These additional disclosures are required by certain state privacy laws, and provide a Notice at Collection under the California Privacy Rights Act:

Categories of personal information collected. The personal information that we collect, or have collected from consumers in the twelve months prior to the effective date above, fall into the following categories established by the California Privacy Rights Act and other state privacy laws:

• identifiers such as your name, alias, address, phone numbers, IP address, your account log-in information, or a government-issued identifier;

• personal information, such as a credit card number or other payment information;

• inference data, such as information about your purchase preferences; and

Categories of personal information disclosed for a business purpose. The personal information that we may have disclosed for a business purpose to the third parties identified in the "How we share personal information" section of our Privacy Notice in the twelve months prior to the effective date above falls into the following categories established by the California Privacy Rights Act and other state privacy laws:

• identifiers such as your name, address, phone numbers, IP address, or government identifier, for example if we use a third-party carrier to deliver your order, or if we use a third-party service to verify your identity, certain types of ID you provide for identity verification, which may in some cases reflect your citizenship or immigration status;

• personal information, such as a credit card number or other payment information, for example if we use a third-party payment processor;

• internet or other electronic network activity information, such as if we use a service provider to help us gather crash reports for analyzing the health of our services, or information relating to our prevention and detection of fraud or other unauthorized activity, which may require disclosing certain information about potentially affected customers to law enforcement;

• audio or visual information, for example if a service provider reviews recordings of customer service phone calls for quality assurance purposes;

• inference data, for example if we use a service provider to help us optimize the accuracy of your shipping address to make sure your order reaches you; and

Advertising. As explained in the "Marketing and advertising" section of our Privacy Notice, we share limited information. Any personal information we may have shared for the purpose of cross-context behavioral advertising, as that term is defined by the California Privacy Rights Act, in the twelve months prior to the effective date above falls into the following categories:

• identifiers such as a cookie, a device identifier, or a code derived from applying irreversible cryptography to other information like an email address; we do not share your name or other information that directly identifies you with ad companies.

• inference data; while we do not share your specific shopping actions like purchases, product views, or searches with ad companies, we may share an advertising identifier and an estimate of the value of the ads they show you on our behalf

The categories of third parties with whom we may share personal information for the purpose of cross-context behavioral advertising are identified in the "How we share personal information" and "Marketing and advertising" sections of the Coldwater Club Privacy Notice. 

Children and Teens. As stated in the Coldwater Club Privacy Notice, children and teens are not permitted to purchase products.  

No sale of personal information. In the twelve months prior to the effective date of this Disclosure, Coldwater Club has not sold any personal information of consumers, as those terms are defined under the California Privacy Rights Act.

De-identified Data Disclosure. Coldwater Club may use de-identified data in some instances. Coldwater Club either maintains such data without attempting to re-identify it or treats such data as personal data subject to applicable law.

California Privacy Rights Act Sensitive Personal Information Disclosure. The categories of data that Coldwater Club collects and discloses for a business purpose include "sensitive personal information" as defined under the California Privacy Rights Act. Coldwater Club does not use or disclose sensitive personal information for any purpose not expressly permitted by the California Privacy Rights Act.

California Privacy Rights Act and Minnesota Consumer Data Privacy Act Retention Disclosure. To enable your continued use and purchase of products from Coldwater Club, we keep your personal information for as long as it is required in order to fulfill the relevant purposes described in the Coldwater Club Privacy Notice, as permitted or as may be required by law, or as otherwise communicated to you. For example, we retain your transaction history so that you can review past purchases (and repeat orders if desired) and what addresses you have shipped orders to, and to improve the relevance of products and content we recommend.

California Privacy Rights Act Non-discrimination Statement. Coldwater Club will not discriminate against any consumer for exercising their rights under the California Privacy Rights Act.

Colorado Privacy Act and Oregon Consumer Privacy Act Profiling Disclosure. Coldwater Club does not engage in profiling of consumers in furtherance of automated decisions that produce legal or similarly significant effects, as those terms are defined under the Colorado Privacy Act or the Oregon Consumer Privacy Act.

Oregon Consumer Privacy Act Controller Entity Disclosure. The controller entities that are subject to the Coldwater Club Privacy Notice and this Disclosure include Disruptive Beverage, Inc.

New Jersey Notice of Material Change Disclosure. If we make material changes to our Privacy Notice, we will provide affected customers with advance notice of the change, such as by email or via their account.