CHOICE AND CONTROL OF PERSONAL DATA.
Communications Preferences. You can choose whether to receive promotional communications from us by email, SMS, and telephone. If you receive promotional email or SMS messages from us and would like to stop, you can do so by following the directions in that message or by contacting us as described in the Contact Us section below. If you receive a sales call from us, you can ask to be placed on our do-not-call list. For promotional emails, you can click “unsubscribe” in the email to unsubscribe from future promotional email communications. These choices do not apply to certain informational communications including surveys and mandatory service communications.
Account Updates. If you are a registered user of one of our websites or applications, you may make changes to certain information, such as your contact information, by logging into your account on that website or application and navigating to your account or your profile within that website or application to update or correct your information directly in each website or application. Please note that not all of the information we have collected about you is available through your account or profile within our websites or applications.
Choices for Cookies and Similar Technologies. See the Cookies section for choices about cookies and other analytics and advertising controls.
California Residents:
Under California law, if you are a California resident and the processing of personal data about you is subject to the California Consumer Privacy Act (“CCPA”), you have certain rights with respect to that information. To exercise your options as described below, you may contact us in one of two ways: by telephone at (855) 628-7732 or by submitting a request winery@cliffamily.com (collectively, “Communication Methods”). To effectively exercise your privacy options, you must use one of these Communication Methods.  Your rights include:
Right to Know: You have a right to request that we disclose to you the personal data we have collected about you.  You also have a right to request additional information about our collection, use, disclosure, or sale of such personal data.  Note that we have provided much of this information in this privacy statement.  Right to Request Deletion: You also have a right to request that we delete personal data under certain circumstances, subject to a number of exceptions.Right to Opt-Out: Note that the CCPA defines “sell” and “personal data” very broadly, and some of the data disclosures described in this privacy statement may be considered a “sale” under those definitions. In particular, we let advertising and analytics providers collect IP addresses, cookie IDs, and mobile IDs through our sites and apps when you use our online services, but do not “sell” any other types of personal data. For more information, including how to opt-out, please see the Cookies section of this statement. We do not knowingly sell the personal data of minors under 16 years of age.
We will not discriminate against you because you have made a request described in this Privacy Statement or otherwise exercised your rights under applicable law.  We may offer financial incentives or offer you a different price, level, or quality of goods or services in connection with programs that require you to disclose certain personal data, but only if you opt in to such an incentive program.  If you opt in to any such incentive program, you may revoke your consent to disclose your personal data at any time, as described in the terms and conditions of those programs.  
Finally, you have a right to receive notice of our practices at or before collection of personal data, and you have a right to not be discriminated against for exercising these rights set out in the CCPA. 
Identity Verification
We are required to verify the identity of any person submitting any of the above requests (other than a request to Opt-Out of Sale).  Initially, we will ask you to provide identifying information when you submit a request through a Communication Method. Providing accurate information that matches our records will help us identify the correct information.  We may then ask you to submit evidence proving your identity, which could include government issued IDs, signed statements, etc.  The evidence we may request from you, and the degree of certainty we will be required to reach regarding your identity and the authenticity of your request, will depend upon the nature of your request, the nature of the information we have about you, and your ability to furnish information.  If we ask you to verify your identity, you must promptly cooperate with our efforts so that we can fulfill your request.  If you do not comply, your request cannot be fulfilled; and if you delay in complying, the fulfillment of your request is likely to be delayed as a result. Any additional information collected from you for verification will be deleted once the purpose for the verification has been satisfied.
Authorized Agents
You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us.
Third Party Marketing
Additionally, under California Civil Code section 1798.83, also known as the “Shine the Light” law, California residents who have provided personal data to a business with which the individual has established a business relationship for personal, family, or household purposes (“California Customers”) may request information about whether the business has disclosed personal data to any third parties for the third parties’ direct marketing purposes.  Please be aware that we do not disclose personal data to any third parties for their direct marketing purposes as defined by this law.
California Customers may request further information about our compliance with this law by e-mailing winery@cliffamily.com. Please note that businesses are required to respond to one request per California Customer each year and may not be required to respond to requests made by means other than through the designated e-mail address.  
SECURITY OF PERSONAL DATA
We take reasonable and appropriate steps to help protect personal data from unauthorized access, use, disclosure, alteration, and destruction. Please be aware, though, that despite our efforts, no measures to safeguard data are perfect, and we cannot guarantee complete security.
To help us protect personal data if you set up an account with us, we request that you use a strong password and never share your password with anyone or use the same password with other sites or accounts.