What we collect
- Order data:name, shipping & billing address, email, phone, date of birth (for age verification), order history.
- Payment data: processed by our payment provider; we never see your full card number.
- Site analytics: pseudonymous visitor cookies, page-view counts, country/region from IP, browser type. No PII tied to analytics.
- Marketing: email address if you join our newsletter, with explicit consent.
How we use it
We use the data to fulfill orders, verify legal age, comply with federal and state alcohol-shipping requirements, send order-related transactional email, and — only with your consent — send marketing email about new releases. We do not sell your personal data. We do not share order data with third parties except our shipping carrier (UPS) and payment processor, both bound by their own privacy obligations.
Cookies
We use first-party cookies for cart persistence, age-gate confirmation, and pseudonymous analytics. No third-party tracking or advertising cookies. You can disable cookies in your browser; the cart and age gate will stop working but you can still browse.
Your rights
Depending on where you live, you may have the right to:
- Request a copy of your personal data
- Correct or update inaccurate data
- Delete your data (subject to order-record retention laws)
- Opt out of marketing email at any time (one click in any email)
- CCPA (California): request what we collect and sell — we don't sell anything, but the right exists
- GDPR (EU/UK): request data portability and lodge complaints with your supervisory authority
Send any privacy request to support@bourbonandoak.com. We respond within 30 days.
Data retention
We retain order records for seven years to comply with federal alcohol-distribution recordkeeping. Marketing email subscribers are retained until unsubscribe. Analytics data is aggregated and retained for 24 months.
See also our Terms of Service.