Privacy Policy

This Privacy Policy explains how [LEGAL_ENTITY_NAME], doing business as “Tipsy Rock” (“we,” “us,” or “our”), located at 710 Kings Bay Rd, St Marys, GA 31558, collects, uses, and shares information when you use our website and purchase products for in-store pickup or local delivery (the “Services”).

By using the Services you agree to this Policy. It should be read together with our Terms of Service.

Information you provide.

• Account information— name, email address, and authentication credentials when you register or sign in.
• Order information— items purchased, order totals, fulfillment method (pickup or delivery), and your chosen store or delivery details.
• Delivery information— delivery address and ZIP code, used to determine service-area eligibility and to fulfill delivery.
• Contact information— email and, if provided, phone number for order updates and support.
• Payment information— processed by our payment processor. We receive limited transaction details (such as confirmation and the last four digits / card brand) but do not store full card numbers.

Information collected automatically. Basic technical and usage data such as device/browser type, IP address, and pages viewed, along with cookies and similar technologies (see Section 7).

We use information to:

• process, fulfill, and deliver your orders;
• determine delivery service-area eligibility within approximately 5 miles of the store;
• create and manage your account and authenticate you;
• send transactional communications (order confirmations, pickup and delivery updates, receipts);
• comply with legal obligations related to alcohol sales, including age and identity verification at handoff and record-keeping;
• detect, prevent, and address fraud, abuse, and security incidents; and
• operate, maintain, and improve the Services.

When you first visit the site, we record an acknowledgment that you confirmed you are of legal drinking age. This is stored on your device (for example, via a cookie or local storage) so you are not prompted repeatedly. It is an acknowledgment only and is not identity or age verification.

Actual age and identity verification happens in person at pickup or delivery, when valid government-issued photo ID is checked. We do not collect or store photographs of your ID.

We share information only as described here:

• Service providers that operate the Services on our behalf (see Section 6);
• Delivery personnel, who receive the information needed to complete and verify a delivery;
• Legal and safety— when required by law, legal process, or to protect rights, safety, and the integrity of the Services, including alcohol-compliance obligations; and
• Business transfers— in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do [not] sell or share personal information for cross-context behavioral advertising.

We use trusted third parties to provide the Services. Each processes information only as needed for its function:

• Payment processing— Stripe.
• Database, authentication & storage— Supabase.
• Hosting & infrastructure— [HOSTING_PROVIDER].
• Transactional email— Resend.
• [Other sub-processors]— [describe].

We use cookies and local storage to keep you signed in, remember your cart and preferences (such as theme), record the age acknowledgment, and keep the Services secure and functional. Some are strictly necessary for the Services to work; others are optional.

We retain information for as long as needed to provide the Services and for legitimate business and legal purposes, including tax, accounting, and alcohol-sale record-keeping obligations. When no longer needed, information is deleted or de-identified.

We use reasonable administrative, technical, and organizational measures designed to protect information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. We will verify your request and respond as required by applicable law. We will not discriminate against you for exercising these rights.

The Services are intended only for adults 21 and older. We do not knowingly collect personal information from anyone under 21. If you believe a minor has provided us information, contact us and we will take appropriate steps to delete it.

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, where required, provide additional notice.

Tipsy Rock
710 Kings Bay Rd, St Marys, GA 31558
Email: [PRIVACY_EMAIL]
Phone: [SUPPORT_PHONE]