Tastry PRIVACY POLICY

The Bottlefly, Inc., dba Tastry ("Tastry") is committed to the privacy of your information. This Privacy Policy (the "Policy") is meant to help you understand the information we collect, why we collect it, and how you can manage it. This Policy applies to our website at https://tastry.com/ (the "Site") and any related products, services, communications, or apps (the "Services"). By using our Site, or by purchasing our Services, you are acknowledging that you have read, understood, and accept this Policy and our Terms of Use.

In this Policy, any use of the words "you," "yours," or similar expressions refers to users of this Site and our Services, as well as any other individuals whose information we collect and process. References to "we," "us," "our" or similar expressions refer to Tastry.

This Policy does not extend to anyone whose personal information is not under our control or management, including data that is collected by other websites that you may visit before or after this Site, and which are not governed by this Policy. We are not responsible for the data protection or privacy policies of any other websites and accept no responsibility or liability for those policies. Please carefully check the policies of other websites and services you use before you visit or submit personal information.

Information We Collect

Information We Collect and Receive.

For you to use our Site and Services, we need to collect and process certain types of information. Depending on your use of our Site and Services, this may include examples such as the following, which we have collected:

1. Information you provide to us by completing forms on our Site: For example, your name, contact information, company, industry role, and any other information you may provide in the forms on our Site;
2. Information you provide to us by contacting us: Any personal information you may provide to us when you email or call us, such as name, phone number, employer, and any other details you provide in your communications. Tastry may also request your contact information for the purposes of having someone contact you for additional information, or in response to your request for information from us;
3. Transaction information when you purchase Services from us: For example, if you make purchases with your credit card, we may use your credit card information for billing, and credit card validation purposes;
4. Information we obtain from third party sources: From time to time, we may receive personal information about you from third party sources, but only where we have received assurances from these third parties that they have either received your consent or are otherwise legally permitted or required to disclose your personal information to us. We use the information we receive from these third parties to provide Services to those third parties;
5. Login information, such as username and password, that you may use in connection with our Services;
6. Information about your activity through our Services, including your device information, such as your IP address, the type of device or browser you use, and your actions on the Site;
7. Information such as search words and phrases you provide when you use the search functionality, search box, or search engine on our Site. We collect this information to improve our Site, and the search accuracy and relevance of our Site's search results. We may disclose aggregated search data to service providers or third parties. We do not use search terms to personally identify users. If you prefer not to have your search terms collected, you can choose not to use the search feature(s) on our Site. If you have any questions, please contact us at privacy@tastry.com.

We will only use your personal information to provide you with information or Services you have requested, or for the purposes set out in this Policy. Personal information does not include aggregated information from which individual identities have been removed.

Information from Children.

Tastry does not knowingly solicit or collect any personal information from anyone under 18 years of age, and children under 18 are not permitted to register for or use our Site or Services, including by subscribing to receive information from Tastry. Parents can contact our customer service department to access, change, or delete the personal information that has been submitted by a child. If we become aware that a child under the age of 18 has provided us with personal information, we will delete it.

Cookies and Tracers.

We may use cookies and similar technologies (e.g., web beacons, pixels, ad tags and device identifiers) to recognize you and/or your device(s) on, off, and across the Site and different Services and devices. We may use cookies and similar tracking technologies (e.g., web beacons, pixels, ad tags and device identifiers) to recognize you and/or your device(s) on, off and across the Site and different Services and devices. A cookie is a small file that is placed onto your device (e.g., computer, smartphone or other electronic device) that stores information when you visit a website. However, you can control cookies and similar technologies through your browser settings and other tools. You can also opt out from our use of cookies and similar technologies that track your behavior on the sites of others for third party advertising. We will follow the global privacy control.

Tastry uses cookies and related technologies on our Site to help us recognize your device as a repeat visitor and enable certain website features and functionalities. Some of this data will be aggregated or statistical, which means that we will not be able to identify you individually.

Specifically, we use cookies and other similar technologies on our Site to:

• Recognize you whenever you visit this Site (this speeds up your access to the Site as you do not have to log in each time);
• Support security and any authentication features on our Site;
• Obtain information about your preferences and use of our Site;
• Carry out research and statistical analysis to help improve our content and Services, and to help us better understand our customers' requirements;
• Improve the speed and performance of our Site and Services;
• Make your online experience more enjoyable and efficient;

The cookies that we place on your device may include:

• Essential Cookies: these cookies are essential for you to be able to navigate our Site and use its features. Without these cookies, the services you have asked for could not be provided.
• Performance Cookies: these cookies collect information about how you use our Site, for example, which pages you go to most often. These cookies do not collect personally identifiable information about you. All information collected by these cookies is aggregated and anonymous and is only used to improve how our Site works.
• Functionality Cookies: these cookies allow our Site to remember the choices you make (such as your username, language, last action, and search preferences) and provide enhanced, more personal features. The information collected by these cookies is anonymous and cannot track your browsing activity on other websites.
• Marketing Cookies: also known as advertising cookies, these cookies are used to deliver advertisements more relevant to you and your interests. They are also used to limit the number of times you see an advertisement on our Site and help measure the effectiveness of the advertising campaign. This is sometimes referred to as online behavioral advertising. In some cases, our partners may use cookies to provide us with information about your interactions with their services. These cookies remember that you have visited a website, and this information is shared with other organizations such as advertisers. Those third-party cookies would be subject to the third-party service's policies.

Depending on where you reside, you can opt out of or opt in to online behavioral advertising cookies and similar technologies by using the Digital Advertising Alliance's Consumer Choice Tool available here, or if located in the European Union you can make your choices here. Please note you may continue to receive generic or contextual ads.

Managing Cookies: You can opt out of all non-Essential cookies by clicking on the "Reject All" button on the cookie banner at the bottom of the Site homepage. In addition, your browser may give you the ability to control some types of cookies. If you want to customize the kinds of cookies you can control, you can change your browser settings so that certain types of cookies are not accepted.

If you turn off any cookies, please be aware that you may lose some of the functionality of this Site. For more information about cookies and how to disable them please check the following resource: http://www.allaboutcookies.org/

For more information about targeted advertisements and/or to learn how to opt out of advertising cookies, please visit the below independent associations. You can visit these independent associations' websites to opt out of all cookies served by their members. These independent websites are not sponsored by or affiliated with Tastry.

1. Network Advertising Initiative (NAI)
2. Digital Advertising Alliance (DAA)
3. European Interactive Digital Advertising Alliance (EDAA)
4. Digital Advertising Alliance of Canada (DAAC)

When opting out, a cookie will be set to let advertisers know not to use your data for targeted advertising purposes. You will still see advertisements, but they will not be tailored to your interests. If you opt out of these targeted advertising cookies, your opt out will be specific to the web browser or mobile device from which you accessed the opt out. If you use multiple devices or browsers, you will need to opt out each browser or device that you use.

Consent to Use Cookies: The first time you visit our Site, a cookie notice is displayed describing our use of cookies and linking to this Policy. As described in that notice, the cookie choices you make the first time you visit our Site will be used for your future use of the Site.

How We Use Information

Tastry may use the personal information we collect for the following purposes:

1. To provide and maintain our Services;
2. To manage your account: information you provide can give you access to different functionalities of the Site and Services that are only available as a registered user;
3. To allow you to log into and access your account;
4. To provide customer service and our support services;
5. To process any financial transactions you make while using our Site or Services;
6. To keep your information secure such as by detecting security incidents, and to be able to verify your identity and contact information;
7. To alert you about product updates, special offers, updated information, and other news and services from Tastry;
8. To ensure our Site and Services are relevant to you and your interests;
9. To help us create and publish content most relevant to you;
10. To contact you in response to requests such as our Contact Us form(s), chatbot, or other similar features.

How Information May Be Disclosed

Tastry does not sell or rent any of your personal information for monetary consideration. However certain states define "sale" or "share" more broadly than as commonly interpreted. We may engage in online activities that may constitute a sale or a share (for behavioral advertising) of personal information. This may include showing you targeted or customized advertisements on other websites. Depending on where you reside, you may opt out of, or opt in to, such targeted advertising or selling or sharing of your personal information as set forth in the "Managing Cookies/Cookies and Tracers" section above. Additionally, we may disclose your information to certain third parties. For example, we may share information:

• With data storage vendors or other companies to process your payments or to store your personal information when necessary to support delivery of our Products and/or Services and respond to customer service requests;
• For business transfers: We may share or transfer your personal information in connection with, or during negotiations of, any merger, sale of Tastry assets, financing, or acquisition of all or a portion of our business to another company;
• With affiliates: We may share your information with our affiliates, in which case we will require those affiliates to honor this Policy. Affiliates include our parent company and any other subsidiaries, joint venture partners, franchisees, or other companies that we control or which with we are under common control;
• With other users: when you share information or otherwise interact in the Site's public areas with other users, such as a wine review, that information may be viewed by all users and may be publicly distributed outside. If you interact with other users or register through a third-party service, your contacts on the third-party service may see your name, profile, pictures, and description of your activity. Similarly, other users will be able to view descriptions of your activity, communicate with you, and view your profile.
• With our customers: when you use certain Services of ours via one of our customers' websites, such as Tastry Uncorked, we may provide your personal information to that customer for their own use. Their use of your personal information is subject to the terms of their privacy policy. Depending on your state of residence, you may request from us a list of such customers to whom we have disclosed your personal information once per year.
• With your consent: We may disclose your personal information for any other purpose with your consent.

We also reserve the right to disclose personal information (including sensitive information) when it is reasonably necessary to conduct our business, protect Tastry's legal rights and property, and to comply with the law or orders. Otherwise, your personal information is not shared with any individual or other organization.

Protection of your Personal Information

Remember, the safety and security of your information also depends on you. Where you have chosen, or where we have given you a username and password for access to certain parts of the Site or Services, you are responsible for keeping your login credentials confidential. No method of transmission over the internet or electronic storage is completely secure, so Tastry cannot guarantee its absolute security.

Data Transfers

Tastry's Site and Services are targeted to users in the United States of America ("U.S."). Because Tastry is a U.S.-based company, your information may be collected and processed in the U.S. Additionally, as part of the Services offered to you through our Site, the information which we collect about you may be transferred to, and stored in, one or more countries other than where you currently reside. For example, this may occur if any of our servers or third-party service providers are located in a country other than yours. These countries may have different data protection laws that apply to personal information. However, if we transfer your information in this way, we will put in place appropriate protection to make sure your information remains adequately protected and is treated in line with this Policy.

Your consent to this Policy followed by your submission of such information represents your agreement to any such transfer.

Basis for Processing - European Residents

• Performing the contract we have with you: In certain circumstances, we need your personal data to comply with our contractual obligations, such as to deliver our Services and answer any questions you may have.
• Consent: we may ask your consent to process your personal information in certain situations.
• Legal compliance: Sometimes the law requires us to collect, store, or use your data for legal purposes.
• Legitimate interests: This is a term in data protection law that allows us to process your personal information if we have a legitimate reason to use your data, and only if we do so in ways which do not hurt your interests and rights. For example, we sometimes process your data to pursue our legitimate interests in running our business, including for delivering our Services, protecting you from fraud, quality assurance, and marketing purposes. However, we also ensure that our legitimate use of your data does not materially infringe your rights, freedoms, or interests when compared to the processing.

Email and Mobile Device Notifications

We try to keep email communications to a minimum and give you the ability to opt in/opt out of any marketing communications we may send. For example, we use your information to contact you with newsletters, marketing, or promotional materials and other information that may be of interest to you. You may also elect to receive certain marketing communications in accordance with your preferences, and from which you may opt out at any time. You may opt out of receiving any, or all, marketing communications, such as messages confirming orders and notifying you of privacy policy updates and the like by following the unsubscribe link, instructions provided in the communication, or by contacting us at prviacy@tastry.com stating your request, or, as applicable, by texting STOP or the like in reply to our text messages.

For more information about text messages, see our Terms of Use.

Retention

We will hold your personal information on our systems for as long as is necessary to perform the relevant processing activity for that information, or as long as is set out in any relevant contract you hold with us. The relevant retention period is determined on a case-by-case basis because it depends on things like the nature of the data, why it is collected, why it is processed, and any relevant legal or operational retention needs. For example, we may retain your data for as long as you are a customer of ours so that we may process and complete any orders you may make with us. We may also be required to hold some types of information to fulfill legal purposes. We review our retention periods for personal information on a regular basis. When the relevant processing activity has been completed, we may destroy your data, or alternatively anonymize the data, such that the data is not personally identifiable.

Personal Information Requests for Residents of Certain U.S. States and Europe

Right to Know About the Personal Information We Collect and Share.

U.S. State laws may give you the right to request that we disclose the personal information we have collected about you, which we only provide after we receive and validate your request. Depending on the U.S. state where you reside, once we receive and confirm your verifiable request, we will disclose to you:

• The categories of personal information we collected about you;
• The categories of personal information we have disclosed about you (if any);
• The categories of sources for the personal information we collected about you;
• Our business or commercial purposes for collecting that personal information;
• The categories of third parties with whom we share that personal information; and
• The specific pieces of personal information we collected about you.

Right to Opt Out of Targeted Advertising and Sales

Right of Correction.

You may have the right to request correction of your personal information. After we receive and validate your request, we will correct your personal information, unless an exception applies.

Right of Deletion.

You may have the right to request erasure of your personal information, subject to certain exceptions, such as when we have a legal obligation to retain the data in question. After we receive and validate your request, we will delete your personal information, as well as direct our service providers to delete your personal information unless an exception applies.

How to Make Disclosure, Access, Correction, or Deletion Requests.

While these rights are not globally applicable, and except where an exception or exemption applies, users or Site visitors residing in certain U.S. jurisdictions or the EEA which provide for enhanced privacy rights may be able to request disclosure, access to, correction, and/or deletion of your personal data and opt out of sales as described above by submitting a verifiable consumer request to us (a "Personal Information Request") by:

• Sending an e-mail to privacy@tastry.com and including the following information along with your request: your full name, company name (if applicable), address, e-mail address, and a phone number. We may request that you provide additional information if necessary to confirm your identity. This is for security purposes and is required by law in some cases.
• Only you, or a person registered with the appropriate mechanism associated with your state of residency that you authorize to act on your behalf (if applicable) may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child, if applicable.
• You may have the right to make a free request up to two times in any 12-month period. To protect your privacy and security, Tastry may take reasonable steps to verify your identity before granting access to, correcting, or deleting data. We will generally respond to your request for information within 45 days, unless, for reasons beyond our control, a longer response time is necessary, in which case, you will be advised accordingly. Please note that we may retain certain information as required by law or as necessary for our legitimate business purposes.

Non-Discrimination.

Tastry does not discriminate against users who request to exercise their privacy rights. Unless an exception applies, this includes our promise not to:

• Deny you goods or services;
• Charge you different prices or rates for goods or services, including granting discounts or other benefits, or imposing penalties;
• Provide you a different level or quality of goods or services;
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Questions, Comments, or Complaints

If you have questions or comments about this Policy, or if you are not completely satisfied with this Policy or its application by us, we invite you to convey your concerns or suggestions to us at privacy@tastry.com. If you have an applicable disability, you may also contact us at the above email address to request access to this Policy in an alternative format. We will reply as quickly as possible and inform you of the steps, if any, that have been or will be taken to address your concern or implement the suggestion.

Tastry strives to satisfy our customers' and visitors' privacy concerns. However, if you have contacted Tastry about your issue and are still unhappy with our response, and if you are also a resident of the European Economic Area, subject to applicable law, you may contact your local EU Data Protection Authority (DPA) regarding your issue. Tastry commits to cooperate with the panel established by the EU DPAs, and to comply with the advice given by the panel with regard to data transferred from the EU. More information is available here.

Updates and Changes to this Policy

We may update this Policy from time to time. If we do, we'll let you know about any material changes, either by notifying you on the Site or by sending you an email. Any updates to this Policy will not apply retroactively. If you keep using our Site or Services after a change, that means you accept this Policy.

Date last updated: January 27, 2026