Privacy Policy.

Star Beverage ("Star Bev," "we," "us," or "our") operates a brew-thru retail store at 200 Chestnut Ave, Altoona, PA 16601 and the website at starbev.shop. This Privacy Policy explains what personal information we collect when you visit the site, place an order, or shop at the window, and how we use, share, and protect that information.

By using our site or services, you agree to the practices described here. If you don't agree, please don't use the site or place orders with us.

1. Information We Collect

We collect only what we need to verify your age, take your order, fulfill it, and stay compliant with Pennsylvania and federal law.

Information you give us

• Account details: name, email address, phone number, and a password (stored hashed — we never see it in the clear).
• Delivery and pickup details: street address, ZIP code, vehicle description for brew-thru pickups, and any notes you add to an order.
• Age verification: a confirmation that you are 21 or older when you enter the site, and a record of ID verification at pickup or delivery (we record that ID was checked and accepted — we do not photograph or store images of your ID).
• Payment information: card number, expiration, CVV, and billing ZIP are submitted directly to our payment processor (NMI) and tokenized. Your card number never touches our servers — we only see a token and the last four digits.
• Order history: the items, prices, fulfillment method, and timestamps for orders you place.
• Customer service correspondence: messages you send us by email, phone, or web form.

Information we collect automatically

• Device and session data: browser type, operating system, IP address, and pages visited — used to keep the site running and prevent abuse.
• Cookies and localStorage: we use small amounts of browser storage to remember your age-gate confirmation, your cart, and whether you're signed in. We do not run third-party advertising trackers or marketing analytics on this site by default.

Information from in-store purchases

If you sign in to your starbev.shop account and ask the cashier to link an in-store purchase to your account, our KORONA point-of-sale system will associate that transaction with your customer record. If you don't link your purchase, in-store transactions stay anonymous.

2. How We Use Your Information

• To verify that you are 21 or older before showing you products or accepting an order.
• To process orders, take payment, schedule pickups, and route deliveries within our 5-mile radius of Altoona.
• To manage your account, including sign-in, password reset, and order history.
• To send transactional emails — order confirmations, pickup-ready alerts, delivery updates, receipts, and account notices. These are not marketing and you cannot opt out of them while you have an active account.
• To send marketing emails (new arrivals, specials, events) only if you have opted in. Every marketing email has a one-click unsubscribe link.
• To prevent fraud, abuse, underage purchases, and chargebacks.
• To keep records required by the Pennsylvania Department of Revenue and the Pennsylvania Liquor Control Board.

3. Who We Share Information With

We do not sell your personal information. We share only what is necessary with the following vendors who help us run the business:

• NMI (Network Merchants, Inc.) — payment processing and card tokenization.
• KORONA POS — in-store point of sale, inventory, and (optionally) linking in-store purchases to your account.
• Resend — sending transactional and (opt-in) marketing email.
• Netlify — website hosting and content delivery.
• Government and regulators — when required by law, court order, or regulatory inquiry (e.g., PLCB inspections, tax audits).

We may also share aggregated or de-identified information that cannot reasonably be used to identify you (e.g., "we sold X cases of Yuengling last month").

4. Cookies, localStorage, and Tracking

We use the minimum browser storage needed to make the site work:

• Age verification cookie / localStorage flag — so you don't have to click through the 21+ gate on every page load.
• Cart storage — so the items you add are still there if you navigate away.
• Session token — so you stay signed in while you shop.

We do not currently run Google Analytics, Meta Pixel, TikTok Pixel, or other third-party advertising trackers on this site. If we ever add analytics, this policy will be updated and you'll be told.

5. Data Retention

• Account data is kept for as long as your account is active. If you ask us to close your account, we'll delete or anonymize personal details within 30 days, except where we're required to keep records.
• Transaction and tax records are kept for at least seven (7) years to comply with Pennsylvania Department of Revenue requirements and federal tax rules.
• Age-verification logs are kept for at least two (2) years to comply with PLCB and FDA recordkeeping expectations.

6. Your Rights

You can ask us, at any time, to:

• Access the personal information we have about you.
• Correct information that is wrong or out of date.
• Delete your account and personal information (subject to the tax-record retention period above).
• Opt out of marketing email — use the unsubscribe link in any marketing email, or email us directly.

To make a request, email support@starbev.shop from the email address on your account. We'll respond within 30 days.

7. Children's Privacy

This site is for adults 21 years of age or older. We do not knowingly collect personal information from anyone under 21, and we do not market to minors in any form. If you believe a minor has provided us information, please email support@starbev.shop and we will delete it.

8. Security

We protect your information with industry-standard safeguards:

• All pages on starbev.shop are served over HTTPS (TLS).
• Card numbers are tokenized by NMI at the point of entry. Star Bev does not store, transmit, or have access to full card numbers.
• Passwords are stored using one-way cryptographic hashing.
• Access to customer records is limited to staff who need it to do their job.

No system is perfectly secure, and we can't promise that a breach will never happen. If a breach affects your information, we'll notify you and the appropriate authorities as required by Pennsylvania law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we'll update the "Last updated" date at the top of this page and, if the change is significant, send a notice to the email on your account. Continued use of the site after a change means you accept the updated policy.

10. Contact Us