Privacy Policy

Effective date: November 13, 2026

This policy explains what Polynesian Girl Wine (Island Girl Wines, LLC) collects through this website, our online store and our tasting room, why we collect it, who we share it with, and the choices you have. We're a small family winery, and we've tried to say it all in plain words.

In short

• We use your details to take bookings, sell and ship wine and jewelry, run our wine club, and send the emails and texts you signed up for.
• This site runs Google and Meta tools that measure our ads and help show them to people who may be interested. They're on by default, except for visitors in Europe, the UK or Switzerland, where they stay limited until you choose Got it. You can limit them with Do Not Sell or Share My Info (details below), and a Global Privacy Control or Do Not Track signal from your browser does the same, even if you chose Got it before.
• When you book a tasting online or buy from us, we send Meta your email and phone number in hashed (scrambled) form, so Meta can tell us whether our ads worked. The details, and how to stop it, are below.
• We don't sell your information for money.
• You can ask us to see, correct or delete your information at any time.

What we collect

When you visit this site. The pages you view; the links and buttons you tap (such as Reserve, Join the club, our phone number or Get directions); how you got here (the ad, email, search or website that sent you); your device and browser; and your rough location, based on your IP address. Google and Meta collect this through cookies and similar tools on our pages. If you arrive through a link with campaign tags, such as one of our ads or emails, your browser also keeps a note of that campaign so we can tell which ad led to a booking.

When you book a tasting. Your name, email and phone number (the phone is optional); the date, time and size of your party; any notes you add; and the campaign that brought you, if any.

When you shop online or join the club. Commerce7, which runs our online store, collects your name, email, phone number, billing and shipping addresses, date of birth (to confirm you're 21 or older, and for a birthday note if you're on our email list), what you buy, your club membership and your payment card.

In the tasting room. What you buy at the register, and your name, email or phone number if you give them to us, for example for a receipt, a reservation, the club or our email list.

Emails and texts. Your email address and name if you join our email list, and your mobile number if you agree to get texts. Mailchimp, which sends them, may record whether our emails are opened and which links are clicked.

When you contact us. Whatever you choose to send. The form on our Contact page opens your own email app; what you type there isn't stored on our site.

How we use it

• To take bookings, sell and ship wine and jewelry, run the wine club, and answer your questions.
• To send the emails and texts you signed up for, such as news, a birthday note, a thank-you after an order, or a reminder about something left in your cart.
• To see how people use our site and make it better.
• To measure our ads and show them to people likely to be interested, including people who have visited our site or bought from us before.
• To follow the law, including alcohol and tax rules, and to prevent fraud.

Who we share it with

• Commerce7 runs our online store (the cart, checkout, customer accounts and wine club) and the register in our tasting room. It keeps your customer record, orders, club membership and reservations for us. Card payments go through Commerce7 and its payment processor; we don't keep full card numbers in our own files.
• Mailchimp sends our emails and texts. Vintools, a connector app, copies customer details and orders from Commerce7 to Mailchimp so the right emails reach the right people.
• Google runs Google Analytics and Google Ads on this site through the Google tag, and provides the map on our Visit page.
• Meta (Facebook and Instagram) runs the Meta pixel on this site, gets booking and purchase records sent straight from our systems (Meta's Conversions API), and may get the customer lists described below.
• Vercel hosts this website and handles each visit, including technical details such as your IP address.
• Shipping companies, such as UPS, and the shipping service that packs and sends our orders get your name, address and phone number to deliver your order.
• Government agencies and others, when the law requires it, for example for alcohol shipping or tax reports, or to answer a valid legal request.
• A new owner, if the winery is ever sold or merged.

Google and Meta also use what they get under their own privacy policies: Google's privacy policy, how Google uses information from sites that use its services and Meta's privacy policy.

Ads and hashed contact details

Tools on our site. Third parties, including Google and Meta, may use cookies, pixels and similar tools to collect information about your activity on our site and on other websites over time. They use it to measure ads and to choose which ads you see, including ours on other sites and apps.

What "hashed" means. Hashing scrambles an email or phone number into a code before it's sent. Meta and Google use the code to look for a matching account on their services. Our Meta and Google tags on this site may also send hashed contact details that you type into our forms, such as when you book or check out, for the same purpose.

Bookings. When you book a tasting online, our server sends Meta a record of the booking with your email and, if you gave it, your phone number, both in hashed form, so Meta can tell us whether one of our ads led to it. We don't send it if you've chosen Do Not Sell or Share My Info on this site, or your browser sends Global Privacy Control or Do Not Track; for visitors in Europe, the UK or Switzerland we don't send it unless you've chosen Got it. You can also book by phone at (530) 344-4788. Google Analytics also gets the booking (such as the size of your party and the campaign that brought you), tied to a coded number rather than your name, email or phone.

Purchases. When you buy from us, online or in the tasting room, we send Meta a record of the purchase (what you bought and the total) with your email and phone number, whichever we have, in hashed form. We don't send it for customers who are marked in our store system as unsubscribed from our marketing emails. The unsubscribe link in our emails doesn't update our store system, so if you'd like to be marked that way, contact us. For online orders, Google Analytics also gets the order, tied to a code made from your email address (not the address itself), or from the order itself (not your email) if you're marked as unsubscribed or we have no email address.

Customer lists. From time to time we may upload lists of customer contact details (such as name, email, phone number and ZIP code) to Meta or Google. We use them to show our ads to past customers or to people like them, and to keep ads meant for new customers away from club members. Names, emails and phone numbers are hashed before upload. If you unsubscribe from our emails, we'll leave you off future lists of past buyers.

We don't sell your information

We don't sell your personal information for money. But California law can count some advertising uses as "sharing," or even a "sale": for example, letting Meta's and Google's tools on our site collect information to show you ads elsewhere, or sending them hashed contact details. The choices below let you limit this.

Your choices

Do Not Sell or Share My Info. On your first visit, a notice at the bottom of the page offers two buttons: Do Not Sell or Share My Info and Got it. If you choose Do Not Sell or Share My Info:

• Google's tags switch to a limited mode. They stop setting or reading advertising and analytics cookies, and your visit isn't used to pick the ads you see. Google may still get basic signals without cookies, such as that a page loaded.
• The Meta pixel is told not to send your visits or taps to Meta. Its code still loads on the page.
• We save your choice in a cookie in that browser for one year. It covers only that browser on that device.

Global Privacy Control and Do Not Track. If your browser sends a Global Privacy Control signal, we treat it as Do Not Sell or Share My Info for as long as your browser sends it, even if you chose Got it on that browser before. If you haven't made a choice on that browser yet, the notice doesn't appear, and the opt-out is saved the same way. We treat a Do Not Track signal the same way.

Visitors in Europe, the UK and Switzerland. If your IP address places you there, Google's and Meta's tools on our site stay in the limited mode described above until you choose Got it.

Changing your mind. Choose Privacy choices at the bottom of any page. The notice appears again, and you can pick either button. While your browser sends Global Privacy Control or Do Not Track, the opt-out applies whatever you pick.

What the opt-out doesn't cover. The Google map on our Visit page; the cookies and storage Commerce7 needs for your cart and sign-in; our own note of the campaign that brought you; and the purchase records and customer lists described above. For those, use the steps above or contact us.

Ad settings at Google and Meta. You can also limit ads at the source: Google's My Ad Center, the Google Analytics opt-out browser add-on, Meta's ad preferences, and the ad industry's opt-out pages at optout.aboutads.info and, in Europe, youronlinechoices.eu.

Emails and texts. Every marketing email has an unsubscribe link at the bottom, or you can ask us to take you off the list. To stop texts, reply STOP to any text. Signing up for texts doesn't sign you up for our emails. Message and data rates may apply. We never share or sell your text sign-up or consent; only Mailchimp, which sends our texts, gets it.

See, correct or delete your information

You can ask us what personal information we have about you, ask us to correct it, or ask us to delete it. If you have an account, you can update your details yourself: choose Login at the top of any page. To ask us, email tatiana@polynesiangirlwine.com, call (530) 344-4788, or write to us at the address below. We may need to confirm it's you, for example by writing back to the email address we have on file. We'll reply within 45 days.

When you ask us to delete your information, we'll delete what we can from our own records, Commerce7 and Mailchimp. We keep what the law requires, such as order, tax and alcohol shipping records. Information Meta and Google already received stays under their policies; you can manage it in your settings with them. We won't treat you differently for asking.

Children

Our wines are for adults 21 and older, and so is this site. We don't sell wine to anyone under 21, and we don't knowingly collect personal information from anyone under 21. If you think someone under 21 has given us information, contact us and we'll delete it.

Keeping your information safe

This site uses an encrypted connection (HTTPS), and card payments are handled by Commerce7 and its payment processor. We keep information as long as we need it for the uses above and as long as the law requires. No website or system is perfectly secure, so we can't promise your information will never be exposed.

Other websites

Our site links to other websites, such as Instagram, Facebook and Google Maps. Their own privacy policies apply there.

Changes to this policy

If we change this policy, we'll post the new version on this page and update the effective date at the top.

Contact us

Polynesian Girl Wine
6020 Grizzly Flat Rd, Somerset CA 95684
tatiana@polynesiangirlwine.com · (530) 344-4788