by clicking submit you
verify that you are
21 years of age or older.



Last Updated:  December 20, 2023

Lokoya Wines and its affiliated brands and/or companies (collectively, “Lokoya Wines”, “our”, “us” or “we”) respect your privacy.  This Privacy Policy explains how and why we collect, use, share and process personal information, and your rights and choices.

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it.  If you do not agree with our policies and practices, we request that you do not use our Services (defined below).  By submitting information to us and/or using our Services, you acknowledge that we will process your personal information in accordance with the terms and conditions of this Privacy Policy. Use of our Sites (defined below) is governed by, and subject to, the legal notices contained in our Terms of Use. Your use, or access, of the Sites constitutes your agreement to be bound by these provisions. IF YOU DO NOT AGREE TO THESE TERMS OF USE YOU MAY NOT ACCESS OR OTHERWISE USE THE SITE.

We may update this Privacy Policy periodically to account for changes in our Services and/or processing activities, and will post the updated Privacy Policy on our Site, with a “Last Updated” date at the top. If we make material changes to this Privacy Policy, we will notify you and provide you an opportunity to review before you choose to continue using our products and services.

Scope of Privacy Policy

This Privacy Policy applies when you visit our website or the websites of any of our affiliated brands, mobile sites, or mobile applications that link to this Privacy Policy (“Sites”); when you make a purchase from us; subscribe to any of our mailing lists, newsletters, or wine-club programs; sign up for our events; register for our promotions; and when you engage with one of our brand pages on social media platforms including, but not limited to, Facebook, Pinterest, Twitter, or Instagram (collectively with “Services”).

This Privacy Policy does not apply to our employees, employment applicants, suppliers, distributors, or trade contacts except when they are acting in a “customer” capacity.

Personal Information We Collect

We may collect certain personal information (also referred to as “personal data” in some jurisdictions) from you when you use our Services. Personal information is any information that relates to you, identifies you personally, or could be used to identify you.  We collect the following categories of personal information:

How We Collect Personal Information

We collect personal information in the following ways:

For more information, please see the “Tracking Technology” section below. 

Cookies and Other Tracking Technology

We, and third parties on our behalf, use cookies, web beacons, navigational and location data, clear gifs, clickstream data, and other similar tracking technologies (collectively, “Tracking Technologies”) to collect personal information automatically as you interact with our Services to help us customize your experience and better manage content on our Services, including to: (a) analyze our web traffic using an analytics package; (b) identify whether you already visited our Sites; (c) store information about your preferences; and (d) to recognize when you return to our Sites. We may also use web beacons in emails and newsletters so that we know when such communications have been opened and to otherwise help us tailor our communications to you.

Cookies. When you visit our Services, we (or third-party data or ad networks we work with) may send one or more “cookies” to your computer or other devices. Cookies are alphanumeric identifiers stored on your computer through your web browser and are used by most websites to help personalize your web experience. Some cookies may facilitate additional site features for enhanced performance and functionality such as remembering preferences, allowing social interactions, analyzing usage for site optimization, providing custom content, allowing third parties to provide social sharing tools, and serving images or videos from third-party websites. Some features on the Services will not function if you do not allow cookies. The following types of cookies may be used on our Services:

Managing Cookies
You have the right to decide whether to accept cookies. If you do not want us to deploy cookies in your browser, you may exercise your preference through our cookie preferences manager, which you can access by clicking on the cookie symbol in the bottom right hand corner of this screen, or by modifying your web browser setting to either (1) refuse some or all cookies or (2) notify you and ask for your permission when a website tries to set a cookie.

If you want to learn the correct way to modify your browser settings, please use the “Help,” “Tools” or “Edit” menu in your browser or review the instructions provided by the following browsers: Internet ExplorerGoogle ChromeMozilla FirefoxSafari DesktopSafari Mobile; and Android browser.  If you choose to disable cookies in your browser, you can still use our Sites, although your ability to use some of the features may be affected.

We use Google Analytics, which uses cookies and other similar tracking technologies to collect and analyze information about your use of our Sites and report on activities and trends. This service may also collect information regarding your use of other websites, apps and online resources. You consent to the processing of data by these analytics providers in the manner and for the purposes set out in this Policy. You can learn about Google’s practices by going to, and opt out of them by downloading the Google Analytics opt-out browser add-on, available at

Mobile App Advertising

When you use our mobile application, we or our third party marketing partners may use one or more of several different identifiers for your mobile device, including Apple Identifier For Advertising (IDFA) or Android Advertising ID (AAID), to target and deliver ads to you in our app or other apps. This means that your device identifier may be accessed by third-party ad networks and used to (a) help manage the number and types of ads you see; (b) track the source of installs related to ads seen in other apps; and (c) identify your interests and behavior and target advertising to you based on those interests and behavior.

Apple requires app developers to ask for permission before they can track your activity across apps or websites they do not own in order to target advertising to you, measure your actions due to advertising, or to share your information with data brokers.  If you previously gave our mobile app permission to track, you can tell our app to stop tracking your activity. On iOS or iPadOS, go to Settings, tap on our app, then tap to turn off Allow Tracking.  You can also reset your IDFA from your mobile device’s settings page, which will prevent continued use of existing behavioral data tied to your previous IDFA.

If you have an Android device, and are running Android 12 or above, you can delete your AAID permanently by opening Settings, navigating to Privacy > Ads, tapping “Delete advertising ID,” then tapping it again on the next page to confirm. This will prevent any app on your phone from accessing it in the future. Please note that if you do so, you will still see advertisements, but they will not be tailored to your inferred interests.

You may also access industry-provided opt-out tools, although they are not tailored to our mobile applications.  For instance, to opt-out of data collection by the Digital Advertising Alliance’s participating member companies for interest-based advertising across mobile applications, download the DAA’s App Choices mobile application opt-out offering at

Website Interest-Based Advertising

Many advertising companies that collect information for interest-based advertising are members of the Digital Advertising Alliance (DAA) or the Network Advertising Initiative (NAI), both of which maintain websites where people can opt out of interest-based advertising from their members. To opt out of website interest-based advertising provided by each organization’s respective participating companies, visit the DAA’s opt-out portal available at, or visit the NAI’s opt-out portal available at

Do Not Track

Some Internet browsers, such as Internet Explorer, Firefox, and Safari, include the ability to transmit “Do Not Track” or “DNT” signals. Since uniform standards for “DNT” signals have not been adopted, our Site does not currently process or respond to “DNT” signals.

Why We Collect Personal Information

We use your personal data only for specific and limited purposes. We will only use your personal information as described in this Privacy Policy or as disclosed to you prior to such processing taking place. We use your personal information for the following purposes:

How We Share Personal Information

We will not sell, share, or otherwise disclose your personal information for purposes unrelated to those identified in this Privacy Policy. We may share your personal information in the following ways:


We have appropriate organizational, technical and administrative security measures to protect again the loss, misuse and alteration of personal information under our control, including encryption and anonymization.  While we make reasonable efforts to ensure the integrity and security of our network and system, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure or is ever completely secure or error-free. Please recognize that protecting your Personal Information is also your responsibility. We ask you to be responsible for safeguarding your password, secret questions and answers and other authentication information you use to access our Services.

How Long We Keep Your Information

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, unless we are otherwise required to retain it to: (a) comply with our own legal obligations; (b) resolve a dispute; or (c) enforce our legal agreements and policies.  We may also aggregate or de-identify any personal information that we collect in connection with our Services, such that the information is no longer personally identifiable or attributable to you. We may retain and use such aggregated or de-identified information for our own legitimate business purposes without restriction. If we combine any non-personal information with personal information, the combined information will be treated by us as personal information as long as it is combined.

International Data Transfers

We may transfer your personal information to entities located outside your jurisdiction for the purposes described in this Privacy Policy. In such cases, the recipient country’s laws may not provide equivalent levels of data protection as the law in your home country.  We will protect your personal information in accordance with this Privacy Policy wherever it is processed and will take appropriate contractual or other steps to protect the relevant personal information in accordance with applicable laws.

Individuals Under the Legal Drinking Age

Our Sites are not intended for people under the legal drinking age of 21. We do not seek or knowingly collect any personal information from or about individuals under the age of 21. If we become aware that we have unknowingly collected personal information from an individual under the legal drinking age, we will make commercially reasonable efforts to delete such information from our database.

Third Party Links

Information collected by a third party is governed by its privacy policies, and we have no control over, and shall not be responsible for, the third party’s use of your personal information. We encourage you to read the privacy policies of those websites and applications. Our Site may also contain links to social media platforms, and you may be given the choice of connecting to or engaging with one or more social media platforms from this Site. If you choose to do so, then depending upon your social media privacy settings, the personal information that you post, transmit, or otherwise make available on the social media platform may be viewed and/or used by third parties, and we will have no control over such viewing and use. We do not control, and are not responsible for, any use of your information by or through any of the social media platforms. By linking to or engaging with any social media platform, you will be assuming the risk that the information you provide on that platform may be viewed and/or used by third parties for any purposes, and agree that we have no control or responsibility for such third party viewing and uses.

Your Choices

If you are a California resident, please see the section below entitled, “Notice for California Residents” for more information about your privacy rights. 

If you are located in the European Economic Area, Switzerland or the United Kingdom (“European Countries”) at the time we collect your personal information please see the section below entitled “Notice for Individuals in the EEA, Switzerland and the United Kingdom” for more information about your privacy rights.

Notice for California Residents

This Privacy Notice for California Residents supplements the information contained above and applies solely to all visitors, users, and others who reside in the State of California. All references to a “consumer” in this Notice shall include the categories of data subjects covered by this Notice who are residents of the State of California.

Categories of Information Collected

We have collected the categories of personal information described in the “Personal Information that We Collect” section above from its customers within the last twelve (12) months.  We receive this information from you (including through your use of our Services); from partners; from customers; and from publicly available sources.  We do not knowingly collect or process personal information of individuals under the age of 21.

Business and Commercial Purposes 

We may use the categories of personal information listed above for the purposes described in “Why We Collect Personal Information” section above, and with the parties listed in the “How We Share Personal Information.”  In addition, for CCPA compliance purposes, we collect and share personal in performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytics services, providing storage or providing similar services:

We do not collect or process Sensitive Personal Information (as defined by the CCPA) for the purpose of inferring characteristics about individuals.

To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Personal Information We Sell or Share (for Cross-Context Behavioral Advertising)

The categories of personal information we may sell or share for advertising purposes to third parties include:

Categories of Third Parties

Categories of Personal Information


-Advertising Partners

-Analytics Providers


-Commercial Information

-Online Activity

-Providing marketing and advertising services

-Engaging in cross-context behavioral advertising


As noted in the “How Long We Keep Your Information” section above, we retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, unless we are otherwise required to retain it to: (a) comply with our own legal obligations; (b) resolve a dispute; or (c) enforce our legal agreements and policies.

Privacy Rights

This section describes California consumers’ rights and explains how to exercise those rights.

Submitting a Request to Exercise Your Rights

Access, Portability, Correction and Deletion
You may exercise these rights by: (i) emailing us at with the subject line “CCPA Rights Request”, or (ii) calling us toll-free at 707-948-1968, or sending an email with the request to Lokoya Wines. In addition, you may submit a written rights request to the appropriate address listed in the “Contact Us” section. In your request, please make clear which right you would like to exercise. Before fulfilling your request, we may be required by law to have you to verify the personal information we already have on file to confirm your identity. If we cannot verify your identity based on the information we have on file, we may request additional information from you, which we will only use to verify your identity, and for security or fraud-prevention purposes.

You may use an authorized agent to submit a rights request on your behalf.  If you use an authorized agent to submit requests on your behalf, we will require you to directly verify your identity with us, or have you directly confirm with us that the authorized agent has been authorized to act on your behalf.

We will not charge a fee or refuse to process or respond to a verifiable request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee or refusal, we will notify the customer of such and, if applicable, provide a cost estimate before completing the customer’s request.

Selling and Sharing

You may exercise your right to opt-out by clicking on the cookie in the bottom right hand corner of this page, and moving the toggle under “Do Not Sell or Share My Personal Information” to the right. For information about how to opt-out of sharing or selling on our mobile application, please see Tracking Technologies section above.

California residents may also opt-out of sharing and sales by using an opt-out preference signal for each participating browser system that you use.  We will honor and process the opt-out preference signal in a frictionless manner. To start using an opt-out preference signal, please refer to the instructions provided here.  You will need to submit a separate opt-out of sharing request on each device and browser you use to visit our Sites.  Please note that you may still receive generalized ads after opting out of targeted advertising.

California’s Shine the Light Law

California Civil Code Section 1798.83, also known as “Shine The Light” law, permits California residents to annually request information regarding the disclosure of your personal information (if any) to third parties for the third parties’ direct marketing purposes in the preceding calendar year. Upon request, we will identify the categories of information shared, and will include a list of the names and addresses of third parties with which it has been shared, for the immediately preceding calendar year. If you are a California resident and would like a copy of this notice, please submit a written request using the contact information set forth below. Please note that we are only required to respond to one request per customer each year.

Notice to Individuals in the European Economic Area (EEA), the United Kingdom and Switzerland

This section provides additional information to individuals located in the EEA, the United Kingdom or Switzerland at the time their personal information is collected by Us. All capitalized terms in this Section have the meaning as defined in the General Data Protection Regulation (GDPR) and/or, as applicable, the GDPR as it is saved and incorporated into United Kingdom law following Brexit (UK-GDPR) or the Swiss Data Protection Act (including, but not limited to “Personal Data”, “Processing”, “Controller”, “Processor”, “Data Subject”, “Consent”).

The Controller for Processing described in this Privacy Policy is: Lokoya Wines, ATTN: Customer Service, 7600 St. Helena Hwy, Napa, CA 94558. You may contact our Data Protection Officer at

Your Data Protection Rights
You have the following rights pursuant to the GDPR, where applicable, which can be exercised using the contact details of the Controller listed above:

If you have any other questions about our Processing of your Personal Data, please send a request at the contact details specified in the Contact Us section below. Please note that we may request you to provide us with additional information in order to confirm your identity and ensure that you are entitled to access the relevant Personal Data.

Legal Basis for Processing Personal Data

International Data Transfers

We may share your Personal Data with recipients (including our affiliates, service providers or business partners, as described in this Privacy Policy), located in the EEA, the UK and Switzerland; or in the United States and/or otherwise in countries outside the EEA, the UK and Switzerland which do not provide for an adequate level of data protection from an EEA, UK or Swiss law perspective. For such transfers, we will ensure that the recipients are subject to appropriate safeguards as permitted under the applicable data protection laws, e.g. by entering into appropriate data transfer agreements on the basis of EU standard contractual clauses issued by the Commission, on the basis of the UK’s International Data Transfer Agreement (IDTA) or by reliance upon the Article 49 GDPR derogations or corresponding derogations under the Swiss Data Protection Act, as applicable. Please contact us if you would like further information in that respect.

Contact Us

Any questions or requests you may have regarding our Privacy Policy should be directed via email to You can also write us at: Lokoya Wines, ATTN: Customer Service, 7600 St. Helena Hwy, Napa, CA 94558.