Privacy Policy

1. Introduction

The Lokal Winery ("we," "us," or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website thelokal.ca, use our services, or interact with us.

This policy complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy legislation.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name (first and last name)
• Email address
• Phone number
• Address and postal code
• Appointment booking information
• Wine preferences and purchase history
• Payment information (processed through secure third-party providers)

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and device information
• Browser type and version
• Operating system
• Pages visited and time spent on our website
• Referring website addresses
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To process your wine-making orders, schedule appointments, and provide customer service
• Communication: To send you booking confirmations, updates, and respond to inquiries
• Marketing: To send newsletters, promotions, and special offers (with your consent)
• Loyalty Program: To manage our Sip & Save rewards program
• Website Improvement: To analyze usage patterns and improve our services
• Legal Compliance: To comply with legal obligations and protect our rights
• Business Operations: To maintain records and conduct business analytics

4. Disclosure of Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service Providers: Third-party vendors who assist with payment processing, email marketing, website hosting, and analytics
• Legal Authorities: When required by law, court order, or to protect our legal rights
• Business Transfers: In connection with a merger, sale, or acquisition of our business
• With Your Consent: When you have provided explicit consent for specific purposes

All third-party service providers are contractually required to maintain the confidentiality and security of your personal information.

5. Consent

By providing your personal information, you consent to its collection, use, and disclosure as described in this Privacy Policy. You may withdraw your consent at any time by contacting us, subject to legal or contractual restrictions.

For marketing communications, you can opt-out by clicking the "unsubscribe" link in any email we send or by contacting us directly.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure server infrastructure
• Access controls and authentication
• Regular security assessments
• Employee training on data protection

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. When personal information is no longer required, we will securely delete or anonymize it.

8. Your Rights Under PIPEDA

Under Canadian privacy law, you have the right to:

• Access: Request access to your personal information we hold
• Correction: Request correction of inaccurate or incomplete information
• Withdrawal: Withdraw consent for specific uses of your information
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada
• Explanation: Request an explanation of how your information is being used

To exercise these rights, please contact us using the information provided below.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, analyze website traffic, and personalize content. You can control cookies through your browser settings, but disabling cookies may affect website functionality.

Types of cookies we use include:

• Essential Cookies: Required for website operation
• Analytics Cookies: Help us understand how visitors use our site
• Marketing Cookies: Used to deliver relevant advertisements

10. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are intended for individuals who are of legal drinking age in Ontario (19 years or older). We do not knowingly collect personal information from individuals under 19. If we become aware that we have collected information from someone under 19, we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

14. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Province of Ontario and the federal laws of Canada applicable therein.