Effective and last updated: July 29, 2026

This Privacy Policy explains how GALLO FINO IP LLC (“Gallo Fino,” “we,” “us”) handles information in connection with this public wholesale website (the “Site”) and customer or wholesale interactions with Gallo Fino-operated Instagram accounts (together, the “Services”). The Site is informational and does not contain a login, shopping cart, or personal-information form. Wholesale accounts and orders are handled on our separate wholesale portal, where additional notices may apply.

Website information

We keep data collection to a minimum on the Site:

  • Server and access logs. Like nearly all websites, our hosting provider automatically records standard technical information when a page is requested — such as your IP address, browser type, referring page, and the time of the request. This is used to operate, secure, and troubleshoot the Site.
  • A language preference. When you choose English or Spanish, we store that single preference (fino-lang) in your browser’s local storage so the Site remembers it on your next visit. It stays on your device and is not sent to us.

We do not ask for your name, email, or other personal details anywhere on this Site. Links such as “Apply” and “Sign In” take you to our wholesale portal, which is where any account information is entered.

Instagram, messaging, and automated support

This section is our notice at collection for information processed when you message, mention, tag, or comment on a Gallo Fino-operated Instagram account. In the preceding 12 months, depending on how a person interacted with us, we have collected the categories below. We receive this information from you, your publicly available Instagram profile, Meta/Instagram, our service providers, and records generated when our systems process or respond to an interaction.

  • Account, profile, and contact information. Your Instagram user ID, username, display name, publicly available profile details such as follower count or verification status, and any name, phone number, email, order reference, or other contact information you voluntarily provide.
  • Communications and media. The content of direct messages, comments, story replies, mentions, images, audio, attachments, transcriptions, and our replies, together with message or comment identifiers and timestamps.
  • Interaction and support records. Language and intent classifications, routing and delivery status, duplicate-prevention records, moderation or support history, human-review status, and limited security, quality, and audit metadata.

Do not send sensitive secrets through Instagram. We do not ask for passwords, one-time passcodes, or payment-card security codes. If you need order help, provide only the minimum order or contact information needed for us to locate the order securely.

Automated processing and human review

We use deterministic rules and automated tools, which may include artificial intelligence, to identify language and request type, route support questions, detect duplicates or abuse, transcribe audio, analyze images or story context, draft or send replies, and flag conversations for human review. You may receive an automated response. These tools are used for support and operations, not to make legal or similarly significant decisions about you. When a request is uncertain, sensitive, or needs account-specific action, we may hold it for staff review. You may request human review by replying in the conversation or emailing us.

How we use information

We use information to operate and secure the Services; answer customer-service, order, shipping, product, and wholesale questions; maintain conversation context; route or escalate requests; verify delivery and prevent duplicate or self-generated replies; moderate spam, abuse, or content that exposes private information; create and manage wholesale leads when requested; investigate failures; conduct quality and security audits; comply with law; and protect our customers, business, and rights. We do not use this information to build cross-context advertising profiles.

Cookies and local storage

This Site does not use advertising or tracking cookies. The only item we store in your browser is the fino-lang language preference described above. You can clear it at any time through your browser settings; the Site will simply default back to English.

Service providers and platforms

We disclose information to providers only as reasonably necessary to operate the Services, subject to applicable agreements and law. Depending on the interaction, these providers include:

  • Cloudflare hosts and delivers the Site and supports our messaging automation, databases, security, and performance.
  • Meta/Instagram provides the social-media and messaging platform and supplies the account and interaction data needed to receive and respond to communications.
  • Anthropic, OpenAI, and Cloudflare AI services may process message, audio, image, or story context to classify requests, translate or transcribe content, analyze media, or help generate a response.
  • Notion and limited staff communication tools may be used to manage requested wholesale follow-up, support escalation, and operational alerts. We limit the information shared to what is reasonably necessary for the task.
  • Google Fonts. The Site loads the Inter typeface from Google’s font servers. When your browser requests those fonts, Google may receive standard request information such as your IP address. See Google’s privacy policy for details.

For the business purposes described above, identifiers and profile/contact information may be disclosed to Meta/Instagram, Cloudflare, and staff support or lead-management tools; communications and media may be disclosed to Meta/Instagram, Cloudflare, the identified AI providers, and staff tools when escalation is needed; and interaction, delivery, moderation, security, and audit records may be disclosed to Cloudflare and limited staff tools. We do not disclose every category to every provider in every interaction.

Your California privacy rights

To the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), applies to us or your information, California residents may have the right to:

  • Know and access the personal information we have collected about you.
  • Delete personal information we hold about you.
  • Correct inaccurate personal information.
  • Opt out of the sale or sharing of personal information.
  • Limit certain uses or disclosures of sensitive personal information, where that right applies.
  • Not be discriminated against for exercising any of these rights.

We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we do not use it for cross-context behavioral advertising.

Depending on where you live, you may have similar privacy rights. We will respond to requests as required by applicable law.

Data retention

We retain each category only as long as reasonably necessary for the disclosed purposes, using these criteria:

  • Website and access logs follow rolling security and maintenance schedules and are deleted or aggregated when no longer needed to operate, secure, or troubleshoot the Site.
  • Instagram account/profile data, communications, media, and support records may be retained while needed to answer or document the request, maintain conversation and order context, complete requested wholesale follow-up, resolve disputes, comply with legal or accounting duties, or enforce agreements.
  • Interaction, delivery, moderation, security, and audit metadata may be retained while needed to preserve delivery and duplicate-prevention integrity, investigate failures or abuse, document moderation or support handling, or complete security and quality audits.
  • The Site language preference remains on your device until you clear it.

When the applicable purpose ends, we delete, aggregate, or de-identify information when reasonably practicable, subject to legal exceptions, dispute holds, security needs, and backup cycles.

Security

The Site is served over encrypted connections (HTTPS). We use administrative, technical, and organizational measures intended to protect information, including access controls and delivery or duplicate-prevention safeguards. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

Children

The Site is a business-to-business wholesale resource, and the Services are not directed to children. We do not knowingly collect personal information through the Services from anyone under 13. If you believe a child has provided information to us, contact us so we can review and delete it where required.

How to exercise your rights & contact us

To make a privacy request or ask a question about this policy, email us at admin@gallofinosupport.com. We may need to verify your request before responding. You may also authorize an agent to act on your behalf, consistent with California law.

Changes to this policy

We may update this Privacy Policy as our practices or legal obligations change. We will post the updated policy, revise the date above, and provide any additional notice or consent required by law for material changes.

Language

This policy is provided in English and Spanish. If there is any conflict between the two versions, the English version controls.