Privacy Policy

CRAFTD Cocktail Studio ("CRAFTD," "we," "us") is a craft cocktail studio based in Washington, DC, operating craftdco.app. We are the controller of the personal information described in this policy. Questions: info@craftdbevapp.com.

Information you give us. Name, email address, phone number, event date, venue or location, guest count, spirit preferences, dietary notes, and any other details you include in an event inquiry or account.

Account and membership data. If you create an account, we store your email, an encrypted authentication record, saved cocktails, and membership status. Payments are processed by Stripe. We never receive or store your full card number.

Technical data. IP address, browser type, device type, referring page, and pages viewed. We use this for security, fraud prevention, and site reliability.

We do not knowingly collect personal information from anyone under 21, and our alcohol related content is intended for adults of legal drinking age.

To respond to event inquiries and prepare proposals; to create and secure your account; to process membership payments and provide access to the Recipe Library; to send service messages such as password resets, booking confirmations, and receipts; to improve the site; and to comply with legal obligations.

We add an address to our marketing mailing list only when someone submits our mailing list form and checks the marketing consent and 21+ acknowledgment boxes. We record the exact wording consented to and the time consent was given. We do not currently send a confirmation email, so this is consented sign-up rather than verified double opt-in.

You can withdraw consent at any time using the unsubscribe link in any marketing message we send, or by emailing info@craftdbevapp.com. The privacy choices on this page are stored on your device and do not control marketing email.

We share personal information only with service providers who process it on our behalf under contract: our cloud hosting and database provider, Stripe for payments, and our email delivery provider. We may also disclose information when required by law, to enforce our terms, or in connection with a merger or sale of assets.

We do not sell your personal information and we do not share it for cross-context behavioral advertising as those terms are defined under California and other US state privacy laws.

Event inquiries are retained for up to 24 months after the last contact. Account and membership records are retained while your account is active and for up to 7 years afterward where needed for tax and accounting purposes. You may request earlier deletion, subject to legal retention requirements.

Data is encrypted in transit with TLS and at rest by our hosting provider. Access to personal information is restricted by row-level database security so that you can only reach your own records, and administrative access is limited to authorized studio staff. No system is perfectly secure, so please use a strong, unique password.

Depending on where you live, you may have the right to know what personal information we hold, to access a copy, to correct inaccuracies, to delete it, to opt out of targeted advertising, sale, sharing, or certain profiling, to limit use of sensitive personal information, and to be free from discrimination for exercising these rights.

To make a request, email info@craftdbevapp.com with the subject line "Privacy Request." We verify requests using the email address associated with your inquiry or account and respond within 45 days, with one 45-day extension where permitted. You may authorize an agent to act for you, and we may ask the agent for written proof of authorization.

CRAFTD operates from Washington, DC and follows the DC Consumer Protection Procedures Act, which prohibits misleading statements about how consumer information is handled. We honor the rights described above for DC residents as a matter of policy, whether or not a comprehensive DC privacy statute applies at the time of your request. If DC enacts a comprehensive consumer data privacy law, this policy will be updated to reflect it. DC residents may also contact the Office of the Attorney General for the District of Columbia with concerns.

Where we serve events, we also comply with applicable DC Alcoholic Beverage and Cannabis Administration requirements, including age verification at events. Age related information collected on site is used solely for compliance and is not retained after the event.

California (CCPA/CPRA). In the preceding 12 months we have collected identifiers, customer records, commercial information, internet activity, and inferences, as described above. We have not sold or shared personal information. California residents have rights to know, access, correct, delete, limit use of sensitive personal information, and opt out, and may not be discriminated against for exercising them. Requests may be submitted by email or through the controls on this page. We recognize Global Privacy Control signals as valid opt-out requests.

Virginia, Maryland, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, New Jersey, Nebraska, New Hampshire, Minnesota, and other states with comprehensive privacy laws. Residents of these states have rights of access, correction, deletion, portability, and opt-out of targeted advertising, sale, and certain profiling. Where required, you may appeal a denied request by replying to our decision email with the subject line "Privacy Appeal." If your appeal is denied you may contact your state Attorney General.

Nevada. Nevada residents may submit a verified request not to sell covered information, though we do not sell it.

We use strictly necessary cookies and local storage for authentication, session security, and remembering your privacy choices. Optional analytics run only if you opt in above. We do not run third-party advertising trackers.

If you provide a phone number, we may contact you about your specific event inquiry. Recurring marketing text messages are sent only with your express written consent. Message and data rates may apply. Reply STOP to opt out or HELP for help.

We will post any updates on this page and revise the "last updated" date. Material changes will be communicated by email to account holders where required by law.

CRAFTD Cocktail Studio, Washington, DC. Email info@craftdbevapp.com for privacy requests, questions, or accessibility assistance with this policy.