Privacy Notice – JUNE 2025

E. & J. Gallo Winery and its brands, affiliates, and subsidiaries (collectively “Gallo,” “we,” “us,” or “our”) created this Privacy Notice to inform consumers, website users, club members, event registrants/participants, newsletter/information recipients, promotion, contest, sweepstakes or campaign participants, online community participants, those who correspond with us via telephone, SMS (text message), email or QR Code, those we interact with in our business relationships, those who visit our tasting rooms and other physical locations, and those who purchase or inquire about our products and services (collectively referred to as “you” or “your”) about our practices regarding collection, use and disclosure of Personal Information (as defined below). Unless otherwise expressly stated, this Notice applies to each of our websites, electronic services, and mobile applications that link to this Notice, and to information we collect offline (collectively, our “Services”).

Please carefully review this Privacy Policy and our Terms of Use before using our websites or apps. By visiting or otherwise using our websites or apps, you agree to our Terms of Use and consent to our collection, use and sharing of your Personal Information, and other activities, as described in this Privacy Policy.

Table of Contents

How can a consumer with a disability access this Notice?

Consumers who have a visual disability may be able to use a screen reader or other text-to-speech or text-to-Braille tool to review the contents of this Notice. If this Notice is needed in an alternative format, please call us at 1-888-295-0247.

Notice at Collection

This Notice applies to your Personal Information. “Personal Information” is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information does not include information that is deidentified, aggregated, publicly available, or lawfully obtained, truthful information that is a matter of public concern.

How and Why We Collect Personal Information

We have set out below the categories of Personal Information we collect about consumers, and the business or commercial purposes for which we collect the information.

Categories of Personal Information	Purposes for Collection
Identifiers and personal records including real name, alias, signature, postal address, telephone number, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers; physical characteristics or description; education; employment; employment history; credit card number, debit card number, or other payment information. This category includes information described under Cal. Civ. Code § 1798.80(e).	To process your purchases; In connection with registration for events, memberships, accounts, etc.; To communicate with you; To permit your participation in online communities/provision of user-generated content; To facilitate your participation in contests, sweepstakes and other promotions; For marketing and advertising; To administer our Services; To analyze trends relating to our products, Services, communications, and advertisements; To detect and prevent fraud against you and/or us; For security purposes; To comply with law (e.g., to confirm legal drinking age)
Characteristics of protected classifications under California or federal law, including age, gender, and disability	To facilitate your participation in certain services we provide; To gather demographic information for aggregate use; For marketing and advertising; To analyze trends relating to our products, Services, communications, and advertisements; To otherwise help us tailor our communications to individual consumers; To detect and prevent fraud against you and/or us; To comply with law (e.g., to confirm legal drinking age)
Internet or other electronic network activity information, including browsing history, search history, and information regarding your interactions with our websites, applications, or advertisements; Geolocation data	To process your purchases; To tailor our communications with you; To permit your participation in online communities/provision of user-generated content; For marketing and advertising; To administer our Services; To analyze trends relating to our products, Services, communications, and advertisements; To detect and prevent fraud against you and/or us; For security purposes
Audio, electronic, visual, thermal, olfactory, or similar information	To provide customer service; To process your purchases; To analyze trends relating to our products, communications, and advertisements; To detect and prevent fraud against you and/or us; For security purposes
Professional or employment-related information If you are a Gallo employee, please see our California Employee Privacy Notice for additional disclosures. If you are a job applicant, please see our California Applicant Privacy Notice on the GalloCareers.com site for additional disclosures.	To process your purchases (e.g., employee discounts); To tailor our communications with you; For marketing and advertising; To analyze trends relating to our products, Services, communications, and advertisements; To detect and prevent fraud against you and/or us
Inferences reflecting consumers’ preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes	To analyze trends and to otherwise help us tailor our communications; For marketing and advertising; For security purposes
Sensitive Personal Information:
Personal information that reveals a consumer’s social security, driver’s license, state identification card, or passport number. Depending on the document provided, this may include your citizenship	To confirm legal drinking age; To confirm eligibility for contest winners; For tax purposes; To detect and prevent fraud against you and/or us; For security purposes
Precise geolocation data	To detect and prevent fraud against you and/or us; For security purposes

In addition to the other purposes for collection, use, and disclosure of Personal Information described in this Notice, we may collect, use, and disclose Personal Information as required by law, regulation or court order; to respond to governmental and/or law enforcement requests; to identify, contact or bring legal action against someone who may be causing injury to or interfering with our (or others’) rights or property; for security and fraud prevention purposes; to support any actual or threatened claim, defense or declaration in a case or before any jurisdictional and/or administrative authority, arbitration or mediation panel; in connection with disciplinary actions/investigations; or as otherwise described at the time your Personal Information is collected. Likewise, we may use and disclose Personal Information to third parties in connection with the sale, assignment, merger, reorganization, or other transfer of any of our brands or companies.

SOURCES OF PERSONAL INFORMATION

Generally, we collect the categories of Personal Information described above from the following sources:

Directly from you
From our service providers (such as marketing, analytics, and fulfillment companies)
Through technologies in use on our electronic Services (such as cookies, pixels, and other tracking technologies)
We collect precise geolocation data through technologies (such as QR codes) that provide information about your location at a given point in time—for example, for fraud-prevention purposes relating to certain coupons, loyalty and rewards points
Created by us (for example, if we assign you with a login or develop inferences about you)
If you have a business relationship with us, from other companies we do business with, which may include your employer
From third parties including advertising networks, social networks, internet service providers, government entities, and data brokers

Retention of Personal Information

We keep the categories of Personal Information described above for as long as necessary or permitted for the purposes described in this Notice or otherwise authorized by law. This generally means holding the information for as long as one of the following apply:

Your Personal Information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the information;
Your Personal Information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which the Personal Information was collected;
The Personal Information is reasonably necessary to protect or defend our rights or property (which will generally relate to applicable laws that limit actions in a particular case); or
We are otherwise required or permitted to keep your Personal Information by applicable laws or regulations.

Where Personal Information is used for more than one purpose, we will retain it until the purpose with the latest period expires.

Disclosure of Personal Information

i. Disclosures for a Business or Commercial Purpose

Depending on the services you request, we may disclose any of the categories of Personal Information we collect for business or commercial purposes aligned with the purposes for which we collect it. This includes disclosures to:

Our brands and affiliated companies;
Service providers that we use to support our business and operations (e.g., financial institutions, fulfillment services, technical support, advertising, analytics, media and marketing, promotions, campaigns and contest-related services, e-commerce and other web-related services, and event-related services). These vendors assist us with:
- Processing your purchases;
- Registration for events, memberships, and accounts;
- Contests, sweepstakes, and other promotions;
- Providing customer service;
- Communicating with you, including tailoring our communications;
- Supporting our online communities;
- Marketing and advertising (except for cross-context behavioral advertising);
- Administration of our electronic Services, including debugging and repair of errors and maintaining account logins for our electronic services;
- Analyzing trends related to our products, Services, communications, and advertisements;
- Research and development, including gathering demographic information for aggregate use;
- Short-term transient use;
- Detecting and preventing fraud against you and/or us;
- Ensuring security and integrity;
- Undertaking activities to verify or maintain the quality or safety of our products and services;
- Otherwise processing, maintaining, or collecting Personal Information on our behalf.
Government entities. For example, to fulfil our legal and regulatory obligations, such as confirming you are of legal drinking age and for our tax and other reporting obligations.

We disclose Sensitive Personal Information for more limited purposes, including: when necessary to provide our products or services; services performed on our behalf related to our products, services, and the operation of our business; ensuring security and integrity; undertaking activities to verify or maintain the quality or safety of our products and services; to comply with applicable laws and regulations; for safety and security; detecting, protecting against, or addressing malicious, deceptive, fraudulent, or illegal activity.

ii. Targeted Advertising / Sales and Sharing of Personal Information

Although we do not sell Personal Information in exchange for money, some of our advertising, marketing, and analytics practices may be classified as “sales” or “sharing” under some state privacy laws. Listed below are the categories of Personal Information we share for purposes of targeted/cross-context behavioral advertising or otherwise “sell” for non-monetary consideration:

Identifiers
Personal records
Commercial information
Internet or other electronic network activity information
Geolocation data
Inferences

The third parties to which Personal Information is sold or shared are third-party advertising partners, social networks, data brokers, and certain analytics providers. The purposes for which we sell/share this information include:

To show you targeted ads while you browse the internet or use social media
For analytical purposes (e.g., to better understand our customers by appending to our records additional information obtained from data brokers or other third parties)

We do not have actual knowledge that we sell or share the Personal Information of consumers under 18 years of age. If you would like to opt out, please see the information below for your state of residence.

Geo-Targeted Ads

Some of our advertising partners may display ads to you based on location data collected through third-party mobile applications. To stop receiving location-based ads, you can disable the sharing of your location data with mobile applications using your device settings and/or block third-party apps from tracking your activities. You can adjust your settings on Apple and Android devices as follows:

Apple iOS
- App tracking: Go to Settings > Privacy & Security > Tracking
- Location sharing: Go to Settings > Privacy & Security > Location Services
Android
- App tracking: Go to Settings > Privacy > Ads
- Location sharing: Go to Settings > Apps > Permissions > App Info > Location

Additional options for interest-based advertising on mobile devices are available through the Digital Advertising Alliance’s AppChoices Tool. To opt out of Gallo’s targeted advertising, sales, and sharing of personal information, please see the section of this Policy below that describes rights available in your state of residence.

Privacy Rights REQUESTS

To submit a request relating to your Personal Information, please use our webform or call us at 1-888-295-0247. Please note that we may need to verify your identity before your request can be processed. Typically, we will ask that you verify your identity by providing 2-3 pieces of Personal Information that we will match against our records. If you have a password-protected account with us, we may verify your identity through our existing authentication practices for your account. The information that we ask you to provide to verify your identity will depend on your prior interactions with us and the sensitivity of the Personal Information at issue.

In some states and for some types of requests, you may designate an authorized agent to make a request on your behalf; however, you will still need to verify your identity directly with us before your request can be processed. An authorized agent may submit a request on your behalf using the webform or toll-free number listed above. We will not discriminate against you if you choose to exercise your privacy rights.

California

If you are a California consumer, you have the right to submit certain requests relating to your Personal Information under the California Consumer Privacy Act (“CCPA”).

Right to Know. California consumers have the right to know:

The categories of Personal Information we have collected about you, including:
- The categories of sources from which the Personal Information was collected
- Our business or commercial purposes for collecting, selling, or sharing Personal Information
- The categories of recipients to which we disclose Personal Information
- The categories of Personal Information that we sold, and for each category identified, the categories of third parties to which we sold that particular category of Personal Information
- The categories of Personal Information that we disclosed for a business purpose, and for each category identified, the categories of recipients to which we disclosed that particular category of Personal Information

The specific pieces of Personal Information we have collected about you

Deletion. You have the right to request the deletion of Personal Information we collected from you, subject to certain exceptions. Where we use deidentification to satisfy a deletion request, we commit to maintaining and using the information in deidentified form and will not attempt to reidentify the information.

Correction. If you believe that Personal Information we maintain about you is inaccurate, you may submit a request for us to correct that information. Upon receipt of a verifiable request to correct inaccurate Personal Information, we will use commercially reasonable efforts to correct the information as you direct.

Right to Opt-Out of Sales and Sharing of Personal Information. You have the right to opt out of the sale of your Personal Information, and to request that we do not share your Personal Information for cross-context behavioral advertising. To opt out of cookie-based sales and sharing, please click on the Do Not Sell or Share My Personal Information homepage link for each Gallo brand you have engaged with, and follow the instructions provided. If you choose to use a browser-based opt-out signal (such as the Global Privacy Control (GPC) signal), you will be opted out of cookie-based sales and sharing of Personal Information. Because we are unable to recognize you across different websites, visiting one of our sites with the signal enabled will have the effect of opting you out of sales and sharing with respect to that specific site, but will not impact sales and sharing for our other websites or brands. Additionally, you will need to turn on the opt-out signal for each browser that you use. To submit a request to opt out of offline sales and sharing, please use our webform or toll-free number.

Right to Limit Use and Disclosure of Sensitive Personal Information. We do not use or disclose sensitive personal information for purposes to which the right to limit use and disclosure of sensitive personal information applies.

Other States

This Section describes the privacy rights available to consumers who reside in US States other than California. If you are a resident of California, please review our California-specific disclosures, above.

Access and Data Portability. You can use this type of request to confirm whether we are processing your Personal Information, to access your Personal Information, and to obtain a copy of your Personal Information in a portable format. Depending on your state of residence, you may also request that we provide you with information about the categories or specific third parties to which we disclosed Personal Information.

Correction. You may request that we correct inaccuracies in your Personal Information taking into account the nature of the Personal Information and our purposes for processing it.

Deletion. You may request that we delete your Personal Information, subject to exceptions. Where we use deidentification to satisfy a deletion request, we commit to maintaining and using the information in deidentified form and will not attempt to reidentify the information.

Opt-Out Requests. You may opt out of the following uses of your Personal Information: (a) targeted advertising; (b) the sale of Personal Information; and (c) profiling in furtherance of decisions that produce legal or similarly significant effects concerning your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements. We do not sell Personal Information in exchange for money or engage in practices that qualify as profiling producing legal or similarly significant effects under applicable state privacy laws. To opt out of targeted advertising and/or non-monetary “sales” of Personal Information via cookies, please click on the Do Not Sell or Share My Personal Information homepage link for each Gallo brand you have engaged with, and follow the instructions provided. If you choose to use a browser-based opt-out signal (such as the Global Privacy Control (GPC) signal), you will be opted out of cookie-based sales and sharing of Personal Information. Because we are unable to recognize you across different websites, visiting one of our sites with the signal enabled will have the effect of opting you out of sales and sharing with respect to that specific site, but will not impact sales and sharing for our other websites or brands. Additionally, you will need to turn on the opt-out signal for each browser that you use. To submit a request to opt out of offline sales and sharing, please use our webform or toll-free number.

Revoke Consent. If you consented to our collection or use of your Personal Information, you also have the right to revoke your consent.

Appeal. Sometimes we are unable to process requests relating to your Personal Information, in which case, your request will be denied. If your privacy rights request has previously been denied by us and you believe we denied it in error, you may appeal for reconsideration of your request using our webform.

Special Notice for Nevada Residents. Nevada law provides residents the right to opt-out of the “sale” of “covered information” to third parties, including but not limited to name, address, social security number, telephone number, email address, and other information through which a person may be contacted. Our uses of your Personal Information are not sales under Nevada law. If you have any questions or if you would like to receive notice by email in the event we should engage in sales of Personal Information under Nevada law in the future, please contact us.

Financial Incentives and Offers

California Notice of Financial Incentive

Summary. We sometimes offer discount codes or perks like a branded item in connection with you opting in to receive marketing emails. You receive such discount codes or perks because we want to show you that we are excited you want to hear from us and because we hope you will want to buy our products.

Material Terms. The details of each program are contained in the program offering but in general, we invite you to provide us with your email address or cell phone number, and we provide you with a sign of our appreciation such as a discount code or a perk like a branded item. We value the opportunity to market to you.

How To Opt In. You can opt in using a prompt on our websites that links to this notice.

Right to Withdraw. You can opt out of receiving marketing communications from us at any time by clicking on the unsubscribe link contained in our emails and text messages, or you may email us at DataPrivacy@ejgallo.com.

Value of Financial Incentive. The incentives we offer in exchange for the opportunity to market to you may be a discount coupon that can be used when you buy products from us or a branded item. Details of the incentive will vary depending on market conditions at the time the incentive is offered, and the value of your data will also fluctuate. Under most circumstances, the value of your Personal Information is less than the incremental administrative costs of the marketing program, including storage of your Personal Information. Retail prices for our products and branded items vary.

Visitors from Outside the United States

The Services that link to this Privacy Notice are directed to residents of the United States. If you access these Services from outside the United States, please be aware that your Personal Information may be transferred to, stored, and processed in the United States, and that the data protection and other laws of the United States may not be as comprehensive as those of your country.

Cookies and Other Tracking Technologies

We use cookies and other tracking technologies (such as web beacons) to collect and store information about your interactions with our websites, including information about your browsing behavior. Our websites also support third-party cookies placed by our service providers and third parties, such as advertising partners.

Cookies are small files that a website transfers to your device through a web browser that enable the site’s or a third party’s systems to recognize your device and capture and remember certain information. Web beacons (also known as tracking pixels) are tiny graphics embedded invisibly on a webpage or in an email that may be used to deliver or communicate with cookies, to count users who have visited certain pages, and to understand usage patterns. In general, our websites use cookies and other tracking technologies as follows:

Where necessary to run our websites, for example by allowing you to log in and add items to your cart/bag
To optimize the functionality of our websites, including by personalizing content for you, greeting you by name and remembering your preferences (e.g., your choice of language or other preferences)
For analytics purposes—for example, to help us understand how our websites are used, to see what products most interest you, and determine how best to market our products to you. More information on website analytics is provided below.
- We use Google Analytics to analyze how users interact with our websites and to track interactions with our online advertisements. You may opt-out of Google Analytics by installing the Google Analytics browser add-on, available here.
- Our websites may use session-replay services, such as Hotjar, to help us understand and analyze how visitors use our services, and to improve them. When you interact with us online, information related to your browsing behavior (including your device IP address, device screen size, device type, browser information, country, and preferred language) may be collected by us or our session-replay providers. For more information regarding Hotjar’s collection and use of information, please visit Hotjar’s Privacy Policy.
For purposes of ad targeting and marketing. These cookies collect information about your browsing behavior on our websites in order to show you interest-based advertising when you visit other websites or use social media.
- One of the tools we use for this purpose is Google Ads, which is an advertising service provided by Google. Google uses cookies and other identifiers, in combination with its own data, to show you ads based on your usage of our websites. You can personalize the ads you receive or opt out of ads from Google by visiting the Google Ads Settings page. Additional options for opting out of interest-based advertising are available through the Network Advertising Initiative and the Digital Advertising Alliance.
To determine if our email messages have been opened and acted upon.
To obtain information about your interactions with our online advertisements, such as whether you clicked on an ad and the website where you may have seen the ad.

Cookies vary in how long they last. “Session cookies” terminate shortly after you terminate your internet session. “Persistent cookies” are stored on your device until a set expiration date. We use both session cookies and persistent cookies on our websites.

Our websites do not respond to “Do Not Track” signals. If you do not want to have cookies placed on your device, you should set your browser to refuse cookies before accessing our website. Please review your browser’s Help menu for instructions or visit https://cookiepedia.co.uk/ for more information about cookies. Some of our websites may offer additional tools for managing cookies.

Social Features on Our Websites and Apps

Certain functionalities on our Services permit interactions that you initiate between us and certain third-party social networks (“Social Features”). Examples of Social Features include enabling you to send content such as contacts and photos between our services and a third-party service, “liking” or “sharing” our content, logging into our services using your third-party account, and otherwise connecting our services to a third-party service (e.g., to pull or push information to or from our services). If you use Social Features, information you post or provide access to may be publicly displayed on our Services or by the third-party service that you use. Similarly, if you post information on a third-party service that references us (e.g., by using a hashtag associated with us or our affiliates), your post may be used on or in connection with our services or otherwise by us and/or our affiliates. Also, both we and the third party may have access to certain information about you and your use of our services and any third-party service.

Online Chat

Our website offers online chat features that are supported by third-party service providers. When you use these features, your Personal Information may be processed by a service provider who is subject to confidentiality obligations which limit their use and disclosure of your Personal Information.

Contact Preferences and Email

We want to keep in touch with you in ways that you find to be beneficial. If you don’t want us to use your email address to communicate with you for promotional purposes (such as to tell you about products and services that might be of interest or to offer coupons/discounts), please tell us that when you provide your contact information. If you decide at a later time you do not want to receive promotional email communications, you can communicate this to us by accessing your account via our site (if applicable), by clicking on the Unsubscribe link in the communications that we may send you, or by using our webform. You can also communicate with us through the methods described in the “How to Contact Us” section below. Keep in mind that even if you opt out, we may still contact you for other reasons, such as those related to an order you place, an inquiry you made, a membership you undertook, an event for which you registered, or a legally required notice.

SMS Messaging

If you choose to participate in our general SMS/text messaging campaign, you will receive messages with info, promotions, and offers; message frequency varies. You may opt-out by texting “STOP” to the short code provided in that message. Text “HELP” to ask for help or call us at the phone number below for more assistance. Carriers are not liable for delayed or undelivered messages. Message and data rates may apply. We do not sell or share Personal Information we obtain for text messaging programs (including opt-in consent data) with third parties.

Not for Children

Our Services are neither intended for, nor targeted to those under 21 years of age. We use age-verification to exclude under-age individuals. If you are under 21, you are not permitted to use our Services and should not provide any Personal Information to us.

Security

At no cost to you, we take commercially reasonable and appropriate steps to protect Personal Information from loss, misuse and unauthorized access, disclosure, alteration or destruction. Please keep in mind, however, that there is no such thing as perfect security, and no Internet transmission is ever completely secure or error-free. Moreover, you are responsible for maintaining the confidentiality of any username and password you use.

Changes to This Privacy Notice

This Privacy Notice may be revised from time to time for any reason. If this Privacy Notice changes, the revised notice will include a new effective date, and we will notify you of such changes by posting the revised notice on this page. Any such changes will automatically apply to all uses of our Services, and to other collection and use of your Personal Information by us, on or after the effective date (until such time as this Privacy Notice is subsequently revised).

How To Contact Us

If you have questions or comments regarding our privacy practices, you may contact us as follows:
Email address: DataPrivacy@ejgallo.com
Telephone number: 1-888-295-0247
Postal address: E. & J. Gallo Winery, Consumer Engagement, 600 Yosemite Blvd., Modesto, CA 95354