Notice at Collection for California Residents

Effective Date: May 15, 2025

This Notice at Collection (this “Notice”) for California Residents supplements the information contained in Eataly USA LLC, with an address at 43 West 23rd Street, New York NY 10010, and Eataly Net USA LLC, with an address at 43 West 23rd Street, New York NY 10010, (“Eataly” or “we”) Privacy Policy and describes how Eataly collects and uses personal information from users who reside in the State of California across various platforms, including https://www.eataly.com/us_en, the Eataly Caffè application, other websites, mobile sites, services, applications, and platforms operated by Eataly where this Notice is featured or referenced, or where no separate Notice is provided, as well as from customers who reside in the State of California and visit or interact with us in our stores or through other channels (collectively, the “Sites”). The words “user”, “you” and “your” in this Notice refer to a user of the Sites.

We adopt this Notice to comply with the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act (CPRA) (collectively, the “CCPA”) and other California privacy laws, and any terms defined in the CCPA have the same meaning when used in this Notice.

Eataly may update this Notice at any time. Eataly may also provide consumers with additional privacy notices regarding its collection, use or disclosure of such information.

To view our full California privacy policy, visit https://www.eataly.com/us_en/eataly-caffe-privacy-policy-california-residents.

I. Information We Collect and Use

Eataly has collected the following categories of personal information from its consumers within the last twelve (12) months:

(See table on original page – image not included in this export)

Eataly may collect some sensitive personal information, such as your location and/or other personal data that may reveal racial or ethnic original, religious beliefs, mental or physical health diagnosis (e.g., health or dietary restrictions), sexuality or citizenship or immigration status, for the purpose of providing you with the product and service you requested.

Purposes for Collection and Use of Personal Information

We may collect and use the personal information for one or more of the following purposes:

• To fulfill or meet the reason you provided the information. For example, if you provide your personal information to purchase a product or service, we will use that information to process your order and deliver the product or provide the service. We may also save your information to facilitate new product orders or process returns;
• To monitor and analyze trends, usage, and activities in connection with our products and services;
• To provide, support, personalize, and develop our Eataly’s Sites, stores, products, and services;
• To create, maintain, customize, and secure your account with us;
• To process your requests, purchases, transactions, and prevent transactional fraud;
• To provide you with support and to respond to your inquiries, including investigating and addressing your concerns and monitoring and improving our responses;
• To provide you with email alerts, promotional offers and other notices concerning our services;
• To administer the loyalty program, facilitate contests, sweepstakes, and promotions and process and deliver entries and rewards;
• To personalize your Eataly’s Sites experience, and to deliver content, information, and product and service offerings relevant to your interests, including targeted offers and ads through our Sites, third-party sites, and via email, push notifications, or text message (with your consent, where required by law);
• To help maintain the safety, security, and integrity of our Eataly’s Sites, products and services, databases and other technology assets, our clients and business, and to ensure that our Sites are working as intended and for analytics, auditing and technical assistance purposes and other general business purposes. Further, we may use information collected to maintain the safety of our stores, protect our staff, and prevent and detect crime, damage, and nuisances;
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;
• As described to you when collecting your personal information or as otherwise set forth in the CCPA; and
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Eataly’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Eataly about our Sites users is among the assets transferred.

Eataly will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

I. Sharing for Cross-Context Behavioral Advertising or Selling Personal Information

In the preceding twelve (12) months, Eataly has not sold personal information. Eataly does not sell personal information. In the preceding twelve (12) months, Eataly has shared for cross-context behavioral advertising the following categories of personal information:

• A. Identifiers;
• B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e));
• C. Protected classification characteristics under California or federal law;
• D. Commercial information;
• E. Internet or other similar network activity;
• F. Sensory information;
• G. Inferences drawn from other personal information.

Right to Opt-out of Sharing for Cross-Context Behavioral Advertising or Selling

If you are age 16 or older, you have the right to direct us not to share your personal information for cross-context behavioral advertising at any time. We do not share for cross-context behavioral advertising the personal information of consumers we have actual knowledge are less than 16 years old.

To exercise the right to opt-out, you (or your authorized representative) may submit a request to us by visiting the following link: “Do Not Sell or Share My Personal Information”.

Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize personal information sales or sharing for cross-context behavioral advertising.

You do not need to create an account with us to exercise your opt-out rights. We will only use personal information provided in an opt-out request to review and comply with the request.

II. Data Retention

Eataly retains personal information only for as long as necessary to provide our services and process your requests, purchases, transactions, or for other business purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements.