Bush Brothers & Company Privacy Notice

Last Updated: 3/25/2026

Bush Brothers & Company and its affiliates ("we", "us" or "our") know that your privacy is important to you, and we want you to know that it is important to us too. When you use or interact with our Services, we may collect and process certain information about you, including information that is considered "personal information" or "personal data" under applicable law ("Information"). This Privacy Notice ("Notice") explains how we collect, use and disclose Information that we receive from or about you in connection with our Services, how we protect your Information once it is collected, and how you can exercise your rights and choices available to you regarding your Information.

This Notice applies to Information we collect from or about you when you use or interact with our websites, mobile applications or the profiles or pages we maintain on social media platforms (collectively, "Sites", each a "Site"), visit our locations (such as Bush's Visitor Center), attend our promotional events, or otherwise communicate with us, including through offline channels, such as phone or mail (collectively with Sites, "Services").

Contents

What Information Do We Collect?
How Is Your Information Used?
To Whom Do We Disclose Your Information?
Cookies and Other Technologies
Manage Your Account, Rights and Choices
Retention of Your Information
Security of Your Information
Children's Privacy
Links to Third-Party Websites and Services
Changes to this Privacy Notice
Contact Us
U.S. State Supplement
Consumer Health Data Supplement
Canada Supplement
International Supplement

What Information Do We Collect?

When you use or interact with our Services, we may collect Information about you in the following ways:

Information You Provide to Us

When you use or interact with our Services, we may collect certain Information from you. For example, we may collect Information when you make a purchase on our Site or at Bush's Visitor Center; sign up for our newsletters; enter into our sweepstakes, contests or other promotional programs; complete our surveys or questionnaires; submit a product review; apply for employment with us; create an account on our Site; or submit a complaint or question to us. Such Information may include:

Name and contact information: such as your name, your company name (if applicable), and your contact information (e.g., postal addresses, email addresses or telephone numbers).
Account information: such as your login credentials (including your username, account ID, password, security questions and answers) and account number if you maintain an account on our Sites.
Demographic data: such as your age or year of birth, gender, race or nationality.
Payment and order/purchase information: such as your credit card (including your card number, security code and expiration date) and other payment information, records of the products you ordered or purchased.
Health-related information: such as your dietary preferences and other health-related information you may choose to provide if you volunteer to participate in any of our product testing or sensory surveys. In certain jurisdictions, the health-related information we collect may constitute consumer health data (as defined by applicable law). For more information about our privacy practices with respect to such data, please refer to our Consumer Health Data Supplement.
Professional or employment-related information: such as your job history, education information, certifications, and other information you may provide in connection with your job application.
Government-issued identifiers: such as your driver's license number, Social Security number, or other government-issued identification numbers in connection with your job application.
Video and audio information: such as videos or CCTV recordings through our security cameras when you visit our locations, video recordings or photographs of our events or programs (e.g., our promotional or community events), or voicemails you may leave us.
Reviews and public forum comments: information you choose to provide in reviews of our products or comments you post on publicly available forums made available on our Sites. (Any information posted on these forums will be available to the public; as a result, you should exercise caution when making such posts and not post any personal or other information you would not want shared with the public.)
Other information: any other Information you may choose to provide, such as Information you provide when you communicate with us (e.g., contents of your email or "contact us" forms, responses to our surveys or contests, voicemails, "chat" features (if applicable) or other communications).

Automated Collection of Information

When you visit or interact with our Sites or interact with our email communications, we may collect certain Information about you and your devices by automated means, using cookies, pixel tags, web server logs and other technologies. For more information regarding such technologies, please refer to the Cookies and Other Technologies section below. The Information we collect in this manner may include:

Device information: such as your device ID, unique device identifier, web browser characteristics and/or type, device characteristics and/or type, operating system, domain server, and language preferences.
Internet or other network activity information: such as your IP address, your browsing history, search history, and your purchase or transaction history on our Sites.
Geolocation data: such as your general location. We do not collect precise location data.
Clickstream and usage data: such as information regarding your usage of or interactions with our Sites and email communications, including the referring URLs, the URLs you visit when leaving our Sites, the pages, content or ads viewed, the links clicked, items downloaded, dates and times of Site visits, account access or opening of email communications, your interactions with our "chat" feature (if applicable), or other data regarding your usage activity of our Services.

Information from Third Parties

We may receive or otherwise obtain Information about you through third parties, such as third parties that perform services for us or on our behalf, publicly available sources (where permitted by applicable law), and other third parties. Such Information may include:

Publicly available information: such as information from public databases, registers, media search results and other public sources.
Social media data: such as comments, content or details that you post on publicly available websites or social media platforms, including any information that accompanies those posts, such as your name, username, email address, your likes or preferences, or profile picture, subject to your privacy settings on these platforms and/or websites.
Background check information and references: such as information collected in connection with background checks or employment references.

How Is Your Information Used?

We may use the Information we collect from and about you for various purposes, including:

Providing our offerings: The provision of our offerings, including processing and fulfilling your purchases, returns or other transactions; maintaining, managing, and administering our Sites and your accounts (including enabling users to use our Sites and their features and providing technical or other support to resolve issues).
Operating our business: To support our internal business functions, including performing accounting, auditing, billing, managing our databases and backups, and other similar activities; and for data analytics relating to your use of and interaction with our Services.
Communications: To communicate with you, including responding to your requests, questions and concerns; communicating with you about our products, services and events that we think might interest you; and managing our relationship with you.
Marketing and advertising purposes: To conduct market research; send you promotional materials that we think may be of interest to you; tailor ads displayed to you on third-party websites to your interests and interactions with our Services; and determine and manage the effectiveness of our advertising and marketing.
Administering sweepstakes, contests, and promotional programs: To administer our sweepstakes, contests or other promotional programs, including communicating with entrants and winners.
Product testing and sensory surveys: If you participate in our product testing or sensory surveys, to administer the relevant tests or surveys; gather feedback about our products or other offerings and understand our customers' needs and preferences; conduct market research; and improve our products or other offerings.
Improving our offerings: To improve our products and other offerings (including the Services), including to develop new features on our Services or new products; and to enhance your experience and provide you with a more personal and interactive experience.
Maintaining security of our systems: To verify your identity and to maintain the integrity and security of our systems and Services, including to prevent fraud, and to detect, prevent and respond to technical issues, bugs, breaches or errors within our networks and systems.
Talent management and recruiting: To manage career opportunities; assess and/or process your job application(s); communicate with you about the recruitment process; and to make decisions about recruitment or appointment.
Protecting our interests: When we believe it is necessary, to take precautions against liabilities, investigate and defend ourselves against any claims or allegations; protect our rights and property; protect against and prevent fraud, unauthorized transactions, claims or other liabilities; and enforce our policies and terms.
Compliance with law: To comply with applicable legal and regulatory requirements and industry standards; detect, investigate and/or prevent fraud, crime or other illegal activities; and as otherwise required by applicable law, regulation or other governmental authority, including to comply with a subpoena or similar legal process.
Other purposes: For other purposes for which we provide specific notice before collection. We may also use your Information with your consent or at your direction.

Deidentified and Aggregated Information

We may aggregate and/or deidentify your Information such that it is no longer able to be linked to you or your device(s), directly or indirectly. This Notice does not limit our ability to use or disclose such aggregated or deidentified information. To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

To Whom Do We Disclose Your Information?

We may disclose the Information we collect from and about you to the following affiliates and third parties in the following ways:

Our Affiliates: Our subsidiaries and other affiliated companies in connection with any of the uses set out in this Notice.
Service Providers: Third parties who provide services to us or on our behalf, such as providers that host or administer our Sites (including our online store), process payments or refunds in connection with your purchases or returns, fulfill and ship your orders, perform data analytics, administer our product testing, sensory or other surveys, conduct our email marketing, or provide IT infrastructure and related services.
Advertising Partners: Our third-party advertising partners (including advertising networks, online advertising companies, and social media platforms) who may use such Information for their own purposes, including to market products or services to you or tailor ads displayed to you on third-party websites.
Business Partners: Our business partners, including our co-sponsor(s) or other strategic partners who may use such Information for their own purposes. For example, if we obtain your Information in connection with a contest, sweepstakes or other promotional program that is jointly offered by us and any third parties, we may share your Information with such third parties.
Public: If you post a review, comment or other content in a publicly available forum on our Sites, any Information you may include in this content will be available to the general public.
Legal Rights or Obligations: Where we believe disclosure is necessary to protect our rights or property, protect the safety or vital interests of you or others, investigate or prevent suspected fraud or other possible illegal activities, or otherwise comply with our legal obligations.
Advisors: Our professional advisors, including lawyers, auditors, accountants, consultants, agents and insurers.
Others: Other third parties if you direct us to do so, with your permission or as otherwise permitted by law.
Corporate Change of Control: In the event we sell or transfer (or contemplate the sale or transfer of) all or a portion of our business or assets (including in the event of a merger, acquisition, joint venture, reorganization, divestiture, restructuring, bankruptcy, dissolution or liquidation).

Cookies and Other Technologies

When you visit our Sites or interact with our email communications, we collect certain Information about you and your devices by automated means, using cookies, pixel tags, web server logs and other technologies. Cookies are small data files that websites send to your computer or device to uniquely identify your browser or to store information or settings in your browser. Cookies enable us to recognize you as the same user who was at one of our Sites in the past and relate your use of our Sites to other Information about you. We may use cookies to enhance and customize your experience on our Sites, collect general usage and aggregated statistical information about our Sites, detect and prevent fraud, and tailor the advertising you receive from us to your interests.

A pixel tag (also known as a "clear gif" or "web beacon") is a tiny image that links webpages to web servers and their cookies and may be used to transmit information collected through cookies back to a web server. We may use pixel tags to help us measure the effectiveness of our content by, for example, counting the number of individuals who visited our Sites or verifying whether you've opened one of our emails.

Cross-Context Behavioral Advertising or Targeted Advertising

On our Sites, we and our advertising partners (including ad networks, online advertising companies, and social media platforms) may collect Information about you and your online activities (through cookies and other technologies) over time and across sites to provide you with advertising about products and services tailored to your interests. We also may disclose the Information we collect about you to third parties for cross-context behavioral advertising purposes, including to serve you targeted advertising over time and across sites, and for purposes of tracking the effectiveness of our marketing efforts.

For more information about how you may communicate your choices about the use and disclosure of your Information for cross-context behavioral or targeted advertising purposes, please refer to the Manage Your Account, Rights and Choices section below.

Manage Your Account, Rights and Choices

If you maintain an account with us, you may manage your account, as further detailed below. You may also have the right to opt in or opt out of certain of our uses and disclosures of your Information:

Manage Your Account: If you maintain an account on our Sites, you may be able to review, update or modify certain information in your account by making such changes in your user/account profile. You may also contact us to update or modify information in your account.
Promotional Emails: You may opt out of receiving promotional emails from us by clicking on the "unsubscribe" link at the bottom of such emails. Please understand that it may take us a few days to process an opt-out request and that, even if you opt out of receiving promotional emails from us, we may still contact you in connection with your account activities, transactions, and communications with us.
Browser and Device Settings: Most browsers can be set to detect cookies and give you an opportunity to reject them, but refusing cookies may, in some cases, inhibit or preclude your use of our Sites or certain features. To learn more about how to manage cookies on different browsers, you can visit allaboutcookies.org.
Cross-Context Behavioral or Targeted Advertising: Our practice is to use or disclose your Information to our advertising partners for cross-context behavioral advertising or targeted advertising purposes at your direction using our cookie preference tool. You may communicate your choices by clicking the "Cookies Settings" icon on the bottom of our Sites. Your choice will be specific to the browser and device you are using to access the Site at the time you communicate such choice.
Individual Rights: In addition to the rights and choices noted above, depending on the laws of your country or state of residence, you may be afforded certain other rights with respect to your Information. Please refer to the U.S. State Supplement, Consumer Health Data Supplement, Canada Supplement, or International Supplement for more information about what rights may be available to you.

Retention of Your Information

We will retain your Information for the time period reasonably necessary to achieve the purposes for which it was collected, to comply with our legal obligations and policies, to resolve disputes and to exercise our rights.

We consider the following criteria when determining how long to retain your Information:

Why we collected the Information
The nature of the Information
The sensitivity of the Information
Our legal obligations related to the Information (taking into account applicable statutes of limitation and records retention requirements under applicable law)
The risks associated with retaining the Information

Security of Your Information

We maintain technical, administrative and physical safeguards designed to protect your Information against accidental, unlawful or unauthorized access, destruction, loss, alteration, disclosure or use. From time to time, we review our safeguards to consider appropriate new technologies and methods. While we seek to protect your Information, we cannot guarantee that any information, during transmission through the Internet or while stored on our systems or otherwise in our care, will be secure or safe from intrusion by others (such as hackers) in all circumstances.

If you create an account on our Sites, you need to help us prevent unauthorized access to your account by protecting your password appropriately and limiting access to your account. You will be solely responsible for keeping your password confidential and for all use of your password and your account, including any unauthorized use.

Children's Privacy

In general, our Services are designed for a general audience and are not directed to children. We do not knowingly collect or solicit Information from children under the age of 13 through our Sites. If we become aware that we have collected Information from a child under 13 through our Sites, we will promptly delete the information from our records. If you believe a child under 13 may have provided us with Information through our Sites, please contact us.

We may at times collect or otherwise process Information from children under the age of 13 when they participate in our product testing or sensory surveys. Where required by applicable law, we will process such Information with the consent of the child's parent or legal guardian. Please refer to our Consumer Health Data Supplement for more information.

If we offer a child-directed Service, we will provide a supplemental privacy notice for that Service where required by law.

Links to Third-Party Websites and Services

Our Services may contain links, banners, widgets or advertisements that lead to other websites or online services (such as social media platforms) not owned or operated by us. For example, our Sites may include features that allow you to share or publicly post content from our Sites to your profile on a third-party social media platform (e.g., Facebook, X (formerly Twitter) or Instagram). We are not responsible for these other sites or online services, and their posted privacy policies (not this Notice) will govern the collection and use of your Information on them. We encourage you to read the privacy policies of each website or online service visited after leaving our Sites to learn about how your information is treated by others.

We maintain a presence on certain social media platforms to communicate with our customers. This Notice applies to our use of Information you submit to us on such platforms or receive about you from such platforms, but it does not apply to what those third-party platforms do with your Information.

Changes to this Privacy Notice

We may change this Notice (including the supplements to this Notice) from time to time. When we do, we will let you know by posting the changed Notice (and/or supplements) on this page with a new "Last Updated" date. We encourage you to revisit this Notice and its supplements often to remain fully informed of our privacy practices. For material changes, we may also tell you about changes by additional means (such as posting a notice on our website and/or contacting you directly about the changes).

Contact Us

If you have any questions or comments regarding our privacy practices, you may contact us by:

Email: privacy@bushbros.com
Phone: 1-844-922-2874
Mail:
Bush Brothers & Company
1016 East Weisgarber Road
Knoxville, TN 37909-2669

This U.S. State Supplement ("State Supplement") supplements the Bush Brothers & Company Privacy Notice and provides information required by the laws of certain U.S. states for their residents ("you"). Some U.S. states provide their residents particular rights, subject to certain legally permitted exceptions. This State Supplement applies solely to consumers residing in these states, such as our customers. Subject to applicable law, this State Supplement also applies to individual representatives of our vendors or business partners and our job applicants that reside in California. You should read this Supplement in combination with our Privacy Notice to fully understand our collection, use and disclosure of your Information, and how you may exercise your rights under these laws.

Contents

Your Rights
How to Exercise Your Rights
Section for California Residents
Changes to this State Supplement
Contact Us

Your Rights

Depending on the state where you reside, your rights may include the below (subject to certain legally permissible exceptions):

Access Right / Right to Know: Right to access your Information or receive certain information regarding our processing of your Information. For example, you may have the right to confirm whether we process your Information, the purposes for such processing, the categories of Information we have collected and/or disclosed about you, the categories of sources for the Information collected, and/or the categories of third parties to whom we have disclosed your Information. You may also have the right to obtain a copy of your Information (also known as a data portability right).
Correction Right: Right to request that we correct any inaccuracies in the Information we have collected about you.
Deletion Right: Right to request that we delete the Information we have collected about you.
Right to Opt Out of "Sale" or "Share" / Targeted Advertising: If applicable, right to request that we refrain from selling your Information or sharing your Information with third parties for cross-context behavioral advertising or targeted advertising purposes.
Right to Limit the Use or Disclosure of Sensitive Information: If applicable, right to limit certain uses or disclosures of Information defined as "sensitive personal information", "sensitive data" or a similar term under applicable law.
Withdrawal of Consent Right: If you provided your consent for a particular use or disclosure of your Information and such consent is required by law, you have the right to withdraw such consent.
Appeal Right: Right to appeal our decision if we deny your request or state we cannot fulfill it.
Non-Discrimination: Right not to receive discriminatory treatment if you exercise any of the rights explained in this State Supplement.

We do not use automated decision-making technologies or use or disclose your Information for profiling in furtherance of decisions that produce legal or similarly significant effects on you without either your explicit consent or where otherwise permitted by applicable law.

For Connecticut Residents Only: We do not collect, use or sell your Information for the purpose of training large language models.

How to Exercise Your Rights and Choices

To submit a request to exercise the rights applicable to you and your Information, follow the instructions detailed below. An authorized agent, subject to applicable law, may submit a request on your behalf by emailing us at privacy@bushbros.com.

Targeted Advertising Choices: You may communicate your choices about the use and disclosure of your Information for cross-context behavioral or targeted advertising purposes, as described in the Manage Your Account, Rights and Choices section of our Privacy Notice. Although our Sites do not respond to do-not-track (DNT) signals, our Sites do recognize the global privacy control (GPC) signal. For more information about browsers that support the GPC signal, please visit globalprivacycontrol.org.
All Other Requests: To submit any other request, you may email us at privacy@bushbros.com, submit the form on our website, or call us at 1-844-922-2874. Please include "Appeal" in the subject line of any appeal request submitted by email.

To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your Information or complying with certain requests. If you designate an authorized agent to make a request on your behalf, we may require (1) signed written permission from you and (2) verification of your identity directly with us. A valid power of attorney will constitute signed written permission. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

Section for California Residents

This section applies only to California residents. For purposes of this section, the terms "personal information", "sell", "share", "sensitive personal information" and "business purposes" have the meanings given to them in the California Consumer Privacy Act of 2018, as amended, and its implementing regulations (the "CCPA").

Personal Information We Collect

We may collect (and may have collected during the last 12 months) the following categories of personal information about you:

Identifiers: identifiers such as a real name, postal address, telephone number, online identifier (such as device identifier, cookie ID, etc.), IP address, email address, username, Social Security number and other similar identifiers (e.g., passport number, driver's license number, etc.).
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)): signature, education information, bank account number, credit card number, debit card number, other financial information, and health-related information.
Protected Classifications: characteristics of protected classifications under California or federal law, such as race, national origin, sex, gender, disability, citizenship status, and military and veteran status.
Commercial Information: commercial information, including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies.
Internet or other Electronic Network Activity Information: Internet and other electronic network activity information, including browsing history, search history, and information regarding your interaction with our Sites or advertisements.
Geolocation Data.
Sensory Information: audio, electronic, visual, thermal, olfactory, and similar information.
Professional or Employment-Related Information.
FERPA Information: Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).
Inferences: inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities and aptitudes.

Sensitive Personal Information

Certain categories of personal information listed above may be considered "sensitive personal information" under the CCPA. We do not use or disclose (and have not used or disclosed during the last 12 months) sensitive personal information for any purpose other than those expressly permitted under the CCPA.

Sources of Personal Information

During the last 12 months, we may have obtained personal information about you from various sources, including:

Directly from you or your devices, such as through your use of our Sites or your communications with us
Our subsidiaries and other affiliated companies
Service providers who provide services to us or on our behalf
Our advertising partners, such as advertising networks, online advertising companies, and social media platforms
Our business partners and other strategic partners, such as co-sponsors of our sweepstakes, contests or other promotional programs
Recruiting and talent agencies
References you provide to us, such as when applying for an employment opportunity
Background and credit check providers

Use of Personal Information

We may use (and may have used during the last 12 months) the categories of personal information listed above for the purposes described in the "How is Your Information Used" section of our Privacy Notice and for certain business purposes specified in the CCPA, such as:

Performing services, including maintaining or servicing accounts, customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, analytics services or storage services
Providing advertising and marketing services to you
Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance
Short-term, transient use, including non-personalized advertising shown as part of your current interaction with us
Helping to ensure security and integrity, to the extent the use of your personal information is reasonably necessary and proportionate for these purposes
Debugging to identify and repair errors that impair existing intended functionality
Undertaking internal research for technological development and demonstration
Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, or controlled by us

Sale or Sharing of Personal Information

We do not "sell" or "share," and have not in the last 12 months "sold" or "shared" your personal information within the meaning of the CCPA. We do not have actual knowledge that we "sell" or "share" the personal information of individuals under 16 years of age.

Disclosure of Personal Information

We may disclose (and may have disclosed in the last 12 months) the following categories of personal information about you: Identifiers; Personal information categories listed in the California Customer Records statute; Protected classification characteristics; Commercial information; Internet or other electronic network activity information; Geolocation data; Sensory information; Professional or employment-related information; FERPA Information; and Inferences to the following categories of third-party recipients:

Our subsidiaries and other affiliated companies
Service providers who provide services to us or on our behalf
Our advertising partners, such as advertising networks, online advertising companies, and social media platforms
Our business partners and other strategic partners, such as co-sponsors of our sweepstakes, contests or other promotional programs
Background and credit check providers
Our professional advisors (such as our lawyers, auditors, accountants, consultants, and insurers, including their agents)
Operating systems and platforms

We may also disclose your personal information if we are required to do so by law, regulation or legal process, such as in response to a subpoena or law enforcement authorities; or in connection with an investigation of suspected or actual unlawful activity. We may additionally disclose your personal information to third parties in the event of a sale, merger, acquisition, or similar corporate change.

Shine the Light Request: California residents may also have the right to request that we provide you with (1) a list of certain categories of personal information we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year and (2) the identity of those third parties. To submit a Shine the Light request, contact us at privacy@bushbros.com.

Changes to this State Supplement

We may change this State Supplement from time to time. When we do, we will let you know by posting the changed State Supplement on this page with a new "Last Updated" date. We encourage you to revisit this State Supplement often to remain fully informed of our privacy practices.

Contact Us

If you have any questions about this State Supplement or our privacy practices, you may contact us at privacy@bushbros.com.

This Consumer Health Data Supplement ("Health Data Supplement") supplements the Bush Brothers & Company Privacy Notice and applies only to individuals who participate in our product testing or sensory surveys and reside in the following U.S. states: Connecticut, Maryland, and Nevada ("you"). This Health Data Supplement describes how we may collect, use, and disclose your consumer health data, as such term is defined by the Connecticut Data Privacy Act, Maryland Online Data Privacy Act, and Nevada's Consumer Health Data Privacy Law, and the rights you have with respect to such data.

Contents

Collection of Consumer Health Data
Sources of Consumer Health Data
Use and Disclosure of Consumer Health Data
Your Rights
How to Exercise Your Rights
Changes to this Health Data Supplement
Contact Us

Collection of Consumer Health Data

When you participate in our product testing or sensory surveys, we, or our service providers on our behalf, may collect the following categories of consumer health data about you:

Information about your health condition(s), treatments, diseases, diagnoses or health status. For example, we may collect information about your health condition(s) that impact your dietary restrictions or eating habits, such as diabetes, coronary heart disease, food allergies or celiac disease, when selecting participants and/or assessing their testing or survey responses or other feedback.
Reproductive health information. For example, we may collect information regarding your pregnancy (and stage of pregnancy), if applicable, when selecting participants and/or assessing their testing or survey responses or other feedback.
Any other information that may identify your health status or could be used to infer your health status. Information about your dietary restrictions or dietary habits, or interest in certain health-related diets, brands or products that may allow us to infer, derive or extrapolate information about your health.

Sources of Consumer Health Data

We, or our service providers on our behalf, collect the categories of consumer health data above from you when you participate in our product testing and/or sensory surveys. We may also infer or derive consumer health data about you by analyzing other data we have about you.

Use and Disclosure of Consumer Health Data

We, or our service providers on our behalf, may use the categories of consumer health data above for the purposes described in the "How is Your Information Used" section of our Privacy Notice. For example, we may use your consumer health data to administer the relevant tests and/or surveys, gather feedback about our products, understand our customers' needs and preferences, conduct market research, and improve our products. Where required by applicable law, we will obtain your consent to collect and use your consumer health data.

We may disclose the categories of consumer health data described above to the parties described in the "To Whom Do We Disclose Your Information" section of our Privacy Notice. For example, we may disclose your consumer health data to our third-party service providers who analyze and assess our product testing and sensory survey results. Where required by applicable law, we will obtain your consent to disclose your consumer health data.

We do not allow third parties to collect consumer health data via cookies or other technologies on our Sites. We, or our service providers on our behalf, only collect consumer health data when administering our product testing or sensory surveys.

Your Rights

You have certain rights regarding your consumer health data. Your rights as specified by applicable law may include the following:

Access: The right to request that we disclose to you whether we collect, disclose or sell your consumer health data. You may also have the right to request access to and information about the consumer health data we have collected or disclosed about you, including a list of third parties and affiliates to whom we have disclosed or sold your consumer health data.
Correct: The right to review and request changes to or update or correct inaccuracies of your consumer health data.
Delete: The right to request that we delete your consumer health data.
Withdraw Consent: The right to withdraw your consent, if you previously provided your consent to us to collect, use, disclose, or sell your consumer health data. Please note that if you withdraw your consent, you may not be able to participate in our product testing or survey.
Restrict Processing: The right to request that we cease the collection, disclosure or sale of your consumer health data.

How to Exercise Your Rights

To submit a request to exercise the rights set forth above, please email us at privacy@bushbros.com, submit the form on our website, or call us at 1-844-922-2874. You may appeal our decision with respect to a request you have submitted by calling us at 1-844-922-2874 or emailing us at privacy@bushbros.com.

Under certain circumstances, we may not be able to effectuate your requests. For example, we, or our third-party service providers, may delete or deidentify collected information, including your consumer health data, following completion of such testing or surveys or related analysis.

Changes to this Health Data Supplement

We may change this Health Data Supplement from time to time. When we do, we will let you know by posting the changed Health Data Supplement on this page with a new "Last Updated" date. We encourage you to revisit this Health Data Supplement often to remain fully informed of our privacy practices.

Contact Us

If you have any questions about this Health Data Supplement or our privacy practices, you may contact us at privacy@bushbros.com.

This Canada Supplement ("Canada Supplement") supplements the Bush Brothers & Company Privacy Notice. This Canada Supplement applies solely to consumers residing in Canada ("you"). Applicable privacy laws of Canada provide their residents particular rights, subject to certain legally permitted exceptions. You should read this Canada Supplement in combination with our Privacy Notice to fully understand our collection, use and disclosure of your Information, and how you may exercise your rights under Canadian law.

Contents

Your Rights
How to Exercise Your Rights
Global Transfers of Information
How We Protect Your Information
Changes to this Canada Supplement
Contact Us

Your Rights

Subject to applicable law and certain legally permitted exceptions, you may have the following rights:

Access Right: Right to access your Information or receive certain information regarding our processing of your Information. For example, you may have the right to confirm what types of Information we collect about you, from what sources, with whom we share such Information, and how long we retain it. If you reside in Quebec, you may have the right to obtain a copy of the Information we maintain about you in a structured, commonly used technological format, or transfer such copy to another organization.
Correction Right: Right to ask us to rectify any Information that you demonstrate to be incorrect or outdated and to complete any Information that you demonstrate to be incomplete.
Withdrawal of Consent: You may withdraw your consent to our processing of your Information. For example, you may withdraw your permission related to cookies and other technologies by clicking on the "Cookies Settings" icon on the bottom of our Sites. Please note that if you withdraw your consent, we may not be able to provide you with a particular service.

How to Exercise Your Rights

Except where otherwise noted, to exercise any of your privacy rights described above, you may submit the form on our website, call us at 1-844-922-2874, or email us at privacy@bushbros.com.

Global Transfers of Information

We make our products available in a number of jurisdictions. As a result, your Information can be stored and processed in various other jurisdictions around the world outside of Canada or your province or territory by us and our service providers, including (but not limited to) the United States, for the purposes detailed in our Notice. When your Information is stored in a jurisdiction other than where you reside, it may be subject to the law of this foreign jurisdiction, including any law permitting or requiring disclosure of the information to the government, government agencies, courts and law enforcement in that jurisdiction.

You can obtain more information about our policies and practices with respect to the use of service providers located in other jurisdictions by contacting us.

How We Protect Your Information

We implement the following measures to protect your Information, including:

Internal policies and procedures that define the roles and responsibilities of our employees, representatives, and service providers throughout the life cycle of Information and limit their access to that Information on a "need-to-know" basis
Physical, electronic and procedural safeguards that comply with relevant standards to protect Information
If the Information is collected or stored electronically, technical safeguards such as encryption, firewalls, passwords, anti-virus software and similar measures
A designated privacy officer to monitor our compliance with applicable privacy laws
Procedures for receiving, investigating, and responding to complaints or inquiries about our information handling practices
Contractual protections to ensure that service providers with whom we share Information maintain adequate protections and security standards

Changes to this Canada Supplement

We may change this Canada Supplement from time to time. When we do, we will let you know by posting the changed Canada Supplement on this page with a new "Last Updated" date. We encourage you to revisit this Canada Supplement often to remain fully informed of our privacy practices.

Contact Us

If you have any questions about this Canada Supplement or our privacy practices, or complaints regarding our privacy practices under Canada law, please contact our privacy officer at privacy@bushbros.com.

This International Supplement ("International Supplement") supplements Bush Brothers & Company Privacy Notice and provides information for individuals residing outside the United States and Canada and in countries with data protection laws that include specific requirements addressed here, such as Barbados, Belize and Jamaica ("you"). This International Supplement should be read together with the Privacy Notice.

Contents

Legal Basis for Processing Your Information
Global Transfers of Information
Your Rights and How to Exercise Your Rights
Additional Information
Changes to this International Supplement
Contact Us

Legal Basis for Processing Your Information

Under certain data protection laws, we can only use your Information if we have a relevant lawful basis. The most common lawful bases we rely upon are:

Where you have given consent
To comply with our legal obligations
For the performance of a contract with you or to take steps at your request before entering into a contract
For our legitimate interests or those of a third party

A legitimate interest is when we or a third party have a business or commercial reason to use your Information, so long as this is not overridden by your own rights and interests.

Where we process information about a person's racial or ethnic origin, political opinions, religious or similar beliefs, trade union membership, physical or mental health or condition or sexual life, or genetic or biometric data (also known as Special Category Personal Data), we will only do so where a further condition is also met. Usually, this will mean that the processing is with your explicit consent or with respect to the defense of legal claims.

We will only use your Information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

Global Transfers of Information

We make our products available in a number of jurisdictions. As a result, any information that we collect, disclose or share, including your personal data, can be stored and processed in various other jurisdictions around the world ("Other Jurisdictions"), including (but not limited to) the United States, for the purposes detailed in our Notice. Where applicable, we only transfer Information to Other Jurisdictions in compliance with applicable laws, which might include ensuring there are applicable contractual arrangements with our subsidiaries, affiliates and other third parties in respect of such transfers in place.

You can obtain more information about our policies and practices with respect to the use of service providers located in other jurisdictions by contacting us.

Your Rights and How to Exercise Your Rights

Depending on the jurisdiction in which you reside, you may have the following rights:

Receive confirmation as to whether or not your Information is being processed, and access your stored Information, together with supplementary information
Receive a copy of the Information you directly volunteer to us in a structured, commonly used and machine-readable format
Request rectification of your Information that is in our control
Object to the processing of your Information by us
Request to restrict processing of your Information by us
Request erasure of your Information
Lodge a complaint about our processing of your Information with a supervisory authority

These rights are not absolute and may be subject to our own legitimate interests, and regulatory and legal requirements. If you would like to exercise any of the rights mentioned in this section, please contact us.

Additional Information

Bush Brothers & Company will be the data controller of your Information processed by or for us in connection with our Services. In addition, certain business partners also act as data controllers for the Information that we share with them and any Information that partners may collect independent of our relationship with them. If you have any questions about the processing of your Information by a business partner, you should contact the business partner directly.

Changes to this International Supplement

We may change this International Supplement from time to time. When we do, we will let you know by posting the changed International Supplement on this page with a new "Last Updated" date. We encourage you to revisit this International Supplement often to remain fully informed of our privacy practices.

Contact Us

All requests, complaints and queries about this International Supplement or our privacy practices should be addressed to us by submitting a request to our email address: privacy@bushbros.com. We take our obligations seriously, and we ask that any concerns are first brought to our attention, so that we can try to resolve them. If you are unsatisfied with our response, you can lodge a complaint with the applicable data protection supervisory authority.

<scribe-shadow id="crxjs-ext" data-crx="okfkdaglfjjjfefdcppliegebpoegaii" style="position: fixed; width: 0px; height: 0px; top: 0px; left: 0px; z-index: 2147483647; overflow: visible; visibility: visible;"></scribe-shadow>