What we ask for, and why

Last updated September 20, 2026

Who we are

Winegar's Coffee & Creamery is the trade name of GARIKO LLC, a Washington company, with two shops in Ellensburg. This policy covers this website — winegars.us — including Milk Run jug orders placed here. Our contact details are at the foot of the page.

What we collect

Only what the thing you are doing actually needs:

• Your name, email address and phone number, when you place an order or write to us. We need a way to reach you about the order in front of us.
• Your order — what you ordered, any choices and notes you made, the pickup day and location, and what it came to.
• Payment confirmation from Stripe — that a payment succeeded, for how much, and a reference we can look it up by. See the next section for what we deliberately do not get.
• What you write to us in the contact or donation-request form, including anything you choose to put in it.
• Ordinary website records — the pages requested, the date and time, the browser and device type, and the IP address the request came from. Every web server keeps these; ours are used to run the site and to spot abuse, not to build a profile of you.

We do not ask for, and have no use for, anything sensitive — no government identification numbers, no health information, and no financial account details.

Card numbers: we never have them

Online payments are handled by Stripe, a payment processor. When you pay, your card details go to Stripe directly from your browser. Winegar's never receives or stores your full card number, and it is never written to our systems. What comes back to us is confirmation that the payment went through, the amount, and a reference number. Stripe handles your card data under its own privacy policy.

Why we use it

• To make and hand over your order — the crew needs to know what to fill and who is coming for it.
• To contact you about that order — a confirmation, a receipt, or a message if something changes.
• To answer you when you ask us something or ask for a donation.
• To keep payments honest — checking a charge, sorting out a duplicate, and guarding against fraud and abuse of the site.
• To keep our books — sales, tax and accounting records we are required to keep.

We do not sell your information

We do not sell personal information and we do not rent or trade mailing lists. We do not run advertising trackers on this site, and we do not send marketing email to people who only ever placed an order — if we ever start a mailing list, joining it will be something you choose.

Who else sees it

Only the companies that help us run the shop, and only for that purpose:

• Stripe, which processes payments.
• The companies that host this website and deliver our email.
• The provider of the contact and donation form embedded on our contact page, which receives what you submit through it.
• Our accountant, and anyone we are legally required to answer — a lawful request, a subpoena, or the defence of a legal claim.

This site loads its typefaces from Google Fonts and its contact form from our messaging provider, so opening those pages makes a request to those companies in the ordinary way the web works.

Cookies and your browser

We do not use advertising or analytics cookies on this site. The Milk Run order page keeps your unfinished order in your own browser's session storage so that stepping away, or coming back from the payment page, does not empty what you had picked. It lives on your device, it is cleared when the order is placed, and it never reaches us until you submit the order.

How long we keep it

Order and payment records are kept as long as our accounting and tax obligations require — generally several years. Messages sent through the contact form are kept while they are useful for answering you. Website request logs are short-lived.

Your choices

Ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it, and we will do it — subject to records we are required to keep, such as a completed sale. Email kori@winegars.us or call the shop; a person reads both. Washington residents also have rights under the state's consumer health data law, and residents of other states may have rights under their own; the same address is where to exercise them.

Children

This site is meant for a general audience and is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has sent us information, write to us and we will remove it.

Changes to this policy

If this changes we will post the new version here and move the date at the top. Material changes will be described in plain words rather than buried.

See also our Terms of Service, or the contact page if you would rather use a form.