PRIVACY POLICY

INTRODUCTION

Pernod Ricard UK Limited respects your right to privacy when you use our digital media (such as our websites, our mobile applications, our social media pages, and any online registration forms for our events and newsletters – together the “Digital Media”) and communicate electronically with us.

This privacy policy (the “Privacy Policy”) applies to the following persons (“you”):

– All users of our Digital Media;

– The clients of our Digital Media;

– The participants to our events, sweepstakes and/or contests;

– The participants to our surveys;

– The recipients of our marketing messages/advertising.

The purpose of this Privacy Policy is to inform you how Pernod Ricard UK Limited collects, stores and uses the personal data collected from you.

This Privacy Policy may be updated at any time as a result of, among others, legal, technical or commercial changes. We will notify you, by appropriate mean, of any substantive change in this Privacy Policy. You are also invited to regularly read this Privacy Policy to make sure you are aware of the latest version.

 

1. WHO IS THE DATA CONTROLLER FOR THE PROCESSING OF YOUR PERSONAL DATA?

Pernod Ricard UK Limited , a corporation duly organized under the laws of England and Wales, with its registered address at Building 7 Chiswick Park, 566 Chiswick High Road, London, United Kingdom, W4 5YG (“Pernod Ricard” or “we”, “our”, “us”) acts as the “data controller” for the processing of your personal data (i.e. it is the entity that determines “why” and “how” your personal data are used).

Please note that Pernod Ricard UK Limited markets products and services under various brands and will process the personal data you provide when interacting with any of these brands.

2. WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU AND HOW?

“Personal data” refers to any information that may identify you directly (e.g., your name) or indirectly (e.g., your phone number, postal/email address, pseudonymized data such as a unique identifier).

We collect most of the personal data directly from you, for example by filling out a contact form, creating an account, using interactive features, subscribing to a service, registering and attending to an event, joining a loyalty program, attending any of our experiences, courses and testing, participating in a marketing campaign, entering a contest, ordering a product or service, requesting information, or responding to surveys.

We may also collect personal data from cookies on our Website (see for more detailed our Cookie Policy).

Depending on the purposes of collection, personal data collected are the following:

your name, your gender and contact details, including your postal address, email address, and phone numbers, and, where applicable, your business contact details; information allowing us to verify and check your identity, such as your date of birth;

• your billing and delivery information, transaction and payment card information;

• location data;

• information to enable us to undertake financial checks on you to the extent permitted by applicable law;

• your professional online presence, e.g. LinkedIn profile;

• information from accounts you link to us, e.g. social media;

• your contact history, purchase history, and saved items;

• your interests, tastes and preferences;

• information on how you use our Digital Media;

• your responses to surveys and promotions;

• your IP address and your mobile/tablet/device identifier;

• customer service information (e.g., customer service inquiries, comments);

• content you may provide to us (e.g., images, comments, audio recordings, etc.).

The personal data collected is necessary to achieve the purposes described in section 3 below. If you do not provide the personal data we request, it may delay or prevent us from providing you with products or services.

3. FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS ARE PERSONAL DATA PROCESSED?

Pernod Ricard collects and processes personal data that are relevant, adequate, not excessive and strictly necessary for the purposes pursued.

You will find below a table listing:

– The different purposes of the processing operations (i.e. why we use your personal data);

– The legal basis on which we rely to carry out the processing (i.e. why we are authorized to use your personal data).

4. TO WHOM DO WE DISCLOSE YOU PERSONAL DATA AND WHY?

 To internal authorised employees

We will communicate your data to our employees who need to process your personal data for the purposes specified in Section 3 of this Privacy Policy, in particular to our digital marketing, sales, accounting and tech teams. Your personal data can also be processed by employees from Pernod Ricard Group’s affiliates worldwide, in particular from our Brand companies, where Pernod Ricard affiliates provide support services (IT, administrative, marketing support) as processor of Pernod Ricard UK Limited.

To service providers

For marketing and communication purposes, including competitions and events: we will share your data with our marketing and communication service providers such as advertising agencies, marketing agencies, social media and digital agencies to help us carry out competitions and events, advertising, marketing and sales campaigns, as well as analyzing their effectiveness and manage your contacts and queries.

For IT support purposes: we will share your data with our IT support service providers (for hosting, maintenance and technical support services) to help us for the internal operations of our Digital Media and to assist us with administering them or the various features, programs and promotions available on it.

For management of orders, payments, deliveries and after sales purposes: we will share your data with our IT support services providers, customer support, logistical and transport services and payment services providers.

To partners

– For joint and co-sponsored programs or promotion: when we run a joint or co-sponsored program or promotion on our Digital Media with another company, organization, or other reputable third party, we may share your personal data with our partner or sponsor. If your personal data is shared with a company other than Pernod Ricard as part of such program/promotion, we will let you know this at the time your personal data is collected.

– For targeted advertising purposes: as indicated above, we will share, with your consent, your personal data with the digital advertising platforms, such as Facebook and Instagram, to display targeted ads on them, about the products and services of our various brands, to you and people with a similar profile to you. For more information about how such social media process your personal data and on how to exercise your rights with them in connection with any further processing of your personal data, we invite you to view the privacy policies on their websites.

To other third parties

For marketing communication purpose, we may disclose your personal data to our business partners only with your consent. In this context, your data is processed by the partner in question, who acts as the data controller. In such case, your data are subject to the data controller’s general terms and conditions and to its own personal data protection policy. We recommend that you carefully review such information/documents before consenting to the disclosure of your data to our partners.

For litigation and safety purposes: we may also disclose your personal data to authorities and/or external counsels if we are required to do so by law, or if in our good faith judgment, such action is reasonably necessary to comply with legal processes, to respond to any claims, or to protect the security or rights of Pernod Ricard, its customers, or the public.

In the event of a merger or acquisition of all or part of Pernod Ricard by another company, or in the event that Pernod Ricard were to sell or dispose of all or a part of the Pernod Ricard business, the acquirer may have access to the information maintained by that Pernod Ricard business, which could include personal data, subject to applicable law. Similarly, personal data may be transferred as part of a corporate reorganization, insolvency proceeding, or other similar event, if permitted by and done in accordance with applicable law. If applicable, the acquirer who will act as the new data controller will process your personal data in the conditions provided in the acquirer’s privacy policy.

5. IS YOUR PERSONAL DATA SENT TO RECIPIENTS OUTSIDE THE UNITED KINGDOM OR THE EUROPEAN UNION?

Pernod Ricard is a global company, and your personal data may be transferred to countries outside the United Kingdom, the European Economic Area, and the European Union, where Pernod Ricard Affiliates and third parties operate. Such transfers will only take place if permitted and in compliance with applicable laws.

For these transfers, Pernod Ricard takes appropriate measures to ensure the security of personal data both during transit and at the receiving location. We ensure that either:

• The country to which the data is transferred has been deemed to provide an adequate level of protection by the relevant regulatory authority (such as the European Commission for EU data or the UK government for UK data); or

• Appropriate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission or the International Data Transfer Agreement (IDTA) or Addendum approved by the UK government, or where applicable, Binding Corporate Rules.

You may obtain a copy of these safeguards at any time by contacting Pernod Ricard at the email address specified in section 10 of this Privacy Policy.

Our main service providers for the operation of our Digital Media are based in the United States. The transfers of personal data to these services providers are implemented in accordance with applicable laws and rely on standard contractual clauses as set out by the European Commission. Such service providers are also bound by a contract that ensures a high standard of privacy protection and requires (amongst other provisions) that they act only on a member of Pernod Ricard Group’s instructions and implement technical measures necessary on an ongoing basis to keep your Personal Data secure.

6. HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We will store the personal data that you sent us via our Digital Media in our databases as long as your account is active, for the duration of the contract with you or as needed to provide you the services you requested or to answer queries or resolve problems, or else to provide improved and new services.

We may also retain your personal data in accordance with our internal retention procedure as necessary to comply with our legal and regulatory obligations, resolve disputes and enforce our agreements.

You can find details on the data retention periods implemented in the table in section 3.

7. HOW DO WE SECURE YOUR PERSONAL DATA?

Pernod Ricard takes all necessary technical and organizational measures to protect the confidentiality and security of your personal data collected via our Digital Media. These efforts include but are not necessarily limited to: (i) storing your personal data in secure operating environments to which the public does not have access, but only authorized Pernod Ricard employees, and our agents and contractors; and, (ii) verifying the identities of registered users before they can access the personal data we maintain about them.

Our Digital Media may link up users to other websites of third parties and/or affiliates or subsidiaries of Pernod Ricard, through hyperlinks; this is a service available to you as a user of the site. Such links do not constitute an endorsement by Pernod Ricard of the linked sites, their content, including products, advertising or any other materials featured on them. Pernod Ricard has no control over these linked sites and cannot be held responsible or liable for their content, including products, advertising or any other materials featured on them, or any purchase you may choose to make on these linked sites.

8. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

You have the following rights with respect to your personal data:

– If your personal data has been processed on the basis of your consent, you can withdraw your consent at any time (see the table in section 3 of this Privacy Policy to understand which processing are based on your consent).

– You have the right to obtain a copy of the personal data we hold about you.

– You can request to rectify your personal data if they are inaccurate, incomplete or out of date.

– You can request the erasure of your personal data (i) if your personal data is no longer necessary for the purposes mentioned above in section 3, (ii) if you have withdrawn your consent for a data processing based exclusively on such consent, (iii) if you have objected to the data processing, (iv) if the personal data processing is unlawful, (v) if the personal data must be erased to comply with a legal obligation applicable to Pernod Ricard. Please note

however that this is not an absolute right, as we may be obliged to retain your personal data for legal or legitimate reasons. – You can request the restriction of the processing. You may ask us to restrict the processing of your personal data in specific cases (e.g., if you contest the accuracy of your personal data).

– You have the right to data portability, meaning to receive (and transmit to another data controller) personal data that you have provided to us and that we hold about you in a structured, commonly used and machine-readable format. This applies only where the processing is based on your consent or the execution of pre-contractual measures / performance of a contract and is carried out by automated means (see the table in section 3 of this Policy to understand which processing rely on these legal basis).

You have the right to object to the processing of your Personal Data by us, at any time, (i) for direct marketing purpose including based on profiling, or (ii) if the data processing is based on the legitimate interest of Pernod Ricard, except if we can demonstrate compelling legitimate grounds for the processing – (see the table in section 3 of this Privacy Policy to understand which processing are based on Pernod Ricard’s legitimate interests).

To exercise all these rights, you can send a request to: [email protected].

You are informed that you can also lodge a complaint with the supervisory authority of the country where you are located if you have any concern about the conditions of processing of your personal data by Pernod Ricard. In the United Kingdom, you can contact the Information Commissioner’s Office via their website at: www.ico.org.uk.

However, we invite you to contact Pernod Ricard at the address below before filing any complaint before any supervisory authority.

9. HOW DO WE TREAT CHILDREN’S PERSONAL DATA?

Our Digital Media are not intended for children under the legal drinking age (“Minor”), we have implemented an age gate so we do not knowingly collect personal data from Minors. If we are notified or learn that a Minor has submitted personal data to us through our Digital Media, we will delete such personal data.

10. HOW CAN YOU CONTACT US?

If you have any questions, complaints, or comments regarding this Privacy Policy or our information collection practices, please contact us by writing to:

Pernod Ricard UK Limited, Data Privacy Champion, Pernod Ricard UK Limited, Building 7 Chiswick Park, 566 Chiswick High Road, London, W4 5YG.

or by sending an email to: [email protected].

Pernod Ricard also has a appointed a Global Data Protection Officer that you can reach at [email protected].

Kahlúa Original Bottles

Kahlúa Products

Meet all our Kahlúa products. From salted caramel to chili chocolate, we have lots of unexpected and delicious Kahlúa flavors to explore.

Kahlúa Bottle with Cocktail

Kahlúa Collections

Looking for a quick recipe to whip up for a specific occasion, or do you need inspiration to impress your guests? You’ll find it all here.

Kahlúa Mudslide Cocktail

Kahlúa Drinks

Looking for a drink recipe? Or do you just want to know what to mix Kahlúa with? Filter by taste and product to find the next drink you’d love to try.

Coffee Beans

Coffee for Good

Read all about our program to help communities in Veracruz sustain themselves, and about our other sustainability initiatives here.