STATE 28 PRIVACY POLICY

Effective Date: August 6, 2026
Last Updated: August 6, 2026

This Privacy Policy describes how State 28 Spirits, LLC, doing business as State 28 (“State 28,” “we,” “us,” or “our”), collects, uses, discloses, and protects information when you:

  • Visit www.state28.com;

  • Submit a contact form or survey;

  • Subscribe to email communications;

  • Enter a promotion or participate in an event;

  • Create an account;

  • Purchase or inquire about products;

  • Interact with our advertisements, social media pages, or digital content; or

  • Otherwise communicate or interact with us.

This Privacy Policy applies to information collected through the website and related State 28 digital services that link to this Privacy Policy (collectively, the “Website”).

1. Information We Collect

The information we collect depends on how you interact with State 28.

A. Information You Provide

We may collect information you voluntarily provide, including:

  • Name;

  • Email address;

  • Telephone number;

  • Mailing, billing, or delivery address;

  • Date of birth, age confirmation, or age-verification information;

  • Account login information;

  • Contact-form messages and correspondence;

  • Survey answers and preferences;

  • Event-registration information;

  • Promotion or giveaway entries;

  • Product interests and communication preferences;

  • Testimonials, photographs, comments, and other content you submit;

  • Customer-service and support communications; and

  • Any other information you choose to provide.

Please do not submit sensitive personal information unless it is specifically requested and reasonably necessary for the transaction or service.

B. Purchase and Transaction Information

When products or services are offered for purchase, we or our service providers may collect:

  • Information on products viewed, added to a cart, or purchased;

  • Order date, amount, status, and transaction history;

  • Billing and delivery information;

  • Discount, promotion, or referral information;

  • Age- and identity-verification results;

  • Shipping, delivery, return, and refund information; and

  • Information needed to prevent fraud or comply with the law.

Payment-card information may be collected and processed directly by a third-party payment processor, retailer, marketplace, or licensed alcoholic beverage seller. State 28 may receive limited transaction details, such as payment status and transaction identifiers, rather than complete payment-card numbers.

C. Information Collected Automatically

When you access the Website, we and our service providers may automatically collect information such as:

  • Internet Protocol address;

  • Browser type and version;

  • Device type and operating system;

  • Device identifiers;

  • General geographic location derived from an IP address;

  • Internet service provider;

  • Referring and exit pages;

  • Pages, links, and features viewed or used;

  • Dates, times, and duration of visits;

  • Search terms and navigation patterns;

  • Shopping-cart activity;

  • Email engagement information; and

  • Cookie, pixel, tag, local-storage, or similar technology identifiers.

We may combine automatically collected information with other information associated with you.

D. Information from Third Parties

We may receive information from third parties, including:

  • E-commerce and payment providers;

  • Licensed retailers and alcoholic beverage sellers;

  • Shipping and fulfillment providers;

  • Age- and identity-verification providers;

  • Email and customer-relationship platforms;

  • Analytics and advertising providers;

  • Social media platforms;

  • Event, promotion, and survey providers;

  • Distributors and other business partners; and

  • Publicly available sources.

Information provided by a third party remains subject to that third party’s privacy practices as well as this Privacy Policy once received by State 28.

2. Cookies and Similar Technologies

We may use cookies, pixels, tags, software development kits, local storage, and similar technologies to operate and understand the Website.

These technologies may be used to:

  • Keep the Website functioning;

  • Remember preferences and age-verification status;

  • Maintain a shopping cart or user session;

  • Understand traffic and Website performance;

  • Measure engagement with emails or campaigns;

  • Identify and address errors or security threats;

  • Prevent fraud;

  • Improve content and user experience; and

  • Support advertising or campaign measurement.

The types of cookies used may include:

Strictly Necessary Cookies

These support core functions such as security, account access, age gates, shopping carts, checkout, and fraud prevention.

Analytics Cookies

These help us understand how visitors use the Website, which pages are viewed, how users navigate, and how the Website performs.

Functional Cookies

These remember choices and provide enhanced functionality.

Advertising or Measurement Cookies

These may help measure campaigns, understand audience engagement, limit repetitive advertisements, or provide advertising that may be more relevant.

You may be able to manage cookies through a cookie-consent tool displayed on the Website or through your browser settings. Blocking some technologies may affect Website functionality.

Your browser may offer a “Do Not Track” setting. Because there is not a universally accepted standard for responding to all such signals, the Website may not respond to traditional Do Not Track signals. Where required by applicable law, we will process legally recognized browser-based opt-out preference signals.

3. How We Use Information

We may use information to:

  • Operate, maintain, secure, and improve the Website;

  • Provide information about State 28 and its products;

  • Respond to questions, inquiries, and requests;

  • Process registrations, purchases, payments, deliveries, returns, and refunds;

  • Verify age, identity, eligibility, and delivery requirements;

  • Administer surveys, events, promotions, and programs;

  • Send requested communications;

  • Send marketing communications where permitted;

  • Personalize Website content and communications;

  • Analyze Website usage, campaign performance, and customer interests;

  • Conduct internal research, planning, and product development;

  • Maintain records and manage our business relationships;

  • Detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity;

  • Enforce our agreements and protect our rights;

  • Comply with legal, regulatory, tax, licensing, and reporting obligations; and

  • Complete a financing, merger, acquisition, restructuring, sale, or other business transaction.

We may use information that has been aggregated or deidentified for lawful purposes. We will not attempt to reidentify properly deidentified information except as permitted by law.

4. Email and Marketing Communications

When you subscribe to our communications, we may send you news, launch announcements, product information, promotions, invitations, stories, and other State 28 updates.

You can unsubscribe from promotional emails by clicking the unsubscribe link in the email or contacting us at privacy@state28.com.

We may continue to send nonpromotional messages, including order, account, security, legal, or customer service communications.

5. How We Disclose Information

We may disclose information to the following categories of recipients:

Service Providers

We may disclose information to companies that provide services on our behalf, such as:

  • Website hosting and technology support;

  • Cloud storage;

  • Analytics;

  • Email delivery and customer-relationship management;

  • Payment processing;

  • E-commerce and checkout services;

  • Age and identity verification;

  • Fraud prevention and security;

  • Shipping, delivery, and fulfillment;

  • Surveys, forms, events, and promotions;

  • Marketing and campaign measurement;

  • Legal, accounting, insurance, and professional services; and

  • Data management and business operations.

These providers may use information to perform services for us and as otherwise permitted by their agreements and applicable law.

Retailers, Distributors, and Transaction Partners

When a purchase or product request involves a third-party licensed seller, distributor, marketplace, fulfillment company, or delivery provider, we may disclose information necessary to process and fulfill the transaction.

These parties may independently control certain information and provide their own privacy notices.

Business and Promotional Partners

We may disclose information to a partner when you request a jointly offered service, participate in a co-sponsored event or promotion, or otherwise direct us to do so.

Legal and Safety Disclosures

We may disclose information when we reasonably believe disclosure is necessary to:

  • Comply with a law, regulation, subpoena, court order, or legal process;

  • Respond to government or regulatory authorities;

  • Enforce our terms and agreements;

  • Detect, prevent, or investigate fraud, security incidents, or illegal activity;

  • Protect the rights, property, safety, and security of State 28, our users, or others; or

  • Establish, exercise, or defend legal claims.

Business Transactions

Information may be disclosed or transferred as part of a proposed or completed financing, merger, acquisition, restructuring, sale of assets, insolvency proceeding, or similar transaction.

With Your Direction or Consent

We may disclose information when you direct us to do so or provide consent.

6. Sale, Sharing, and Targeted Advertising

State 28 does not currently sell personal information or use personal information for targeted advertising as those terms are defined under applicable state privacy laws.

We may use cookies and similar technologies for website functionality, analytics, security, and performance. Visitors may manage or decline nonessential cookies through the cookie-preference controls available on the website.

If our practices change in the future, including if we begin using technologies for targeted advertising or cross-context behavioral advertising, we will update this Privacy Policy and provide any choices or opt-out mechanisms required by applicable law.

7. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • Provide requested services;

  • Complete transactions;

  • Maintain business and tax records;

  • Comply with alcohol, consumer-protection, accounting, and other legal obligations;

  • Resolve disputes;

  • Enforce agreements;

  • Prevent fraud; and

  • Protect our rights and systems.

Retention periods vary depending on the type of information, our relationship with you, legal requirements, and operational needs.

When information is no longer reasonably necessary, we may delete, destroy, aggregate, or deidentify it.

8. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information.

No website, network, storage system, or transmission method is completely secure. We therefore cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of any account credentials and for notifying us if you suspect unauthorized account access.

9. Your Privacy Rights

Depending on where you live and subject to applicable exemptions, you may have the right to:

  • Confirm whether we process your personal information;

  • Access personal information we maintain about you;

  • Correct inaccuracies;

  • Request deletion;

  • Obtain a portable copy of certain information;

  • Opt out of targeted advertising;

  • Opt out of certain sales of personal information;

  • Opt out of certain profiling in furtherance of decisions producing legal or similarly significant effects;

  • Withdraw consent where processing is based on consent; and

  • Appeal our decision regarding a privacy request.

You may submit a request by:

Email:privacy@state28.com
Mail: 1525 US Highway 380, STE 500-272, Frisco, TX 75033-0174

Please describe your request and provide sufficient information for us to identify the records involved. We may need to verify your identity before fulfilling a request.

You may use an authorized agent where permitted by law. We may require proof that the agent is authorized to act for you and may ask you to verify your identity directly.

We will respond within the period required by applicable law. Certain information may be exempt from a request, and we may retain information where permitted or required by law.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

Appeals

If we decline to act on a privacy request and applicable law gives you a right to appeal, you may submit an appeal to privacy@state28.com with the subject line “Privacy Request Appeal.”

10. California Privacy Notice

This section applies only to the extent California privacy law applies to State 28 or the relevant processing activity.

California residents may have rights concerning access, correction, deletion, portability, and opting out of certain sales, sharing, or uses of sensitive personal information.

The categories of personal information we may collect are described in Section 1. The purposes for collection and use are described in Section 3. The categories of recipients are described in Section 5.

We do not knowingly sell or share the personal information of consumers under 16 without legally required authorization.

California residents may submit requests using the methods listed in Section 9.

Nothing in this section represents that a particular California statute applies to State 28 when an applicable threshold or legal requirement has not been met.

11. Children’s Privacy

The Website is not directed to children under 13, and alcohol-related portions of the Website are intended for adults who are at least 21 years old.

We do not knowingly collect personal information online from children under 13. If you believe a child under 13 has submitted personal information to us, contact us at privacy@state28.com so that we can investigate and take appropriate action.

Individuals under 21 must not purchase alcoholic beverages or submit information for the purpose of completing an alcoholic beverage transaction.

12. Third-Party Websites and Platforms

The Website may link to or integrate with third-party websites, retailers, payment providers, social media platforms, shipping services, or other services.

Those parties may collect information directly from you and control it under their own privacy policies. This Privacy Policy does not govern a third party’s independent privacy practices.

Review the privacy notice of each third-party service you use.

13. Social Media Features

When you interact with State 28 through a social media platform, the platform may collect information about your activity. State 28 may receive information permitted by your account settings and the platform’s policies.

Your interactions with social media features are also governed by the relevant platform’s terms and privacy policy.

14. International Visitors

State 28 is based in the United States, and the Website is primarily intended for users in the United States.

If you access the Website from another country, your information may be transferred to, stored in, and processed in the United States or other jurisdictions where our service providers operate. Those jurisdictions may have privacy laws different from the laws where you live.

Where required, we will use legally recognized safeguards for international data transfers.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, services, or legal obligations.

We will post the updated policy on the Website and revise the “Last Updated” date. When required by law, we will provide additional notice or obtain consent.

16. Contact Us

Questions, privacy requests, or concerns may be directed to:

State 28 Spirits, LLCAttn: Privacy1525 US Highway 380, STE 500-272Frisco, TX 75033-0174Email: privacy@state28.com