Privacy Policy

Last updated: June 8, 2026

Cana Wine Company (“Cana Wine Company,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what personal information we collect through canawineco.com and our related services (the “Site”), how we use and share it, and the choices and rights you have. By using the Site or placing an order, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Site.

1. Information We Collect

Information you provide to us

We collect information from you when you register on our Site, create or use a CANA Rewards account, place an order, contact us, or sign up for our emails. Depending on how you interact with us, this may include your name, email address, mailing and billing address, phone number, date of birth or age-verification information, and payment card information. You may browse the Site anonymously, though some features and purchases require this information.

Information we collect automatically

When you visit the Site, we and our service providers automatically collect certain information using cookies, pixels, web beacons, and similar technologies. This may include your IP address, device and browser type, operating system, referring pages, the pages and products you view, the links you click, and the dates and times of your visits. We use this information to operate, secure, and improve the Site and for the analytics and advertising purposes described below.

Information we collect from other sources

We may receive information about you from third parties, such as our payment processors, fraud-prevention and age- or identity-verification providers, shipping carriers, analytics and advertising partners, and providers that help us keep our records accurate (for example, address-correction services). We may combine this information with the information we collect directly from you.

2. How We Use Your Information

We use the information we collect for the following purposes:

•     To personalize your experience and respond to your individual needs.

•     To improve our Site and our product and service offerings.

•     To improve customer service and respond to your requests and support needs.

•     To process your transactions and deliver the products and services you request.

•     To send transactional emails and updates about your orders and account.

•     With your consent where required, to send marketing communications and administer our CANA Rewards program.

•     Age and identity verification: to verify that you and any recipient are at least 21 and to arrange compliant shipping and delivery.

•     Fraud, security, and legal compliance: to detect, prevent, and address fraud, security issues, and misuse, and to meet our legal and regulatory obligations.

3. How We Share Your Information

We do not sell your personal information for money. We share personal information only in the circumstances described below. Some sharing for advertising may be considered a “sale” or “sharing” under certain state privacy laws — see Section 6 (U.S. State Privacy Rights).

•     With service providers: third parties that perform services on our behalf, such as data storage, payment processing, shipping, age verification, and marketing. They are obligated to use your information only to provide the services we have contracted for and in accordance with this Privacy Policy.

•     For legal reasons: where we have a good-faith belief that disclosure is reasonably necessary to comply with a law, regulation, legal process, or governmental request; to enforce our agreements and investigate potential violations of our Terms of Service; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of us, our users, or the public.

•     Advertising and analytics partners: we share certain online identifiers and activity with partners such as Google to measure and deliver advertising. You can opt out of Google personalized ads at https://myadcenter.google.com/personalizationoff, and you can exercise the opt-out rights described in Section 6.

•     Business transfers: if we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.

•     Affiliates and with your direction: with our affiliated companies, and with other parties when you direct or consent to the sharing.

In the past 12 months, the categories of personal information we have disclosed to service providers and contractors for business purposes include identifiers (such as name and contact details), commercial and transaction information, payment information, internet and device activity, and geolocation information. We disclose payment card details only to our payment processors as needed to complete your transaction.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Site and understand how it is used. Strictly necessary cookies enable core functions such as logging in and checking out. Performance and analytics cookies (including Google Analytics) help us understand site usage so we can improve it. Functionality cookies remember your preferences. Advertising cookies and web beacons help us and our partners measure and deliver relevant advertising.

You can control cookies through your browser settings, though disabling some cookies may affect how the Site works. Because there is no consistent industry standard, our Site does not respond to “Do Not Track” browser signals; however, where required by law, we honor recognized opt-out preference signals such as the Global Privacy Control (GPC) as a request to opt out of the sale or sharing of personal information for the browser on which it is enabled.

5. Your Privacy Choices

You have choices about your information:

•     Access and update: you can access and update your personal information through your account settings or by contacting us.

•     Marketing communications: you can opt out of marketing emails by using the unsubscribe link in any such email.

•     Cookies: you can control cookies through your browser settings.

•     Opt out of sale, sharing, and targeted advertising: you can opt out as described in Sections 6 and 8 below, including by submitting a request to us or enabling the Global Privacy Control.

6. U.S. State Privacy Rights

Depending on where you live, you may have rights under state privacy laws, including those of California, Virginia, Colorado, Connecticut, Tennessee, and other states. Subject to certain exceptions, these rights may include:

•     The right to know and access the categories and specific pieces of personal information we have collected about you.

•     The right to delete personal information we have collected from you.

•     The right to correct inaccurate personal information.

•     The right to opt out of the sale or sharing of your personal information and of targeted advertising.

•     The right not to receive discriminatory treatment for exercising your rights.

•     The right to appeal a decision we make about your request.

Categories of personal information we have collected in the past 12 months include: identifiers (such as name, address, email, phone, and online identifiers); commercial and transaction information (such as products purchased and order history); internet and device activity (such as IP address and browsing activity); geolocation information; payment information; demographic information, including age; and inferences drawn from the above. We collect this information for the purposes described in this Privacy Policy and retain it as described in Section 12.

To exercise your rights, contact us using the details in Section 16. We will verify your request and respond within the timeframe required by law. You may use an authorized agent to submit a request on your behalf where permitted, and we will not discriminate against you for exercising your rights.

7. Sensitive Personal Information

Some of the information we collect may be considered “sensitive personal information” under state privacy laws — for example, your date of birth or age-verification information, precise geolocation, account log-in credentials, and payment or financial account information.

We collect and use sensitive personal information only as needed to operate our business and provide our products and services — including to verify age and identity, process and deliver your orders, secure your account, prevent fraud, and comply with our legal obligations. We do not use or disclose sensitive personal information to infer characteristics about you or for any purpose beyond those permitted under applicable law. For that reason, we are not required to offer, and do not offer, a separate “Limit the Use of My Sensitive Personal Information” option, and we do not sell sensitive personal information.

8. Do Not Sell or Share My Personal Information

We do not sell your personal information for money. However, our use of certain advertising and analytics technologies may be considered a “sale” or “sharing” of personal information for cross-context behavioral advertising under some state laws. To opt out, you may contact us using the details in Section 16 with the subject line “Do Not Sell or Share,” or enable the Global Privacy Control (GPC) in your browser. We will treat a valid GPC signal as a request to opt out for that browser.

9. CANA Rewards and Loyalty Program

Participation in our CANA Rewards program is optional. When you enroll, we collect information such as your contact details and purchase history to administer the program, calculate rewards, and send you related communications. Because the program may provide benefits such as discounts or points in connection with the personal information you provide, it may be considered a “financial incentive” under certain state laws. You may withdraw from the program at any time by contacting us; doing so will end your participation and associated benefits. We believe the value of the data you provide is reasonably related to the value of the rewards offered.

10. Text Messaging (SMS)

If you choose to opt in to receive text messages from us, you consent to receive recurring automated marketing or transactional messages at the number you provide. Consent is not a condition of any purchase. Message and data rates may apply, and message frequency varies. You can opt out at any time by replying STOP, or get help by replying HELP. We do not share mobile opt-in information or phone numbers with third parties for their own marketing.

11. Children’s Privacy

The Site is intended for adults who are at least 21 years of age. We do not knowingly collect personal information from anyone under 21 or from children. If you believe that a person under 21 or a child has provided us with personal information, please contact us using the details in Section 16 and we will take steps to delete it.

12. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, to provide our products and services, and to comply with our legal, tax, accounting, and regulatory obligations, unless a longer retention period is required or permitted by law.

As general guidance: we keep account and order records for as long as your account is active and as required to meet tax, accounting, and legal obligations (transaction records are typically retained for up to seven years); we keep marketing contact information until you unsubscribe or ask us to delete it; and we keep website analytics and cookie data for a limited period consistent with the settings of the tools we use. Actual retention periods may be longer where required or permitted by law.

13. Data Security

The security of your personal information is important to us. When you enter sensitive information (such as a payment card number) on our order forms, we encrypt that information using secure socket layer (SSL) technology. We follow generally accepted industry standards to protect personal information both during transmission and once we receive it. No method of transmission over the Internet or method of electronic storage is 100% secure, however, so while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

14. Third-Party Links and Websites

The Site may contain links to third-party websites, plug-ins, and services. We are not responsible for the privacy practices or content of those third parties, and this Privacy Policy does not apply to them. We encourage you to review the privacy policies of any third-party sites you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and post the updated policy on this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Site after any change becomes effective constitutes your acceptance of the revised policy.

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Cana Wine Company

Email: support@canawineco.com

Phone: 629-800-5131