We comply with the EU General Data Protection Regulation (the “GDPR”), and related laws and regulations, and is committed to protecting the privacy and security of personal data located in the European Economic Area consisting of EU member states, Norway, Iceland and Liechtenstein (collectively, the “EEA”), as well as in the processing of personal data located in the UK in accordance with the UK GDPR.

In addition to Privacy Policy (including Handling of Customers' Personal Information, hereinafter the same), the provisions of this Addendum apply to the processing of personal data of persons located in EEA and the UK, In the event the contents stipulated in Privacy Policy conflict with those stipulated in this Addendum, the provisions of this Addendum shall prevail.

1. Legal basis for processing and retention period

Items of personal data	Purpose of processing	Legal basis for processing	Retention period
Technical data (1) Technical data from devices such as IP-address, cookies, the pages the person visited on the Websites, click- and surf behavior and the length of sessions	To deliver the Website’s functionalities and for its technical and functional management	Legitimate interest to have a well-functioning website and to provide you with the information you are looking for	As long as necessary to fulfil the purpose of use, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, the Company will consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purpose of use and whether the Company can achieve those purposes through other means, and the applicable legal requirements.
	To analyze data for developing and improving products and/or services	Legitimate interest to improve our products and/or services
Inquiries (2) Personal data of the person who contacted the Company via the “Contact us” page	To respond to the person’s inquiries and keep record the relevant responses	Legitimate interest to respond to the person’s inquiries and keep record the relevant responses
	To analyze data for beneficial communication with customers	Legitimate interest to analyze data for beneficial communication with customers
	To send requests for cooperation in questionnaire surveys	Legitimate interest to send requests for cooperation in questionnaire surveys
Factory visitors and facility users (3) Personal data of applicants for factory visits or facility use	To manage the person’s factory visits or facility use	Legitimate interest to manage the person’s factory visits or facility use
Information of campaign / prize competition applicants (4) Personal data of customers who applied for campaigns / prize competitions provided by the Company	To conduct campaigns and prize competitions, deliver advertisements for Suntory Group’s products, services, events, etc., and for other purposes described in a policy on the use of personal data in campaigns and the like	Legitimate interest to conduct campaigns and prize competitions, deliver advertisements for Suntory Group’s products, services, events, etc., and for other purposes described in a policy on the use of personal data in campaigns and the like

Please note that where the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, you are obliged to provide such personal data. In the absence of such personal data, we may not be able to provide with the products or services that you have requested.

2. Your Rights

Where the EU GDPR and UK GDPR applies to our processing of your personal data, in addition to the rights stated in the Privacy Policy, you also have the rights to:

• Object to processing your personal data.
  You may object to our handling of your personal data based on our legitimate interest. The Company will then no longer process your personal data for this purpose, unless the Company has an overriding legitimate interest to do so. You may also ask the Company to erase your personal data, unless there is an overriding legitimate interest for the processing. You may also opt out of handling your personal data for direct marketing purposes.
• Withdraw your consent to processing your personal data.
  You may withdraw your consent to the handling of your personal data.
• Data portability.
  You may request receipt or transmission to another organisation, in a machine-readable form, of your personal data that you have provided to the Company.

3. Transfer of personal data outside the EEA or the UK

We may transfer personal data from the EEA or the UK to third parties located in countries outside the EEA or the UK within the extent of the Purpose of Processing. The European Commission has issued an adequacy decision for Japan in 2019.

Some foreign group companies that receive personal data are located in third countries that are not recognized by the European Commission as having data protection laws which provide the same level of protection for personal data as the EEA or the UK, but the company has entered into data transfer agreements with our group companies to ensure a sufficient level of personal data protection. In this case, we will take the appropriate safeguards necessary for international data transfer such as the EU standard contractual clauses.

4. Contacts for requests, inquiries or complaints

Where the EU GDPR is applicable to our handling of your personal data, you may contact at our representative established within the EU on such handling. Contact details are as stated below:

Suntory France S.A.S.
44-52 Boulevard du Parc 92200 Neuilly-sur-Seine, France
eu_representative@suntory.eu

Where the UK GDPR is applicable to our handling of your personal data, you may also contact at our representative established within the UK on such handling. Contact details are as stated below:

Suntory Europe Limited
Uk House 2nd Floor, 2 Great Titchfield Street, W1D 1N London, United Kingdom
uk_representative@suntory.com

You may also have the right to lodge a complaint with your local supervisory authority if you feel that we do not comply with the Laws. If you have such concerns, we request that you contact us in the first instance so that we can investigate, and hopefully resolve, your concerns.

In addition to Privacy Policy, the provisions of this Addendum apply to the processing of personal information of persons residing in the State of California, U.S.A., in accordance with the California Consumer Privacy Act (California Consumer Privacy Act of 2018). In the event the contents stipulated in Privacy Policy conflict with those stipulated in this Addendum, the provisions of this Addendum shall prevail.

1. Personal information collected in the preceding twelve (12) months

We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to any individual or a household (“Personal Information”). We also collect non-Personal Information that cannot be linked or associated with any individual person or household. When non-Personal Information is combined with other information so that it does identify an individual person, we treat that combination as Personal Information. We may collect, use, store and transfer different kinds of Personal Information about you.

In the preceding twelve (12) months, we have collected the following category of personal information:

• Category A: Identifiers.
• Category B: Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code §1798.80(e)).
• Category C: Protected classification characteristics under California or federal law.
• Category D: Commercial information.
• Category F: Internet or other similar network activity.

Children’s Privacy

The website and other Group platforms are intended for adult use only and are not directed towards children, minors, or anyone under the age of 18. If you are under the age of 13, you are not authorized to provide us with any Personal Information. If the parent or guardian of a child under 13 believes that the child has provided us with any Personal Information, the parent or guardian of that child should contact us at this link to have this Personal Information deleted from our files.

2. Purpose of processing

We collect, retain and process personal information for the following purposes:

• To deliver the Website’s functionalities and for its technical and functional management
• To analyze data for developing and improving products and/or services
• To respond to the person’s inquiries and keep record the relevant responses
• To analyze data for beneficial communication with customers
• To send requests for cooperation in questionnaire surveys
• To manage the person’s factory visits or facility use
• To conduct campaigns and prize competitions, deliver advertisements for Suntory Group’s products, services, events, etc., and for other purposes described in a policy on the use of personal information in campaigns and the like

3. Processing and retention period of Personal Information

We retain Personal Information only for the period necessary to achieve the purpose of processing mentioned in Section 2. The specific retention period is determined by taking into account the purpose for which Personal Information is collected and processed, the nature of Personal Information, and the need to maintain legal or business Personal Information.

4. Disclosure to third parties

We may disclose your personal information for the purposes described above in this Privacy Policy to the following categories of third parties:

• Suntory Group*.
• Third parties that provide services to us in connection with the operation of our business.
• Third parties to whom you or your agents authorize us to disclose your personal information in connection with our services.

• *Suntory Group means Suntory Holdings Limited, its consolidated subsidiaries and equity method affiliates in Japan, and Suntory Foundation for Arts.

In the preceding twelve (12) months, we have disclosed the following category of Personal Information for the purposes described above in this Privacy Policy:

• Category A: Identifiers.
• Category B: Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code §1798.80(e)).
• Category C: Protected classification characteristics under California or federal law.
• Category D: Commercial information.
• Category F: Internet or other similar network activity.

5. Personal Information Sold or Shared

We have not sold, in the preceding twelve (12) months, and do not sell, your Personal Information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

We use cookies and similar technologies on our websites and have shared your Personal Information with service providers in the preceding twelve (12) months.

For information on cookies and similar technologies we use, please click the Cookie Declaration link.

Except for the above, we do not share your Personal Information. Also, we do not knowingly share Personal Information of minors under 16 years old.

To submit a request to opt out of the sharing of Personal Information, you may, where available, enable an online universal opt-out mechanism—such as a Global Privacy Control (“GPC”)—that automatically communicates your opt-out preference signal to us.

6. How we protect your Personal Information

While we endeavor to incorporate reasonable safeguards to help protect and secure your Personal Information, no data transmission over the Internet, mobile networks, wireless transmission or electronic storage of information can be guaranteed to be 100% secure. Therefore, we cannot guarantee its absolute security. It may be possible for third parties to intercept or access transmissions or private communications unlawfully. Any such transmission is done at your own risk.

7. California Privacy Rights

California Consumer Privacy Act.

CCPA provides California residents with specific rights regarding their Personal Information. This section describes your CCPA rights and explains how to exercise those rights.

• ・Right to Know/Access

  Upon verification of your identity, you have a right to know what Personal Information we have collected about you in the immediately preceding 12-month period, including the categories of Personal Information, the categories of sources from which the Personal Information is collected, the business or commercial purposes for collecting, selling, or sharing Personal Information, the categories of third parties to whom we has disclosed Personal Information, and the specific pieces of Personal Information we have collected. You may exercise this right no more than twice in any 12-month period.

• ・Right to Delete

  You have the right to request that we delete Personal Information that we collected from you and retained, subject to certain exceptions.

• ・Right to Correct

  You have the right to correct inaccurate Personal Information that we maintain about you.

• ・Right to Opt-Out of the Sale/Sharing

  You have the right to opt-out of the sale or sharing of your Personal Information, or process for targeted advertisement or profiling by the business.

  We do not sell or share your Personal Information.

• ・Right to Limit the Use or Disclosure of Sensitive Personal Information

  You have the right to request that we limit the use and disclosure of Sensitive Personal Information to specific business purposes approved by applicable law.

  We do not collect, use or disclose your Sensitive Personal Information.

• ・Right to Non-Discrimination

  You have a right not to receive discriminatory treatment by us for the exercise of the privacy rights conferred by the CCPA.

  Unless permitted by applicable law, we will not discriminate against you for exercising any of your privacy rights under the applicable law, including by, but not limited to:

  • －Denying you goods or services;
  • －Charging you different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
  • －Providing you a different level of quality of goods or services; or
  • －Suggesting that you receive a different price or rate for goods or services or a different level of quality of goods or services.

• ・Right to Appeal:

  You have the right to appeal any decision that includes a refusal to take action on a request. Appeals must be filed within 45 days of receipt of the decision. Any such decisions will be transmitted by email and will contain a link for submitting your appeal through our online form. You may also submit your request by calling us at +1 866-899-2342 or by using our Contact Us page.

Other California Privacy Rights:

California Civil Code Section 1798.83 permits California residents who have provided personally identifiable information to us or third-party advertisers and marketing partners, if any, to request certain information regarding our disclosure of personally identifiable information to third parties for direct marketing purposes. Requests should be submitted by using our Contact Us page and should include CALIFORNIA PRIVACY RIGHTS in the subject line. We will need your first and last name, mailing address, and email address in order to process your request. Please be aware that not all information sharing is covered by the requirements of Section 1798.83 and only information on covered sharing will be included in our response. This request may be made no more than once per calendar year.

Exercising Your California Rights

Only you or an authorized agent may make a verifiable consumer request related to your Personal Information. You may also request deletion, correction, or to know, and exercise your rights of portability or appeal.

Requests can be submitted by calling our toll-free number +1 866-899-2342 or through our Contact Us page.

Additionally, when we detect a GPC signal from a user’s browser within California, we stop sharing the user’s Personal Information. You can learn more about the GPC and how to enable it in your browser from the Global Privacy Control website.

Please note that these rights apply only to persons in California. Only you, or a person that you authorize to act on your behalf, may make a verifiable consumer request related to your Personal Information.

Authorizing an Agent to Act on Your Behalf:

Except where you have provided an agent with a Power of Attorney pursuant to Sections 4000 – 4465 of the California Probate Code, when using an authorized agent, you must: (i) provide the agent with signed written permission clearly describing their authority to make a request on your behalf; (ii) verify your own identity; and (iii) directly confirm that you have provided the authorized agent permission to submit the request. We may deny a request from an authorized agent if the agent does not provide us with the signed written permission demonstrating that they have been authorized to act on your behalf.

Verifying Your Request:

The verifiable consumer request initiated by you or your authorized agent must:

• Include your full legal name, email, and phone number, which we will need to contact you in order to verify that you are the person about whom we collected Personal Information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us. One of our representatives will contact you in order to verify your identity. You may need to provide additional information in order to verify your request. Depending on the nature of the request, we may require additional verification actions be taken, including but not limited to providing a signed declaration under penalty of perjury that you are the consumer whose Personal Information is the subject of the request. We will only use this information to verify the requestor’s identity or authority to make the request.

Exceptions.

These rights are not absolute and are subject to certain exceptions. For example, we cannot disclose or permit access to specific pieces of Personal Information if granting your request would present a certain level of risk to the security of the Personal Information at issue, your account with us or the security of the website. We may deny your deletion request if retaining the information is necessary for us or our service providers and/or contractors to:

• Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546).
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
• Comply with a legal obligation.
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Response Timing and Format:

We endeavor to respond to a verifiable consumer request to delete, correct or to know within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

If you, as a California resident, want to exercise your right to know or delete under the CCPA, we have the following methods and contact information:

Toll-free: [+1 866-899-2342]
Contact Us Form: [our Contact Us page]

Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

8. Changes to this Privacy Policy

We may modify or update this Privacy Policy from time to time. We encourage you to revisit this page often to remain fully informed of this Policy or you can contact us at any time to obtain the latest copy of this Privacy Policy.

Last revised on July 1, 2026