Privacy Policy

Most visitors use the public site for store hours, locations, policies, and education. Those pages do not require an account. A separate Industry Portal lets approved vendors and Lexington ABC team members register, sign in, and manage in-store tasting bookings. That portal collects personal and business information as described below.

Public website (all visitors)

When you browse public pages, we and our hosting/analytics providers may automatically collect technical information such as:

• Browser type and device characteristics
• Pages viewed, approximate time on site, and referring URL
• Approximate location (city/region level), where available from infrastructure logs
• IP address and related request metadata used for security and abuse prevention

Industry Portal (vendors and team)

If you register or use the Industry Portal, we collect and store information you provide or that is generated by your use of the portal, including:

• Account: name, email address, company/distributor name, role (industry vendor or team), and approval status
• Authentication: one-time login codes sent by email (stored only as a short-lived secure hash until used or expired), and a signed session cookie after you sign in
• Tasting bookings: store location, date/time window, products selected, and related audit fields (for example who created or cancelled a booking)
• On-device draft data: an unfinished booking form may be saved temporarily in your browser's local storage (not on our servers) until you submit it or it expires

Registration may also capture a technical signal used only to reduce spam (a hidden honeypot field). We do not use that field for marketing.

We use the information above to:

• Operate, secure, and improve the website and portal
• Understand aggregate traffic and performance (analytics)
• Create and approve vendor accounts; send login codes and status emails
• Schedule, display, and manage tasting appointments for store staff and vendors
• Prevent abuse (for example rate limiting and blocking automated attacks)
• Comply with legal obligations and respond to lawful requests

We do not sell personal information, and we do not use visitor data for third-party advertising on this site.

We use Vercel Analytics and Vercel Speed Insights to measure site usage and performance. These tools are intended to provide aggregated insights (for example page views and Web Vitals). They are not used to run ads. For details on how Vercel processes data, see Vercel's privacy documentation on their website.

• Session cookie (Industry Portal): after a successful login we set an HTTP-only cookie named labc_session containing a signed token (user id, email, and role). It expires after about seven days or when you sign out. It is required for portal access and is not used for advertising.
• Browser local storage (portal only): the booking form may store a short-lived draft in your browser so you do not lose work if you refresh. You can clear it by completing the booking, using browser storage controls, or signing out / clearing site data.
• Hosting / platform: our host may set essential cookies needed to deliver the site securely.

We do not use third-party advertising cookies or social media tracking pixels on this site.

We use third-party services that process data only as needed to run the site:

• Hosting / infrastructure (for example Vercel) — serves the site and may process logs and analytics
• Database hosting — stores portal accounts and tasting records
• f5send (Dorado Rock LLC, on Amazon Web Services) — sends transactional email (login codes, registration alerts, approval notices, and related operational messages)

These providers process information under their own terms and security practices. We configure them for operational use of this website, not for selling lists or ad targeting.

The site links to external services such as the North Carolina ABC Commission, NC pricing pages, Google Maps, and Facebook. Their privacy practices are governed by their own policies. We are not responsible for content or data practices on sites we do not control.

• Portal accounts and tasting records are retained as long as needed to operate the tasting program, maintain business records, and meet legal requirements.
• Login codes are short-lived and cleared after use, expiry, or failed attempt limits.
• Server and security logs may be retained for a limited period for operations and abuse prevention.
• Analytics are retained according to our analytics provider's settings and product defaults.

We use reasonable administrative and technical measures appropriate to a government board website, including HTTPS, security headers, session cookies that are not accessible to JavaScript, hashed login codes, and access controls on the portal. No method of transmission or storage is completely secure; please use a strong unique email account and sign out of shared devices.

Depending on your relationship with us, you may:

• Browse public pages without creating an account
• Sign out of the Industry Portal at any time
• Clear browser cookies and local storage for this site
• Contact us to request access to or correction of portal account information, or to ask about deletion where appropriate and allowed by law and record-keeping needs

This website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. ABC store access and purchases are subject to age and ID rules described in our store policies.

We may update this Privacy Policy from time to time. The effective date at the top of this page will change when we do. Continued use of the site after an update means you should review the revised policy.

Questions about this Privacy Policy or portal data may be directed to:

Lexington ABC Board

419 N. Main St, Lexington, NC 27292

Phone: (336) 249-2528

For store hours and our second location, see Contact or Locations.