California Privacy Rights Statement

Giesen Group Limited

This California Privacy Rights Statement applies solely to California residents and describes how Giesen Group Limited (“Giesen Group”, “we”, “us”, or “our”) collects, uses, and shares personal information, and the rights available to California consumers under applicable privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). This statement supplements our Privacy Policy and applies only to California residents.

1. PERSONAL INFORMATION WE COLLECT

Depending on how you interact with our website, we may collect the following categories of personal information:

• Identifiers: name, email address, postal address, IP address, device identifiers, cookie identifiers, and similar identifiers

• Commercial information: records of products considered or interest expressed in our wines

• Internet or network activity: browsing history on our site, pages visited, search activity, and interactions with our website or advertising

• Geolocation data: approximate location based on IP address

• Sensory information: images or content you may submit via social media or directly to us

• Professional information: job title or company, where you have provided this

• Protected classifications: age or date of birth, required for age verification purposes

• Inferences: preferences or interests inferred from your browsing activity on our site

We do not collect sensitive personal information beyond what is necessary for lawful purposes including age verification.

2. SOURCES OF PERSONAL INFORMATION

We may collect personal information from you directly when you use our website or contact us, from your device through automatic collection technologies (cookies, pixels), from social media platforms when you interact with our content, from affiliate and retail partner networks when you click through to retail links, and from publicly available sources.

3. HOW WE USE PERSONAL INFORMATION.

We use personal information to operate and improve our website, respond to enquiries, send marketing communications where permitted, measure and improve the performance of retail partner links, conduct analytics, maintain security and prevent fraud, and comply with legal obligations

4. SHARING AND SALE OF PERSONAL INFORMATION

We do not sell your personal information in exchange for monetary compensation.

We may share personal information with service providers who assist us in operating our website and business. We may also share information with advertising partners and affiliate networks to support our marketing and retail link programmes. Some of this sharing may be considered a "sale" or "sharing" for targeted advertising purposes under California law.

You have the right to opt out of the sale or sharing of your personal information for targeted advertising. See Section 6 below.

5. CATEGORIES OF THIRD PARTIES

We may share personal information with:

• Service providers: website hosting, email platforms, analytics providers, and customer support tools

• Advertising partners: social media platforms and digital advertising networks used for marketing

• Affiliate networks: Impact, Awin, ShareASale, FlexOffers, Partnerize, and Amazon Associates, for retail link tracking

• Direct retail partners: retailers linked through direct partner programmes managed on our website platform

6. YOUR CALIFORNIA PRIVACY RIGHTS

6.1 Right to Know

You have the right to request, up to twice in any 12-month period, that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purpose for which it was collected or shared, and the categories of third parties with whom it was shared.

6.2 Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions. We may retain information where required to complete a transaction, comply with a legal obligation, or for other permitted purposes under CCPA/CPRA.

6.3 Right to Correct

You have the right to request that we correct inaccurate personal information that we hold about you.

6.4 Right to Opt Out of Sale or Sharing

You have the right to opt out of the sale or sharing of your personal information for targeted advertising. To exercise this right, you may:

• Email us at: enquiries@giesengroup.co.nz with the subject line "Do Not Sell or Share My Personal Information"

• Manage your cookie preferences through our Cookie Settings panel on this website

If you use a browser or device that broadcasts a Global Privacy Control (GPC) signal, we will treat this as a valid opt-out request in accordance with California law.

6.5 Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising your privacy rights. We will not deny you services, charge you different prices, or provide a different quality of service because you exercised any right under this Statement.

6.6 Shine the Light (California Civil Code Section 1798.83)

California residents may request information about any disclosure of personal information to third parties for their direct marketing purposes in the preceding calendar year. To make such a request, please email us at enquiries@giesengroup.co.nz with the subject line "Shine the Light Request".

7. How to Exercise Your Rights

To submit a rights request, please contact us at:

• Email: enquiries@giesengroup.co.nz

• Subject line: "California Privacy Rights Request"

We may need to verify your identity before processing your request. This may include asking you to confirm information we already hold that matches your account or identifying information. We will respond within 45 days of receiving a verifiable request. If we need additional time, we will notify you.

You may designate an authorised agent to submit a request on your behalf. We may require proof of your authorisation and may verify your identity directly with you.

8. Data Retention

We retain personal information only for as long as is necessary for the purposes for which it was collected, or as required by law. Marketing information is generally retained for up to two years from your last interaction with us or until you unsubscribe. Transaction-related information is retained for up to seven years for legal and tax purposes.

9. Contact Information

For any questions about this Statement or to exercise your rights, please contact:

Giesen Group Limited

46b Halwyn Drive, Christchurch, New Zealand

Email: enquiries@giesengroup.co.nz