Privacy Policy

This Privacy Policy describes how Familiar Ventures, LLC, doing business as The Leopard Mark Beverage Group ("Leopard Mark," "we," "us," or "our"), collects, uses, and shares personal information when you visit or interact with theleopardmark.com, sunlightgroove.com, cantinesca.com, our online merchandise store, and any related pages and services we operate (collectively, the "Sites"). This Privacy Policy is important and affects your legal rights, so please read it carefully.

By accessing or using the Sites, you acknowledge the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Sites.

THE SITES ARE INTENDED SOLELY FOR INDIVIDUALS WHO ARE 21 YEARS OF AGE OR OLDER, OR OF LEGAL DRINKING AGE IN THE JURISDICTION FROM WHICH THE SITES ARE ACCESSED, WHICHEVER IS GREATER. WE DO NOT KNOWINGLY COLLECT PERSONAL INFORMATION FROM ANYONE UNDER THE LEGAL DRINKING AGE. IF YOU ARE UNDER THE LEGAL DRINKING AGE IN YOUR JURISDICTION AND HAVE ENTERED THE SITES BY PROVIDING A FALSE DATE OF BIRTH, YOU MUST IMMEDIATELY LEAVE THE SITES. IF YOU BELIEVE SOMEONE UNDER THE LEGAL DRINKING AGE HAS PROVIDED US WITH PERSONAL INFORMATION, PLEASE CONTACT US AT INFO@THELEOPARDMARK.COM SO THAT WE MAY DELETE IT.

Information you provide directly. We collect personal information that you voluntarily provide to us, including:

• Contact information, such as your name and email address, when you subscribe to our email list, contact us, or submit a form on the Sites;
• Age confirmation, when you attest through our age gate that you are of legal drinking age. The gate is a simple yes/no attestation — we do not ask for, collect, or store a date of birth. The gate sets only a temporary confirmation that you passed it, which is not linked to any marketing data. If you indicate that you are under the legal drinking age, access is declined and no information is collected;
• Order information, such as your name, email address, shipping address, and order details, when you purchase merchandise through our online store; and
• Career materials, such as a resume and related information, if you submit an expression of interest or application to us.

Payment information. Purchases on our online store are processed by Shopify and its payment processors. Your payment card details are collected and processed by those providers, not by us; we do not receive or store your full payment card number. Please review Shopify's privacy policy for information about its handling of your payment information.

Information collected automatically. When you use the Sites, we and our service providers automatically collect certain information through cookies and similar technologies, including your IP address, browser and device type, operating system, referring website, pages viewed, links clicked, and the dates, times, and duration of your visits (collectively, "Usage Data").

We do not collect precise geolocation data, biometric information, or any category of sensitive personal information beyond what is described above, and we do not use personal information to train artificial intelligence systems.

We use cookies and similar technologies to operate the Sites, remember your preferences (including your age-gate confirmation), and understand how visitors use the Sites.

Consent comes first. Strictly necessary cookies (such as the first-party session cookie that secures our forms, the age-gate confirmation, and your cookie-consent choice itself) are always active because the Sites cannot function without them. All other cookies and tracking technologies — including analytics — load only if you allow them through the analytics checkbox presented at our age gate when you first enter the Sites. The checkbox is optional and never conditions your entry: you can untick it and enter all the same, and unticking it means nothing non-essential loads. Your choice is remembered, and you may change or withdraw your consent at any time through the "Cookie Settings" link in the Site footer, after which the relevant technologies will no longer load. We also honor the Global Privacy Control signal, which keeps analytics off regardless of the checkbox.

We use Google Analytics to help us understand Site traffic and usage. Google Analytics uses cookies to collect Usage Data and loads only after you consent. You can learn how Google collects and processes data at google.com/policies/privacy/partners, and you can additionally opt out of Google Analytics by installing the Google Analytics opt-out browser add-on available at tools.google.com/dlpage/gaoptout.

Marketing emails we send through Klaviyo may contain a small pixel or coded links that tell us whether an email was opened or a link was clicked; we use this only to measure and improve our email program. You can stop this measurement at any time by unsubscribing from marketing emails.

You can also manage or disable cookies through your browser settings. If you disable cookies, some features of the Sites may not function as intended.

We do not use cookies or tracking technologies for cross-context behavioral or targeted advertising, and we do not permit third parties to collect personal information across the Sites for their own advertising purposes.

We use the information we collect to:

• Provide, operate, maintain, and improve the Sites;
• Fulfill merchandise orders and communicate with you about them;
• Send you marketing emails you have signed up for, and transactional or administrative communications;
• Respond to your questions, requests, and submissions;
• Verify eligibility to view the Sites (legal drinking age);
• Evaluate career interest and application materials;
• Analyze Site usage and performance;
• Detect, prevent, and investigate fraud, security incidents, and other potentially illegal or prohibited activity; and
• Comply with our legal obligations and enforce our Terms of Use and other agreements.

We do not sell your personal information for money, and we do not sell or share your personal information for cross-context behavioral or targeted advertising.

We share personal information only in the following circumstances:

• Service providers. We share information with vendors that perform services on our behalf and are permitted to use it only to provide those services — including Shopify (e-commerce and payment processing), Klaviyo (email marketing), Google (analytics), and our website hosting provider.
• Legal compliance and protection. We may disclose information if we determine in good faith that disclosure is needed to comply with applicable law, regulation, or legal process; to protect the rights, property, or safety of you, Leopard Mark, or others; or to enforce this Privacy Policy or our other agreements.
• Business transfers. We may transfer information to another company in connection with a proposed or actual merger, sale, acquisition, financing, or other change of ownership or control of Leopard Mark, in whole or in part. We will make reasonable efforts to notify you before your information becomes subject to materially different privacy practices.

We may also use and disclose information that has been de-identified or aggregated so that it no longer reasonably identifies you, for any lawful purpose. Where we maintain de-identified information, we maintain and use it without attempting to re-identify it, except as permitted by law to test the effectiveness of our de-identification.

If you subscribe to our email list, we will use your email address to send you marketing communications through our email service provider, Klaviyo. Signing up is voluntary and is not a condition of any purchase. You may unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us at info@theleopardmark.com. We will continue to send transactional emails (such as order confirmations) as needed even if you unsubscribe from marketing.

Depending on where you live, you may have rights under state privacy laws — including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Colorado Privacy Act, the Connecticut Data Privacy Act, the Virginia Consumer Data Protection Act, and similar laws in other states. Although some of these laws may not currently apply to a business of our size, we extend the following rights to all U.S. residents as a matter of policy, to the extent applicable and subject to verification:

• Right to Know / Access. You may request information about the personal information we have collected about you, including the categories collected, the sources, the purposes, the categories of third parties with whom it has been shared, and the specific pieces of personal information we hold.
• Right to Correct. You may request that we correct inaccurate personal information.
• Right to Delete. You may request that we delete personal information we have collected from you, subject to legal exceptions.
• Right to Portability. You may request a copy of your personal information in a portable format.
• Right to Opt Out of Sale, Sharing, and Targeted Advertising. We do not sell personal information or share it for targeted advertising. If our practices ever change, we will update this Privacy Policy and provide a means to opt out first.
• Right to Limit Use of Sensitive Personal Information. We do not use or disclose sensitive personal information for purposes that would require a right to limit under applicable law.
• Freedom from Discrimination. We will not discriminate against you for exercising any of these rights — we will not deny you goods or services, charge you different prices, or provide a different level or quality of service because you exercised a privacy right.

How to exercise your rights. Submit a request by emailing info@theleopardmark.com with the subject line "Privacy Request," or by writing to us at the address in Section 15. We will need to verify your identity before fulfilling a request, which may require you to confirm information we already hold about you. You may use an authorized agent to submit a request on your behalf; we will require proof of the agent's authorization and may still require you to verify your identity directly.

Appeals. If we decline to act on your request, you may appeal our decision by replying to our response or emailing info@theleopardmark.com with the subject line "Privacy Appeal." If your appeal is unsuccessful, you may contact your state Attorney General.

For California residents: in the preceding 12 months we have collected the following categories of personal information, as defined by the CCPA/CPRA: identifiers (name, email address, mailing address, IP address); commercial information (merchandise orders and purchase history); internet or other electronic network activity (Usage Data described above); and professional or employment-related information (career materials you choose to submit). We collect these categories from you directly and from your device, for the purposes described in Section 4, and disclose them to the categories of recipients described in Section 5 (service providers; parties to a business transfer; and authorities where legally required). We do not collect biometric information, precise geolocation, or sensitive personal information categories beyond log-in or account data incidental to our service providers' operations. We do not sell personal information or share it for cross-context behavioral advertising, and we have no actual knowledge of selling or sharing the personal information of consumers under 16 years of age. Retention periods are described in Section 10.

We honor the Global Privacy Control (GPC). If our Sites detect a recognized opt-out preference signal such as GPC from your browser or device, we treat it as a valid request to opt out of any sale or sharing of your personal information. Because we do not sell personal information or share it for targeted advertising, there is ordinarily no sale or sharing for the signal to stop — but the signal is honored regardless. Some browsers also offer "Do Not Track" (DNT) signals, for which there is no industry consensus; we treat recognized opt-out preference signals like GPC as the operative standard.

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy — for example, for as long as you remain subscribed to our email list, or as needed to maintain records of merchandise orders — and for longer where necessary to comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Afterwards, we delete the information or retain it only in de-identified or aggregated form.

We use commercially reasonable safeguards designed to protect personal information. However, no security measure or transmission method is perfect or impenetrable, and we cannot guarantee the security of information transmitted to or through the Sites. Any information you send to us is transmitted at your own risk, and we recommend that you not use unsecured channels to send us sensitive or confidential information.

The Sites are not intended for, and may not be used by, children or anyone under 21 years of age (or the applicable legal drinking age, if higher). We do not knowingly collect personal information from anyone under 21, and we do not knowingly collect personal information from children under 13 within the meaning of the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected personal information from a person under the legal drinking age, we will delete it. If you believe this has occurred, please contact us immediately at info@theleopardmark.com.

If you submit career materials to us, we use them to evaluate your interest and qualifications, communicate with you about opportunities, and comply with legal obligations. We may retain application materials for a reasonable period to consider you for future opportunities unless you ask us to delete them. Career submissions are voluntary, and posting of opportunities does not constitute an offer or promise of employment.

The Sites may contain links to third-party websites and services, including our Shopify-hosted store pages, mapping and product-locator services, and social media platforms. This Privacy Policy does not apply to third-party websites or services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third party before providing information.

The Sites are operated from, hosted in, and intended for users in the United States. If you access the Sites from outside the United States, you acknowledge and agree that your information will be transferred to, stored in, and processed in the United States.

We may update this Privacy Policy from time to time. The effective date at the top of this page indicates when it was last revised, and we will post any updated version on this page; for material changes, we will provide notice by reasonable means. Your continued use of the Sites after the effective date of an updated Privacy Policy constitutes your acknowledgment of the update.

If you have any questions about this Privacy Policy or our privacy practices, or wish to exercise your privacy rights, please contact us at:

Familiar Ventures, LLC dba The Leopard Mark Beverage Group
ATTN: Privacy
1300 First Street, Suite 368
Napa, CA 94559, USA
Email: info@theleopardmark.com