Privacy Policy

Last Updated: May 1, 2026
Stone Tower Winery (“Stone Tower,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, purchase wine or merchandise, join or manage your wine club membership, attend events, make reservations, subscribe to emails, communicate with us, or otherwise interact with Stone Tower Winery.
This Privacy Policy applies to our website, online forms, tasting room and event-related interactions, wine club administration, and other business activities where this policy is posted or referenced.

1. Information We Collect
   We may collect the following categories of personal information:
   Contact information, such as your name, email address, mailing address, billing address, shipping address, and phone number.
   Account and wine club information, such as your wine club membership status, wine preferences, order history, release selections, pickup or shipping preferences, membership notes, and communications with our wine club team.
   Payment and transaction information, such as purchases, refunds, discounts, gift card activity, order details, event tickets, reservation charges, billing information, and limited payment details made available by our payment processor, such as card type, last four digits, expiration date, transaction ID, and payment status.
   Card-on-file information processed through Square. We use Square for point-of-sale and payment processing. For wine club orders, releases, recurring charges, invoices, and other authorized transactions, we may use payment methods stored in Square. Stone Tower does not store full credit card numbers or CVV codes on our own website servers. Payment card information is processed and stored by Square according to Square’s security, privacy, and payment-processing practices.
   Age-verification and legal compliance information, such as date of birth, confirmation that you are at least 21 years old, government identification information when required, delivery recipient information, and signature or delivery confirmation information.
   Reservation, event, and private event information, such as event date, party size, guest count, seating preferences, special requests, private event details, catering or dietary accommodation requests, and related communications.
   Communications and customer service information, such as emails, phone inquiries, survey responses, feedback, donation inquiries, event inquiries, and any other information you choose to provide.
   Marketing information, such as email subscription status, marketing preferences, email engagement information, and information about events, wines, promotions, or experiences you may be interested in.
   Device and website usage information, such as IP address, browser type, device type, pages visited, referring website, approximate location, date and time of visit, interactions with our website, and cookie or similar tracking information.
   Social media and public interaction information, such as information you provide when you interact with us on social media, tag us, comment on posts, or submit content to us.
2. How We Collect Information
   We collect information directly from you when you:
   Place an order or make a purchase.
   Join, manage, or cancel a wine club membership.
   Provide or update a card on file through Square.
   Make a reservation or book an event.
   Subscribe to our emails.
   Contact us by phone, email, website form, or in person.
   Attend events, tastings, dinners, or private experiences.
   Respond to surveys, promotions, or customer service communications.
   We may also collect information automatically through cookies, analytics tools, email tracking technologies, and similar technologies when you use our website or interact with our emails.
   We may receive information from service providers and business partners, including Square, Mailchimp, reservation or ticketing platforms, website providers, shipping partners, age-verification providers, marketing platforms, and analytics providers.
3. How We Use Personal Information
   We may use personal information to:
   Process purchases, payments, refunds, and exchanges.
   Administer wine club memberships, releases, preferences, discounts, pickup orders, shipping orders, and recurring club charges.
   Store, update, and use payment methods in Square for authorized club orders, invoices, and other transactions.
   Communicate about wine club releases, order status, billing issues, card updates, pickup reminders, shipping notifications, reservations, and events.
   Provide customer service and respond to inquiries.
   Manage tastings, reservations, group visits, private events, and ticketed events.
   Send marketing emails, newsletters, event announcements, wine releases, promotions, and other updates through Mailchimp or similar platforms.
   Personalize your experience, including remembering preferences and improving recommendations.
   Maintain business records, transaction records, accounting records, tax records, and compliance documentation.
   Verify age and comply with alcohol laws, shipping laws, tax laws, payment rules, and other legal obligations.
   Protect against fraud, unauthorized transactions, chargebacks, security incidents, misuse, and illegal activity.
   Improve our website, products, services, events, marketing, and customer experience.
   Enforce our terms, policies, contracts, and legal rights.
4. Wine Club Orders and Square Card-on-File Processing
   When you join the Stone Tower wine club or otherwise authorize us to keep a payment method on file, we may use the payment method stored in Square to process club releases, recurring club orders, welcome packages, selected add-ons, shipping charges, applicable taxes, and other authorized charges.
   Your wine club membership may require a valid payment method. If your card on file expires, fails, or is removed, we may contact you to update your payment information. Failure to maintain a valid payment method may delay or prevent club order processing.
   You may request to update or remove a card on file by contacting us, or using the online tools on this site to edit your stored information. Square may also provide card-on-file notices or tools that allow you to manage or remove stored payment methods associated with our business. Removing a card on file does not cancel charges that have already been processed and may affect your ability to continue wine club membership or receive future releases.
   This Privacy Policy explains how personal information is handled. Separate wine club terms, purchase terms, or payment authorization language may also apply to your membership and charges.
5. Email Marketing and Mailchimp
   We use Mailchimp to manage email marketing, newsletters, and promotional communications. If you subscribe to our emails, we may use your email address and related information to send updates about wines, events, club news, releases, promotions, and other Stone Tower communications.
   Mailchimp may process information such as your email address, subscription status, email opens, clicks, delivery status, and similar engagement information on our behalf.
   You may unsubscribe from marketing emails at any time by clicking the unsubscribe link in our emails or contacting us. Even if you unsubscribe from marketing emails, we may still send transactional or service-related messages, such as order confirmations, wine club billing notices, reservation communications, pickup reminders, or legal notices.
6. Cookies, Analytics, and Similar Technologies
   Our website and emails may use cookies, pixels, analytics tools, and similar technologies to:
   Operate and secure the website.
   Remember preferences.
   Understand website traffic and usage.
   Measure email performance.
   Improve marketing and customer experience.
   Evaluate the effectiveness of promotions, events, and communications.
   You can manage cookies through your browser settings. Some website features may not function properly if cookies are disabled.
   We may use analytics or advertising tools that collect information about visits to our website or interactions with our content. Depending on the tool and applicable law, certain uses of advertising or analytics technologies may be considered “targeted advertising,” “sharing,” or “sale” of personal information. Where required, we will provide applicable opt-out choices.
7. How We Share Personal Information
   We may share personal information with the following categories of third parties:
   Payment processors and point-of-sale providers, including Square, to process payments, store authorized cards on file, manage invoices, maintain customer profiles, send receipts, prevent fraud, and support transactions.
   Email and marketing providers, including Mailchimp, to send newsletters, promotions, event announcements, club updates, and other communications.
   Shipping, delivery, fulfillment, and age-verification providers that help fulfill orders, verify legal drinking age, comply with alcohol shipping rules, and deliver products.
   Analytics and advertising providers that help us understand website usage, improve services, and measure marketing performance.
   Professional advisors, such as attorneys, accountants, insurers, auditors, and consultants.
   Government, regulatory, legal, or law-enforcement authorities when required by law, subpoena, court order, regulatory request, alcohol compliance obligation, tax obligation, or to protect rights, safety, and security.
   Business transfer parties if we are involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction.
   We do not sell personal information for money. We do not knowingly sell or share personal information of individuals under 16.
8. Legal and Alcohol-Related Compliance
   Because we sell and serve alcohol, we may use and disclose personal information to comply with laws and rules relating to:
   Legal drinking age verification.
   Alcohol sales, service, and shipping.
   Order eligibility and delivery restrictions.
   Tax reporting and recordkeeping.
   Chargeback, fraud, and payment-card rules.
   Winery licensing and regulatory requirements.
   Public safety and security.
   We may refuse or cancel orders, shipments, reservations, event participation, or club benefits when required by law or when we cannot verify eligibility.
9. Data Retention
   We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide services, administer wine club memberships, complete transactions, maintain business records, comply with legal obligations, resolve disputes, prevent fraud, and enforce agreements.
   For example, we may retain order records, payment records, wine club records, authorization records, tax records, and compliance records for the period required by law, payment rules, accounting practices, or legitimate business needs.
   When information is no longer needed, we may delete, de-identify, or securely retain it in accordance with our recordkeeping practices and legal obligations.
10. Security
    We use reasonable administrative, technical, and physical safeguards designed to protect personal information. Payment card information is processed through Square, which provides payment-processing security and PCI-related protections.
    No website, payment system, email system, or data transmission is completely secure. We cannot guarantee absolute security, but we take reasonable steps to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.
11. Your Choices
    You may have the following choices:
    Update your information. You may contact us to update contact information, wine club preferences, reservation details, or account information.
    Manage wine club information. You may contact the wine club team to update membership preferences, release selections, pickup or shipping information, or payment information.
    Manage card-on-file information. You may contact us to update or remove a stored card, subject to Square’s tools and applicable wine club or purchase terms.
    Unsubscribe from marketing emails. You may unsubscribe through the link in our emails or contact us.
    Manage cookies. You may adjust browser settings to block or delete cookies.
    Opt out of certain privacy-law uses. Depending on where you live and what laws apply, you may have the right to opt out of targeted advertising, sale, sharing, or certain profiling.
12. State Privacy Rights
    Depending on where you live and subject to applicable law, you may have the right to:
    Confirm whether we process your personal information.
    Access personal information we maintain about you.
    Correct inaccurate personal information.
    Delete personal information.
    Obtain a copy of personal information you provided to us in a portable format.
    Opt out of certain targeted advertising, sale of personal information, sharing of personal information, or profiling.
    Limit certain uses of sensitive personal information, where applicable.
    Appeal our decision if we deny a privacy request.
    To submit a privacy request, contact us using the information below. We may need to verify your identity before fulfilling a request. We may deny or limit requests where permitted by law, including when information is needed to complete a transaction, comply with law, maintain business records, protect against fraud or security incidents, or exercise legal rights.
    If we deny your request and applicable law gives you a right to appeal, you may appeal by replying to our decision email with the subject line “Privacy Appeal” or by contacting us using the information below.
    We will not discriminate against you for exercising privacy rights. However, some services, benefits, orders, club memberships, or transactions may require certain information to function.
13. Children and Age Restrictions
    Our website and services are not intended for children under 13, and we do not knowingly collect personal information from children under 13.
    Because we sell alcohol, purchase features, wine club memberships, alcohol shipments, tastings, and certain events are intended only for individuals who are at least 21 years old. We may collect information to verify age and eligibility.
14. International Visitors
    Stone Tower Winery is located in Virginia, United States. If you access our website from outside the United States, your information may be processed in the United States and other jurisdictions where our service providers operate. Privacy laws in those jurisdictions may differ from the laws where you live.
15. Links to Other Websites
    Our website may link to third-party websites, platforms, or services, such as Square, Mailchimp, reservation platforms, event platforms, social media sites, maps, or other external services. We are not responsible for the privacy practices of third-party websites or services. Review their privacy policies before providing information to them.
16. Changes to This Privacy Policy
    We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date above. If changes are material, we may provide additional notice, such as by posting a notice on our website or contacting you by email where appropriate.
17. Contact Us
    For questions about this Privacy Policy or to submit a privacy request, contact us at:
    Stone Tower Winery
    19925 Hogback Mountain Road
    Leesburg, VA 20175
    Phone: 703.777.2797
    Email: [email protected]