Privacy policy

LA CHANCLA WINE

PRIVACY POLICY

La Chancla Wine is a registered trade name (DBA) of Texas Red Wines LLC

Effective Date: 04/14/2026    Last Updated: 04/14/2026

Governing Law: Texas Data Privacy and Security Act (TDPSA) | CCPA/CPRA | COPPA | FTC Act | CAN-SPAM

SECTION 1 — INTRODUCTION & ABOUT THIS POLICY

La Chancla Wine, a registered trade name (DBA) of Texas Red Wines LLC, a Texas limited liability company (“La Chancla Wine,” “we,” “us,” or “our”), is committed to protecting the privacy and personal data of every person who interacts with our website, places an order, or otherwise engages with our services. LA CHANCLA WINE is a federally registered trademark of Texas Red Wines LLC (USPTO).

This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, and what rights you have over it. It applies to all personal data collected through our website (lachanclawine.com), our Shopify-powered online store, email communications, and any other digital or physical touchpoint with our customers.

This policy is designed to comply with the Texas Data Privacy and Security Act (TDPSA, Tex. Bus. & Com. Code Ch. 541), the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA, Cal. Civ. Code § 1798.100 et seq.) as amended through 2026, the Children’s Online Privacy Protection Act (COPPA, 15 U.S.C. § 6501 et seq.), the CAN-SPAM Act (15 U.S.C. § 7701 et seq.), the Federal Trade Commission Act (15 U.S.C. § 45), applicable provisions of the Texas Alcoholic Beverage Code (TABC), and all other applicable state and federal privacy and data protection laws in effect as of 2026.

 

IMPORTANT: AGE REQUIREMENT
This website and all of our products are restricted to persons 21 years of age or older. If you are under 21, you may not access this website or provide us with any personal information. We do not knowingly collect personal data from persons under 21. If we learn we have collected data from a person under 21, we will delete it promptly. See Section 7 for our full minor-protection policy.

 

SECTION 2 — SCOPE & WHO THIS POLICY APPLIES TO

This Privacy Policy applies to all individuals who:

     Visit or browse our website at lachanclawine.com;

     Create an account or register on our website;

     Place or attempt to place an order for wine or merchandise;

     Sign up for our email newsletter, promotions, or loyalty program;

     Contact us by email, phone, or through our website contact form;

     Interact with our social media accounts or advertising;

     Participate in contests, surveys, or other marketing activities.

 

This policy applies regardless of whether you are located in Texas, another U.S. state, or anywhere else. Where additional rights apply to residents of specific states (including California), those rights are described in the applicable state-specific sections below.

Our website, services, and products are directed exclusively at persons who are 21 years of age or older and legally permitted to purchase alcoholic beverages in their jurisdiction. We do not knowingly collect, use, or share personal data from anyone under 21 years of age.

 

SECTION 3 — PERSONAL DATA WE COLLECT

We collect the following categories of personal data, as defined under the TDPSA (Tex. Bus. & Com. Code § 541.001) and CCPA/CPRA (Cal. Civ. Code § 1798.140). We only collect data that is adequate, relevant, and reasonably necessary for the disclosed purposes.

 

3.1 — Identifiers & Contact Information

     Full name

     Email address

     Mailing and shipping address

     Phone number

     Username and account password (hashed/encrypted)

     IP address and device identifiers

 

3.2 — Age Verification Data (Sensitive — See Section 7)

Because we sell age-restricted alcoholic beverages, we are legally required to collect and verify age-related information. This constitutes “sensitive personal data” under the TDPSA.

     Date of birth (collected at age-gate and during account registration)

     Government-issued ID type and details, as required at delivery to verify 21+ status

     Age affirmation confirmation (timestamp and method)

 

SENSITIVE DATA NOTICE — REQUIRED DISCLOSURE UNDER TDPSA
We collect and process date of birth and age verification data as sensitive personal data under the Texas Data Privacy and Security Act. This data is collected solely for the purpose of complying with Texas Alcoholic Beverage Code requirements and federal law prohibiting the sale of alcohol to persons under 21. We do not sell, share for targeted advertising, or otherwise monetize your age verification data.

 

3.3 — Purchase & Transaction Data

     Products ordered (wine type, varietal, vintage, quantity)

     Order history and purchase frequency

     Billing and shipping address

     Payment method type (last four digits and card brand only; full card numbers are never stored by us — see Section 3.4)

     Order confirmation and communication records

     Return and refund records

 

3.4 — Payment Data (PCI DSS)

All payment card transactions are processed by Shopify Payments and/or our third-party payment processors. We do not collect, store, or process full payment card numbers, CVV codes, or full bank account numbers on our own systems. All payment processing is handled in compliance with the Payment Card Industry Data Security Standard (PCI DSS). We retain only tokenized or truncated payment identifiers (last four digits and card brand) for order reference purposes.

 

3.5 — Delivery & Signature Data

     Delivery address and recipient name

     Delivery attempt records and timestamps

     Adult signature confirmation and carrier scan records (required by TABC and carrier regulations)

     Carrier tracking information

 

3.6 — Device, Usage & Technical Data

     Browser type and version

     Operating system

     Referring URL and exit pages

     Pages viewed and time spent on pages

     Clickstream data

     Session duration and interaction data

     Cookie identifiers and advertising IDs (see Section 9)

 

3.7 — Communications Data

     Emails and messages sent to info@lachanclawine.com

     Customer service interaction records

     Survey or contest responses

     Product reviews and feedback

 

3.8 — Geolocation Data

We collect approximate geolocation data (city/state-level) derived from your IP address to verify that wine shipments are permitted to your delivery location, to calculate shipping, and to display relevant content. We do not collect precise geolocation data (within 1,750 feet of your location) without your express consent. Precise geolocation constitutes “sensitive personal data” under the TDPSA.

 

3.9 — Marketing & Preference Data

     Email marketing subscription status and preferences

     Communication opt-in and opt-out history

     Product interest and wishlist data

     Referral source data

 

SECTION 4 — HOW WE USE YOUR PERSONAL DATA

We use your personal data only for the following disclosed purposes. We will not use your data in ways materially inconsistent with these purposes without your prior consent:

 

PURPOSE

LEGAL BASIS / CATEGORIES USED

Process and fulfill your wine and merchandise orders

Contract performance; identifiers, purchase data, payment data, delivery data

Verify age (21+) as required by TABC and federal law

Legal obligation; age verification data (sensitive), identifiers

Comply with TABC licensing, reporting, and recordkeeping requirements

Legal obligation; purchase data, identifiers, delivery data

Process payments securely

Contract performance; tokenized payment data

Send order confirmations, shipping updates, and transactional emails

Contract performance; identifiers, communications data

Respond to customer service inquiries and support requests

Legitimate interest / contract; identifiers, communications data

Send marketing emails and promotions (with consent or opt-out opportunity)

Legitimate interest / consent; identifiers, preference data

Personalize your shopping experience

Legitimate interest / consent; purchase history, usage data

Analyze website usage and improve our services

Legitimate interest; device/usage data, geolocation (approximate)

Detect, prevent, and investigate fraud, unauthorized access, or policy violations

Legitimate interest / legal obligation; identifiers, usage data, payment data

Comply with applicable law, legal process, and government requests

Legal obligation; all relevant categories

Enforce our Terms of Service, Return Policy, and other agreements

Legitimate interest; identifiers, purchase data, communications data

 

We do not sell your personal data for monetary consideration. We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

 

SECTION 5 — HOW WE SHARE YOUR PERSONAL DATA

We do not sell your personal data to data brokers or third parties for their independent marketing purposes. We share personal data only with the following categories of recipients, for the purposes described:

 

5.1 — Shopify (Platform Provider)

Our website and online store are powered by Shopify Inc. As our e-commerce platform provider, Shopify processes personal data on our behalf in accordance with their Data Processing Addendum and Privacy Policy (available at shopify.com/legal/privacy). Shopify acts as a data processor for order transactions, payment processing, website hosting, and store analytics. Shopify may retain certain data independently for its own platform security, fraud prevention, and compliance purposes.

 

5.2 — TABC-Permitted Shipping Carriers

We share delivery addresses, recipient names, and shipment details with TABC-licensed carriers for the purpose of fulfilling and completing wine deliveries. Carriers are required by Texas law and carrier regulations to verify recipient age (21+) and obtain an adult signature at delivery. Carriers receive only the data necessary to complete the delivery.

 

5.3 — Payment Processors

Payment card transactions are processed by Shopify Payments and/or other PCI DSS-compliant payment processors. These processors receive tokenized payment data necessary to complete your transaction. We do not transmit or store your full card number.

 

5.4 — Email & Marketing Service Providers

We use third-party email service providers (such as Klaviyo, Mailchimp, or similar platforms) to send transactional and marketing emails. These providers receive your email address, name, and relevant preference data as necessary to deliver communications. They act as data processors under our instructions and may not use your data for their own marketing purposes. A current list of our email service providers is available upon request at info@lachanclawine.com.

 

5.5 — Analytics Providers

We use web analytics tools (such as Google Analytics, Shopify Analytics, or similar) to understand how visitors use our website. These tools may collect device identifiers, IP addresses, and behavioral data through cookies and similar technologies. See Section 9 for details on cookies and your opt-out rights. We do not share identifiable purchase histories with analytics providers.

 

5.6 — TABC & Regulatory Authorities

We may be required to disclose customer purchase records, age verification data, and shipping records to the Texas Alcoholic Beverage Commission (TABC) or other regulatory authorities for licensing compliance, audit, or enforcement purposes. Such disclosures are made under legal obligation. We also comply with requirements of the Alcohol and Tobacco Tax and Trade Bureau (TTB) of the U.S. Department of the Treasury.

 

5.7 — Legal Compliance & Protection

We may disclose personal data when we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or enforceable governmental request; (b) enforce our Terms of Service; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect the rights, property, or safety of La Chancla Wine, Texas Red Wines LLC, our customers, or the public.

 

5.8 — Business Transfers

In the event of a merger, acquisition, sale of assets, financing, or reorganization involving Texas Red Wines LLC or La Chancla Wine, personal data held by us may be transferred as part of that transaction, subject to the acquirer’s commitment to honor this Privacy Policy or provide you with notice and the opportunity to opt out before your data is used in a materially different way.

 

5.9 — With Your Consent

We may share your personal data with third parties in any other case with your prior express consent, which you may withdraw at any time.

 

SECTION 6 — SENSITIVE PERSONAL DATA

The following categories of data are classified as “sensitive personal data” under the TDPSA and/or CCPA/CPRA and are subject to heightened protections:

 

SENSITIVE DATA CATEGORY

HOW WE HANDLE IT

Date of birth / age verification data

Collected for legal age compliance only. Not sold or shared for advertising. Retained per Section 11.

Precise geolocation data (within 1,750 ft)

Not collected without express consent. Approximate geolocation (city/state) used only for shipping eligibility.

Government-issued ID information

Verified by carrier at delivery only. Not stored in our systems after verification.

Account login credentials

Encrypted/hashed. Never stored in plaintext.

Children’s data (under 13)

Never collected. Website and services are restricted to 21+. See Section 7.

 

We do not sell or share your sensitive personal data for cross-context behavioral advertising or for any purpose other than legal age compliance and order fulfillment. By using our website and placing an order, you provide consent to the collection of your date of birth solely for the purpose of age verification as required by Texas Alcoholic Beverage Code § 16.09 and related federal law.

 

SECTION 7 — MINORS, CHILDREN & COPPA COMPLIANCE

Our website, products, and services are strictly directed at and available only to individuals 21 years of age or older. We do not knowingly collect, use, or disclose personal data from any person under the age of 21. This restriction is absolute and applies regardless of parental consent or supervision.

In compliance with the Children’s Online Privacy Protection Act (COPPA, 15 U.S.C. §§ 6501–6506) and FTC COPPA Rule amendments effective April 2025, we implement the following protective measures:

     Age affirmation is required before any individual may access our online store, browse products, or create an account.

     We do not maintain any feature, section, or offering directed at persons under 21.

     We do not knowingly collect personal data from persons under 13. If we learn that personal data of a child under 13 has been collected without verified parental consent, we will delete it immediately.

     We do not use the personal data of any user under 21 for behavioral advertising, profiling, or any purpose other than age compliance and service delivery.

If you believe we have inadvertently collected personal data from a minor, please contact us immediately at info@lachanclawine.com so we can investigate and delete the information as required by law. Under CCPA 2026, all data collected from users under 16 is automatically classified as sensitive personal information and subject to the most restrictive handling protections.

 

SECTION 8 — COOKIES, TRACKING TECHNOLOGIES & GLOBAL PRIVACY CONTROL

8.1 — Types of Cookies & Tracking Technologies We Use

Our website uses the following types of cookies and tracking technologies:

 

TYPE

PURPOSE & DETAILS

Strictly Necessary

Required for the website and shopping cart to function. Cannot be disabled. Includes session cookies, cart cookies, and security tokens.

Functional / Preference

Remember your preferences (language, currency, shipping region). Disabled without material impact on browsing.

Analytics

Measure website traffic, page performance, and visitor behavior (e.g., Google Analytics, Shopify Analytics). IP addresses are anonymized where possible.

Marketing / Advertising

Track browsing behavior across sites for targeted advertising (e.g., Meta Pixel, Google Ads). Subject to your opt-out rights under TDPSA and CCPA.

Age Verification

Store your age affirmation confirmation to avoid repeated verification prompts within a session.

 

8.2 — Global Privacy Control (GPC) — Texas TDPSA Requirement

Effective January 1, 2025, the Texas Data Privacy and Security Act (TDPSA § 541.055(e)) requires us to recognize and automatically honor Global Privacy Control (GPC) signals. If you visit our website with GPC enabled in your browser (supported natively by Firefox, Brave, DuckDuckGo, and available as a Chrome extension), we will:

     Automatically treat the GPC signal as a valid opt-out request for the sale of personal data and targeted advertising;

     Immediately suppress advertising pixels, cross-site tracking scripts, and audience-building tags;

     Honor the preference in real time — not merely logging it, but actually suppressing the underlying tracking technologies.

You do not need to take any additional action beyond enabling GPC in your browser. Your preference will be honored without requiring you to navigate to a separate opt-out page.

 

8.3 — Cookie Consent & Management

When you first visit our website, a cookie consent banner will ask for your permission before any non-essential cookies are placed. You can:

     Accept all cookies;

     Accept only strictly necessary cookies;

     Customize your preferences by cookie category;

     Change your preferences at any time using the “Cookie Settings” link in the footer of our website.

You can also manage cookies directly in your browser settings. Note that disabling certain cookies may affect website functionality, including the shopping cart.

 

8.4 — Do Not Track (DNT)

Some browsers send a Do Not Track (DNT) signal. While there is no industry-wide standard for DNT, we honor DNT signals by limiting behavioral tracking where technically feasible. We fully honor GPC signals as required by TDPSA (see Section 8.2).

 

SECTION 9 — YOUR PRIVACY RIGHTS

Depending on your state of residence, you have various rights over your personal data. We honor all rights described below and process requests within the timeframes required by applicable law. We will not discriminate against you for exercising any of these rights.

 

9.1 — Rights for All U.S. Customers

Regardless of your state of residence, you have the right to:

     Know what personal data we hold about you and request a copy;

     Correct inaccurate personal data;

     Request deletion of your personal data (subject to legal retention obligations);

     Opt out of marketing emails at any time via the unsubscribe link in any email or by contacting us at info@lachanclawine.com;

     Lodge a complaint with us about our data practices.

 

9.2 — Texas Residents — TDPSA Rights (Tex. Bus. & Com. Code Ch. 541)

If you are a Texas resident, you have the following additional rights under the Texas Data Privacy and Security Act (TDPSA), enforceable as of July 1, 2024:

1.   Right to Confirm & Access: You may confirm whether we process your personal data and request a copy in a portable, commonly used format.

2.   Right to Correct: You may request correction of inaccurate personal data we hold about you.

3.   Right to Delete: You may request deletion of your personal data, subject to our legal retention obligations (e.g., TABC recordkeeping, tax records).

4.   Right to Data Portability: You may request your personal data in a portable, commonly used electronic format.

5.   Right to Opt Out of Sale: You may opt out of the sale of your personal data to third parties at any time. Note: We do not currently sell personal data for monetary consideration.

6.   Right to Opt Out of Targeted Advertising: You may opt out of the processing of your personal data for cross-context behavioral or targeted advertising. You may do this via GPC signal (Section 8.2), via our cookie consent tool, or by submitting a request as described in Section 9.5.

7.   Right to Opt Out of Profiling: You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

8.   Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

 

TEXAS PRIVACY RIGHTS LINK
As required by TDPSA, a “Texas Privacy Rights” link is available in the footer of our website. Clicking this link takes you directly to our privacy rights request form where you can exercise any of the rights above. You may also submit requests by email to info@lachanclawine.com or by phone at [INSERT PHONE NUMBER].

 

9.3 — California Residents — CCPA/CPRA Rights (Cal. Civ. Code § 1798.100 et seq.)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA) and updated by 2026 CPPA regulations, grants you the following rights:

9.   Right to Know (Extended): You may request information about the personal data we have collected, used, disclosed, and sold in the past 12 months or longer if retained. As of January 2026, the 12-month limitation has been removed — you may request access to all retained data.

10.Right to Delete: You may request deletion of your personal data, subject to exceptions.

11.Right to Correct: You may request correction of inaccurate personal data.

12.Right to Opt Out of Sale/Sharing: You have the right to opt out of the “sale” or “sharing” of your personal data, including sharing for cross-context behavioral advertising. You may exercise this right via GPC signal, our “Do Not Sell or Share My Personal Information” link, or by contacting us.

13.Right to Limit Use of Sensitive Personal Information: You may direct us to limit our use of your sensitive personal information to only what is necessary to perform our services.

14.Right to Data Portability: You may request your personal data in a portable format.

15.Right to Non-Discrimination: We will not deny services, charge different prices, or provide different quality of service based on your exercise of CCPA rights.

16.Right to Appeal: If we deny a rights request, you have the right to appeal the denial. Appeals must be submitted in writing to info@lachanclawine.com within 30 days of our denial.

 

California-Specific Disclosure: We do not knowingly sell or share the personal information of California consumers under 16 years of age. We have not sold or shared personal information in the past 12 months. We do not use automated decision-making technology that produces legal or similarly significant effects without human review. We conduct Data Protection Impact Assessments (DPIAs) for processing activities that present significant privacy risk, as required by 2026 CPPA regulations.

 

9.4 — Other U.S. State Privacy Rights

If you reside in any of the following states, additional privacy rights may apply to you under your state’s law. In all cases, you may submit a rights request using the process in Section 9.5 and we will respond in accordance with applicable law:

     Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), Oregon (OCPA), Nevada (SB 220), Montana (MCDPA), New Hampshire (NHPA), Rhode Island (RIDTPPA), Indiana (INCDPA), Kentucky (KCDPA), and other states with comprehensive privacy laws in effect as of April 2026.

We apply the standards of the most consumer-protective applicable law as a baseline for all U.S. residents. Compliance with TDPSA and CCPA/CPRA typically satisfies the requirements of other state laws.

 

9.5 — How to Exercise Your Rights

To exercise any of the privacy rights described in this Section 9, you may:

     Submit a request through the “Texas Privacy Rights” or “Privacy Rights” link in our website footer;

     Email us at info@lachanclawine.com with the subject line “PRIVACY RIGHTS REQUEST”;

     Call us at 214-247-6042

     Mail a written request to: Texas Red Wines LLC - La Chancla Wine / Privacy, 2149 US-380, Brownfield, TX 79316.

 

We will verify your identity before processing your request. Verification may require you to confirm your name, email address, and recent order information. We will respond within 45 days. If additional time is needed, we will notify you and may extend by an additional 45 days. If we deny your request in whole or in part, we will explain the reason. You have the right to appeal any denial within 30 days by contacting us at info@lachanclawine.com.

Authorized Agents: You may designate an authorized agent to submit requests on your behalf. Authorized agents must provide written authorization signed by you and may be required to verify their authority. Under TDPSA, an authorized agent may use a technology-based mechanism such as GPC to opt out on your behalf.

 

SECTION 10 — EMAIL & MARKETING COMMUNICATIONS (CAN-SPAM)

We may send you promotional emails about our wines, new releases, events, and special offers, subject to your consent and opt-out rights. All commercial email communications from La Chancla Wine comply with the CAN-SPAM Act (15 U.S.C. § 7701 et seq.), including:

     Every marketing email clearly identifies La Chancla Wine / Texas Red Wines LLC as the sender;

     Every marketing email includes a physical postal address: 2149 US-380, Brownfield, TX 79316;

     Every marketing email includes a clear, functional, one-click unsubscribe mechanism;

     We process all unsubscribe requests within 10 business days;

     We do not use deceptive subject lines or sender information.

 

Transactional emails (order confirmations, shipping updates, password resets) are not subject to opt-out requirements but will always be clearly identified as transactional.

You may unsubscribe from marketing emails at any time by clicking the “Unsubscribe” link in any email or by emailing info@lachanclawine.com. Unsubscribing from marketing emails does not affect transactional communications required to complete your orders.

 

SECTION 11 — DATA RETENTION

We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law. The following retention periods apply:

 

DATA CATEGORY

RETENTION PERIOD / BASIS

Order & transaction records

7 years (Texas tax records, IRS records, TABC recordkeeping requirements)

Age verification / date of birth

Duration of account, then 3 years (TABC compliance and audit purposes)

Delivery & signature records

3 years (carrier and TABC audit requirements)

Payment data (tokenized only)

Duration of account or 3 years after last transaction

Account data (active accounts)

Duration of account plus 2 years after last activity

Email marketing preferences & opt-outs

Indefinitely (to honor opt-out requests)

Customer service communications

3 years

Analytics & usage data

26 months (Google Analytics default; anonymized after 13 months)

Fraud prevention & security logs

3 years

Legal hold data

Duration of legal proceeding plus 1 year

 

When personal data is no longer needed and no legal retention obligation applies, we securely delete or anonymize it. You may request deletion of your personal data at any time (see Section 9.5), subject to our legal retention obligations described above.

IMPORTANT NOTICE — THIRD-PARTY DATA RETENTION LIMITATIONS
La Chancla Wine (Texas Red Wines LLC) operates its e-commerce store and digital services using third-party software platforms and applications, including but not limited to Shopify (store platform), payment processors, email marketing providers, shipping and logistics tools, and analytics services. Each of these third-party providers maintains its own independent data retention policies, schedules, and deletion processes that are outside of our direct operational control.
We commit to making every reasonable effort within our operational capability to honor data retention periods and deletion requests as described in this Section 11. However, we expressly disclaim responsibility for personal data that is retained, processed, or not deleted by third-party software vendors and application providers beyond the timeframes we specify, where such retention results from the independent data practices, technical architecture, backup systems, or legal obligations of those third parties and not from any action or inaction on our part.
Where we have contractual rights to direct a third-party processor to delete your data (for example, through a Data Processing Addendum with Shopify or our email provider), we will exercise those rights upon a verified deletion request. For third-party platforms over which we have limited or no contractual deletion rights, we will notify you of that limitation when processing your request and direct you to that provider’s own privacy rights process. A list of our primary third-party data processors and links to their privacy policies is available upon request at info@lachanclawine.com.

 

SECTION 12 — DATA SECURITY

La Chancla Wine and Texas Red Wines LLC implement reasonable and appropriate administrative, technical, and physical data security measures to protect your personal data from unauthorized access, disclosure, alteration, loss, or destruction, as required by TDPSA § 541.101(a)(2) and applicable federal law.

Our security measures include:

     TLS/SSL encryption for all data transmitted between your browser and our website;

     Payment card data handled exclusively through PCI DSS-compliant payment processors — full card numbers are never stored in our systems;

     Access controls and authentication requirements for staff with access to customer data;

     Shopify’s enterprise-grade infrastructure security, including SOC 2 Type II certification;

     Regular review of our data practices and vendor security posture;

     Incident response procedures for data security events.

 

No security system is impenetrable. In the event of a data breach that triggers notification obligations under Texas Business & Commerce Code § 521.053 (Texas Identity Theft Enforcement and Protection Act) or other applicable law, we will notify affected individuals and the appropriate authorities as required by law. Notification will be provided without unreasonable delay.

 

SECTION 13 — THIRD-PARTY LINKS & SOCIAL MEDIA

Our website may contain links to third-party websites including social media platforms (Instagram, Facebook, X/Twitter, etc.). We are not responsible for the privacy practices of third-party websites. If you follow a link to a third-party site, we encourage you to review that site’s privacy policy before providing any personal information.

Our social media pages (operated on third-party platforms) are governed by the respective platform’s privacy policy and terms of service in addition to this policy. We may receive aggregated analytics from social media platforms about interactions with our pages, but do not typically receive individual-level personal data from these platforms unless you contact us directly through them.

 

SECTION 14 — DATA PROTECTION IMPACT ASSESSMENTS (DPIAs)

Effective January 1, 2026, CCPA/CPRA regulations require businesses to conduct Data Protection Impact Assessments (DPIAs) for processing activities that present significant risk to consumer privacy or security. We conduct DPIAs for the following categories of processing activities:

     Processing of sensitive personal data, including age verification and date of birth data;

     Use of third-party analytics and advertising tracking technologies;

     Sharing of personal data with any new third-party vendor or processor;

     Any new processing activity involving minors or age-restricted data.

We do not publish full DPIA reports, but this policy reflects our approach to privacy risk management. Consumers may request information about our general DPIA approach by contacting us at info@lachanclawine.com.

 

SECTION 15 — REGULATORY COMPLIANCE — TABC & FEDERAL ALCOHOL LAWS

As a licensed wine retailer under the Texas Alcoholic Beverage Code, La Chancla Wine / Texas Red Wines LLC is subject to regulatory obligations that affect how we handle personal data:

     TABC License Disclosure: Our TABC license number and business records may be subject to inspection by TABC agents as authorized by Texas Alcoholic Beverage Code § 5.31.

     Age Verification Records: We are required to maintain age verification records in connection with direct-to-consumer wine shipments under Texas Alcoholic Beverage Code § 16.09.

     Reporting Obligations: We may be required to report consumer purchase data or shipping records to TABC, TTB, or other regulatory authorities in connection with licensing audits, compliance reviews, or enforcement actions.

     Carrier Data Sharing: TABC-licensed carriers receive recipient information necessary to verify age at delivery, per Texas Alcoholic Beverage Code § 16.09(d) and carrier permit requirements.

All such disclosures are made under legal obligation and are limited to the minimum necessary to comply. They do not constitute “sale” of personal data under TDPSA or CCPA.

 

SECTION 16 — CALIFORNIA-SPECIFIC DISCLOSURES (CCPA/CPRA)

In accordance with CCPA/CPRA § 1798.130, this section provides California residents with required disclosures about our data practices in the past 12 months:

 

16.1 — Categories of Personal Information Collected (Last 12 Months)

     Identifiers (name, email, IP address, shipping address)

     Commercial information (purchase history, transaction records)

     Internet or other electronic network activity (browsing, usage data)

     Geolocation data (city/state level from IP)

     Age verification data / date of birth (sensitive)

     Inferences drawn from the above (product preferences)

 

16.2 — Categories of Personal Information Disclosed for Business Purposes

We have disclosed the following categories to service providers (Shopify, payment processors, email providers, carriers) for business purposes: Identifiers, commercial information, device/usage data, age verification data (to carriers for delivery compliance).

 

16.3 — Categories of Personal Information Sold or Shared

We have NOT sold personal information for monetary consideration in the past 12 months. We may have “shared” device/usage data with analytics and advertising providers for cross-context behavioral advertising purposes, which constitutes “sharing” under CPRA. You may opt out of this sharing via our cookie consent tool, the “Do Not Sell or Share My Personal Information” link in our footer, or by enabling GPC.

 

16.4 — “Shine the Light” Disclosure (Cal. Civ. Code § 1798.83)

California residents may request a list of categories of personal information disclosed to third parties for direct marketing purposes and a list of those third parties. We do not disclose personal information to third parties for their own direct marketing purposes. To confirm this or request details, contact us at info@lachanclawine.com.

 

SECTION 17 — CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or business operations. We will post the updated policy on our website and update the “Last Updated” date at the top of this document. For material changes, we will notify you by email (if you have an account) or by a prominent notice on our website at least 30 days before the change takes effect. Your continued use of our services after the effective date of any update constitutes your acceptance of the updated policy.

We recommend reviewing this policy periodically. You can always access the most current version at [lachanclawine.com/privacy-policy].

 

SECTION 18 — CONTACT US & PRIVACY RIGHTS REQUESTS

For any questions about this Privacy Policy, to exercise your privacy rights, or to submit a complaint about our data practices, please contact us:

 

PRIVACY CONTACT INFORMATION
Texas Red Wines LLC DBA La Chancla Wine
2149 US-380, Brownfield, TX 79316

Email:   info@lachanclawine.com  (Subject: PRIVACY REQUEST)
Phone:  214-247-6042
Business Hours Monday-Friday 9-5pm

 

We will respond to all privacy rights requests within 45 days. If you are not satisfied with our response, you may submit a complaint to the Texas Attorney General’s Consumer Protection Division at texasattorneygeneral.gov, or to the California Privacy Protection Agency at cppa.ca.gov if you are a California resident.

 

This Privacy Policy is governed by the laws of the State of Texas and should be read in conjunction with La Chancla Wine’s Terms of Service and Return & Refund Policy.