Privacy Policy

Cove Kombucha, Inc. and its subsidiary Cove Drinks, Inc. ("Cove," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit or use our websites, including covesoda.com and covedrinks.com, purchase our products from us, contact us, interact with our marketing, participate in a promotion, submit a review or other content, or otherwise interact with Cove (collectively, the "Services").

This Policy is intended to apply to consumers in Canada and the United States and, where applicable, individuals in the European Economic Area ("EEA"), United Kingdom, and Switzerland. It does not govern third-party websites, retailer sites, or services that link to or are accessible from the Services; those third parties have their own privacy notices.

Cove is responsible for the personal information covered by this Policy. For questions or requests, contact our Privacy Officer using the information in Section 16.

1. Scope and key terms

"Personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an identified or identifiable person or household. The term includes "personal data" where that term is used under the GDPR.

This Policy does not change any rights or obligations that arise under a written agreement between you and Cove. For information about how a retailer processes information when you buy Cove products from that retailer, please review that retailer's privacy notice.

2. Personal information we collect

The personal information we collect depends on how you use the Services and the features we make available. We may collect the following categories:

• Identifiers and contact information, such as your name, email address, telephone number, postal address, city, province/state, country, and social-media handle.
• Commercial and transaction information, such as products viewed or purchased, order details, shipping and billing information, purchase history, return or refund information, and preferences. Payment card information is typically collected and processed by our payment processor rather than stored by Cove.
• Customer-service, inquiry, and user-content information, such as communications with us, information you provide in a quality or product inquiry, survey responses, reviews, photographs, videos, contest entries, and other submissions.
• Internet, device, and usage information, such as IP address, browser type, device type, operating system, language preferences, approximate location derived from IP address, pages viewed, links clicked, referring URL, time and date of visit, and interactions with our emails, advertisements, and Services.
• Marketing and preference information, such as your communication preferences, consent status, interests, and information used to make our communications more relevant to you.
• Information from third parties, such as information from retailers, e-commerce and payment providers, shipping and fulfillment providers, advertising and analytics providers, social-media platforms, promotion partners, and publicly available sources, where permitted by law.

Please do not send us sensitive personal information (for example, government identification numbers, or payment card details) through ordinary email, social media, or public reviews.

3. Sources of personal information

• Directly from you, when you make a purchase, sign up for communications, contact us, submit content, enter a promotion, or otherwise interact with us.
• Automatically from your device or browser through cookies, pixels, log files, SDKs, and similar technologies.
• From service providers and business partners that support our e-commerce, payment, fulfillment, marketing, analytics, advertising, and customer-service activities.
• From social-media platforms when you interact with Cove content or choose to connect with us through those platforms.

4. How we use personal information

We may use personal information to:

• provide, operate, secure, and improve the Services;
• process and fulfill orders; process payments; arrange shipping; provide customer support; and communicate about orders, recalls, product availability, or service matters;
• respond to questions, comments, product-quality reports, wholesale inquiries, and other requests;
• send marketing communications, promotions, and other information where permitted by law and consistent with your choices;
• administer contests, sweepstakes, surveys, loyalty initiatives, reviews, and promotions;
• understand how visitors use the Services; measure campaign performance; personalize content and, where permitted, advertising;
• detect, prevent, investigate, and address fraud, security incidents, misuse, and other unlawful activity;
• maintain records; comply with legal requirements; establish, exercise, or defend legal claims; and protect Cove, our customers, and others;
• create aggregated, anonymized, or de-identified information that does not reasonably identify you, subject to applicable law.

5. Legal bases for processing - EEA, UK, and Switzerland

Where GDPR or analogous laws apply, we process personal data only when we have a lawful basis. Depending on the activity, the basis may be:

• performance of a contract or taking steps at your request before entering into a contract, such as processing and fulfilling an order;
• our legitimate interests, such as operating and protecting the Services, responding to inquiries, improving our products and Services, preventing fraud, and maintaining records, provided those interests are not overridden by your rights and interests;
• your consent, including for non-essential cookies, certain marketing communications, and other processing where consent is required;
• compliance with a legal obligation; or
• protection of vital interests or another lawful basis permitted by applicable law.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that occurred before the withdrawal or processing based on another lawful basis.

6. Cookies, analytics, and interest-based advertising

We and our service providers may use cookies, pixels, tags, web beacons, local storage, and similar technologies to operate the Services, remember your preferences, understand use of the Services, measure communications and advertising, detect fraud, and, where permitted, deliver or measure interest-based advertising.

Your choices

• You can manage non-essential cookies through the cookie-preferences tool available on the Services [INSERT LINK] and through your browser settings. Disabling certain technologies may affect some features.
• Where required by law, we obtain consent before placing or reading non-essential cookies or using similar technologies. Essential technologies may operate without consent where permitted by law.
• If we engage in cross-context behavioral advertising or other activity treated as a "sale" or "sharing" under applicable U.S. law, you may submit an opt-out request through our "Your Privacy Choices / Do Not Sell or Share My Personal Information" link [INSERT LINK]. We also honor opt-out preference signals, such as Global Privacy Control, where legally required.
• You may also use industry opt-out tools, including the Digital Advertising Alliance consumer choice tools, although those tools do not prevent all tracking or all advertising.

Our cookie notice or consent-management platform may provide more detailed information about particular technologies, their purposes, and how long they remain on your device.

7. How we disclose personal information

We may disclose personal information to the following categories of recipients for the purposes described in this Policy:

• Service providers and processors that provide website hosting, e-commerce, payment processing, fraud prevention, email and SMS delivery, customer support, analytics, advertising, order fulfillment, shipping, legal, accounting, and information-technology services.
• Affiliates and corporate-family members, where necessary for business administration, operations, or the purposes described in this Policy.
• Business partners and promotion partners where you ask us to share information, choose to participate in a jointly offered activity, or we otherwise provide notice and obtain consent where required.
• Government authorities, regulators, courts, insurers, professional advisors, and others when required by law or reasonably necessary to protect rights, safety, security, or property; investigate suspected wrongdoing; or respond to legal process.
• A buyer, investor, lender, successor, or other party in connection with an actual or proposed merger, financing, acquisition, restructuring, bankruptcy, sale of assets, or similar transaction, subject to applicable law.

We require service providers processing personal information on our behalf to use it only for the services they provide to us and to protect it appropriately. We do not sell personal information for money. However, certain disclosures involving advertising and analytics technologies may be considered a "sale," "sharing," or "targeted advertising" under some U.S. state privacy laws. Where applicable, we provide the opt-out choices described in Section 6 and Section 12.

8. Marketing communications

We send marketing emails, text messages, and other electronic communications only as permitted by applicable law. In Canada, this generally means we will obtain the consent required by Canada's anti-spam legislation (CASL), identify Cove as the sender, include contact information, and provide a functioning unsubscribe mechanism. In the United States, we honor applicable opt-out rules. You may unsubscribe from marketing emails using the link in the message, reply STOP to marketing text messages where instructed, or contact us at privacy@covedrinks.com.

Opting out of marketing communications does not stop transactional or service-related communications, such as order confirmations, product-safety communications, account notices, or responses to your requests.

9. Data retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Policy, including to provide the Services, comply with legal, tax, accounting, and recordkeeping requirements, resolve disputes, enforce our agreements, and protect our rights and safety. Retention periods vary depending on the nature of the information, our relationship with you, the purpose of processing, and legal requirements. We may retain de-identified or aggregated information for a longer period where permitted by law.

10. International and cross-border transfers

Cove is based in Canada and operates in Canada and the United States. Personal information may be collected, stored, accessed, or processed in Canada, the United States, and other countries where Cove, its affiliates, or service providers operate. The laws of those countries may differ from the laws of your place of residence, and information may be accessible to courts, law-enforcement authorities, or other government authorities under applicable law.

When we transfer personal information across borders, we use measures required or appropriate under applicable law, which may include contractual commitments, data-processing agreements, security assessments, and other safeguards. For transfers of personal data subject to GDPR from the EEA, UK, or Switzerland to countries not recognized as providing an adequate level of protection, we use an approved transfer mechanism, such as the European Commission's Standard Contractual Clauses, together with supplementary measures where appropriate.

11. Security and privacy incidents

We use reasonable administrative, technical, physical, and organizational safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. No security measure is perfect, and we cannot guarantee absolute security. If we determine that a privacy or security incident requires notification under applicable law, we will notify affected individuals and relevant authorities as required.

12. Your privacy rights and choices

Depending on where you live and applicable law, you may have the right to request access to, correction of, deletion of, portability of, or information about our processing of your personal information. You may also have the right to withdraw consent, object to or restrict certain processing, opt out of targeted advertising, sale or sharing, or certain profiling, and appeal a decision concerning your rights request.

To make a request, use email privacy@covedrinks.com with the subject line "Privacy Request." We may need to verify your identity before acting on a request and may ask for information reasonably necessary to do so. You may use an authorized agent where permitted by law; we may request proof of the agent's authority and verify your identity directly.

If we deny a request subject to an appeal right, we will explain how to appeal. To appeal, email [privacy@covedrinks.com] with the subject line "Privacy Appeal" within 45 days of our decision. We will respond within the period required by applicable law. Depending on your location, you may also have the right to complain to a privacy regulator.

Canada

Subject to applicable law, Canadian individuals may request access to and correction of their personal information and may withdraw consent to certain collection, use, or disclosure. We will provide information about our privacy practices and handle questions or complaints through our Privacy Officer. Quebec residents may also have rights under Quebec privacy law, including rights relating to access, correction, and, where applicable, cessation of dissemination, de-indexation, or re-indexation.

California and other U.S. state privacy laws

If you are a resident of California or another U.S. state with an applicable consumer privacy law, you may have rights to know/access, correct, delete, obtain a portable copy, opt out of sale, sharing, targeted advertising, or certain profiling, and not be discriminated against for exercising privacy rights. The additional notices in Section 15 describe categories of personal information we collect, use, disclose, sell, or share, as applicable.

EEA, UK, and Switzerland

Individuals in the EEA, UK, and Switzerland may have rights to access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and to lodge a complaint with their local data-protection authority. Where processing is based on legitimate interests, you may object to that processing on grounds relating to your particular situation. You may object at any time to direct marketing, including related profiling.

13. Children's privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent. Where GDPR applies, we do not knowingly offer information-society services directly to children under 16 without parental consent, unless a lower age is permitted under applicable member-state law. If you believe a child has provided us personal information in violation of this Policy, contact us and we will take appropriate steps to delete it.

14. Third-party links, retailers, and social media

The Services may link to third-party websites, retailers, social-media platforms, and other services. Cove is not responsible for their privacy practices. Your interactions with those services are governed by their own privacy notices and terms. When you purchase Cove products through a retailer or marketplace, that retailer may collect and process information independently of Cove.

15. Additional U.S. privacy disclosures

Categories, purposes, and disclosures

In the preceding 12 months, depending on how you interact with us, Cove may have collected the categories of personal information described in Section 2 from the sources described in Section 3; used them for the business and commercial purposes described in Section 4; and disclosed them to the categories of recipients described in Section 7. We do not use or disclose sensitive personal information for purposes that require a right to limit under California law, except as permitted by law. We do not knowingly sell or share personal information of consumers under 16 years of age.

Sale, sharing, and targeted advertising

Cove does not exchange personal information for money. Where our use of third-party advertising or analytics technologies is treated as selling, sharing, or targeted advertising under applicable U.S. state law, we provide a clear opt-out mechanism through [INSERT PRIVACY CHOICES LINK] and honor applicable opt-out preference signals. We will not sell or share your personal information after you submit a valid opt-out request, except as permitted by law.

California retention, non-discrimination, and financial incentives

We retain personal information as described in Section 9. We will not discriminate against you for exercising rights available under applicable law. If Cove offers a loyalty program, sweepstakes, discount, or other financial incentive that involves personal information, the applicable terms will describe the material terms, how to opt in, and how to withdraw, as required by law.

16. Privacy Officer and contact information

Cove has designated a Privacy Officer who is responsible for overseeing Cove's privacy compliance and handling privacy questions, complaints, and requests.

Privacy OfficerCove Kombucha, Inc.1489 Hollis Street Suite 101

Halifax NS B3J 3M4

CanadaEmail: privacy@covedrinks.com

If you are dissatisfied with our response, you may have the right to contact the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec, a U.S. state attorney general or regulator, or the applicable EEA/UK/Swiss data-protection authority, depending on your residence and the applicable law.

17. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or applicable law. We will post the updated Policy and revise the effective date. If a change is material, we will provide additional notice or obtain consent where required by law.

CALIFORNIA PRIVACY NOTICE

This California Privacy Notice (“California Notice”) supplements the Cove Privacy Policy. It applies solely to California consumers and addresses personal information we collect online and offline. This California Notice does not apply to Cove personnel or job applicants.

This California Notice uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (the “CCPA/CPRA”).

Notice of Collection and Use of Personal Information. We may collect (and may have collected during the 12-month period prior to the last updated date of this California Notice) the following categories of personal information about you:

• Identifiers: identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number; telephone number and other forms of persistent or probabilistic identifiers), and other identifying information, online identifier, Internet protocol address, email address, account name, and other similar identifier
• Protected Classifications: characteristics of protected classifications under California or federal law, such as race, color, national origin, religion, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, genetic information, disability, citizenship status, and military and veteran status
• Commercial Information: commercial information, including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies
• Online Activity: Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements
• Geolocation Data
• Sensory Information: audio, electronic, visual, and similar information
• Inferences: inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, predispositions, behavior, and attitudes.

We may use (and may have used during the 12-month period prior to the last updated date of this California Notice) your personal information for the purposes described in our Cove Privacy Policy and for the following business purposes specified in the CCPA:

• Performing services, including maintaining or servicing accounts, providing customer care, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytics services, or providing similar services, receiving services or products, making payments or other similar activities
• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance
• Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your same interaction with us
• Helping to ensure security and integrity
• Debugging to identify and repair errors that impair existing intended functionality
• Undertaking internal research for technological development and demonstration
• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us
• We do not collect or process sensitive personal information for purposes of inferring characteristics about consumers.
• To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
• Sources of Personal Information. During the 12-month period prior to the last updated date of this California Notice, we may have obtained personal information about you from the following categories of sources:
• Directly from you, such as when you make a purchase, provide information to us for business and commercial purposes or when you interact with us through our customer care and marketing channels such as telephone conversations, chats, emails, SMS and other interactions
• Your devices, such as when you visit our site or use our any app we may have in the future
• Your family or friends, such as when they provide us with your contact information so we can send you gift cards or other information that may interest you
• Our affiliates and subsidiaries
• Vendors who provide services on our behalf
• Our business partners
• Online advertising services and advertising networks
• Internet service providers
• Data analytics providers
• Operating systems and platforms
• Social networks
• Data brokers

Sale or Sharing of Personal Information

We may share your personal information with certain third parties (such as online advertising services) or allow them to collect personal information via automated technologies on our Sites and Apps for cross-context behavioral advertising purposes. This kind of sharing may be considered a “sale” or “sharing” under California law when the personal information is exchanged for non-monetary consideration. You have the right to opt out of these types of disclosures of your information.

We may sell or share for cross-context behavioral advertising purposes (and may have sold or shared during the 12-month period prior to the last updated date of this California Notice) the following categories of personal information about you to online advertising and data analytics services and social media networks:

• Identifiers
• Commercial Information
• Online Activity
• Inferences

You have the right to opt-out of this disclosure of your information, as detailed below. We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age.

Disclosure of Personal Information. During the 12-month period prior to the last updated date of this California Notice, we may have shared your personal information with certain categories of third parties, including as described in our Privacy Policy and below, including for the business purposes described above.

Category of Third Party Category of Personal Information - Our Affiliates and Subsidiaries · Identifiers· Additional Data Subject to Cal. Civ. Code § 1798.80· Commercial Information· Online Activity· Geolocation Data·

California Consumer Privacy Rights. California residents may have certain rights pursuant to the CCPA, as described below.

• Right to Delete: You have the right to request that we delete certain personal information we collected from you. To exercise your rights, please email us at privacy@covedrinks.com.
• Right to Know: You have the right to request, twice in a 12-month period, a report that details the categories of personal information collected about you, the categories of sources from which the personal information is collected, the purposes for collecting the personal information, the categories of personal information that we disclose for a business purpose, sell or share and the categories of third parties with whom the information is shared, and the specific pieces of personal information collected about you. To exercise your rights, please email us at privacy@covedrinks.com.
• Shine the Light Request: You also may have the right to request that we provide you with (a) a list of certain categories of personal information we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year and (b) the identity of those third parties. To submit a Shine the Light request, email us at privacy@covedrinks.com.
• Right to Correct: You have the right to correct inaccurate personal information we hold about you. For existing customers, you may log in your account to correct your personal information. For non-customers, please email us at privacy@covedrinks.com.
• Right to opt-out of Sale or Sharing of Personal Information: You have the right to opt-out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising purposes. To exercise your rights, please email us at privacy@covedrinks.com. Note that you also can use the Global Privacy Control (“GPC”) to signal your opt-out preference. To learn more about the GPC, please visit https: /globalprivacycontrol.org/. If you delete cookies or reset your device, you may need to set your preference again to ensure we continue to honor your preferred choice.

We will not discriminate against you for exercising any of the rights that are provided to you under CCPA/CPRA.

Verifying Requests. We have various procedures to verify that you are authorized to exercise your rights under the CCPA/CPRA. If you have an account with us, we may ask you to verify your identity by requiring you to sign-in to your account or complete a form requesting certain information. If you do not have an account and request access to, correction of or deletion of your personal information, we may require you to provide any of the following information: first and last name, email address, country, street address, city and zip code. You also can designate an authorized agent to make these requests on your behalf, though we will need to verify the authority of such agent pursuant to our procedures. For authorized agents making a request on a consumer’s behalf, download a verification form here. to complete and submit the completed form together with the above request. An authorized agent’s request will be denied without this form properly submitted.

Additional Information. We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other record keeping purposes and to process transactions and facilitate customer requests. If you choose to exercise any of your rights under the CCPA/CPRA, you have the right to not receive discriminatory treatment by us, though we may not be able to provide some services to you without such information. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

STATE PRIVACY NOTICE FOR RESIDENTS OF COLORADO, CONNECTICUT, DELAWARE, IOWA, INDIANA, MONTANA, NEW JERSEY, OREGON, TENNESSEE, TEXAS, UTAH, VIRGINIA, AND OTHER STATES THAT MAY HAVE APPLICABLE PRIVACY LAW

This State Privacy Notice supplements the Cove Privacy Policy. It applies solely to Colorado, Connecticut, Delaware, Iowa, Indiana, Montana, New Jersey, Oregon, Tennessee, Texas, Utah and Virginia consumers (and any other states that may have applicable privacy law) and addresses personal information we collect online and offline. This State Privacy Notice does not apply to Cove personnel or job applicants.

This State Privacy Notice uses certain terms that have the meaning given to them in the applicable laws and implementing regulations in the states listed above.

Categories of Personal Information Collected:

• We may process the categories of personal information listed in the Information We Obtain section of our Privacy Policy.
• Purposes for which Personal Information is collected: We may process the personal information we collect about you for the purposes listed in the How We Use the Information We Obtain section of our Privacy Policy. Sharing of Personal Information:
• We may share the following categories of your personal information with the categories of third parties listed in the Information We Disclose section of our Privacy Policy:
• Contact information and other information about you and your household (including your name, email address, physical address, shipping address, telephone number) and other demographic information.
• Internet or other electronic network activity information (including cookies and mobile device IDs, and related browsing information).
• Commercial information (including products and services purchased, products and services you are considering purchasing that are placed in your virtual shopping cart, information about products that you have returned, product orders you have cancelled, and product reviews).
• Location information (including approximate geolocation).
• Transactional information such as information you provide to us via customer care calls, emails, SMS and chats. This information is recorded and processed consistent with our Privacy Notice.

Processing Personal Information for Sale and Targeted Advertising

• We may share certain of your personal information with our social media, data analytics, online advertising services, advertising networks and similar third parties for the purposes of targeted advertising and marketing.
• External Messaging Service: Data obtained through the SMS messaging program will not be shared with any third parties for their marketing purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties for marketing purposes.
• We may share your personal information with certain third parties as described above, which may be considered a “sale” under certain state laws when the personal information is exchanged for non-monetary consideration.
• We will not discriminate against you for exercising any of the rights that are provided to you under applicable state privacy laws.• We do not conduct profiling in furtherance of decisions that produce legal or similarly significant affects for consumers.
• To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Consumer Privacy Rights. You may have certain rights pursuant to the applicable state laws, as described below:

• Right to Delete: You have the right to request that we delete your personal information in accordance with applicable state law. To exercise your rights, please see the “Exercise Your Rights” section. Your deletion request will make it impossible for Cove to provide benefits under our membership programs such as free shipping and other benefits.
• Right to Access: You have the right to request confirmation of whether we have processed your personal information and to access that information in a portable, and to the extent technically feasible, readily usable electronic format. To exercise your rights, please see the “Exercise Your Rights” section. Oregon may receive list of third parties where may have disclosed personal data, subject to certain conditions.
• Right to Correct: You may have the right to correct inaccurate personal information we hold about you. For existing customers, you may log in your account to correct your personal information. For non-customers, please see the “Exercise Your Rights” section.
• Right to Opt Out of Processing for Purposes of Sale and Targeted Advertising: You have the right to opt-out of sharing information with third parties for the purposes of sale and targeted advertising. To exercise your rights, please see the “Exercise Your Rights” section. Depending on applicable state law, you also can use the Global Privacy Control (“GPC”) to signal your opt-out preference. To learn more about the GPC, please visit https: /globalprivacycontrol.org/. If you delete cookies or reset your device, you may need to set your preference again to ensure we continue to honor your preferred choice.

Verifying Requests. We have various procedures to verify that you are authorized to exercise your rights under applicable state laws. If you have an account with us, we may ask you to verify your identity by requiring you to sign-in to your account or complete a form requesting certain information. If you do not have an account and request access to, correction of or deletion of your personal information, we may require you to provide any of the following information: first and last name, email address, country, street address, city and zip code. Depending on applicable state law, you may also be able to designate an authorized agent to make these requests on your behalf, though we will need to verify the authority of such agent pursuant to our procedures. For authorized agents making a request on a consumer’s behalf, download a verification form here to complete and submit the completed form together with the above request. An authorized agent’s request will be denied without this form properly submitted.

Additional Information. We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other legal, compliance or mandatory record keeping purposes If you choose to exercise any of your rights under applicable state privacy laws, you have the right to not receive discriminatory treatment by us, though we may not be able to provide some services to you without such information. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

Exercise Your Rights:

For non-Cove customers: For non-customers, you may exercise your applicable rights by visiting email us at privacy@covedrinks.com.

California residents only: If you are associated with a business that is providing services and products to us, you may email us at privacy@covedrinks.com.

For Oregon Residents only: You may receive list of third parties where may have disclosed personal data, subject to certain conditions. You may email us at privacy@covedrinks.com.

You may appeal our decision with respect to a request you have submitted by emailing us at privacy@covedrinks.com.