Privacy Policy

PRIVACY POLICY

Notice at Collection for California Residents. At or before the time of collection of personal information, California residents may have a right to receive notice of our information practices, including the categories of personal information to be collected, the purposes for which such personal information is collected or used, whether such personal information is sold or shared and how to opt-out of such selling and sharing, and how long such information is retained. You can find those details in this Privacy Policy by clicking on the above links.

I. INTRODUCTION

This Privacy Policy covers any personal information Nestec, (“Nestec”, “we”, “our”, or “us”) obtains when you use our websites (“Websites”) or services (“Services”). Nestec is committed to providing excellent service to you, our customer (“User”, “you”, or “your”), including respecting your privacy rights and protecting your data. We understand you may have questions about whether and how our Websites or Services collect and use your information. We collect and use your personal information as described in this Privacy Policy.

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR PERSONAL INFORMATION. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, PLEASE DO NOT ACCESS OUR WEBSITES OR SERVICES.

II. CATEGORIES AND SOURCES OF INFORMATION WE COLLECT

The following table contains the categories and sources of information that we may collect from you and that we have collected from Users over the last 12 months. References to categories of data in the rest of the Privacy Policy will also map to the categories in this table.

 

Category	Examples	Personal Information Collected	Source of this Personal Information
A. Identifiers.	A real name, postal address, Internet Protocol address, email address, and account name.	YES	You
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, address, and telephone number. Some personal information included in this category may overlap with other categories.	YES	You
C. Protected classification characteristics under California or federal law.	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	NO	Not Applicable
D. Commercial information.	Records of personal property, products or services purchased, obtained, or considered.	YES	You
E. Biometric information.	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	NO	Not Applicable
F. Internet or other similar network activity.	Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.	YES	You
G. Geolocation data.	Physical location or movements.	YES	You
H. Sensory data.	Audio, electronic, visual, thermal, olfactory, or similar information.	NO	Not Applicable
I. Professional or employment-related information.	Current or past job history or performance evaluations.	YES	You
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	NO	Not Applicable
K. Inferences drawn from other personal information.	Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	NO	Not Applicable
L. Age or date of birth		NO	Not Applicable
M. Sensitive Personal Information
M.1	Social security, driver’s license, state identification card, or passport number	NO	Not Applicable
M.2	Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account	NO	Not Applicable
M.3	Personal information that reveals consumer’s precise geolocation	NO	Not Applicable
M.4	Personal information that reveals a consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership	NO	Not Applicable
M.5	Personal information that reveals the contents of a consumer’s mail, email, and text messages unless company is the intended recipient of the communication	NO	Not Applicable
M.6	Personal information that reveals consumer’s genetic data	NO	Not Applicable
M.7	Personal information collected and analyzed concerning a consumer’s health	NO	Not Applicable
M.8	Personal information collected and analyzed concerning a consumer’s sex life or sexual orientation	NO	Not Applicable

INFORMATION COLLECTED AUTOMATICALLY

This section provides more detail about Category F in the above table.

Web Browser Cookies

We collect information about how you use our Websites by setting and accessing cookies on your computer. A cookie is a small piece of information sent by our Websites that is saved on your storage drive by your computer’s browser. The cookie holds information our Websites may need to personalize or enhance your experience and to gather statistical data, such as which pages are visited, the Internet provider’s domain name and the addresses of the sites visited immediately before coming to and immediately after leaving our Websites. The information in the cookie lets Nestec trace “clickstream” activity (i.e., the paths taken by visitors to our Websites as they move from page to page) to enable us to better serve our customers by revealing which portions of our Websites are the most popular. From time to time, other companies may help us with data research and analysis, but they will be prohibited from using that data for any other purpose. You may disable cookies on your browser. Please review your browser’s instructions for doing so. Note that certain features of the Websites may not be available if you delete or reject cookies.

You can manage how we use cookies on your browser by clicking the cookie icon in the bottom left corner of our Websites or through the banner that appears at the bottom of our home page. The pop up will let you customize and manage your cookie preferences. There are three categories of cookies: Necessary, Analytics, and Advertisement. Using the slide bar, you can choose which cookies to allow, except for the “Necessary Cookies” that are required to enable the basic features of the Websites. “Analytics Cookies” are used to understand how visitors interact with the Websites. “Advertisement Cookies” are used to provide visitors with customized advertisements based on the pages you visited previously. These cookies also aid in determining the performance of our advertising. In addition to using our cookie manager, you can also adjust your cookies through your browser settings. You can learn more about cookies at the following link: All About Cookies | Online Privacy and Digital Security. Please note that removing cookies may affect how the Websites and Services work.

JavaScript

The Websites and Services, including our service providers, may also use other technologies such as JavaScript. We may use local storage (HTML5). We may also permit third parties to use cookies, web beacons, JavaScript and eTags on our Websites.

III. PURPOSE FOR COLLECTING PERSONAL INFORMATION

Your personal information is collected for specified, legitimate purposes and not processed further in ways incompatible with those purposes. Collected personal information is relevant to and not excessive for the purposes for which they are collected and used. We may use your personal information for the following purposes:

• Provide you with any Services or products that you request
• Respond to your questions
• Manage and optimize the customer relationship by improving our Websites and Services
• To better understand your preferences by analyzing your behavior on our Websites
• To send you information as requested by you
• To communicate with you about the Services
• To personalize content on the Websites and Services
• To process orders or other transactions
• To comply with our legal or contractual obligations and resolve disputes
• For marketing purposes
• To improve security
• To respond to law enforcement, court orders or other government requests under applicable law
• As otherwise permitted by law or as we may notify you

IV. PERSONAL INFORMATION SOLD OR SHARED

a. CATEGORIES OF THIRD PARTIES

We do not sell your personal information in exchange for monetary compensation. We may allow the sharing of your personal information via automated technologies on our Services in exchange for non-monetary consideration such as:

• Advertisers for cross-context behavioral advertising
• Marketing providers to aid us in delivering targeted advertising and emails to you

b. CATEGORIES OF DATA:

During the 12-month period prior to the last updated date of this Privacy Policy, we may have shared personal information from the following categories:

• Category A: Personal Identifiers
• Category B: Customer records identified by state law
• Category D: Commercial information
• Category F: Internet or browser activity
• Category G: Geolocation information

c. USER AGE:

We do not sell the personal information of minors under 16 years of age without affirmative authorization if we have actual knowledge of the individual’s age.

V. CATEGORIES OF PERSONAL INFORMATION DISCLOSED TO THIRD PARTIES FOR BUSINESS PURPOSES

a. CATEGORIES OF THIRD PARTIES

• Service providers
• Our Affiliates
• Other parties per your direction, such as:

   

  • Social media services
  • Third-party business partners with whom you have a relationship
  • Other parties authorized by you

b. CATEGORIES OF DATA:

During the 12-month period prior to the last updated date of this Privacy Policy, we may have disclosed personal information for business purposes from the following categories:

• Category A: Personal Identifiers
• Category B: Customer records identified by state law
• Category F: Internet or browser activity

VI. SERVICE PROVIDERS

We may contract with third-party service providers as data subprocessors to collect or process your personal information under our instruction. Service providers can perform many processing activities, including, but not limited to, the following:

• helping us operate our business, the Website, and the Services;
• administering activities on our behalf, such as sending out newsletters or surveys;
• conducting audits;
• providing security services;
• hosting our Website;
• providing technology and communication services;
• providing data analytics;
• providing market research; and
• protecting payment transactions against fraud or identity theft.

VII. DATA SUBJECT RIGHTS

a. Right to Know What Personal Information is Being Collected (Right to Access): You have the right to request the following information:

• Categories of personal information collected about you.
• Categories of sources from which the personal information is collected.
• The business or commercial purpose for collecting, selling, or sharing your personal information.
• Categories of third parties to whom we disclose your personal information.
• The specific pieces of personal information we have collected about you.

b. Right to Delete Personal Information: You have the right to request that we delete any personal information about you that we have collected from you.

c. Right to Correct Inaccurate Personal Information: You have the right to request that we correct your inaccurate personal information if we maintain inaccurate personal information about you.

d. Right to Know What Personal Information is Sold or Shared and to Whom: You have the right, if Nestec sells or shares your information, to request that we disclose to you the following:

• Categories of personal information that we collected from you.
• Categories of personal information that we sold or shared about you and the categories of personal information for each category of third parties to whom the personal information was sold or shared.
• Categories of personal information that we disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.

e. Right to Opt Out of Sale or Sharing of Personal Information: You have the right to direct Nestec, if we sell or share your personal information to third parties, not to sell or share your personal information.

f. Right to Limit Use and Disclosure of Sensitive Personal Information: You have the right to direct Nestec to limit the use of your sensitive personal information to the use which is necessary to perform the Services.

g. Right of No Retaliation Following Opt Out or Exercise of Other Rights: We may not discriminate against you if you exercise any of your rights as described in this Section VII.

h. Right to Data Portability: You have a right to obtain the personal information in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the information to another entity without hindrance. You may exercise this right no more than two times per calendar year.

VIII. NOTICE OF RIGHT TO OPT-OUT OF SHARING

We share your Personal Information to provide you with cross-context behavioral advertising about our products and Services. You can submit a request to opt-out of the sale or sharing of your personal information via email to privacy@nestecllc.com.

IX. METHODS FOR EXERCISING DATA SUBJECT RIGHTS

You can submit a request to exercise on or more of your data subject rights stated above by sending an email to privacy@nestecllc.com.

After we receive your request, we will determine if the request is a verifiable customer request before acting on the request. You must provide enough information for us to be able to verify that it is the proper person making the request. We have 45 days in which to take action on your request. If we run into issues in honoring your request, we will notify you within those 45 days. The original 45-day period may be extended by 45 days if reasonably necessary. We will inform you, without delay, of the reasons, if we decide not to take action on your request. We will also inform you if you have rights to appeal our decision.

If you use an authorized agent to submit a request and the authorized agent does not provide a proper power of attorney, we may require you to either (1) verify your identity directly with us, or (2) directly confirm with us that you provided the authorized agent permission to submit the request.

X. OPT-OUT PREFERENCE SIGNAL

If your browser supports an opt-out preference signal, you may opt out of the sharing or sale of your personal information by properly configuring the opt-out preference signal. If you subsequently delete cookies, change your browser settings, or use a different browser, you will need to turn the opt-out signal on again.

XI. DATA SECURITY

We apply commercially reasonable and appropriate administrative, technical, and physical safeguards to protect the confidentiality, integrity, and availability of your personal information. Such safeguards protect against unauthorized access, alteration, disclosure, unlawful processing and accidental loss, destruction, or damage of your personal information. Although these safeguards reduce the risk of adverse effects to the confidentiality, integrity, and availability of your personal information, they cannot ensure or guarantee against the possibility of a security incident.

XII. DATA RETENTION

Your personal information is retained for as long as reasonably necessary and proportionate to achieve:

1. The purpose(s) for which your personal information was collected and processed.
2. Another disclosed purpose that is compatible with the context in which your personal information was collected.

XIII. CHILDREN’S PRIVACY AND AGE-RELATED INFORMATION COLLECTION POLICIES

We do not knowingly collect or allow the collection of personal information with our Websites or Services from Users under the age of 16. If we have actual knowledge that we have collected personal information from someone under the age of 16 we will delete that personal information. If you believe that we have collected information from a child under the age of 16, please contact us at privacy@nestecllc.com.

XIV. CALIFORNIA SHINE THE LIGHT LAW AND DO NOT TRACK

If you are a California resident and have an established business relationship with us, you may request that we not disclose your personal information to third parties for the third parties’ own direct marketing purpose (as defined in California Civil Code section 1798.83).

Note that we do not currently respond to web browser “do not track” signals. Although a protocol for the “do not track” signal was adopted, the standard for how to respond to the signal was not adopted.

XV. LINKS TO THIRD PARTY WEBSITES

Our Websites and Services may contain links to third-party websites, services, or resources that are not covered under this Privacy Policy. Upon visiting or using those third-party websites, services, or resources, we recommend that you review their privacy policy, terms and conditions, and terms of use before providing your personal information.

XVI. TRANSFER OF CORPORATE ASSETS

If Nestec is acquired by or merged with a third-party entity, Nestec reserves the right to transfer or assign the personal information you provided to us as part of such merger, acquisition, sale, or other change of control to the new entity. In the event of bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditor’s rights generally, we may not be able to control how your personal information is processed.

If such a situation arises, Nestec would request that all applicable privacy laws and protection standards at least as stringent as Nestec’s be applied to your personal information originally in our possession. In the event of a transfer of corporate assets, the information regarding the transfer will be posted on our Websites.

XVII. CHANGES TO THIS PRIVACY STATEMENT

We reserve the right to update this Privacy Policy to accurately disclose changes as necessitated by applicable laws and other events. If those changes are material in nature, we will notify you by a notice placed on our public facing Websites, a notification within our Services, and/or by electronic mail.

XVIII. CONTACT US

If you have a question about this Privacy Policy, or you would like to contact us about any of your rights mentioned herein, please contact us at privacy@nestecllc.com. You may reach us by mail to Nestec, Inc., 222 E. Main Street, PO box 125, Pen Argyl, PA 18072 USA.

Last Updated: November 10, 2025