At Highland Park Brewery (“we”, “us”), we value your privacy. This Privacy Policy explains what personal information we collect through hpb.la and our online shop, how we use and share it, how long we keep it, and the choices and rights you have, including under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) and, where it applies, the EU/UK General Data Protection Regulation (GDPR).
1. Information We Collect
Information you give us
- Identifiers and contact details: name, email address, phone number, billing and shipping address.
- Account, subscription and membership details: login details for your account, your Fresh Friends / Bottle Friends subscriptions and memberships, and your order and renewal history.
- Purchase information: products you buy, order notes, pickup or delivery choices, and your confirmation that you are 21 or older when buying alcohol.
- Newsletter sign-ups: the email address you enter in our newsletter form.
- Messages: anything you send us by email or through our website.
Payment information: card and digital-wallet payments (such as Google Pay) are processed by our payment provider, Square. We do not see or store your full card number; Square handles it under its own privacy policy.
Information collected automatically
- Device and usage information: IP address, browser and device type, pages viewed, and how you arrived at our site (for example, a search engine, an ad or an email link).
- Approximate location: city or region estimated from your IP address. We do not collect precise location.
- Cookies and similar technologies: see section 6 and our Cookie Policy.
2. How We Use Your Information
- To process and deliver your orders, subscriptions and memberships, including renewals, pickup and shipping.
- To verify age eligibility for alcohol purchases and comply with alcohol, tax and other legal requirements.
- To communicate with you about your orders, account and questions.
- To send our newsletter and offers if you signed up. You can unsubscribe at any time using the link in each email.
- With your consent, to understand how our website is used (analytics) and to measure and improve our advertising (marketing).
- To keep our website and shop secure and prevent fraud and spam.
3. Legal Basis for Processing (GDPR)
If the GDPR applies to you, we rely on: contract (to fulfil your orders and subscriptions), legal obligation (for example tax and alcohol-sale records), consent (newsletter, analytics and marketing cookies – you can withdraw it at any time), and legitimate interests (keeping the site secure, preventing fraud, and improving our services).
4. Who We Share Your Information With
We share personal information only with service providers that help us run our business, and only for the purposes above:
- Square – payment processing, including Google Pay.
- Shipping and delivery partners – to deliver orders that are shipped.
- Mailchimp (Intuit) – to send our newsletter.
- Google – Google Analytics (website statistics) and Google Ads (ad measurement and remarketing), only if you allow Analytics or Marketing cookies; and Google Merchant Center, which lists our products on Google.
- Website hosting, security and maintenance – our hosting provider (GridPane), Cloudflare (security and performance), our email delivery service, and our web agency (Razorfrog Web Design), who may access the site to maintain it.
- Elfsight – displays our Instagram feed on the website.
- Authorities – when required by law, or to protect our rights, customers or the public.
We do not sell your personal information for money. We do not share it with other companies for their own direct marketing.
5. Advertising and “Sharing” Under California Law
If you allow Marketing cookies, Google Ads may use cookies to measure our ads and show you our ads on other websites. Under the CCPA/CPRA this may count as “sharing” personal information for cross-context behavioral advertising. Marketing cookies are off unless you turn them on, and you can turn them off at any time in our Cookie Settings.
6. Cookies and Similar Technologies
We use cookies that are essential for the website and shop to work (for example, your cart, your login and your cookie choices). With your consent, we also use Analytics cookies (Google Analytics) and Marketing cookies (Google Ads and WooCommerce order attribution, which records which website, ad or email brought you to our shop). Analytics and Marketing cookies are off until you allow them. Some services load before you make a choice so the site and checkout can work, such as Square and Google Pay at checkout, our Instagram feed, Cloudflare and fonts; and Google receives cookieless signals that do not identify you until you consent.
You can change your choice at any time using the Your Cookie Settings link at the bottom of every page. Our Cookie Policy lists each cookie, who sets it, what it does and how long it lasts. You can also block or delete cookies in your browser, but some features of the shop may stop working.
7. Your Rights
California residents have the right to:
- Know and access the personal information we collect, use and disclose;
- Delete personal information, subject to legal exceptions (for example, records we must keep for tax purposes);
- Correct inaccurate personal information;
- Opt out of the sale or sharing of personal information (see section 5);
- Limit the use of sensitive personal information (we do not use sensitive personal information to infer characteristics about you);
- Not be discriminated against for exercising these rights.
If the GDPR applies to you, you also have the right to access, correct, erase, restrict or object to the processing of your data, to data portability, to withdraw consent at any time, and to complain to your local data protection authority.
8. How to Make a Request
Email us at [email protected]. We will verify your identity (usually by confirming details of your account or orders) before acting on a request, and respond within the time the law requires. You may use an authorized agent; we may ask for proof of their authority.
9. How Long We Keep Information
- Orders and payment records: as long as required for tax and accounting purposes.
- Accounts, subscriptions and memberships: while your account is active, then as needed for the records above.
- Newsletter: until you unsubscribe.
- Cookies: as listed in our Cookie Policy. Your cookie choice is remembered for 90 days.
10. Data Security
We use reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS), security monitoring and limited access. No method of transmission or storage is completely secure.
11. International Transfers
We are based in the United States and our service providers process data in the U.S. If you visit from outside the U.S., your information will be transferred to and processed in the U.S.
12. Age Requirement and Children’s Privacy
You must be 21 or older to buy alcohol from us. Our website is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.
13. California “Shine the Light”
We do not share personal information with third parties for their own direct marketing purposes.
14. Links to Other Sites
Our website links to other websites and services (for example Instagram, Untappd and Google Maps). Their privacy practices are governed by their own policies.
15. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last Updated” date at the top shows when it last changed.
16. Contact Us
Highland Park Brewery
1220 N Spring Street, Los Angeles, CA 90012
Email: [email protected]
Phone: (213) 878-9017