Privacy Policy:
Whenever you access our products or services or interact with us in other ways, both online and offline, Brown-Forman Corporation and its affiliated companies (“Brown-Forman”, “we”, “us”) collect, use, and otherwise process information about you (referred to as your “personal information”). “Personal information” is information that identifies you as an individual or relates to an identifiable individual. For example, we process your personal information when you engage with us as an existing or prospective customer, visit one of our websites or social media pages, attend one of our in-person events, or in your capacity as an employee of one of our suppliers or vendors.

This notice describes how we collect personal information and how we use, share and protect it. It also explains your rights regarding your personal information and how you can contact us. Please use the links to access detailed information. If anything is not clear, please contact us via email at Privacy@b-f.com.

In this privacy notice we describe:

Who collects your personal information
Information that we collect
How we use your personal information
How we share your personal information
Other information we collect
Your rights in respect of your information
Other important information
WHO COLLECTS YOUR PERSONAL INFORMATION

Brown-Forman is a group of companies, headed by Brown-Forman Corporation in the United States and with local entities throughout the world. Which of the Brown-Forman companies is responsible for collecting and processing your personal information depends on various factors, including how you interact with us and where processing of your personal information takes place.

Please review the Country Specific Information for the name and contact information of the Brown-Forman entity responsible for processing activities relating to each country as well as certain additional information. Whenever we refer to “Brown-Forman”, “we” or “us” in this notice we mean the relevant Brown-Forman entity.

INFORMATION THAT WE COLLECT

In order to make our products and services available to you, or to meet a legal obligation, we need to collect and use certain personal information. If you do not provide the information that we request, we may not be able to provide you with the requested products or services. Some of this information we collect directly from you either in person or via a website, social media or other online service. We also collect personal information about you from other sources.

If you disclose any personal information relating to other people to us or to our service providers in connection with our products and services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.

Please click on the links to learn more:

How we collect personal information
Personal information we collect
How we collect personal information

We collect personal information when you engage with our products and services, for example, when you:

visit one of our websites or use our mobile apps
create an online account with one of our stores
sign-up for our newsletter or other marketing communications
participate in a prize promotion, contest or event
make a purchase or return something to us through an online store, order form, by e-mail or over the phone
submit a review or participate in a survey
communicate with us via social media
contact us for assistance
submit an application for employment
interact with us on social media
attend one of our in-person events
hold shares of Brown-Forman stock
We also collect personal information from other sources:

Information received as part of routine card verification (fraud) checks.
Social network information. When you use a social network login to access our services, you will share certain personal information from your social media account with us, for example, your name, email address, photo, list of social media contacts, and any other information that may be or you make accessible to us when you connect your social media account to your services account. The specific information transferred depends on your security settings and the privacy policy of your social media network.
Partners, when they share information with us.
Publicly available databases.
Personal information we collect

Personal information we may collect includes:

Contact Information, such as name, email address, telephone number, address, and country of residence
Age, such as date of birth and age
Identification, such as driver’s license or other government-issued identification information
Account Information, such as user name, password, user, and device or other associated online identifiers
Organization Information, such as role, title, office location, employment history, organizational identifier, and other information relevant to your relationship with one of our vendors, suppliers, customers, partners or other third party organization with whom we work
Billing Information, such as debit or credit card details, bank account details, and billing address
User Content, such as Your reviews about our products and services, and other content you may create, such as posts on our social media pages, along with any related name, username, alias or other account information
Preferences and Interests, such as preferences (including language, marketing and cookie preferences), interests, purchasing patterns and trends, and engagement with marketing or promotional communications, our websites, apps and social media pages
Relationship History, including details of your contact with us, and order history and details
Applicant data, such as employment history, salary expectations
Visitor and Event Information, such as dietary restrictions, travel and accommodation details, government-issued identification to access one of our physical premises, and other details specific to a particular event or conference
Photographs and Videos, such as photos and videos submitted by you or taken at one of our events
Social Media Profile, such as profile pictures and other social media profile information
Shareholder Information, such as brokerage account information, details of shares held and elections and date of death
HOW WE USE YOUR PERSONAL INFORMATION

We use your personal information for legitimate business purposes as described in the chart below, which explains how we use personal information and the legal basis for such use (if applicable).

Purpose

Description

Personal Information

Legal Basis

Providing access

Provide you access to the services, including arranging access to an online account; send you administrative information related to your account, such as changes in our terms, conditions and policies.

Contact Information; Age; Account Information; Organization Information; Preferences and Interests; Relationship History; and Social Media Profile

Manage our contractual relationship with you.

Promotions and contests

Conduct prize promotions, contests and other promotional offers. If you participate, we will use your information to administer such promotions and offers. If you are lucky enough to win, we might ask you for further information so that we can provide your prize and we will ask you to provide a copy of your photographic ID so that we can verify that you are of legal purchase age and, if required, to satisfy eligibility requirements. Some of these promotions have additional rules containing information about how we will use and disclose your personal information, which we will communicate to you separately.

Contact Information; Age; Account Information; Preferences and Interests; Relationship History; User Content; Photographs and Videos; and Social Media Profile

Manage our contractual relationship with you.

Customer service

Provide you with assistance, and handle your enquiries and complaints.

Contact Information; Age; Identification; Account Information; Organization Information; Billing Information; Relationship History; and Preferences and Interests

Manage our contractual relationship with you and/or based on a legitimate interest, such as responding to inquiries or complaints from potential or actual users of our products.

Orders and returns

Process your orders and related payments; process returns, exchanges or requests for a refund.

Contact Information; Age; Identification; Account Information; Organization Information; Billing Information; and Relationship History

Manage our contractual relationship with you.

Marketing

Send you information about our products, newsletters, promotions, offers or other information that we think might be of interest to you.

Contact Information; Age; Account Information; Organization Information; Relationship History; and Preferences and Interests; [User content]; and [Social Media Profile]

Based on a legitimate interest or with your consent.

Relationship building and engagement

Review and respond to your posts on our social media pages

User Content; and Social Media Profile

Based on a legitimate interest, such as engaging with individuals who post on our social media pages.

Visits, conferences and events

Facilitate and participate in conferences and events, such as trade shows or bookings at our premises (including rentals), and welcome visitors to our premises.

Contact Information; Age; Identification; Account Information; Organization Information; Billing Information; Relationship History; Preferences and Interests; Visitor and Event Information; and Photographs and Videos

Manage our contractual relationship with you and/or based on a legitimate interest, such as providing you with a tour of one of our offices or distilleries.

Compliance, safety and security

Conduct audits, verify that our internal processes function as intended and are compliant with legal, regulatory or contractual requirements; monitor for and prevent fraud; and security purposes, for example, to detect and prevent cyberattacks or attempts to commit identity theft.

Contact Information; Age; Identification; Account Information; Organization Information;

Billing Information; and Relationship History

Comply with a legal obligation or based on a legitimate interest, such as preventing fraudulent transactions.

Improving products and services

Conduct data analysis, for example, to improve the efficiency of our services; develop new products and services; consider ways for enhancing, improving, or modifying our current products and services; identify usage trends, for example, understanding which parts of our services are of most interest to users; determine the effectiveness of our promotional campaigns, so that we can adapt our campaigns to the needs and interests of our users; and operate and expand our business activities, for example, understanding which parts of our services are of most interest to our users so we can focus our energies on meeting our users’ interests.

Contact Information; Account Information; Organization Information; Relationship History; Preferences and Interests; User content; and [Social Media Profile]

Manage our contractual relationship with you, comply with a legal obligation, and/or based on a legitimate interest, such as developing new products.

Personalizing our services

Personalize our interactions with you and provide you with information and/or offers tailored to your interests; deliver content via our services that we believe will be relevant and interesting to you.

For example, when you use one of our online stores, we will collect information from you during the checkout process. If you do not complete your purchase but ask us to save your basket, we may send you a follow-up email with a reminder of its contents. We may also use your information to provide personalized content and recommendations when we send you information about your purchases.

Contact Information; Account Information; and Preferences and Interests

With your consent or based on a legitimate interest.

Reviews

Publish reviews you provide on the relevant store website, subject to our review standards in our Terms of Use. This information will be made public so please do not include any information that should be kept confidential. For more information, please refer to our Terms of Use.

Contact Information; and User Content

With your consent.

Vendors, suppliers and distributors

Build new partner relationships; facilitate bids, proposals and contracting; onboard partners; facilitate performance of services; provide feedback and manage relationships; and facilitate contract renewals and termination.

Contact Information; Account Information; Identification; Organization Information; Relationship History and Billing Information.

Manage our contractual relationship with you and/or comply with a legal obligation.

Shareholder management

Maintain shareholder register; provide shareholder materials and other communications; pay dividends; and facilitate exercise of shareholder rights.

Contact Information; and Shareholder Information

Manage our contractual relationship with you and/or comply with a legal obligation.

Processing applications

Process your application and assess your capabilities and qualifications for a job. Conduct reference checks, respond to your inquiries and communicate with you about your application, and to send you information regarding the Careers Site and changes to our terms and policies, conduct background checks if we offer you a position, and comply with or monitor compliance with any applicable law or regulation.

Applicant Data

Manage our contractual relationship with you, comply with a legal obligation, and/or based on a legitimate interest, such as engaging new staff.



HOW WE SHARE PERSONAL INFORMATION

We share your personal information in order to provide our products and services and for the other legitimate business purposes described in this Privacy Policy. The following are categories of recipients with whom we might share your data. Please click the links to learn more.

Other companies within the Brown-Forman Group
Third party service providers
When you share information
Business transactions, legal reasons and law enforcement
Other companies within the Brown-Forman Group:

We share your information with other companies within the Brown-Forman Group of companies for the purposes described in this Privacy Policy. You can consult the list and location of companies within the Brown-Forman Group [link to 10-K]. Brown-Forman Corporation is the party responsible for the management of the jointly used personal information. We will use this information to help provide you with the products and services you request.

Third party service providers:

We use third party service providers to process personal information on our behalf. These may include the provision of customer support, web hosting providers, customer data management and list enhancement companies, agencies that run our prize promotions, companies that fill product orders or coordinate mailings, delivery companies, payment processors, data analysis firms, marketing firms and email service providers. We seek to use service providers who are able to provide appropriate data privacy and security standards.

When you share personal information:

On message boards, chat, profile pages, blogs and other services to which you are able to post information and content (including, without limitation, our social media pages). Please note that any information you post or disclose through these services will become public and may be available to other users and the general public.
Through your social sharing activity. When you connect to the services with your social media account, you will share information with your friends associated with your social media account, with other users, and with your social media account provider. By doing so, you authorize us to facilitate this sharing of information, and you understand that the use of shared information will be governed by the social media provider’s privacy policy.
Business transactions, legal reasons and law enforcement:

We have a legitimate interest in disclosing or transferring your personal information to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings). Such third parties may include, for example, an acquiring entity and its advisors.

We may also disclose personal information to comply with legal obligations (such as paying taxes); to respond to requests from government or other public authorities; to protect the rights, privacy, safety or property of Brown-Forman, you or others; and to permit us to pursue available remedies or limit the damages that we may sustain. These legal obligations and government requests can include laws and authorities outside your country of residence.

OTHER INFORMATION WE COLLECT

We and our service providers also may collect other information that does not reveal your specific identity or does not directly relate to an identifiable individual (referred to as “other information”). This may include:

Server log files and environmental variables
App usage data
Information collected through cookies, pixel tags and other technologies
Demographic information and other information provided by you that does not reveal your specific identity
Information that has been aggregated in a manner such that it no longer reveals your specific identity
If we are required to treat other information as personal information under applicable law, then we may use and disclose it for the purposes for which we use and disclose personal information detailed in this Policy.

Other information may be collected in a variety of ways, including:

Through your browser or device
Server Log Files. We use W3C* compliant extended log files when recording web-server activity on our web servers including, for example, the IP address (a number automatically assigned to the computer that you are using by your Internet Service Provider), device identifier, time and date of request, page requested, user agent, referrer and cookie values sent or received. The server log files are collected and analyzed to provide information about user activity in the aggregate and identify potential errors or problems with website performance. Collecting IP addresses is standard practice on the Internet and is done automatically by many websites. *W3C is an international consortium that develops web standards and guidelines. Further information is available at www.w3c.org.
Environmental Variables. We and our service providers may also collect certain environmental variables, such as your computer type (Windows or Macintosh), screen resolution, OS version, device manufacturer and model, Internet browser, and Internet browser version. These environmental variables are collected by most browsers and can be used to optimize your experience on the Website.
Through your use of one of our mobile apps; When you download and use one of our mobile applications, we and our service providers may track and collect app usage data, such as the date and time the app on your device accesses our servers and what information and files have been downloaded to the app based on your device number.
Using cookies; Please read our Cookie Policy [link]
Using pixel tags and other similar technologies
We and our service providers may also use so-called "pixel tags," "web beacons," "clear GIFs" or similar means (collectively, "Pixel Tags") in connection with some Website pages and HTML-formatted e-mail messages to, among other things, compile aggregate statistics about Website usage and response rates. A Pixel Tag is an electronic image, often a single pixel (1x1) that is ordinarily not visible to Website visitors and may be associated with Cookies on the visitors’ hard drives. When used in HTML-formatted e-mail messages, Pixel Tags can tell the sender whether and when the e-mail has been opened.

Our websites may also provide us with information including details of the content you access and interact with. This is done through Brown-Forman websites and through cross-website tracking. We use cookies and other technologies to collect information about your device browser and operating system, IP address, links you click and pages you open, which we then use to tailor marketing messages. For more information, please refer to our Cookie Policy. We will provide personalized services either with your consent or because we have a legitimate interest.

Analytics. We use Google Analytics, which uses cookies and similar technologies to collect and analyze information about use of our services and report on activities and trends. Google Analytics may also collect information regarding the use of other websites, apps and online resources. You can learn about Google’s practices by going to www.google.com/policies/privacy/partners/, and opt out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

Physical location
We may collect the physical location of your device if you use a location-based service. Before this information is collected, you may be permitted to allow or deny such uses and/or sharing of your device’s location, but if you do, we and/or our marketing partners may not be able to provide you with the applicable personalized services and content.

Do Not Track Signals: We currently respond to browser GPC and do-not-track signals.
Uses and Disclosure of Other Information

We may use and disclose other information for any purpose, except where we are required to do otherwise under applicable law. In some instances, we may combine other information with personal information. In those instances we will treat the combined information as personal information while it is combined.

YOUR RIGHTS TO YOUR PERSONAL INFORMATION

You may request to access, correct, update, suppress, restrict or remove (or anonymize) your personal information, or object to or opt out of the processing of personal information, to the extent these rights are provided by applicable law. You also may request to receive an electronic copy of your personal information to transmit it to another company (to the extent this right to data portability is provided by applicable law). In each case, we may require you to prove your identity and/or provide further information in order to identify your information. We will respond to your requests consistent with applicable law. Please click the links to learn more.

In addition, if you would like to opt-out from marketing messages, you may opt-out by clicking here. We will seek to comply with your request(s) as soon as reasonably practicable. Please note that if you opt-out of receiving marketing communications from us, we may still send you important administrative messages, from which you cannot opt-out.

Accessing your personal information
Correcting or updating your personal information
Removing your personal information
Restricting, objecting to or opting out of processing your personal information
Requests for portability
Accessing your personal information

You may ask to see what information we hold about you and to receive an explanation about how we process your data by using the “contact us” form.

Correcting or updating your personal information

If we hold personal information about you that is incorrect or out of date, you have the right to tell us that it is incorrect or out of date and ask us to amend it. We will do this consistent with applicable law. If you would like to correct your personal information, please send an email to Privacy@b-f.com.

Removing your personal information

You may ask us to remove, anonymize or delete your personal information from our database. If you do not want to receive promotional emails, please click here. If you wish to have your personal information removed from our database, please send an email to Privacy@b-f.com.

Restricting, objecting to or opting out of processing your personal information

You may ask us to restrict, cease or otherwise limit your personal information under certain circumstances. Please send an email to Privacy@b-f.com.

Portability Requests

You may ask us to port your personal information from our database, please send an email to Privacy@b-f.com.

For more information on requests you may make under California or other applicable state laws, please see the end of this notice.

OTHER IMPORTANT INFORMATION

We take the security of your information very seriously. This section outlines our technology practices to keep your information protected. Please click the links to learn more.

How we protect your information
How we retain your information
International transfers of your information
Underage access to services
Third-party services
Third-party advertising
How we protect your information

We use various security measures and tools, such as firewalls, to help protect against the loss, misuse and alteration of the personal information under our control. Unfortunately, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure. Please do not send us sensitive personal information.

How we retain your personal information

We retain personal information for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include:

· The length of time we have an ongoing relationship with you and provide the services to you (for example, for as long as you have an account with us or keep using the services);

· Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or

· Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

International transfers of your personal information

Your personal information may be stored and processed in any country where we have facilities or in which we engage service providers, and your information may be transferred to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country. In these circumstances we take measures to ensure that your information is protected, which includes putting in place contracts with the recipients of your information to ensure that they provide adequate protection for your information. You may obtain a copy of these measures by contacting us at Privacy@b-f.com.

EU/EEA: Some of these countries are recognized by the European Commission as providing an adequate level of protection according to EEA standards (the full list of these countries is available here. With regard to transfers from the EEA to other countries, we have put in place adequate measures, such as Standard Contractual Clauses adopted by the European Commission. You may obtain a copy of these measures by contacting us at Privacy@b-f.com.
UK: Some of these countries are recognized by the UK as providing an adequate level of protection according to UK standards. With regard to transfers from the UK to other countries, we have put in place adequate measures, such as Standard Contractual Clauses. You may obtain a copy of these measures by contacting us at Privacy@b-f.com.
In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your personal information.

Access to services by individuals who are underage.

Our services are not directed to individuals who are under the legal age to purchase alcohol, and we do not knowingly collect personal information from such individuals.

Third-party services

This Privacy Policy does not address, and we are not responsible for, the privacy, information or other practices of any third parties, including any third party operating any website or service to which our services link. The inclusion of a link on the services does not imply Brown-Forman’s endorsement of the linked site or service. In addition, we are not responsible for the information collection, use, disclosure, or security policies or practices of other organizations, such as Facebook, Apple, Google, Microsoft, RIM, or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer, including with respect to any personal information you disclose to other organizations through or in connection with our apps or our social media pages.

Third-party advertising

We use third-party advertising companies to serve advertisements regarding goods and services that may be of interest to you when you access and use Brown-Forman services and other websites or online services.

You may receive advertisements based on information relating to your access to and use of the services and other websites or online services on any of your devices, as well as on information received from third parties. These companies place or recognize a unique cookie on your browser (including through the use of pixel tags). They also use these technologies, along with information they collect about your online use, to recognize you across the devices you use, such as a mobile phone and a laptop. If you would like more information about this practice, and to learn how to opt out of it in desktop and mobile browsers on the particular device on which you are accessing this Privacy Policy, please visit https://optout.aboutads.info/?c=2&lang=EN and https://optout.networkadvertising.org/?c=1. You may download the AppChoices app at www.aboutads.info/appchoices to opt out in mobile apps.

Sensitive personal information

We ask that you not send us, and you not disclose, any sensitive personal information (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through the services or otherwise to us.

UPDATES TO THIS PRIVACY POLICY

We may change this Privacy Policy. The “LAST UPDATED” legend at the top of this Privacy Policy indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on the services. Your use of the services following these changes means that you accept the revised Privacy Policy.

CONTACTING US

Brown-Forman Corporation is located at 850 Dixie Highway, Louisville, KY 40210, USA.

If you have any questions about this Privacy Policy, please contact us at Privacy@b-f.com, the address listed in the country-specific information below or

Brown-Forman Corporation

850 Dixie Highway

Louisville, KY, USA 40210.

Because email communications are not always secure, please do not include credit card or other sensitive information in your emails to us. ADDITIONAL INFORMATION FOR INDIVIDUALS IN THE EEA AND UK

You may also lodge a complaint with a data protection authority for your country or region, or the location of an alleged infringement of applicable data protection law. If you have any difficulty locating this data protection authority, please do not hesitate to reach out to us so that we can assist you.

For the EU/EEA you can find this information at http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080
For the UK, you can find this information here https://ico.org.uk/make-a-complaint/#:~:text=Need%20help%3F,helpline%20on%200303%20123%201113
© 2023 Brown-Forman Corporation. All Rights Reserved.





Australia
Australia

Brown-Forman Australia Pty Limited will collect, use and disclose your personal information in accordance with the Privacy Act 1988 (Cth) and any applicable data protection laws. We will notify you of the purposes for which your personal information may be collected, used, disclosed and/or processed, as well as obtain your consent for the collection, use, disclosure and/or processing of your personal information for such intended purposes, unless an exception under law permits to do so without your consent.

Brown-Forman Australia Pty Limited, Level 6, 280 Elizabeth Street, Surry Hills, New South Wales 2010, Australia.

©2023 Brown-Forman Corporation. All Rights Reserved.



Austria
More Information on Retaining Personal Data.

Brown-Forman Deutschland GmbH

Amtsgericht Hamburg; Registernummer: HRB 121438

Eingetragener Firmensitz: Dammtorwall 5-7, 20354 Hamburg

©2023 Brown-Forman Corporation. Sämtliche Rechte vorbehalten.

Belgium
Brown-Forman Beverages, Europe, Ltd.

Registered in the United Kingdom; Register Number 4129810

Registered Office: Part Fourth Floor (west)

45 Mortimer Street

London W1W 8HJ

©2023 Brown-Forman Corporation. All Rights Reserved.

Belgium - French
Brown-Forman Beverages, Europe, Ltd.

Registered in the United Kingdom; Register Number 4129810

Registered Office: Part Fourth Floor (west)

45 Mortimer Street

London W1W 8HJ

©2023 Brown-Forman Corporation. All Rights Reserved.

Brazil
Brazil

Brown-Forman Beverages Worldwide, Comercio de Bebidas Ltda.

Registered Office: Sao Paulo Corporate Towers, Av Pres. Juscelino Kubitschek 1909, South Tower, Suite 71-A, Sao Paulo, Brazil, 04543-907

You may lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), located at Esplanade of Ministries, Block C, 2nd floor, ZIP Code 70297-400 - Brasília - DF. Please visit their website at https://www.gov.br/anpd/pt-br or contact anpd@anpd.gov.br for more information.

©2023 Brown-Forman Corporation.

Bulgaria
Bulgaria

Brown-Forman Bulgaria EOOD, Ul. Akad. Metodi Popov 26, 1113 Sofia

????? - ?????? ???????? ????, ??. ????. ?????? ????? 26, 1113 ?????

©2023 Brown-Forman Corporation. ?????? ????? ????????.

Croatia-Hrvatska
Brown-Forman Arrow Continental Europe, L.L.C.

850 Dixie Highway, Louisville, KY 40210 USA

©2023 Brown-Forman Arrow Continental Europe, L.L.C. Sva prava pridr┼żana.

Cyprus
Cyprus

Brown-Forman Greece E.P.E., 29 Paradise Street, TK 15125, Maroussi Attica, Greece

©2023 Brown-Forman Corporation. Ολα τα δικαι?ματα διατηρο?νται.

Czech Republic
Czech Republic

Brown-Forman Czechia, s.r.o.

Portheimka Center - Units 642-007 and 642-008, Namesti 14, rinja 17, 150 00 Prague 5

©2023 Brown-Forman Czechia, s. r. o. Všechna práva vyhrazena.

Deutschland
Deutschland

Brown-Forman Deutschland GmbH

Amtsgericht Hamburg; Registernummer: HRB 121438

Eingetragener Firmensitz: Dammtorwall 5-7, 20354 Hamburg

©2023 Brown-Forman Corporation. Sämtliche Rechte vorbehalten.

France
Brown-Forman France

Société immatriculée dans l’Etat du Delaware (Etats-Unis)

Siège social : 47 Rue de Monceau, Paris, 75008

©2023 Brown-Forman France Tous droits réservés.

Greece
Brown-Forman Greece E.P.E., 29 Paradise Street, TK 15125, Maroussi Attica, Greece

©2023 Brown-Forman Corporation. Ολα τα δικαι?ματα διατηρο?νται.

Hungary - Magyarorszag
Brown-Forman Hungary kft – Magyarországi Fióktelep

Magyarország, a F?városi Cégbíróság által a következ? cégjegyzék-szám alatt: Cg. 01-17-000089

Székhelye: 1141 Budapest, ?rs Vezér útja 76

©2023 Brown-Forman Hungary kft – Magyarország Fióktelep. Minden jog fenntartva.

India
Brown-Forman India Private Limited

701-702, 7th Floor, Time Tower, Sector 28, MG Road, Gurugram, Haryana – 122002 India

Grievance officer details: Ankur Wadhwa, Privacy@b-f.com

©2023 Brown-Forman Corporation. All Rights Reserved.

Ireland
Ireland

Brown-Forman Beverages, Europe, Ltd.

Registered in the United Kingdom; Register Number 4129810

Registered Office: Part Fourth Floor (west)

45 Mortimer Street

London W1W 8HJ

©2023 Brown-Forman Corporation. All Rights Reserved.

Mexico
Para las personas físicas que se encuentren en México, Brown-Forman Tequila México, S. de RL de CV recabará, utilizará y divulgará sus datos personales de conformidad con la Ley Federal de Protección de Datos Personales en Posesión de los Particulares y la legislación aplicable. Como titular de la información, usted tiene derecho a acceder, rectificar, oponerse o cancelar el uso, obtención y tratamiento de sus datos personales (Derechos ARCO). Para ejercer sus Derechos ARCO, por favor contáctenos y daremos trámite a su solicitud.

Brown-Forman Tequila Mexico, S. de RL de CV

Av. De las Américas 1545, 8th Floor, 44630, Guadalajara, Jalisco, Mexico.

©2023 Brown-Forman Corporation. All rights reserved.

New Zeland
Brown-Forman New Zealand

88 Shortland Street, Auckland Central, Auckland New Zealand 1010

©2023 Brown-Forman Corporation. All Rights Reserved.

Poland
Brown-Forman Polska Sp. z o.o.

Zarejestrowana w Polsce pod numerem KRS 55791

Siedziba: ul. Postepu 21 D str 02-676 Warszawa, Polska

©2023 Brown-Forman Corporation. Wszystkie prawa zastrze?one.

Singapore
Brown-Forman complies with Singapore’s Personal Data Protection Act 2012 (the “PDPA”). We will collect your personal information in accordance with the PDPA. We will notify you of the purposes for which your personal information may be collected, used, disclosed and/or processed, as well as obtain your consent for the collection, use, disclosure and/or processing of your personal information for the intended purposes, unless an exception under the law permits us to collect and process your personal information without your consent.

Where your personal information is to be transferred out of Singapore, we will comply with the PDPA in doing so.

Brown-Forman Worldwide, L.L.C., 101 Thomson Road, #22-01 United Square, Singapore 307591

©2023 Brown-Forman Corporation. All Rights Reserved.

Thailand
Brown-Forman Thailand, L.L.C.

Unit 1604-6, 16th Floor, Capital Tower, All Seasons Place, 87/1 Wireless Road, Lumpini, Pathumwan, Bangkok 10330, Thailand

©2023 Brown-Forman Corporation. All Rights Reserved.

United Kingdom
Brown-Forman Beverages, Europe, Ltd.

Registered in the United Kingdom; Register Number 4129810

Registered Office: Part Fourth Floor (west)

45 Mortimer Street

London W1W 8HJ

©2023 Brown-Forman Corporation. All Rights Reserved.

United States
The information included in this section is specific to our products and services in the United States.

There are several ways you can communicate with us. Our email address is Privacy@b-f.com. If you prefer to contact us in writing, please use the mailing address below:

Privacy Officer, c/o Brown-Forman Corporation, 850 Dixie Highway, Louisville, KY 40210 USA

©2023 Brown-Forman Corporation. All Rights Reserved.



Additional Information Regarding California (CCPA)- updated January 1, 2023

Collection, Disclosure, Sale, and Sharing of Personal Information

The following chart details the categories of personal information, as listed in the CCPA, that we plan to collect and have collected and disclosed within the preceding 12 months; and the categories of third parties to which we disclosed personal information for our operational business purposes within the preceding 12 months. The chart also details the categories of Personal Information that we “sell” to third parties or “share” for purposes of cross-context behavioral or targeted advertising, including within the 12 months preceding the date this Privacy Policy was last updated.

Categories of Personal Information

Disclosed to Which Categories of Third Parties for Operational Business Purposes[1] [2] [3]

Sold to Which Categories of Third Parties

Shared with Which Categories of Third Parties for Cross-Context Behavioral or Targeted Advertising

Identifiers, such as name, contact information, online identifiers and Social Security numbers and other government-issued ID numbers

Affiliates; service providers

ad networks

ad networks

Personal information, as defined in the California customer records law, such as name, contact information, insurance policy number, education, employment, employment history, financial information, medical information and health insurance information

Affiliates; service providers

none

none

Characteristics of protected classifications under California or federal law, such as sex, age, race, religion, national origin, disability, medical conditions and information, citizenship, immigration status and marital status

Affiliates; service providers

none

none

Commercial information, such as transaction information, purchase history and financial details

Affiliates; service providers; customers; business partners; distributors

ad networks

ad networks

Internet or network activity information, such as browsing history, online behavior, and interactions with our and other websites, applications and systems

Affiliates; service providers

none

ad networks

Geolocation data, such as device location and IP location

Affiliates; service providers; contest sponsors

ad networks

ad networks

Audio, electronic, visual and similar information, such as images and audio, video or call recordings created in connection with our business activities

Affiliates; service providers

none

none

Professional or employment-related information, such as work history, prior employer, information relating to references, CV, details of qualifications, skills and experience, human resources data and data necessary for benefits and related administration services

Affiliates; service providers

none

none

Inferences drawn from any of the personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics

Affiliates; service providers

none

none

Sensitive Personal Information.

· Personal Information that reveals an individual’s social security, driver’s license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; geolocation information accurate within a radius of 1850 feet or less; racial or ethnic origin, religious or philosophical beliefs, citizenship, immigration status, or union membership; the contents of mail, email, and text messages unless Company is the intended recipient of the communication; genetic data;

· Personal Information collected and analyzed concerning an individual’s health;

· Information on medical history, mental or physical health conditions, or medical treatment or diagnosis by a healthcare professional;

· Biometric information used for the purpose of uniquely identifying an individual;

· Personal Information collected and analyzed concerning an individual’s sex life or sexual orientation.

Our affiliated entities; trusted third-party service providers

none

none

We do not “sell” and have not sold Personal Information, as “sale” is defined in the CCPA. We have not engaged in such activities in the 12 months preceding this Privacy Policy was last updated.

Individual Requests

If you are a California resident, you may make the following requests:

You may request to know whether we process your Personal Information and to access such Personal Information (including the categories of Personal Information is collected, the categories of sources from which it is collected, the business or commercial purpose of collecting, sharing or selling, the categories of Personal Information about you that we disclosed, sold or shared (as defined by the relevant laws) and the categories of third parties with whom we disclosed, sell or share information, if relevant).
You may request to correct inaccuracies in your Personal Information.
You may request to have your Personal Information deleted.
You may request to receive a copy of your Personal Information, including specific pieces of Personal Information, including, where applicable, request to obtain a copy of your Personal Information in a portable, readily usable format.
You may request to opt out of targeted advertising (or the “sharing” of your Personal Information for cross-context behavioral advertising).
You may request to opt out of the “sale” of your Personal Information, as defined under the applicable privacy law.
You may request to opt out of the processing of your Personal Information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
You may request to limit the use or disclosure of your Sensitive Personal Information in certain circumstances.
How to Make Requests

To make a request for the disclosures or deletion described above, please contact us at Privacy@b-f.com or 1-866-832-4920.

We will verify and respond to your request consistent with applicable law, taking into account the type and sensitivity of the personal information subject to the request. We may need to request additional personal information from you, such as email address, street address, or official photo identification, in order to verify your identity and protect against fraudulent requests. If you maintain a password-protected account with us, we may verify your identity through our existing authentication practices for your account and require you to re-authenticate yourself before disclosing or deleting your personal information. If you make a deletion request, we may ask you to confirm your request before we delete your personal information.

To request to opt out of any future sharing of your Personal Information for purposes of cross-context behavioral advertising or any future processing for purposes of targeted advertising, click here for all Brown-Forman brands except Jack Daniel’s, and here for the Jack Daniel’s family of brands.

You have the right to be free from unlawful discrimination for exercising your rights.

Appeal Process

If we refuse to take action on your request, you may appeal this refusal within a reasonable period after you have received notice of the refusal. You may file an appeal by contacting us via Privacy@b-f.com or 1-866-832-4920.

Authorized Agents

If an agent would like to make a request on your behalf as permitted under applicable law, the agent may use the submission methods noted in the section entitled “Individual Requests.” Not all kinds of requests can be made by authorized agents in all states. As part of our verification process, we may request that the agent provide, as applicable, proof concerning his or her status as an authorized agent. In addition, we may require that you verify your identity as described in the section entitled “Individual Requests” or confirm that you provided the agent permission to submit the request.

De-identified Information

Where we maintain or use de-identified data, we will continue to maintain and use the de-identified data only in a de-identified fashion and will not attempt to re-identify the data.