Privacy Policy

The short version

We collect what we need to sell you wine, run your account and operate the shop, and not much else. We do not sell your data, we do not rent it, and we do not use it to train AI models. This site carries no advertising pixel, no third-party analytics script and no social tracking tag — if that ever changes, this page changes with it. This policy covers this site, Grappolo Wine Shop, the wine club, our register in Irving, and the wholesale portal.

What we collect, and when

Nothing here is collected in the background. Each of these is something you type, or something an order cannot be filled without:

• Browsing the shop — nothing that identifies you. No account, no email, no profile.
• Placing an order — your name, your email, and, for anything we deliver, the address we deliver to. A phone number if you give us one.
• Paying — the card is handled by our payment processor. We keep only what a receipt needs: the brand, the last four digits, and whether it approved. We never hold a full card number.
• Creating an account — your email address. We sign you in with a link sent to that address, so there is no password for us to store or for anyone to steal.
• Joining the wine club — your tier, your shipment history, and any shipment you ask us to skip.
• A wholesale account — your business name, contact details, the payment terms we agree, and your resale certificate.
• Buying in the Irving shop — the sale itself, and your email only if you ask us to send the receipt.
• Our newsletter — your email address and the fact that you asked for it.

Why we hold it

To take, fill and deliver your order; to answer you when something goes wrong; to run club shipments; to give wholesale accounts their invoices, statements and price lists; to keep the sales records Texas alcohol regulation requires us to keep; and to send marketing email to the people who asked for it. That is the whole list. We do not build advertising profiles and we do not score you.

Cookies, and only these cookies

We use a small number of first-party cookies and nothing else. Every one of them is set by this site, for this site:

• aw_age_ok — records that you confirmed you are 21 or older, so we do not ask on every page. It lasts a year.
• aw_age_no — set only if you told us you are under 21. It is not a consent record and it does not outlive the browser session.
• aw_guest and aw_orders — how someone who checked out as a guest gets back to their own order without an account. Both are signed, so a browser cannot claim to be somebody else, and neither can be read by scripts in the page.
• Sign-in cookies, whose names begin sb- — issued by Supabase, the service that runs our sign-in, and only after you click a link we emailed you.
• aw_register and aw_pos_seen — set on staff devices at the register. Never on a customer’s browser.

Your cart lives in your browser

The bottles in your cart are held by your own browser, not by us, until you check out. Clearing your browsing data empties the cart — and it clears the age acknowledgment too, so the site will ask you once more.

Who else touches your data

Only the vendors that make the business run, and only with what each one needs to do its job. None of them may use your information for their own purposes:

• Supabase — our database, and our sign-in.
• Cloudflare — hosting, and the encrypted nightly backup of that database.
• Resend — delivery of transactional email (receipts, order updates, club notices) and of the newsletter, where you have asked for it.
• Our card processor — payment authorization and refunds. As of the date on this page no processor is connected to this site and no card has been charged through it.
• The carrier that brings your wine — the name and address on the label, and nothing else.

What we never do

We do not sell, rent or trade your personal information. We do not hand it to anyone for their own marketing. We do not use it — yours or anyone’s — to train AI or machine-learning models. We do not track you across other websites.

Marketing email, and how to stop it

We email you about an order or a club shipment because you placed one; that is not marketing and it does not stop. Marketing email goes only to people who asked for it, every message carries a one-click unsubscribe link that works without signing in, and we act on it immediately. If a link ever fails you, write to info@abovewines.com and we will do it by hand.

Seeing, correcting and deleting what we hold

Write to info@abovewines.com from the address we have on file and we will tell you what we hold about you, correct anything wrong, or delete what we are not required to keep. Sales records for alcohol we must keep for as long as Texas rules require, so those we can close but not erase. A person answers these — there is no form and no queue.

How long we keep it

Order and sales records: as long as Texas alcoholic-beverage record-keeping rules require. Account and club records: while the account is open, and then for as long as the orders attached to it must be kept. Newsletter subscriptions: until you unsubscribe. Backups are encrypted and roll off on their own schedule, so a deletion takes a little longer to disappear from those than from the live system.

Under 21

This site is not for anyone under 21 and we do not knowingly collect anything from them. If you believe a minor has given us information, tell us and we will delete it.

Changes, jurisdiction and contact

Above Wines, LLC is a Texas company operating from 1915 Peters Rd Ste 206, Irving, TX 75061, and this policy is governed by the laws of the State of Texas. If we change how any of this works, we change this page and move the date at the top of it. Questions, requests or complaints: info@abovewines.com or (469) 517-7442.