Privacy Policy
Effective Date: August 18, 2026
This Privacy Policy explains how Goto Concept LLC ("Goto," "we," "us," or "our") collects, uses, discloses, and retains personal information when you use gotoliquorstore.com, our mobile applications, and related services (collectively, the "Services"). It also describes privacy choices and rights that may be available to you.
GotoLiquorStore is a technology platform that connects adults of legal drinking age with independent licensed alcohol retailers. Retailers are responsible for accepting orders, furnishing alcoholic beverages, and arranging or performing delivery or pickup. The retailer or delivery provider, not Goto, generally performs identification and age verification at delivery or pickup.
When you select the "YES - ENTER SITE" age-verification control, you confirm that you are at least 21 years old and agree to the Terms of Use. Your acceptance of the Terms of Use does not, by itself, constitute consent to optional analytics, advertising, cross-context behavioral advertising, or other tracking technologies for which a separate privacy choice or consent is required.
1. Notice at Collection: Categories, Sources, Purposes, and Disclosures
| Category | Examples | Sources | Purposes | Typical recipients |
|---|---|---|---|---|
| Identifiers and contact information | Name, email, phone, account ID, delivery/pickup address | You; account providers; Retailers | Account administration, order routing, support, fraud prevention, legal compliance | Retailers; delivery providers as needed; service providers |
| Age and eligibility information | Age-gate confirmation; date of birth if you provide it; eligibility status | You; Retailers where shared with us | Enforce 21+ access, legal compliance, safety, fraud prevention | Retailers/service providers when necessary |
| Commercial and order information | Products viewed or ordered, cart, retailer, price, order status, pickup/delivery selection | You; Retailers | Facilitate transactions, customer support, internal service analytics, fraud prevention, and legal compliance. | Retailers; payment and service providers |
| Payment-related information | Payment token, transaction status, limited card metadata; not full card credentials unless stated | Payment processors | Process and reconcile transactions, refunds, fraud prevention | Payment processors; Retailers where needed |
| Location information | Address you enter; approximate location from IP; precise device location only if you affirmatively permit it | You; device; network | Show nearby Retailers, route orders, prevent fraud, comply with location-based laws | Retailers; map/location service providers when needed |
| Device and usage information | IP address, browser/device type, pages and features used, timestamps, diagnostics, security logs | Device/browser; service infrastructure | Operate, secure, debug, measure, prevent abuse | Hosting, security, analytics providers as described below |
| Communications | Support messages, feedback, order communications, call/email metadata | You; Retailers; support systems | Customer support, quality, dispute resolution, legal compliance | Support/service providers; Retailers as needed |
| Optional analytics and advertising data | Cookie/pixel identifiers, page or event data, campaign/referral data, advertising identifiers | Device/browser after applicable consent or choice | Measurement, attribution, audience analytics, advertising | Analytics/advertising partners only as permitted by your choices and law |
We collect only information that is reasonably necessary and proportionate for the disclosed purpose, subject to applicable law. We do not use personal information for a materially different purpose without providing required notice and obtaining consent where required.
2. Information You Provide
You may provide account information, contact information, delivery or pickup address, product selections, order instructions, support messages, and other information necessary to use the Services. If social-login functionality is offered, the social platform may provide information consistent with the permissions you approve.
Do not send us government identification, payment-card images, or other sensitive documents unless we specifically request them through a secure process. Retailers or delivery providers may separately inspect identification to comply with alcohol laws.
3. Device, Usage, Cookies, and Similar Technologies
We use strictly necessary technologies to provide core functionality, maintain security, prevent fraud, remember required settings, and preserve your privacy choices. These technologies may operate without optional advertising or analytics consent where permitted by law.
Optional analytics and advertising technologies may include third-party cookies, software development kits, pixels, tags, scripts, or similar technologies. These technologies can receive identifiers, device and browser information, page URLs, referral information, and information about interactions with the Services. We do not intend for optional advertising technologies to receive payment-card credentials, passwords, government identification numbers, or other data that is not reasonably necessary for the disclosed advertising or measurement purpose.
Our implementation is designed so that optional analytics and advertising technologies do not load, activate, or transmit data unless and until permitted by the applicable consent or privacy-choice control and applicable law.
4. Analytics and Advertising Partners
Where permitted by applicable law and your applicable privacy choice, we may use providers such as Google and Meta to measure use of the Services, understand advertising performance, limit repeated advertising, or present advertising on other services. The specific providers enabled on the Services may change. We maintain a current vendor inventory and configure optional technologies according to the privacy choice associated with your browser, device, or account where technically feasible.
Depending on the law where you live, disclosure of identifiers and internet activity to an advertising partner may be considered a "sale," "sharing," or processing for "targeted advertising" even when no money is exchanged. We do not sell personal information for monetary payment. You may opt out of sale, sharing, or targeted advertising where applicable through Privacy Choices or a recognized universal opt-out signal.
5. How We Use Personal Information
- Provide, maintain, personalize, and secure the Services.
- Create and manage accounts and authenticate users.
- Identify nearby Retailers and route order requests.
- Facilitate payment, refunds, customer service, and order communications.
- Detect fraud, abuse, security incidents, and technical problems.
- Comply with alcohol, tax, payment, consumer-protection, privacy, and other legal obligations.
- Analyze and improve the Services using data collected in accordance with your privacy choices.
- Market or advertise the Services when permitted by law and your choices.
- Establish, exercise, or defend legal claims and resolve disputes.
6. How We Disclose Personal Information
We may disclose personal information to:
- Retailers and delivery providers when necessary to evaluate, accept, fulfill, deliver, pick up, cancel, refund, or support an order;
- payment processors and financial-service providers to process authorized transactions;
- hosting, cloud, customer-support, communications, security, fraud-prevention, mapping, and other service providers that process data for authorized purposes under contractual restrictions;
- analytics or advertising partners only when permitted by your privacy choices and applicable law;
- professional advisers, auditors, insurers, and transaction counterparties in connection with legal, financial, insurance, financing, merger, acquisition, or sale matters;
- government agencies, courts, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, security, or prevent fraud or abuse.
Where applicable privacy law distinguishes controllers/businesses from processors/service providers, we use contracts intended to impose the legally required restrictions on processors and service providers.
7. Sensitive Personal Information
We seek to minimize sensitive personal information. Precise geolocation is collected only when you affirmatively enable a location feature and only as reasonably necessary for the requested functionality. We do not use sensitive personal information to infer characteristics about you except as permitted by law. We do not knowingly collect biometric identifiers for identification or authentication unless we first provide any notice and obtain any consent required by applicable law.
Information about alcohol products you view or purchase may be sensitive in context even when not legally defined as "sensitive personal information." We do not transmit information about alcohol products you view or purchase to optional advertising partners unless you have affirmatively enabled the applicable advertising purpose and the disclosure is otherwise permitted by applicable law.
8. Your Privacy Choices
- Privacy Choices: use the link or interface labeled "Privacy Choices" to accept, reject, or manage optional analytics and advertising technologies.
- Universal opt-out signals: where required by law, we process recognized signals such as GPC as a request to opt out of sale, sharing, or targeted advertising for the browser/device sending the signal.
- Marketing: use the unsubscribe link in marketing emails or other method provided in the communication.
- Location: change device permissions to disable precise location access.
- Account: update account information or request account deletion through account settings or by contacting us.
9. U.S. State Privacy Rights
Residents of states with applicable comprehensive privacy laws may have rights that include access, confirmation of processing, correction, deletion, portability, and the right to opt out of sale, targeted advertising, certain profiling, or other processing. Depending on your state and the law that applies to Goto, you may also have a right to appeal a denied request and a right not to receive discriminatory treatment for exercising privacy rights.
You may submit a privacy request by emailing contact@gotoconcept.com or by using the Privacy Choices interface where available. We will verify and respond to requests as required by applicable law. Authorized agents may submit requests where applicable. If we deny a request and your state provides an appeal right, you may appeal by replying to the denial or using the method stated in the denial notice.
10. California Privacy Notice
If the California Consumer Privacy Act, as amended (CCPA), applies to Goto and to your information, California residents may have the rights to know/access, correct, delete, obtain information about categories of collection and disclosure, and opt out of the sale or sharing of personal information. California residents may also have rights concerning use or disclosure of sensitive personal information where applicable.
We do not sell personal information for money. If optional advertising disclosures constitute "sharing" or a "sale" under California law, you may opt out through Privacy Choices or a legally recognized opt-out preference signal. We do not knowingly sell or share personal information of consumers under 16. Because the Services are restricted to persons 21 and older, an account or session indicating that the user is under 21 will be denied access and handled in accordance with applicable law.
California residents may also have rights under California's Shine the Light law concerning certain disclosures for third parties' own direct marketing. Requests may be sent to contact@gotoconcept.com.
11. Colorado, Connecticut, Delaware, and Other State Rights
Where the Colorado Privacy Act, Connecticut Data Privacy Act, Delaware Personal Data Privacy Act, or another applicable state privacy law applies, we provide the rights required by that law, including applicable rights to opt out of targeted advertising or sale and to use recognized universal opt-out mechanisms. We obtain consent before processing sensitive data where the applicable law requires it and conduct required data-protection assessments for qualifying high-risk processing.
12. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide the Services, maintain transaction and tax records, prevent fraud, resolve disputes, enforce agreements, and comply with law. Retention periods vary by category. We periodically review retention schedules and delete or deidentify information when it is no longer reasonably necessary, subject to legal holds and other lawful retention requirements.
| Data type | General retention approach |
|---|---|
| Account/profile data | While the account is active and for a limited period afterward as needed for legal, fraud-prevention, or recordkeeping purposes. |
| Order/transaction records | For the period required for tax, payment, fraud, chargeback, consumer-protection, and dispute purposes. |
| Support/dispute records | For the period reasonably necessary to resolve the matter and preserve legal rights. |
| Security logs | For a limited security and fraud-prevention period appropriate to risk. |
| Optional analytics/advertising identifiers | According to the configured consent, vendor, and deletion settings; minimized where feasible. |
| Consent and preference records | For a period reasonably necessary to demonstrate and honor the user's choices and applicable legal obligations. |
13. Security
We use administrative, technical, and physical safeguards designed to protect personal information based on the nature of the information and the risks involved. No method of transmission or storage is completely secure. We maintain incident-response procedures and provide breach notifications when required by applicable law.
14. Children and Underage Users
The Services are not directed to children or persons under 21. We do not knowingly permit persons under 21 to create accounts or place alcohol orders. If we learn that we collected personal information from an underage person in circumstances where retention is not legally permitted or necessary, we will take appropriate steps to delete or restrict the information.
15. Payment Information
Payment-card information is processed by third-party payment processors. We do not intentionally store full payment-card numbers or security codes on Goto systems unless expressly disclosed and handled in compliance with applicable payment-card security requirements.
16. International and Interstate Processing
Personal information may be processed in states or countries other than the place where you live. Where required, we use contractual or other safeguards for transfers. Applicable privacy rights are not waived merely because processing occurs in another jurisdiction.
17. Relationship to Terms of Use
Your use of the Services is also governed by our Terms of Use. To the extent permitted by applicable law, disputes arising out of or relating to this Privacy Policy, the collection, use, disclosure, or processing of personal information, or privacy-related use of the Services are subject to the governing-law, informal dispute-resolution, arbitration, class-action waiver, and other applicable provisions of the Terms of Use. Nothing in this Privacy Policy or the Terms of Use waives any privacy right that applicable law does not permit you to waive.
18. Changes to this Privacy Policy
We may update this Privacy Policy prospectively. We will post the effective date and provide additional notice or obtain consent where required by law for material changes. We recommend reviewing this Policy periodically.
19. Contact Us
Goto Concept LLC
2 Cityplace Dr, Saint Louis, MO 63141, USA
Email: contact@gotoconcept.com