Privacy Policy

Please read this Privacy Policy carefully as it contains essential information on who we are and how and why we collect, store, use, and share your personal information. It also explains your rights in relation to your personal information and how to contact us or supervisory authorities in the event you have a complaint.

We collect, use, and are responsible for certain personal information about you. When we do so we are subject to various laws in the United States, including but not limited to the California Consumer Privacy Act of 2018 (“CCPA”) and the Nevada Privacy Law, and the General Data Protection Regulation (“GDPR”) which applies across the European Union, and we are responsible as “controller” of that personal information for the purposes of those laws.

  1. Age of Consent. By using this website, you represent that you are at least 21 years of age. Our website is not directed to, and we do not knowingly collect personal information from, persons under the age of 21. If you are under 21 years of age and have entered our website by providing a false date of birth, you must immediately leave our website. Under no circumstances may you use our website or submit personal information to us if you are under 21 years of age.

  2. Personal Information. “Personal Information” means information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with an individual or household. Your name, email address, age, and IP address are all examples of data that may be Personal Information. Per our Cookie Policy below, we treat “cookies” as Personal Information since your IP address can help us identify you.

  3. Personal Information We Collect About You. We collect and store Personal Information directly from you when you interact with us on our website, via our advertisements on Facebook and Google, through our third-party online e-commerce service providers, such as Shopify and Vinoshipper, or when you submit it to us online on our website, by phone, or by email, including when you place orders. Categories of Personal Information that we collect about you when you interact with us online or offline may include the following:

  • Identification data, including name, mailing address, IP address, birthday and gender;

  • Contact information, including email address, phone number, and mailing address;

  • Age data, if you are of legal age, so that we can sell you our products;

  • Internet or other electronic network activity information through cookies or use of our online advertisements on Google and Facebook (e.g., browsing history, search history, and information regarding a consumer’s interaction with a website, application, or advertisement);

  • Information you provide to create an online account, including password and username;

  • Location data, for example, you can enter your zip code to know where to find your favorite products near you;

  • Membership data, such as contact preferences;

  • Financial data, such as credit card numbers, billing addresses, and other financial information required to allow you to acquire our products;

  • Order information related to products you have purchased through our third-party online e-commerce service providers, such as Shopify and Vinoshipper;

  • Preference data, such as the flavors that you prefer and products you have purchased;

  • Information you share with us in connection with surveys, contests, or sweepstakes and promotions;

  • Information you provide over the phone, such as inquiries about products or other personal information you choose to communicate to us;

  • Information you submit to us directly via email or other communication methods including, but not limited to, general inquiries, media inquiries, and customer support; and

  • Inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

This Personal Information is required to provide products to you. If you do not provide personal information we ask for, it may delay or prevent us from providing products to you.

  1. How Your Personal Information is Collected. We collect most of this Personal Information directly from you via our website. However, we may also collect information from cookies on our website as well as through our online advertisements on Google and Facebook as described below.

  2. How and Why We Use Your Personal Information. Under data protection laws, we can only use your Personal Information if we have a proper reason for doing so, such as your giving consent to such use or for our legitimate business interests. When you provide us with Personal Information to complete a transaction, verify your credit card, place an order, arrange for the delivery or return of a purchase, we imply that you consent to our collecting such Personal Information and using it for that specific reason only. If we ask for your Personal Information for a secondary reason, like marketing products to you, we will either ask you directly for your expressed consent or provide you with an opportunity to refuse such consent. We use your Personal Information to support other typical business activities, such as to:

  • Inform you about changes to our legal terms or business practices;

  • Reply to your inquiries;

  • Process your orders and deliver our products to you, including through our third-party online e-commerce service providers, such as Shopify and Vinoshipper;

  • If you join our mailing list, send you promotional information on our products.

  • Display advertisements related to products we think may interest you on our website;

  • Invite you to participate in surveys on your satisfaction with our products; and

  • Administer, maintain, and communicate with you about contests and promotions in which you have chosen to participate.

  1. How do I withdraw my consent? If after you opt-in you change your mind, you may withdraw your consent for us to contact you, or for the continued collection, use, or disclosure of your information, at any time, by contacting us by email at info@2townsciderhouse.com or by mail at the following address: 2 Towns Ciderhouse, 33930 SE Eastgate Circle, Corvallis, OR, 97333, United States.

  2. Promotional Communications. We may use your Personal Information to send you updates by email, text message, telephone, or mail about our products including exclusive offers, promotions, or new products.

We have a legitimate interest in processing your Personal Information for promotional purposes. This means we do not usually need your consent to send you promotional communications. However, where consent is needed, we will ask for this consent separately and clearly.

You have the right to opt-out of receiving promotional communications at any time by contacting us by email at info@2townsciderhouse.com or by mail at the following address: 2 Towns Ciderhouse, 33930 SE Eastgate Circle, Corvallis, OR, 97333, United States.

  1. Who We Share Your Personal Information With?  We share Personal Information with:

  • Our affiliates, including companies within the 2 Towns Ciderhouse group;

  • Our online e-commerce service providers, such as Shopify and Vinoshipper, which we use to help deliver our products to you;

  • Our delivery partners in order to deliver our products to the right location;

  • Other third parties we use to help us run our business, such as marketing agencies or website hosts;

  • Promotional vendors, who help us with contests and promotions in which you may choose to participate;

  • IT service providers, such as our data hosting provider; and

  • Third parties approved by you, including search engine and social media websites you choose to link your account to or third-party payment providers (e.g., payment gateways and other payment transaction processors).

We only allow our service providers to handle your Personal Information if we are satisfied that they act appropriately to protect your Personal Information. Certain third parties have their own privacy policies with respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your Personal Information will be handled by these providers.

Please note that if you provide information to us via a social media website or participate in a social media website linked to our website, you consent to our use of your information for any reason in accordance with this Privacy Policy as if it were submitted to us directly via our website. This website may include links to third parties, including social media. If you click on these links, you are leaving our website and the collection, use, and disclosure of your Personal Information will be subject to these third parties’ privacy practices, terms of use, and other contractual documentation listed on such websites.

  1. Payment. If you choose a direct payment gateway to complete your purchase, then our third-party online e-commerce service providers, such as Shopify and Vinoshipper, may store your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted. All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express, and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. Please review Shopify’s Privacy Policy at https://www.shopify.com/legal/privacy and Vinoshipper’s Privacy Policy at https://vinoshipper.com/info/privacy.htm for further details.

  2. Personal Information We Disclosed for a Business Purpose. In the preceding 12 months, we have disclosed to one or more third parties the following categories of Personal Information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household:

  • Identification data, including name, mailing address, IP address, birthday and gender;

  • Contact information, including email address, phone number, and mailing address;

  • Age data if you are of legal age so that we can sell you our products;

  • Internet or other electronic network activity information through cookies or use of our online advertisements on Google and Facebook (e.g., browsing history, search history, and information regarding a consumer’s interaction with a website, application, or advertisement);

  • Information you provide to create an online account, including password and username;

  • Location data, for example, you can enter your zip code to know where to find your favorite products near you;

  • Membership data, such as contact preferences;

  • Financial data, such as credit card numbers, billing addresses, and other financial information required to allow you to acquire our products;

  • Order information related to products you have purchased through our third-party online e-commerce service providers, such as Shopify and Vinoshipper;

  • Preference data, such as the flavors that you prefer and products you have purchased;

  • Information you share with us in connection with surveys, contests, or sweepstakes and promotions;

  • Information you provide over the phone, such as inquiries about products or other personal information you choose to communicate to us;

  • Information you submit to us directly via email or other communication methods including, but not limited to, general inquiries, media inquiries, and customer support; and

  • Inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

 

  1. Where Your Personal Information is Held. Information may be held at our offices and those of our third-party agencies, service providers, representatives, and agents as described above (see above: “Who We Share Your Personal Information With”). To protect your Personal Information, we take reasonable precautions and strive to follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered, or destroyed.

  2. How Long Your Personal Information Will Be Kept. We will keep your Personal Information while you have an account with us or while we are providing products to you. Thereafter, we will keep your Personal Information for as long as is necessary:

  • To respond to any questions, complaints, or claims made by you or on your behalf;

  • For our valid business purposes;

  • To defend our legal rights;

  • To enforce our agreements;

  • To show that we treated you fairly; or

  • To keep records required by law.

We will not retain your Personal Information for longer than necessary for the purposes set out in this Privacy Policy. Different retention periods apply for different types of Personal Information. When it is no longer necessary to retain your Personal Information, we will delete or anonymize it.

  1. Your Rights Under the GDPR. If you are a user located in the European Union, you have the right under the GDPR to exercise the following:

Right to Access

You have the right to be provided with a copy of your Personal Information (the right of access)

Right to Rectification

You have the right to require us to correct any mistakes in your Personal Information

Right to be Forgotten

You have the right to require us to delete your Personal Information—in certain situations

Right to Restriction of Processing

You have the right to require us to restrict processing of your Personal Information—in certain circumstances, e.g., if you contest the accuracy of the data

Right to Data Portability

You have the right to receive the Personal Information you provided to us, in a structured, commonly used, and machine-readable format and/or transmit that data to a third party—in certain situations

Right to Object

You have the right to object:

  • at any time to your Personal Information being processed for direct marketing (including profiling);

  • in certain other situations to our continued processing of your Personal Information, e.g., processing carried out for the purpose of our legitimate interests.

Right Not to be Subject to Automated Individual Decision-Making

You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.

  1. Your Rights Under the CCPA . If you are a California resident, you have the right under the CCPA to exercise the following:

Disclosure of Personal Information We Collect About You

You have the right to know:

  • the categories of Personal Information we have collected about you;

  • the categories of sources from which the Personal Information is collected;

  • the categories of third parties with whom we share Personal Information, if any; and

  • the specific pieces of Personal Information we have collected about you.

Please note that we are not required to:

  • retain any Personal Information about you that was collected for a single one-time transaction if, in the ordinary course of business, that information about you is not retained;

  • reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered Personal Information; or

  • provide the Personal Information to you more than twice in a 12-month period.

Personal Information Used for a Business Purpose

In connection with any Personal Information, you have the right to know the categories of Personal Information that we disclosed about you for a business purpose.

You have the right under CCPA to opt-out of the disclosure of your Personal Information. If you exercise your right to opt-out of the disclosure of your Personal Information, we will refrain from disclosing your Personal Information unless you subsequently provide express authorization for the disclosure of your Personal Information. To opt-out of the disclosure of your Personal Information, please contact us by email at info@2townsciderhouse.com or by mail at the following address:

2 Towns Ciderhouse

33930 SE Eastgate Circle

Corvallis, OR, 97333, United States

 

Right to Deletion

Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:

  • delete your Personal Information from our records; and

  • direct any service providers to delete your Personal Information from their records.

Please note that we may not delete your Personal Information if it is necessary to:

  • complete the transaction for which the Personal Information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;

  • detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity or prosecute those responsible for such activity;

  • debug to identify and repair errors that impair existing intended functionality;

  • exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;

  • comply with the California Electronic Communications Privacy Act;

  • engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;

  • enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;

  • comply with an existing legal obligation; or

  • otherwise use your Personal Information, internally, in a lawful manner that is compatible with the context in which you provided the information.

Protection Against Discrimination

You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA. This means we cannot, among other things:

  • deny goods or services to you;

  • charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;

  • provide a different level or quality of goods or services to you; or

  • suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

Please note that we may charge a different price or rate or provide a different level or quality of goods to you if that difference is reasonably related to the value provided to our business by your Personal Information.

  1. Nevada Privacy Law. Nevada residents have the right to submit a verified request directing us not to sell their Personal Information. If you are a Nevada resident and would like to submit such a request, please send your request to info@2townsciderhouse.com and state that you are “Exercising the Right to Deletion and to Know About Information Collected.”

  2. Cookie Policy. Cookies are alphanumeric identifiers or small data text files that are sent from a server during a browsing session. A cookie is a small piece of information that is placed on your computer, mobile phone, or other device when you visit certain websites. When we refer to “cookies” we include other technologies with similar purposes, such as identifiers.

We use cookies for the following reasons:

  • To improve your experience on our website;

  • To remember some of your preferences;

  • To perform analytics and understand the advertisements that you like, how you ended up on our website and from what type of devices;

  • To offer ad personalization to present you with relevant ads of our products.

  • If you subscribe to our mailing list, we can use cookies to know if you opened your e-mail and if so, from what device.

We use the following types of cookies:

  • First Party Cookies – First party cookies are issued by our website domain, and they can only be set or retrieved by us. They are used for purposes specific to us and enable you to use our website.

  • Performance Cookies – Performance cookies collect information about how visitors use a website, such as the pages that visitors go to most often, and whether they get an error messages from our web pages.

  • Third-Party Cookies – Third-party cookies are usually placed on the website via scripts or tags added to the website. These cookies are used to deliver advertising more relevant to you and your interests and can remember that you visited a website and share this information with third parties for ad personalization purposes.

We use both session cookies and persistent cookies as described below:

  • Session cookies – These are files set temporarily on your device and deleted once you close your browser. They are not stored nor transmitted to third parties.

  • Persistent cookies – These remain active on your device for some time, which may vary from a few days to two years after your visit on our website.

Here is a non-exclusive list of cookies that we use:

  • session_id – Unique token, sessional. It allows Shopify to store information about your session (referrer, landing page, etc.).

  • shopify_visit – No data held, persistent for 30 minutes from the last visit. It is used by our website provider’s internal stats tracker to record the number of visits.

  • shopify_uniq – No data held, expires midnight (relative to the visitor) of the next day. It counts the number of visits to a store by a single customer.

  • cart, unique token, persistent for 2 weeks, stores information about the contents of your cart.

  • secure_session_id – Unique token, sessional.

  • storefront_digest – Unique token, indefinite. If the shop has a password, this is used to determine if the current visitor has access.

 

  1. Behavioral Remarketing. We use remarketing services to advertise on third party websites after you have visited our website. We and our third-party vendors use cookies to inform, optimize, and serve ads based on your past visits to our website.

Google

Our website uses Google AdWords, which is an online advertising program from Google Inc. As part of Google AdWords, we use so-called conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. The cookies expire after 30 days and are not used for personal identification of the user. Should the user visit certain pages of the website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and proceeded to that page.

Each Google AdWords advertiser, such as 2 Towns Ciderhouse, has a different cookie. Thus, cookies cannot be tracked using the website of an AdWords advertiser. The information obtained using the conversion tracking cookie is used to create conversion statistics for our own use. We are told the total number of users who clicked on our ad and were redirected to a conversion tracking tag page. However, we do not obtain any information that can be used to personally identify users. If you do not want to participate in tracking, you can opt-out of this by easily disabling the Google Conversion Tracking cookie by changing your browser settings. In doing so, you will not be included in the conversion tracking statistics. Conversion cookies are stored based on Article 6(1)(f) GDPR. We have a legitimate interest in analyzing user behavior to optimize both this website and our advertising. For more information about Google AdWords and Google Conversion Tracking, see the Google Privacy Policy: https://www.google.com/policies/privacy.

Facebook

We may display personalized ads to you when you are using Facebook through a tool offered by Facebook called the Custom Audience Tool. This tool allows us to personalize our ads based on your shopping experience with us. We do not share your shopping history with Facebook. The tool lets us convert your email address that you have provided to us to a unique number that Facebook uses to match to unique numbers Facebook generates from email addresses of its users. With your permission, we can also use the Facebook Conversion Tracking Pixel to record how efficient our advertisements are for statistical and market research purposes. The collected data remains anonymous. This means that we cannot see the personal information of individual users. Facebook may connect the data with your Facebook account and use the data for their own advertising purposes, in accordance with Facebook’s Data Policy.

If you want to opt-out from Facebook Custom Audience Tool and Conversion Tracking Pixels, you can do so by modifying your Ad Preferences on Facebook. Check out Facebook’s privacy policy to learn more about protecting your privacy: https://www.facebook.com/about/privacy/. You can also deactivate the custom audiences remarketing feature in the Facebook Ads Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

  1. Keeping Your Personal Information Secure. We have appropriate security measures in place to prevent Personal Information from being accidentally lost or used or accessed in an unauthorized way. We limit access to your Personal Information to those who have a genuine business need to access it. Those processing your information will do so only in an authorized manner and are subject to a duty of confidentiality. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

 

If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with an AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

 

However, we cannot guarantee with 100% certainty that your Personal Information will be secure from theft, loss, alteration, misuse, or unauthorized access, nor do we make any representation as to the reasonableness, efficacy, or appropriateness of the measures we use to safeguard such information. We are not responsible for any attempt made by a third party to circumvent our privacy and security protocols.

 

BY USING OUR WEBSITE, YOU CONSENT TO THE TRANSFER AND USE OF YOUR PERSONAL INFORMATION IN ACCORDANCE WITH THIS PRIVACY POLICY.

  1. Changes to This Privacy Policy. This Privacy Policy was published on 3/1/2022 and last updated on 5/10/202. We reserve the right to modify this Privacy Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it. If we are acquired or merge with another company, we reserve the right to transfer your personal information to a successor entity (or potential buyer) if we sell or transfer our business operation. We reserve the same right in case of merger, acquisition, bankruptcy, reorganization, or sale of assets. In addition, in the event we become the subject of an insolvency proceeding, whether voluntary or involuntary, we or our liquidator, administrator, receiver, or administrative receiver may sell, license, or otherwise dispose of such information in a transaction approved by the court.

  2. Accessibility. Consumers with disabilities may access this Privacy Policy by contacting us by email at info@2townsciderhouse.com, via telephone or TTY to (541) 207-3915, or by mail at the following address

2 Towns Ciderhouse

33930 SE Eastgate Circle

Corvallis, OR, 97333, United States

  1. How to Contact Us. If you would like to access, correct, amend, or delete any Personal Information we have about you, register a complaint, or simply want more information, please contact our Privacy Compliance Officer by email at info@2townsciderhouse.com or by mail at the following address:

2 Towns Ciderhouse

33930 SE Eastgate Circle

Corvallis, OR, 97333, United States