rights (Request to Know; Request to Delete; or a Request to Correct (a “Request”)).

To make a Request for any of the information set forth above, please submit a verifiable consumer request pursuant to the instructions below. The Request must provide sufficient information to allow us to verify that you are the person about whom the personal information was collected, sold, shared, or disclosed and must contain sufficient detail to allow us to properly understand, evaluate and respond to your Request. If we cannot verify your identity, we will not be able to respond to your Request. We will acknowledge your Request within 10 business days and we will attempt to respond substantively within 45-90 days.

You may make a Request the following ways:

You may make a request here: [email protected]
Enter your request here.
You may also make a request by phone by contacting us at +1 (833) 348-3649

We will review all information provided by you to us, to determine whether we can respond to your Request. We will inform you of our decision to deny or grant your Request.

For any Requests to Know, you may make such Requests twice within a 12-month period.

For Requests to Correct, you will need to provide evidence supporting the inaccuracy of the current information, and we reserve the right to delete the information instead of correcting if such deletion does not impact you or you consent to the deletion.

We will retain correspondence, documents and information related to any Request for 24 months as required by law.

ADDITIONAL CPRA RIGHTS

The following additional rights are afforded to you under the CPRA:

Right to Know Sensitive Personal Information Collected

We collect and use your Sensitive Personal Information as described in Annex 1 below.

We do not collect or process sensitive personal information for the purpose of inferring characteristics or for any purposes other than those set forth in Regulations Section 7027(m).

Right to Opt Out of Sharing and Selling

You have the right to opt out of the processing of the selling and sharing of your personal data. As noted above, we do not sell or share your data (as defined by the CPRA) at this time and have not done in the preceding 12 months.

Right To Access Information About Automated Decision Making and the Right to Opt-Out of Automated Decision Making

You can request access to information about automated decision making processes we use and you may request to opt out of automated decision making. We do not engage in decision making methods that rely solely on automated processing.

Right to Non-Discrimination for Exercising Consumer Privacy Rights

You have the right not to receive discriminatory treatment for exercising your privacy rights conferred by the California Consumer Privacy Act, including by exercising the rights specified herein.

COOKIES

As explained in our “COOKIES AND OTHER TECHNOLOGY” section, you can opt out of cookies using your browser.

Please Note:

Opt-outs are device and browser based. You must opt out on each device and each browser where you want your choice to apply.
Opt-outs maybe stored via cookies. If you clear cookies, your opt-out may no longer be valid and you must opt out again where you want your choices to apply.
We may still share your Personal Information with our service providers that help us perform functions that are necessary for our business such as vendors that host our Site, analytics processors, etc. These entities are contractually obligated to keep this information confidential and not use it for any purpose other than for the services they provide to our business.

NOTICE OF FINANCIAL INCENTIVE / BONA FIDE LOYALTY PROGRAM (APPLICABLE TO RESIDENTS OF CALIFORNIA, COLORADO, CONNECTICUT, OREGON, TEXAS, AND OTHER STATES AS REQUIRED BY LAW)

The CCPA’s implementing regulations define a “financial incentive” as a program, benefit, or other offering “related to the collection, deletion, or sale of personal information.” Likewise, the CPA’s implementing rules define a “Bona Fide Loyalty Program” as a program “established for the genuine purpose of providing discounts, rewards, or other actual value” to members that voluntarily participate in the program. Similar provisions apply under other state privacy laws (including those in Connecticut, Oregon, and Texas), and this Notice should be read to cover residents of those states as well. From time to time, Caymus may provide financial incentives to consumers who elect to participate in discount programs, sweepstakes, contests and other promotions, in exchange for allowing us to collect and retain certain personal information, such as Identifiers (e.g., your name, email address, or phone number), and Commercial Information (e.g., your purchase history). These incentives may result in differences in the prices of our products offered to consumers (e.g., discounts and other promotions). For example, the financial incentives we may provide include discounts based upon purchase activity, discounts in exchange for collection of your personal information, or other periodic discounts for promotional purposes. The material aspects of any financial incentive will be explained and described in its program terms or in the details of the incentive offer.

AUTHORIZED AGENT INFORMATION

You may designate an authorized agent to make a request on your behalf under the CPRA.

Authorized agents can make requests under the CPRA by emailing us at email address: [email protected]. If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with either (1) a power of attorney or (2) signed permission to exercise rights on your behalf. Unless the authorized agent provides a power of attorney, we may also require you to verify your own identity directly with us and directly confirm that you gave the authorized agent permission to submit the request.

Retention of Personal Information

We will retain your personal information for as long as it is necessary for the purposes set out in Annex 1 and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your personal information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Contact For More Information

For information and questions about the use of your personal information or this Notice or your privacy, you may contact us at [email to be used for privacy matters].

Changes to This Privacy Notice

This Notice may be revised from time to time for any reason. If this Notice changes, the revised notice will include a new effective date, and we will notify you of such changes by posting the revised notice on this page. Be sure to check the Notice whenever you submit personal information to us.

MULTI-STATE CONSUMER DATA PROTECTION ACT NOTICE

This Notice provides additional information to Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia residents.

The Notice below applies only to residents of these states. Please visit our Privacy PolicyPrivacy Policy (“Policy”) for more information. Any capitalized terms undefined in this Notice have the same definition as the Policy.

RIGHT TO CONFIRM, ACCESS, AND DATA PORTABILITY

You have the right to confirm whether or not we are processing your personal data and to access such personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means.

We have collected the categories of Personal Information about consumers as described in this Notice in Annex 1. To review these categories, click here.

Information Sold or Used for Targeted Advertising

We have not sold or shared your data in the last 12-months and are not doing so at this time.

We have disclosed the following categories of personal information for a business or commercial purpose in the preceding 12 months:

Personal Identifiers
Sensitive Personal Information
Commercial Information
Audio, Electronic, or Visual Information
Internet Activity

For details regarding the categories of third parties with whom we have shared this information, please see Annex 1.

RIGHT TO REQUEST DELETION OF PERSONAL DATA

You have the right to request the deletion of your personal data provided by or obtained about you (“Request to Delete”), subject to certain exceptions permitted by law.

RIGHT TO CORRECT (NOT APPLICABLE TO IOWA AND UTAH RESIDENTS)

You have the right to request that we rectify inaccurate information about you.

RIGHT TO OPT OUT OF DATA PROCESSING FOR TARGETED ADVERTISING

You have the right to opt out of the processing of your personal data for purposes of targeted advertising (“Request to Opt Out”). As noted above, we do not process your data for purposes of targeted advertising.

RIGHT TO OPT OUT OF PROFILING (NOT APPLICABLE TO UTAH RESIDENTS)

You have the right to opt out of the processing of your personal data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects (“Request to Opt Out of Profiling”). We do not process your personal data for profiling purposes.

HOW TO MAKE YOUR REQUESTS TO CONFIRM, ACCESS, DATA PORTABILITY, CORRECT, DELETE, AND OPT OUT OF SALE OR TARGETED ADVERTISING

You can make a Rights Request in the following ways:

You may make a request here
You may make a request here: [email protected]
You may also make a request by phone by contacting us at: +1 (833) 348-3649.

We will acknowledge your Request within 10 days and will attempt to respond substantively within 45-90 days.

You must provide sufficient information to allow us to verify that you are the person about whom the personal information was collected and must contain sufficient detail to allow us to properly understand, evaluate and respond to your request. If we cannot verify your identity, we will not be able to respond to your request.

Once we receive your Request, we will begin the process to verify that you are the person that is the subject of the request (the “Verification Process”). The Verification Process consists of matching identifying information provided by you with the information we have about you in our records. You will be asked to provide us with two or three pieces of information that will help us to verify your identity. We will retain correspondence, documents and information related to any Request to Know, Request to Delete, or Request to Opt-Out for 24 months as required by law.

COOKIES

As explained in our “COOKIES AND OTHER TECHNOLOGY” section (add link to the COOKIES AND OTHER TECHNOLOGY section in the main Privacy Policy), you can opt out of cookies using your browser. You may also exercise your right to opt-out of cookies using our Cookie Preference Center (add link).

Please Note:

Opt-outs are device and browser based. You must opt out on each device and each browser where you want your choice to apply.
Opt-outs maybe stored via cookies. If you clear cookies, your opt-out may no longer be valid and you must opt out again where you want your choices to apply.
We may still share your Personal Information with our service providers that help us perform functions that are necessary for our business such as vendors that host our Site, analytics processors, etc. These entities are contractually obligated to keep this information confidential and not use it for any purpose other than for the services they provide to our business.

RIGHT TO NON-DISCRIMINATION FOR EXERCISING CONSUMER PRIVACY RIGHTS

You have the right not to receive discriminatory treatment for exercising your privacy rights , including by exercising the rights specified herein. As the Right to Non-Discrimination is effective across the board, there is no specific “request” that you need to make in order to exercise this right.

NOTICE OF FINANCIAL INCENTIVE / BONA FIDE LOYALTY PROGRAM (APPLICABLE TO RESIDENTS OF CALIFORNIA, COLORADO, CONNECTICUT, OREGON, TEXAS, AND OTHER STATES AS REQUIRED BY LAW)

For information about our loyalty programs and financial incentives, including disclosures required by state law, please see our [Notice of Financial Incentive / Bona Fide Loyalty Program] above.

AUTHORIZED AGENT

You may designate an authorized agent to make a request on your behalf to opt out of the sale of personal information.

Authorized agents may make requests on behalf of consumers by emailing [email protected]. We will require authorized agents to provide proof of the consumer’s consent to and designation of the authorized agent for purpose of making the request, and will require authorized agents to provide information necessary to verify the identity of the consumer who is the subject of the request. We may also require that a consumer verify his or her own identity directly with us before we respond to an authorized agent’s request.

RIGHT TO APPEAL (NOT APPLICABLE TO UTAH RESIDENTS)

You have the right to appeal our decision to deny any of your privacy rights requests above. Within 60 days of receipt of your appeal (45 days for Colorado residents), we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.

If your appeal is denied and you remain unsatisfied with our response, you may contact your state’s Attorney General to submit a complaint or seek further assistance. For help locating your state’s Attorney General’s contact information, visit Consumer Resources – File a Complaint.

Making an Appeal

You can make an appeal in the following ways:

Enter your appeal here.

RETENTION OF PERSONAL INFORMATION

We will retain your Personal Information for as long as it is necessary for the purposes set out in the Privacy Policy and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

ANNEX 1

Notice of Collection, Use, and Disclosure

Category of Information Collected	Examples	Collected From	Purposes	Disclosed to	Sold or Shared	Retention Period
Personal Identifiers	Name, billing and shipping address, telephone number, email address, and credit card information, including credit card number and expiration date.	You when you visit our website (including your online activities on the website tracked through the use of, for example, Meta Pixel), place an order, purchase a product, request newsletters, memberships, or make an inquiry. We also may collect this information from you when you visit one of our tasting rooms in person.	To process and fulfill your orders, and to notify you of your order status; To respond to requests for newsletters; To notify you about important changes to our websites, new services, or special offers; To send promotional communications or offers (unless you have requested that we not send such communications); To provide you with a customized user experience; To improve our business operations, properties, communities, services, our Website, and social media; To send promotional communications or offers (unless you have requested that we not send such communications); For marketing, research, legal, and other business purposes; and To comply with our policies, procedures, and legal obligations, including complying with law enforcement or governmental authority requests, investigating fraudulent activity, resolving disputes, and enforcing our legal agreements and policies. You may also choose to participate in certain text or SMS/MMS marketing. If you opt in to such marketing, we may collect and use certain personal information, including phone number, email, product browsing behavior, purchase behavior, device type, cellular carrier, and location to contact you and provide you marketing communications or promotions.	Consultants, service providers, and contractors that we use to support our business and operations (e.g., shipping, e-mail distribution, market research, name and address verification, promotions management and payment processing, processing credit card payments, engaging technical support for the Website, or performing analysis related to the Website) who have agreed to keep the information confidential and use it only to provide the applicable services; Klaviyo, a third-party company that assists us in marketing and remarketing services; Enolytics, a third-party company we work with who help to gather information from you or help us to communicate with you, and assist with data analytics; Third parties (including, without limitation, governmental agencies) if required to do so by law, regulation or court order; to respond to governmental and/or law enforcement requests; An acquirer or successor-in-interest in the event of a reorganization, merger, sale, change of control, consolidation, joint venture, assignment, transfer or other disposition of all or any part of Caymus or its affiliates including any negotiation thereof; We may also provide aggregate statistics about our sales, traffic patterns, and related site information to reputable third parties, but these statistics are fully and permanently anonymized and do not include any personally identifiable information.	N	We will retain your Personal Information for as long as it is necessary and to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.
Commercial Information	Customer order information, purchase history, and other customer-generated information.				N
Audio, Electronic, Visual, Thermal, and Olfactory Information	Photographs and video taken during your in-person visit to our properties.	You when you visit our properties, including but not limited to our lobby, parking lot, and other general areas.	To maintain and preserve the security and safety of our guests, employees, premises, and property; To improve our premises and visitor experience; To comply with our policies, procedures, and legal obligations, including complying with law enforcement or governmental authority requests, investigating fraudulent activity, resolving disputes, and enforcing our legal agreements and policies.	Same as above.	N	Same as above.
Internet/Network Activity	IP address, information collected through cookies, browsers you used to access the Website and services, webpages viewed, time spent on webpages, links clicks, transactions entered into, site-navigation patterns, referring website addresses and other diagnostic data from your use and interaction with the Website.	Your computer or mobile device, through your online activities and interactions with us, including, without limitation, your purchase of products, your online activity on the Website, and on our social media platforms or through our third-party sources. The Website collects browser and device information (including IP address) and information collected through cookies and other similar technologies.	Analyze and track usage of our services including the Website, our brand partner sites, and social media accounts; To better understand how you use the Website and services; To enhance, modify, or improve the Website, businesses, services, and products; To send promotional communications or offers (unless you have requested that we not send such communications); For other research, legal, and other business purposes; and To comply with our policies, procedures, and legal obligations, including complying with law enforcement or governmental authority requests, investigating fraudulent activity, resolving disputes, and enforcing our legal agreements and policies.	Same as above.	N	Same as above.
Geolocation Data	Location of your computer or mobile device using geolocation and other technology such as GPS, Wi-Fi, Bluetooth, and cell tower proximity captured directly through your device and with the use of pixel technology (e.g. Meta Pixel).	Same as above.	Analyze and track usage of our services including the Website, our brand partner sites, and social media accounts; To enhance, modify, or improve the Website, businesses, services, and products; For other research, legal, and other business purposes; To comply with our policies, procedures, and legal obligations, including complying with law enforcement or governmental authority requests, investigating fraudulent activity, resolving disputes, and enforcing our legal agreements and policies.	Same as above.	N	Same as above.