Privacy Policy

1. Information we collect

We collect only the information needed to run our shop and serve you.

Information you give us

• When you place an order: your name, shipping address, email address, and the items you buy. Payment is completed on our payment processor's secure checkout page — we never see or store your full card number; your card details are entered directly with Stripe.
• When you use the contact form: your name, email address, the subject you select, and your message.
• When you sign up for our newsletter: your email address.

Information collected automatically

• Basic technical data: like most websites, our hosting provider automatically records standard request information — such as your IP address, browser and device type, and the pages and files requested with their timestamps — to deliver the site and keep it secure.
• Your shopping cart: the items in your cart are stored in your browser's local storage on your own device. This stays on your device and is only sent to us (as item IDs and quantities) at the moment you choose to check out.

2. How we use your information

• To process, fulfill, and ship your orders, and to send order and receipt confirmations.
• To respond to your questions and provide customer support.
• To send you our newsletter and offers — only if you subscribed — with an unsubscribe link in every email.
• To operate, maintain, secure, and improve our website, and to detect and prevent fraud, spam, or abuse.
• To comply with our legal, tax, and accounting obligations.

We do not use your information for automated decision-making, and we do not sell or rent it.

3. How & with whom we share your information

We never sell or rent your personal information. We share it only with the trusted service providers that help us run the shop, and only to the extent each one needs it to perform its service. Each provider is bound by its own privacy and security commitments:

• Stripe — processes payments and hosts our secure checkout. Receives your name, email, shipping address, and payment details. (Stripe Privacy Policy)
• Mailchimp — delivers our newsletter. Receives your email address if you subscribe. (Mailchimp/Intuit Privacy Policy)
• Amazon Web Services (AWS) — hosts our website and delivers contact-form messages to us by email. Handles site request data and the contents of messages you send us.
• Shipping carriers — receive your name and shipping address so your order can be delivered.

How the information is shared (method of disclosure)

Information is transmitted electronically to these providers over secure, encrypted (HTTPS/TLS) connections, and is never posted publicly. We may also disclose information when required to do so by law, in response to a valid legal request, to protect the rights, property, or safety of our customers or business, or in connection with a merger, sale, or transfer of our business (in which case we will require the recipient to honor this policy).

4. How we protect your information

• Encryption in transit: our entire site, checkout, and all form submissions are served over HTTPS/TLS, so data is encrypted as it travels between your device and our providers.
• Payment security: card payments are handled entirely by Stripe, a certified PCI-DSS Level 1 payment provider. We do not store card numbers on our systems.
• Data minimization: we collect and keep only what we need, which reduces risk if anything ever goes wrong.
• Trusted infrastructure: our site and email run on established providers (AWS, Stripe, Mailchimp) that maintain their own industry-standard technical and organizational safeguards, with access limited to those who need it.

5. Cookies & local storage

Our website does not use advertising or tracking cookies. The only data we store on your device is a small amount of functional local storage used to remember the items in your shopping cart between page views. You can clear this at any time through your browser's settings, and doing so will simply empty your cart.

6. How long we keep it

We keep your information only for as long as needed for the purposes described here — for example, to fulfill your order and meet legal, tax, and accounting requirements. Order records are retained as required by law. Newsletter details are kept until you unsubscribe.

7. Your choices & rights

• Marketing emails: unsubscribe any time using the link at the bottom of any newsletter, or by emailing us.
• Access, correction, or deletion: you may ask us to access, update, or delete the personal information we hold about you. Email us at the address below and we will respond in line with applicable law.

Depending on where you live, you may have additional rights under your local privacy laws; we honor those rights where they apply.

8. Children's privacy

Our website is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" above and post the updated version on this page. Material changes will be reflected here, so we encourage you to review it periodically.

10. Contact us

If you have any questions about this Privacy Policy or how your information is handled, please reach out:

• Email: 2girlswine@gmail.com
• Website: 2girlswineandgarden.com