Privacy Policy

Last updated: November 9, 2026

Wine Chips, Inc. (“Wine Chips”, “we”, “us”), 61675 M 40, Paw Paw, MI 49079, operates the Wine Chips Rally fundraising platform at rally.winechips.com (the “Platform”). This policy explains what personal information we collect on the Platform, why, who we share it with, and the choices and rights you have. It applies to the Platform only; winechips.com has its own policy.

Who uses the Platform

  • Organizers create fundraising campaigns for a school, team, club, or nonprofit.
  • Sellers (participants) get a personal fundraising page to share.
  • Supporters buy products through a seller’s or campaign’s page. Supporters check out as guests and do not create an account.

Information we collect

  • Organizer and seller accounts: name, email address, password (stored only as a one-way hash), organization name and type, optional phone number, the age confirmation given at signup (18 or older; 13 to 17 with a parent’s permission; or a parent setting up an account for a child under 13), and a record of when you agreed to our Terms and which version. Sellers may add a display name, a short message, a fundraising goal, and a photo for their page.
  • Supporters at checkout: name, email address, shipping address, the products bought, an optional gift message, and which seller and campaign the purchase supports. Checkout does not ask for a phone number.
  • Payment information: card payments are processed by Stripe. Card numbers go directly from your browser to Stripe; we never receive or store them. We receive a payment reference, the payment status, and limited details such as card brand and last four digits.
  • Automatically: IP address, browser and device type, and pages requested, which we use for security, fraud and abuse prevention (for example, limiting repeated login attempts), and fixing errors. A security check from Cloudflare (Turnstile) may run on some forms to block bots.
  • Cookies and local storage: used only to keep you signed in, remember your cart, and remember interface preferences. We do not use advertising cookies, cross-site tracking, or third-party analytics.

We do not collect precise location, government ID numbers, biometric data, or health information, and we do not knowingly collect any other sensitive personal data except as described under “Children” below.

What is public

A seller’s fundraising page is public by design: anyone with the link can see the seller’s first name (never their last name), photo (if provided), personal message, goal, and progress, along with the organization’s name. Leaderboards require signing in and are visible only to the campaign’s own participants and organizers; they show each seller’s first name and last initial, photo, and totals. Some page addresses created before November 2026 include a seller’s last name; email us and we will change it. Supporters’ names are never shown publicly; they are visible only to the campaign’s organizers (see below) and to us.

How we use information

  • To run campaigns, display fundraising pages, and process, ship, and support orders.
  • To send order, shipping, account, and security emails.
  • To send you occasional emails about future fundraisers and Wine Chips products, if you are an adult (18 or older) supporter, organizer, or seller. You can unsubscribe at any time (see “Your choices”).
  • To credit purchases to the right seller and calculate and pay what the organization earns.
  • To let organizers see who supported their campaign (supporter name, email, items, and amount) so they can thank supporters and manage their fundraiser.
  • To secure the Platform, prevent fraud and abuse, and fix errors.
  • To comply with law, including tax and accounting obligations, and to enforce our Terms.

We do not sell personal information, we do not share it for cross-context behavioral (targeted) advertising, and we do not use it for profiling that produces legal or similarly significant effects. We do not give or sell your email address to other companies for their own marketing, and we do not upload it to advertising platforms. We do not send marketing to anyone we know is under 18 (including sellers who told us they are 13 to 17, and accounts a parent set up for a child), and we never use a child’s information for marketing.

Who we share it with

  • The campaign’s organizers receive supporter details for orders placed in their campaign and progress for their sellers. Our Terms limit their use to running that fundraiser.
  • Service providers that process information for us under contract and may use it only to provide their service:
    • Stripe (payment processing)
    • Twilio SendGrid and our email-marketing provider (sending order and marketing emails)
    • Our shipping-rate and label service, EasyPost, and carriers such as USPS, UPS, and FedEx (name and shipping address to deliver your order)
    • Our warehouse fulfillment system (buyer name, email address, shipping address, order contents, and shipping details)
    • Hetzner Online GmbH (server hosting, Germany)
    • Cloudflare (network security and bot protection)
    • When those features are used: an SMS delivery provider (to send text messages) and an AI writing-assist provider (to suggest wording for a seller’s share message, from the draft text, campaign name, and storefront link)
  • Legal and safety: when required by law, or to protect rights, property, or safety.
  • Business transfers: to a successor in a merger, acquisition, or sale of assets, subject to this policy.

Where data is stored

Platform data is stored on servers in Germany (European Union) operated by our hosting provider, and is processed in the United States by us and our service providers. We protect it with the safeguards described below wherever it is processed.

Children

Fundraisers often involve youth teams and schools, so some sellers are minors. We do not knowingly allow children under 13 to create accounts or give us personal information directly. A seller account for a child under 13 must be created and controlled by the child’s parent or legal guardian (or by the organizer, with the parent’s permission), who uses their own email address and decides what appears on the child’s page. Signup asks whether the person is 18 or older, 13 to 17 with a parent’s permission, or a parent setting up an account for a child under 13. Public pages show a seller’s first name only, and we recommend no photo for children.

We use a child’s information only to show their fundraising page and credit their sales. We never sell it or use it for advertising. A parent or guardian may review, change, or delete their child’s information, or close the account, at any time by emailing hello@winechips.com. Closing the account takes the child’s fundraising page down. If we learn we collected personal information from a child under 13 without a parent’s consent, we will delete it.

Users under 18 (including California residents under California Business and Professions Code §22581) may ask us to remove content they posted on the Platform, such as their page message or photo, by emailing hello@winechips.com. Removal from the Platform may not remove copies others have made.

Retention

We keep order and payout records for as long as needed for accounting, tax, and legal purposes, generally seven years. When an account is deleted, we remove or anonymize its personal details and take its fundraising page down; order records needed for accounting and the organization’s payout are kept in minimal or de-identified form. Fundraising page content is also removed on request. Security logs, such as records of login attempts and the IP addresses they came from, are kept only as long as needed for security and fraud prevention, then deleted.

Your choices and rights

Wherever you live, you can ask us to access, correct, delete, or give you a copy of your personal information by emailing hello@winechips.com or calling 800-501-3316. Account holders can also update details in their dashboard. We will verify your request (usually by confirming control of the email address on file), respond within 45 days, and not discriminate against you for using these rights. You may use an authorized agent; we may ask for proof of their authority.

Marketing email: every marketing email has an unsubscribe link, and you can also opt out by emailing hello@winechips.com. We honor opt-outs promptly (within 10 business days). Unsubscribing does not stop emails about an order you placed or your account.

Texas residents

Under the Texas Data Privacy and Security Act, you have the right to confirm whether we process your personal data and to access, correct, delete, and obtain a portable copy of it, and to opt out of the sale of personal data, targeted advertising, and certain profiling. We do not sell personal data, engage in targeted advertising, or carry out that profiling. To exercise a right, contact us as described above. If we decline your request, you may appeal by replying to our decision or emailing hello@winechips.com with the subject “Privacy appeal”; we will respond within 60 days. If the appeal is denied, you may contact the Texas Attorney General at texasattorneygeneral.gov. Parents of Texas minors may use the same contact to review, change, or delete their child’s information and page.

California residents

You have the right to know what personal information we collect, use, and disclose (the categories are described above: identifiers, customer records, commercial information, and internet activity); to delete it; to correct it; and to opt out of its sale or sharing. We have not sold or shared (for cross-context behavioral advertising) personal information in the past 12 months, including that of consumers under 16, and we do not use or disclose sensitive personal information for purposes that would trigger a right to limit it. We disclose the categories above to our service providers and organizers for the business purposes described in this policy. Shine the Light: we do not share personal information with third parties for their own direct marketing.

Do Not Track and Global Privacy Control

Because we do not track you across other sites or sell or share your information, we treat every visitor the same whether or not the browser sends a “Do Not Track” signal. We honor the Global Privacy Control (GPC) signal as an opt-out of sale and sharing.

Security

We use encryption in transit (HTTPS), hashed passwords, encrypted storage of integration credentials, rate limits, and access controls that limit each organizer to their own organization’s data. No system is perfectly secure; if a breach affects your personal information, we will notify you as the law requires.

Changes

We will post changes here and update the date above. We will tell account holders about material changes by email or on the Platform before they take effect.

Contact

Wine Chips, Inc. — Privacy
61675 M 40, Paw Paw, MI 49079
hello@winechips.com · 800-501-3316