Effective date: May 13, 2026. Last updated: July 15, 2026.

Brutocao Family Vineyards ("Brutocao," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit brutocaocellars.com, shop our wines online, join our wine club, attend an event, or interact with us in person at our tasting room in Hopland, California.

This policy is written to comply with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and to accommodate residents of other U.S. states with comprehensive privacy laws (including Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia, as applicable).

Age requirement

Brutocao Family Vineyards sells wine. You must be at least 21 years old to purchase wine from us. By using this website, you affirm that you are at least 21 years of age. We do not knowingly collect personal information from anyone under the age of 21, and our online store includes age verification at checkout. If you believe a minor has provided us with personal information, please contact us and we will promptly delete the information.

Information we collect

Information you provide to us directly

We collect the personal information you provide when you:

  • Create an account or place an order through our online store (name, billing and shipping addresses, email address, phone number, date of birth for age verification, payment information).
  • Join our wine club (the King Club, Cub Club, or any other club tier we offer).
  • Sign up for our newsletter or marketing emails.
  • Contact us by email, phone, or contact form.
  • Visit our tasting room and provide your email or other details (e.g., for tasting reservations, club sign-ups, or event RSVPs).
  • Inquire about hosting an event at one of our venues.
  • Apply for employment with us.

Payment card information is processed by our payment processor and is not stored on our servers in plain form. We retain limited transaction records (last four digits, card brand, billing zip) for order verification and fraud prevention.

Information we collect automatically

When you use our website, we and our service providers may collect:

  • Device and usage data — IP address, browser type and version, device type, operating system, referring URL, pages visited, time on page, and similar log information.
  • Cookies and similar tracking technologies — small data files placed on your browser that help our site function, remember your preferences, analyze traffic, and (for some categories) personalize advertising. You can control non-essential cookies through our Opt-out Preferences page, accessible from the footer of every page.
  • Approximate geolocation — derived from your IP address, used to determine which state's wine shipping rules apply and to localize our content.

Information we receive from third parties

We may receive information about you from:

  • Our e-commerce platform (Commerce7), which processes your wine purchases and stores your account information.
  • Our email marketing platform (Klaviyo), which records your email engagement and preference data.
  • Our analytics providers (Google Analytics via Google Site Kit), which provide aggregate website traffic data.
  • Advertising platforms (e.g., Google Ads, Meta), if you arrive at our site through one of our ads.
  • Wine industry partners (e.g., wedding venue listing services such as WeddingWire or The Knot) when you contact us about events through their platforms.
  • Public sources and trade-show registrations, if applicable.

How we use information

We use personal information to:

  • Process and fulfill your wine orders, including age verification, payment processing, shipping coordination, and customer service.
  • Manage your wine club membership, including processing club shipments, sending pre-shipment notifications, and applying member benefits.
  • Send transactional communications (order confirmations, shipping updates, account notices).
  • Send marketing communications (newsletters, Field Note Friday, wine releases, event invitations, promotions) when you have consented to receive them.
  • Respond to your inquiries, support requests, and event-venue questions.
  • Improve our website, products, and customer experience through analytics and feedback.
  • Personalize the wines, content, and offers we feature for you based on your interests and purchase history.
  • Comply with applicable laws, including state and federal wine shipping regulations, tax obligations, and law enforcement requests.
  • Detect, prevent, and address fraud, security incidents, and abuse.
  • Operate, evaluate, and improve our business.

Who we share information with

We share personal information only with parties who help us run our business or as required by law. Specifically:

  • Service providers and processors:
    • Commerce7 — e-commerce platform and customer account system.
    • Klaviyo — email and SMS marketing platform.
    • Google (Google Analytics, Google Site Kit, Google Search Console) — website analytics and performance monitoring.
    • Our payment processor — to authorize and settle card transactions.
    • Shipping carriers (e.g., UPS, FedEx, GSO/Golden State Overnight) — to deliver your wine orders. Wine shipments require an adult signature at delivery.
    • Wine compliance and shipping software — to verify state-by-state shipping eligibility, calculate taxes, and file required reports.
    • Wordfence and SiteGround — for website security and hosting.
    • Yoast SEO — for on-page SEO management.
    • Complianz — for cookie consent management.
    • WordPress and related hosting infrastructure.
  • Advertising partners — limited information may be shared with advertising platforms (e.g., Google Ads, Meta/Facebook) to deliver ads, measure ad performance, and reach audiences likely to be interested in our wines. You can opt out of this sharing through our Opt-out Preferences. This advertising sharing never includes SMS/text opt-in data or consent.
  • Professional advisors — accountants, legal counsel, and similar advisors, as needed.
  • Legal and regulatory authorities — when required by law, court order, or to enforce our terms or protect our rights or the safety of others.
  • Successors — in connection with any sale, merger, or transfer of our business or assets.

We do not sell your personal information for monetary consideration. Some of the sharing described above with advertising partners may be deemed a "sale" or "share" under certain state privacy laws. You have the right to opt out of this sharing — see "Your rights" below.

Categories of personal information (CCPA disclosure)

In the past 12 months we have collected the following categories of personal information about California residents:

  • Identifiers — name, postal address, email, phone, IP address, account ID.
  • Commercial information — purchase history, wine preferences, club membership status.
  • Internet activity — browsing history on our site, interaction with our emails, advertising engagement.
  • Geolocation data — approximate (IP-based).
  • Inferences — wine preferences and product affinities derived from purchase and browsing behavior.
  • Sensitive personal information (limited): date of birth (for age verification) and payment card information (processed by our payment processor; we retain only limited records).

We collect this information from the sources listed in "Information we collect" above. We use it for the purposes listed in "How we use information." We retain it for as long as needed to fulfill the purposes described, comply with legal obligations, resolve disputes, and enforce our agreements.

Sale or sharing of personal information

We do not sell personal information for money. We do share limited personal information — primarily online identifiers and browsing activity — with advertising partners for cross-context behavioral advertising. Under California law (CCPA/CPRA), this sharing may be classified as a "sale" or "share." The above sale or sharing excludes text messaging (SMS) originator opt-in data and consent—this information is never shared with any third parties, including advertising partners, for their marketing purposes.

You have the right to opt out of this sharing. Visit our Opt-out Preferences page (also accessible by clicking "View preferences" in the footer of every page) and toggle the Marketing category off. We honor Global Privacy Control (GPC) signals from your browser as a valid opt-out request.

Your rights

Depending on where you live, you may have one or more of the following rights regarding your personal information:

  • Right to know — request the categories and specific pieces of personal information we have collected, used, disclosed, or sold/shared about you.
  • Right to delete — request that we delete personal information we have collected from you, subject to certain exceptions (e.g., information needed to complete a transaction, comply with law, or for security purposes).
  • Right to correct — request that we correct inaccurate personal information.
  • Right to opt out of sale or sharing — direct us to stop selling or sharing your personal information for cross-context behavioral advertising.
  • Right to limit use of sensitive personal information — direct us to limit the use of sensitive personal information to specified purposes.
  • Right to non-discrimination — we will not deny goods or services, charge different prices, or provide a different level of service because you exercised any of these rights.
  • Right to data portability — request a copy of your personal information in a portable format (where applicable under state law).
  • Right to appeal — appeal our decision regarding your request (where applicable under state law).

How to exercise your rights

To exercise any of the rights above, you can:

  • Use the form on our Opt-out Preferences page to submit a privacy request directly.
  • Email us at info@brutocaocellars.com with the subject line "Privacy Request."
  • Call us at (707) 744-1664.
  • Mail us at: Brutocao Family Vineyards, Attn: Privacy Request, 13500 S. Hwy 101, Hopland, CA 95449.

We will need to verify your identity before processing certain requests. Verification typically involves confirming information we have on file (e.g., name and email associated with your account or order). We will respond to verifiable requests within 45 days (extendable by an additional 45 days where reasonably necessary, with notice). You may also designate an authorized agent to make a request on your behalf; we will require written authorization and proof of the agent's identity.

Cookies and tracking technologies

Our site uses cookies and similar technologies for the following purposes:

  • Functional — necessary for the site to operate (e.g., your shopping cart, login session, security). These are always active.
  • Statistics / analytics — help us understand how visitors use our site (Google Analytics). You can opt out of these.
  • Marketing — used for advertising personalization and measurement (Google Ads, Meta Pixel where applicable, Klaviyo email tracking). You can opt out of these.

Manage your preferences anytime at our Opt-out Preferences page. You can also manage cookies directly through your browser settings, though disabling all cookies may impact site functionality (e.g., your cart will not persist).

Email and SMS marketing

If you opt in to our email marketing (newsletter, Field Note Friday, releases, event invitations), you can unsubscribe anytime via the "unsubscribe" link at the bottom of any email. Unsubscribing from marketing email does not affect transactional messages about your orders or wine-club membership.

Mobile messaging (SMS/text). We offer an optional text-messaging program for wine-club news, new releases, and events. You join only by affirmatively opting in through our age-gated sign-up form or subscribe page — you must be 21 or older, and we collect your date of birth at opt-in to verify age. Messages are recurring and automated; frequency is approximately 2–4 per month; message and data rates may apply. You can opt out anytime by replying STOP (or QUIT/END/CANCEL/UNSUBSCRIBE/OPT-OUT), or by contacting us. We do not sell or share your mobile opt-in information or SMS consent with third parties or affiliates for marketing purposes. Our SMS program is powered by Klaviyo; see our SMS Terms for full details.

Data security

We use a combination of technical and organizational measures to protect personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include encrypted transmission (TLS/SSL) for data transmitted between your browser and our site, restricted access to personal information on a need-to-know basis, and ongoing security monitoring by Wordfence and our hosting provider. No method of transmission over the internet or electronic storage is 100% secure, so we cannot guarantee absolute security.

Data retention

We retain personal information for as long as needed to provide our services, comply with legal and tax obligations, resolve disputes, and enforce our agreements. Specifically:

  • Order and transaction records — retained for the period required by applicable tax and alcohol licensing law (typically at least 4 years).
  • Wine club membership records — retained for the life of the membership plus a reasonable retention period after cancellation.
  • Email marketing data — retained until you unsubscribe; we may retain a record of your unsubscribe choice to honor it going forward.
  • Analytics data — retained for the standard period defined by our analytics provider (typically 14 months for Google Analytics).

International users

Brutocao Family Vineyards operates in the United States, and our wines are primarily sold and shipped within the United States. If you access our website from outside the United States, please be aware that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

Third-party links

Our website may contain links to third-party websites, applications, or services that we do not own or control. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before sharing personal information with them.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide notice through our website, email, or other means. We encourage you to review this policy periodically.

Contact us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Brutocao Family Vineyards
Attn: Privacy
13500 S. Hwy 101
Hopland, CA 95449
Phone: (707) 744-1664
Email: info@brutocaocellars.com

For California residents, you may also contact the California Attorney General's office at oag.ca.gov/privacy with privacy-related complaints.