Privacy Policy

How XO LIQUOR ("we," "us") collects, uses, and protects your information when you use the XO LIQUOR website and shop with us.

Last updated: October 12, 2026

Who we are

This website is operated by XO LIQUOR, which is responsible for your information. The website is powered by Cinder POS, which hosts and runs it for us as our service provider and only uses your information to provide that service.

Information we collect

• Account details: your name, email address, phone number, password (stored in protected form), and address if you give it.
• Orders and pickup: the products you order, prices, order history, pickup details, and notes you add.
• Loyalty: if you join our loyalty program, your points, rewards, and the purchases that earned them, including in-store purchases linked to your account.
• Payments: the payment status and reference for your order. Card details are handled by our payment processor, not stored by us.
• Technical data: IP address, browser and device type, pages visited, and security logs.

Age verification for alcohol orders

The law requires us to confirm you are 21 or older before you buy alcohol or tobacco. Before your first alcohol order we ask you to verify your age online. After you agree on a consent screen, you:

• take a photo of the front of your driver's license or state ID;
• scan the barcode on the back (the PDF417 barcode); and
• take a live selfie, which is compared to the photo on your ID (a face match), when the store has this step turned on. It is on by default.

The images are processed on secure servers and deleted right away once the check is done. We do not keep copies of your ID photos or your selfie.

What we keep after the check:

• that you are verified as 21 or older, and the date and method of verification;
• your date of birth and your ID's expiration date;
• who completed the verification (the online check or a staff member) and when.

The name on your account is updated to match the name on your ID. If the automatic check cannot confirm your age, your request goes to our store staff for review. We check your ID again when you pick up your order.

If our staff already scanned your ID at the register in our store, you can skip the online check. Staff may also mark your account as 21+ after checking your ID in person.

Biometric data

The selfie face match creates a face measurement (a biometric identifier) for a one-time comparison with the photo on your ID.

• Notice and consent: we tell you about the face match and ask for your consent before you take the selfie, as laws like the Texas Capture or Use of Biometric Identifier Act and the Illinois Biometric Information Privacy Act require. You can decline and verify your age in store instead.
• Purpose: only to confirm that you are the person on the ID.
• Retention: deleted immediately after the match. Only the result is kept.
• No sale or sharing: we never sell, lease, trade, or share biometric data, or profit from it.

How we use your information

• to create and manage your account and process your orders;
• to send order emails, including a message when your order is ready for pickup;
• to run our loyalty program;
• to confirm your age and comply with alcohol and tobacco laws;
• to answer your questions and provide support;
• to keep the website secure and prevent fraud; and
• to keep the records that tax and other laws require.

Payments

Payments are handled by our payment processors under their own privacy terms. Full card numbers are not stored on this website. Orders paid at pickup are processed at our register.

Cookies

We use cookies and similar storage that the website needs to work, such as keeping you signed in, remembering your cart, and protecting forms. We do not use advertising cookies. You can block cookies in your browser, but parts of the website may stop working.

Sharing your information

We do not sell your personal information. We share it only with service providers who help us run the store, such as Cinder POS (website and point-of-sale), payment processors, email delivery, and hosting, and only so they can provide their services. We may also share it when the law requires it or to protect our rights and the safety of others.

How long we keep it

We keep account, order, and loyalty records while your account is open and as long as the law requires for tax and business records. ID images and selfies are not kept.

Your rights

You can view and update your account details in My Account. Depending on where you live, you may also ask us to give you a copy of your information, correct it, or delete it. Some records may need to be kept for legal reasons. We will not treat you differently for making a request.

Children

This website is not meant for children, and we do not knowingly collect their information.

Changes

We may update this policy. We will post the new version here and change the date above.

Contact

Questions or requests about your information: ask our team in store. For questions about the Cinder POS platform, email admin@cinderpos.com.