Privacy Policy

This Privacy Policy describes how Vanna Co. ("Vanna," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit drinkvanna.com, join our waitlist, purchase a product, or otherwise interact with our services (the "Services"). By using the Services, you agree to the practices described in this Policy.

We collect the following categories of information:

• Information you provide: name, email address, shipping and billing address, phone number, age confirmation, payment information (processed by our payment providers), and any messages you send us.
• Order and account information: purchase history, order status, returns, and customer-service communications.
• Automatically collected information: IP address, device and browser type, operating system, referring URLs, pages viewed, links clicked, and approximate location, collected through cookies, pixels, and similar technologies.
• Information from third parties: data from analytics, advertising, fraud-prevention, payment, and fulfillment providers.

• To process orders, ship products, and provide customer support;
• To operate, maintain, and improve the Services and develop new products;
• To send transactional messages and, with your consent where required, marketing communications;
• To detect, investigate, and prevent fraud, abuse, and security incidents;
• To comply with legal obligations, including age-verification and tax requirements;
• To enforce our Terms & Conditions and protect our rights and the rights of others.

We and our service providers use cookies, pixels, local storage, and similar technologies to operate the Services, remember preferences, measure performance, and serve relevant marketing. You can manage cookies through your browser settings; disabling some cookies may affect the functionality of the Services.

We do not sell your personal information for money. We share information only as described below:

• Service providers: payment processors, e-commerce platforms (including Shopify), fulfillment and shipping carriers, email and SMS providers, analytics and advertising vendors, hosting and security providers, acting on our behalf under contractual confidentiality obligations.
• Legal and safety: when required by law, subpoena, court order, or to protect the rights, property, or safety of Vanna, our customers, or others.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of all or a portion of our assets.
• With your consent: for any other purpose disclosed at the time of collection.

Some sharing for advertising or analytics may constitute "selling" or "sharing" under certain U.S. state privacy laws. See Section 8 for opt-out rights.

We retain personal information for as long as necessary to provide the Services, fulfill the purposes outlined in this Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the type of data and applicable legal requirements.

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for safeguarding any account credentials.

Depending on where you live (including California, Colorado, Connecticut, Virginia, Utah, and other U.S. states with comprehensive privacy laws, and jurisdictions subject to the EU/UK GDPR), you may have the right to:

• Access, correct, or delete personal information we hold about you;
• Receive a portable copy of your personal information;
• Opt out of targeted advertising, profiling, or the "sale" or "sharing" of personal information;
• Withdraw consent where processing is based on consent;
• Appeal a denial of a privacy request.

To exercise these rights, email us at hello@drinkvanna.com. We may need to verify your identity before fulfilling a request. We will not discriminate against you for exercising these rights.

You can unsubscribe from marketing emails at any time using the link in any marketing message. Transactional messages about your order will continue.

The Services are not directed to individuals under 21, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

Vanna is based in the United States. If you access the Services from outside the U.S., you understand that your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your jurisdiction.

We may update this Privacy Policy from time to time. The "Effective" date above indicates the latest revision. Material changes will be communicated by updating the date and, when appropriate, by additional notice.

Questions, concerns, or privacy requests? Contact us at hello@drinkvanna.com.