Privacy Notice

PRIVACY NOTICE

Last updated: 1 May 2025

This Privacy Notice (“Privacy Notice”) describes how J. Lohr Winery Corporation and J. Lohr Vineyards (“J. Lohr”, “we,” or “us,”) handles your personal information when you:

• Visit and use our website at www.jlohr.com (“Site”)
• Visit our wine centers or sign up for our wine club services or newsletters (“Services”)
• Contact us or otherwise provide us with personal information.

The Site and our Services are collectively referred to as the “Platform”.

IF YOU ARE CALIFORNIA RESIDENT: If you are a resident of California, this entire Privacy Notice applies to you. However, please also see the section titled “Additional Notices for California Consumers” below, which will inform you in detail about our information collection practices and your specific rights.

IF YOU ARE A NEVADA RESIDENT: If you are a resident of Nevada, this entire Privacy Notice applies to you. However, please also see the section titled “Additional Notices for Nevada Consumers ” below, which will also apply to you.

You may also have certain rights if you are a resident of other states as set forth below. See “Other States” below.

We recommend that you read this Privacy Notice carefully as it provides important information about your personal information. It also tells you about your rights under the law. If, after reviewing this Privacy Notice, you have any questions or concerns, please send us an email to info@jlohr.com.

Changes to This Privacy Notice

We may update this Privacy Notice from time to time. If we make material changes to this Privacy Notice, we will post our updated Privacy Notice on the Platform, and for a reasonable period of time we will post notice of the change so it is visible to visitors after the change is posted. By your continued use of the Platform, you will be deemed to consent to the terms of the revised Privacy Notice.

What Personal Information Do We Collect?

Generally speaking, “personal information“ means any information about an individual from which that person may be identified. Personal information includes obvious things, like your name, telephone number, email address and street address, as well as less obvious things like your IP address, device ID and location information. Personal information does not, however, include information from which the identity of an individual has been definitively removed (also known as anonymous or anonymized data).

We collect the following personal information: 

• Identifiers, such as a real name, unique personal identifier, online identifier, IP address, email address, or account name when you join our wine club, register for membership, make an account, place an order for delivery or otherwise use our Platform
• Personal information categories such as a name, date of birth for purchasing of alcohol online, email address and telephone number
• Commercial information, such as records of products purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
• Internet or other similar network activity, such as browsing history or information on a user’s interaction with a website or application
• Geolocation data
• Sensory data, such as photos from our events
• Inferences drawn from other personal information, such as profile information reflecting a person’s preferences

Personal information does not include:

• Information that is not or cannot reasonably be linked to you;
• Publicly available information from government records;
• Deidentified or aggregated Consumer information; and/or
• Certain other information that is already regulated by other laws or regulations.

Note that third party delivery providers may collect information from you as well, such as your driver’s license or other government issued document to verify your age for the delivery of alcohol. However, we do not receive this information from the third party delivery providers.

SOURCE OF PERSONAL INFORMATION 

In order to provide the Platform, we collect various types of information. We collect personal information directly from you when you provide it to us, such as when you create an account with us or otherwise communicate with us verbally or in writing. We also may collect information indirectly, such as through automated technologies (e.g., cookies) or through third parties. 

Personal Information We Collect Indirectly

Automatically-Collected Information

When you visit the Platform, we (or our authorized service providers) automatically collect information about the computer or devices (including mobile devices) you use to access the Platform, and your interactions with the Platform, such as through cookies and other automated technologies. For example, we may collect and store information such as your browser type, IP address, the state or country from which you accessed the Platform, unique device identifier, the pages you view, length of time spent on pages, the manner in which you use the Platform (e.g., the content you access, view, click on, search for etc.), the date and time of your visit, error logs, and other hardware and software information, as well as other geographic and demographic information.

We may use cookies and similar tools, to assist in collecting this information, as further explained below. We may use this information to formulate statistical models about use of the Platform, enhance the Platform for our users, and provide you with information about new opportunities, and tailored content, advertising, marketing and as otherwise discussed in this Privacy Notice.

For more information about our use of cookies and similar technologies, please see Cookies and Similar Technologies below.

Location Information

We or our authorized third–party service providers also collect broad geographic location (e.g., country or city-level location) based upon IP address, in order to determine the popularity of our products in certain locations and guide product updates and marketing strategies.

Please check your specific browser or device settings to disable location services.

Third Parties

We may collect personal information from third parties, such as our service providers, in connection with and in order to facilitate a transaction or so you can make a reservation at a tasting room. 

How We Use Your Information

We will use your information for the purpose for which you provided it or for which we collected it. We may use your information to:

• Provide the Platform, including to fulfill orders.
• Process customer reservations and participation in wine tastings and events;
• Respond to your inquiries and communicate with you, including for customer service purposes.
• Better understand how our Platform is used, and what Services users may be interested in.
• Improve and enhance your experience with the Platform, including the content and general administration of the Platform.
• Market or advertise new products and services to you, such as via email or when you opt-in to receive text messages.
• Post online or in other promotional materials the photos or other digital media of our customers and guests taken while at our wine tastings and events.
• Retain records as may be required for tax, legal and financial purposes.
• Provide information to regulatory bodies when legally required, and only as outlined in this Privacy Notice.
• Comply with the law.

Payment Service Providers

For payment collection when you order online, we do not store your payment information. We use a third-party, PCI-compliant, payment processor, which collects payment information on our behalf in order to complete transactions. While we are able to view and track actual transactions, and see the last four digits of the credit or debit card you use for your purchases, we do not have access to or process your full credit card information. For more information, please visit. 

Cookies and Similar Technologies

What are Cookies, Pixels and Local Storage?

The Site uses “cookie” technology and similar online tools, such as web beacons and web pixels. “Cookies” are small files that a website stores on a user’s computer or device and through which personal information may be collected. The Site use cookies for various purposes, including to keep the information you enter on multiple pages together.

Some cookies are first-party cookies – meaning our cookies – and others are third-party cookies, meaning that they are placed on the Site by authorized third parties, such as Google, YouTube. Most web browsers automatically accept cookies, but you may set your browser to block certain cookies (consult the instructions for your particular browser on how to do this). Please note that if you decide to block cookies, this may interfere with your ability to perform certain transactions, use certain functionality, and access certain content on the Site.

We use “session” cookies, meaning that they are automatically deleted from your hard drive after you close your browser at the end of your session. Session cookies are used to optimize performance of the Site and to limit the amount of redundant data that is downloaded during a single session. We also use “persistent” cookies, which remain on your computer or device unless deleted by you (or by your browser settings). We use persistent cookies for various purposes, such as statistical analysis of performance to ensure the ongoing quality of our Site.

Generally speaking, technologies that work like cookies include “pixels”, which many websites use to learn whether you’ve interacted with certain web or email content, and “local storage”, an industry-standard technology that allows a website or application to store information locally on your computer or mobile device.

We use the following four categories of cookies on the Site (Strictly Necessary, Performance Cookies, and Targeting Cookies: 

Strictly Necessary Cookies are necessary for the Site to function. If you refuse them, you will not be able to use the Site, as the Site will not function properly without them. 

Performance Cookies help measure and enhance the performance of our Site by allowing us to count visits and traffic sources like what pages you visit the most and/or the least. The information collected is only used to analyze the how the Site is accessed and used for use to improve the Site and your experience. These cookies do not collect personally identifiable information as it is aggregated and anonymous. 

Analytics Cookies collect information designed to customize your experience on the Site and other websites, and build a profile of your interests, record information about your visit to the Site, the pages you have visited and the links you have followed, so we can tailor marketing to your interests and measure the effectiveness of our marketing strategies. This information includes device and browser information and may be shared with our advertising partners.  

Third party cookies are not installed directly by our Site, but by third parties such as advertisers. Third party cookies are used to track advertising preferences from site to site, and to gather data about users’ browsing habits in order to improve the user experience. 

Your Choices

Most web and mobile device browsers automatically accept cookies, but if you prefer, you can change your browser to prevent that or to notify you each time a cookie is set. Some browser manufacturers provide comprehensive help relating to cookie management in their products.  You may opt out of targeting cookies by clicking here [BS1] or you may see your web browser provider’s settings for more information.

Some of the advertisers and service providers that perform advertising-related services for us  may participate in the by Digital Advertising Alliance (DAA) or the Network Advertising Initiative's (NAI). You can learn more about cookies by visiting www.allaboutcookies.org, which includes additional useful information on cookies and how to block cookies using different types of browsers or mobile devices. The NAI Opt-Out Tool at www.networkadvertising.org/choices allows you to opt out from the use of information about your online activities for interest based advertising by NAI member companies.

Please note, however, that by blocking or deleting all cookies used on the Site, you may not be able to take full advantage of the Site and you may not be able to properly log on to the Site. 

Google Analytics

The Platform uses Google Analytics, a service that drops cookies and/or similar technologies to collect and store information about your device and use of the Platform. We use Google Analytics to calculate visitor, session and campaign data for analytics reports.

Learn more by reading Google’s privacy policy. You can opt-out from being tracked by Google Analytics on the Platform in a particular browser on a particular device by downloading and installing the Google Analytics Opt-out Browser Add-on for that browser.

Facebook Pixel

We use Facebook Pixels on our Platform, which tracks user behavior. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes. The data collected via Facebook Pixel is anonymous to us, meaning that we do not see the personal information of individual users, however it is stored and processed by Facebook. Facebook may link this information to your Facebook account and also use it for its own promotional purposes, in accordance with Facebook’s Privacy Policy. You may opt out by clicking here. You may also opt out by visiting the Network Advertising Initiative.

Social Plugins

We may use social plugins on our Platform and may include icons that allow you to interact with third-party social networks such as Facebook, YouTube, Twitter and Instagram. The third-party social plugins generally set a cookie when your browser creates a connection to the servers of such social networks and may transmit your personal information to the social networks. Your use of these social plugins, and your use of the products offered by these social networks, is subject to the privacy policies of the third-party social networks.

THIRD PARTY LINKS

The Platform may contain links to other websites of third parties, such as links for featured events on the Platform. This Privacy Notice does not govern any access to and use of such third-party linked websites.  Instead, the privacy policies of those third party websites will govern your access of such websites. Please check those policies before you submit any personal information to such third party websites. We do not accept any responsibility or liability for the content or operation or information practices of such third party websites.

Marketing emails and newsletters

You have the right to opt-out of marketing emails and newsletters we send you.  If you no longer want to receive marketing-related emails and newsletters, you can opt out of receiving such marketing emails at any time by clicking the “unsubscribe” link at the bottom of any marketing emails or by sending us an email with “OPT OUT” in the subject line to info@jlohr,com. You will continue to receive certain communications from us that are necessary for our Platform. 

Text Messages

By providing your telephone number and opting in to messaging; you consent and agree to receive SMS text customer services and marketing messages from J. Lohr. Message frequency is approximately 2 messages per month. Reply HELP for help, and STOP to cancel. Messaging and Data Rates May Apply. By signing up, you are confirming you are over the age of 21. 

When you opt in for our text message (SMS) service, we may also collect the information you provide, including your telephone number(s), when you read a text message, and information relevant to any request you make to opt-out from receiving text messages. We may share your SMS opt-in or consent status with third parties that help us provide our messaging services such as vendors who assist us in the delivery of text messages. We will use your information to provide you with customer service and for marketing purposes. If you do not wish to receive such notifications via text message, you can choose to opt-out of receiving such information. 

Do Not Track Signals and Global Privacy Control

We will not respond to your selection of the “Do Not Track” setting that may be offered by your browser. We do respond to the Global Privacy Control.

 Disclosure of Your Information

We may disclose your information in the following ways:

• We may disclose information about you with the following types of companies:
• Companies that perform services on our behalf, such as website hosting and ecommerce services, communication tools
• Analytics partners
• Advertising and marketing partners, such as Facebook Pixel as explained above.

In some cases, these third parties or service providers collect information directly from you via the Platform.

• We may disclose your information with any person or entity where we believe in good faith that such disclosure is necessary or otherwise appropriate to: (a) comply with the law or in response to a valid subpoena, court order, government request, or other valid legal process; (b) produce relevant documents or information in connection with litigation, arbitration, mediation, adjudication, government or internal investigations, or other legal or administrative proceedings; (c) protect the interests, rights, safety, or property of J. Lohr or others; or (d) enforce our rights or other contractual obligations.
• We may transfer your personal information to a third party in the event of any reorganization, merger, sale, joint venture, financing, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings).
• We may disclose your information with any person or entity when we have your consent.
• We may use and disclose non-personal information about you or use of the Platform, including any de-identified and aggregated data with third parties without limitation.

Security And Account Protection

We have implemented commercially reasonable physical, administrative, technical, and electronic security measures designed to protect against the loss, misuse, and alteration of your personal information. Despite our efforts, however, no security measures are perfect or impenetrable, and we do not promise that your information will remain secure.

We appreciate your help in safeguarding the integrity of your own and others’ privacy. We encourage you to let us know immediately if you suspect that any personal information you shared with us is being used contrary to this Privacy Notice.

Children’s Information

J. Lohr’s Platform is not targeted nor directed toward persons under twenty-one (21) years of age. We do not knowingly market to or collect any personal information from children under the age of twenty-one (21). If you are under twenty-one (21), you are not permitted to submit any personal information to us.

If you are a parent or guardian, and believe that we have the personal information of your minor child in our database, please contact us immediately at info@jlohr.com to request that we remove such information from our records. We encourage parents and legal guardians to monitor their children’s internet usage and to help enforce our Privacy Notice by instructing their children never to provide personal information on our Platform without their permission.

International Transfers

We are located in the United States. As such, the Platform is intended for use in the United States and the personal information that we collect is stored on servers located in the United States. This means that your personal information will be collected, processed and stored in the United States, which may have data protection laws that are different from (and sometimes less protective than) the laws of your country or region.

By sending us personal information, you agree and consent to the processing of your personal information in the United States, which may not offer an equivalent level of protection to that required in other countries (particularly the United Kingdom and European Union), and to the processing of that information by us on servers located in the United States, as described in this Privacy Notice.

How Long Do We Keep Your Personal Information? 

Your personal information is processed for the period necessary to fulfill the purposes for which it is collected, to comply with legal and regulatory obligations and for the duration of any period necessary to establish, exercise or defend any legal rights.

In order to determine the most appropriate retention periods for your personal information, we consider the amount, nature and sensitivity of your personal information, the reasons for which we collect and process your personal information, best practices, and applicable legal requirements. For instance, we cannot delete personal information when there are legal obligations to retain it (e.g., arising from tax or commercial law). This is particularly true of financial data and payment information. Additionally, we cannot delete personal information when it is needed for the establishment, exercise or defense of legal claims (“litigation hold”). In this case, the personal information can be retained as long as needed for exercising respective potential legal claims.

Contacting Us

Should you have any questions about this Privacy Notice, contact us by sending an email to info@jlohr.com or writing to us at ATTN: Controller, J. Lohr Vineyards & Wines, 1000 Lenzen Avenue, San Jose, CA 95126.

Additional Information for California Residents

This Privacy Notice for California Residents (“CCPA Notice”) supplements the information contained in the Privacy Notice and applies solely to all visitors, users, and others who reside in the State of California (“Consumers”). We have created this CCPA Notice in order to comply with the California Consumer Privacy Act of 2018 (“CCPA”).

Information Not Covered by this CCPA Notice

This CCPA Notice does not address or apply to personal information that we collect about employees, contractors or job applicants.

CATEGORIES OF PERSONAL INFORMATION WE COLLECT

The chart below describes the categories of personal information we collect, have collected and/or disclosed in the past twelve (12) months for the business purposes described above:

Selling and sharing of Personal Information

We do not sell information to third parties for profit. Like other companies that operate online, we use online analytics to measure the ways users engage with our Platform, and to provide targeted marketing. These analytics, in turn, inform how we perform online advertising. In order to provide these analytics for cross-contextual behavioral advertising and facilitate online advertising, we use third parties that collect device identifiers and place tags, cookies, beacons, and similar tracking mechanisms on our Platform as set forth in our Cookies Section in this Privacy Notice. California law may classify this limited sharing with contracted third parties as a “sale” or “share” of personal information. You may opt-out of our “selling” and “sharing” by accessing the cookie settings, by clicking here. 

Your Rights and Choices Under CCPA

The CCPA provides Consumers with specific rights regarding their personal information, provided that we are able to verify their identities. This section describes your CCPA rights and explains how to exercise those rights.

To exercise you right to opt-out of the sale or share of your personal information, please click: Do Not Sell or Share My Personal Information.

ACCESS TO SPECIFIC INFORMATION, CORRECTION RIGHTS AND DATA PORTABILITY RIGHTS

You have the right to request that J. Lohr disclose certain information to you about our collection and use of your personal information over the past twelve (12) months. Once we receive your request and verify your identity (see Exercising Access, Data Portability, and Deletion Rights), we will disclose to you:

• The categories of personal information we collected about you;
• The categories of sources for the personal information we collected about you;
• Our business or commercial purpose for collecting or selling that personal information;
• The categories of third parties with whom we share that personal information; and
• The specific pieces of personal information we collected about you (also called a data portability request).

You also have the right to request that J. Lohr correct inaccurate personal information we have about you.

We do not collect, sell or share additional categories of personal information(as defined under the CCPA). 

NOTICE OF FINANCIAL INCENTIVE

You have the right to receive equal service and price and not be discriminated against even if you exercise any of your CCPA rights. However, the CCPA allows us to offer certain financial incentive programs that may result in different prices, rates, or quality levels as long as we obtain your prior opt-in consent and the difference in price, rates or quality levels is directly related to the value that is provided to us by your personal information. We currently provide the following financial incentive program:

By participating in the above financial incentive program, you agree that the benefits are reasonably related to the value of the personal information collected and retained.

Participation in our financial incentive program is entirely optional and voluntary, and participants can withdraw from the program at any time. To withdraw from our financial incentive program, you may do so by contacting us at info@jlohr.com.
 

DELETION REQUEST RIGHTS

You have the right to request that J. Lohr delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive your request and verify your identity (see Exercising Access, Data Portability, and Deletion Rights), we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) for certain reasons as permitted and set forth in the CCPA. These reasons include (just to name a few):

• Completing the transaction for which the personal information was collected;
• Providing a good or service requested by you;
• Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, or prosecuting those responsible for such activities;
• Debugging products to identify and repair errors that impair existing intended functionality;
• Complying with a legal obligation;
• Making other internal and lawful uses of that information that are compatible with the context in which you provided it.

EXERCISING ACCESS, DATA PORTABILITY, DATA CORRECTION AND DELETION RIGHTS

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable Consumer request related to your personal information. You may also make a verifiable Consumer request on behalf of your minor child.

An authorized agent is a natural person or a business entity registered with the Secretary of State that a Consumer has authorized to act on his or her behalf. When a Consumer uses an authorized agent to submit a request to know or a request to delete, J. Lohr may require that the Consumer provide the authorized agent written permission to do so and verify their own identity directly with J. Lohr, unless the Consumer has provided the authorized agent with a valid power of attorney. J. Lohr may deny a request from an agent that does not submit proof that they have been authorized by the Consumer to act on his or her behalf.

To exercise the access, data portability, correction and deletion rights described above, please submit a verifiable Consumer request to us by sending us an email at info@jlohr.com.

You may only make a verifiable Consumer request for access or data portability twice within a twelve (12) month period. The verifiable Consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

Making a verifiable Consumer request does not require you to create an account with us. However, we do consider requests made through your password protected account as a reasonable step toward verification when the request relates to personal information associated with that specific account. Please note that the methods for verification are set forth in the CCPA, which also requires us to consider a number of factors, such as type, sensitivity and value of the personal information or risk of harm posed by unauthorized access or deletion, on a case-by-case basis.

We will only use personal information provided in a verifiable Consumer request to verify the requestor’s identity or authority to make the request.

RESPONSE TIMING AND FORMAT

We endeavor to respond to a verifiable Consumer request within forty-five (45) days of its receipt. If we require more time, we will inform you of the reason and extension period in writing.

Any disclosures we provide will only cover the twelve (12) month period preceding our receipt of the verifiable Consumer’s request. If applicable, our response we provide will also explain the reasons we cannot comply with a request. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable Consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Non-Discrimination

We will not discriminate against you in a manner prohibited by the CCPA because you exercise your CCPA rights. Please note that to use our Platform, we do require the collection of your personal information, for example to sign up or in order to complete a paid transaction. While you may request to delete your personal information under CCPA, such deletions may affect J. Lohr’s ability to offer the Platform.

QUESTIONS

If you have any questions regarding this CCPA Notice, please contact J. Lohr at info@jlohr.com. 

OTHER STATES

As applicable, a number of other US states may provide their residents with certain privacy rights. For example, residents of Colorado, Connecticut, Montana, Oregon, Texas, Utah and Virginia (and other states) may have the right to request:

• Whether we are processing your personal information, access to that information and to receive a copy of your personal information.
• Correction of your personal information that is inaccurate.
• Deletion of your personal information.
• Opt out of the processing of your personal information for the purposes of providing you with targeted advertising.

Other than as set forth in this Privacy Notice, we do not collect or process additional categories of personal information that may be subject to the laws in Colorado, Connecticut, Montana, Oregon, Texas, Utah or Virginia. We do not use personal information for profiling in furtherance of decisions that produce legal or similarly significant effects for a consumer. 

The exact scope of these rights may vary by state. To exercise any of these rights, or to appeal a decision regarding a consumer rights request please contact us at info@jlohr.com.

Additional Information for Nevada Residents

We do not sell your personal information within the scope of, and according to the defined meaning of a “sale” under, NRS 603A.