BUNN Privacy Policy

Last Revised: July 31, 2026; Effective: August 30, 2026

For a printable version of this Policy, please click here.

INTRODUCTION

Bunn Commercial LP and Bunn-O-Matic Corporation of Canada ("BUNN," "we," "us," "our") respects your privacy, security, and online safety. This privacy policy ("Policy") describes our policies concerning your personal information that we collect and process when you visit websites or services (including any mobile applications) controlled by BUNN where this Privacy Policy is posted, including through our website at www.bunn.com ("Websites"). By accessing or using the Websites, you acknowledge and agree to this Privacy Policy and to our Terms of Use ("Terms") at http://www.bunn.com/terms-of-use. If you do not agree, do not use the Websites. We may update this Privacy Policy from time to time, so please review it periodically.

WHAT WE MEAN BY "PERSONAL INFORMATION"

"Personal information" or "personal data" is information that identifies, relates to, describes, is about, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.

NOTICE AT COLLECTION

Depending on how you interact with us, we may collect and use identifiers, financial information, demographic information, audio information (such as inbound call recordings), commercial information, sensitive personal information, general geolocation data, professional or employment-related information, and internet or other electronic network activity information, as well as inferences drawn from the foregoing. We use this information to provide, maintain, and improve our Websites and services, to process orders, to communicate with you (including marketing), to evaluate job applications, and as otherwise permitted or required by applicable law. We will retain your personal information for as long as needed to fulfill the purposes for which it was collected and to comply with our legal obligations, resolve disputes, and enforce our agreements. We do not sell your personal information for monetary compensation, but we may share it with third-party advertising and analytics partners as described in this Policy.

THE PERSONAL INFORMATION WE COLLECT & THE MEANS OF COLLECTION

We collect personal information directly from you automatically, through the Websites, and from third parties.

• Direct interactions. You may provide personal information directly to us, such as when you register, purchase, request service, browse products or services; request information; contact support; create an account; subscribe to communications; respond to marketing; enter a promotion or survey; provide feedback; email us; use live chat; or call us (inbound calls may be recorded).
• Automated technologies. We and our partners use cookies and other tracking technologies, pixels, web beacons, server logs, and similar technologies. We may also receive data about you if you visit other websites employing our Automated Technologies. Our Privacy Center is here: https://www.bunn.com/privacy-center, and you can opt out of advertising and analytics cookies here: https://www.bunn.com/do-not-sell.
• Pixels and analytics. We use tools such as the Meta pixel and Google Analytics to understand use of the Websites, to optimize content and advertising, to limit repetitive ads, and to measure performance. You may opt out of Google Analytics via https://tools.google.com/dlpage/gaoptout.
• Third parties and public sources. We may receive personal information from service providers (for example, payment processors who tokenize payment card information) and analytics partners.

We collect, and have collected, the following categories of personal information and sensitive personal information about consumers in the preceding 12 months:

• Identifiers: name, username, addresses, email, telephone number, IP address, account identifiers, and company details.
• Financial information: payment details processed by third-party processors; tokenized card information.
• Demographic information: age, gender, and similar characteristics as permitted by law.
• Commercial information: purchase history, products or services considered, service information, interactions with our Websites and communications, interests, preferences, and feedback.
• Sensitive Personal Information: information that reveals an individual's financial account information, debit card or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.
• Professional or employment-related information: role at your company.
• Internet or other electronic network activity: device and browser details, operating system, plug-ins, usage times, features used (including live chat), communications content, language and marketing preferences.
• General geolocation: time zone and city-level location.
• Audio, electronic, or visual information: inbound call recordings and similar information, where permitted by law and consistent with your choices.
• Inferences: profiles reflecting your preferences, characteristics, predispositions, and behavior.

HOW WE USE PERSONAL INFORMATION

We use personal information for any of the following business purposes:

JOB APPLICANT INFORMATION

If you apply for a job with us, we may collect identifiers; government-issued identification; health information (including disability information); education, employment, and employment history; background check information and results from our third-party vendors (such as criminal background history); publicly available information; references; and other information you provide. We use this information to assess your application, communicate during the hiring process, provide accommodations, verify eligibility, and, if hired, to establish and manage employment. If you apply via a third-party service, that service's privacy policy applies in addition to ours.

COOKIES, PIXELS, AND SIMILAR TECHNOLOGIES

• Cookies help operate the Websites, recognize returning users, save preferences (such as login), measure traffic, and track the effectiveness of campaigns. You can set your browser to block or alert you about cookies, but some features may not function.
• Web beacons on our Websites and in marketing emails help monitor traffic patterns, measure email performance, and improve services.
• Pixels from partners, such as Meta, help us show relevant ads and measure performance. You can opt out of sharing data with Meta through its pixel by clicking here.
• Google Analytics helps us understand use of the Websites. You can opt out using Google's tools by clicking here.

Notice to Quebec Residents: Automated Technologies may include functions that identify, locate, or profile individuals; in Quebec, such functions must be deactivated by default and activated only as described in our cookie banner.

"DO NOT SELL," DO NOT TRACK, AND THE GLOBAL PRIVACY CONTROL

We do not sell personal information for monetary consideration. We may "share" personal information for cross-context behavioral advertising or targeted advertising with analytics and advertising partners. You can opt out via the Digital Advertising Alliance ("DAA") program here (DAA-USA), here (DAA-Canada), and here (DAA-EU). For information and to download DAA's AppChoices tool, see here. To opt out of our sale or sharing of your personal information for cross-contextual behavioral advertising or targeted advertising, click here and reject all but Essential cookies.

We honor opt-out preference signals, such as the Global Privacy Control ("GPC"), as another way to opt out of the "sale" of your personal information, or the sharing of it for targeted advertising purposes, and to limit the use of your sensitive personal information. The GPC is available here. We honor signals from the Global Privacy Control in a frictionless manner. For more information on the GPC, see here. Please note that you should enable the GPC separately for each browser and device you use to access the Services.

The "Do Not Track" ("DNT") privacy preference is an option that may be made in some web browsers allowing you to opt-out of tracking by websites and online services. At this time, global standard DNT technology is not yet finalized and not all browsers support DNT. We therefore do not recognize DNT signals and do not respond to them. To find out more about "Do Not Track," please visit http://www.allaboutdnt.com.

DISCLOSURE REGARDING CHILDREN'S DATA

The Websites are not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If you are under 18, please do not use the Websites and do not provide any personal information to us. If you are a parent or legal guardian and become aware that a child under 18 has provided us with personal information without your consent, please contact us at DPO@bunn.com.

EMAIL MARKETING PREFERENCES

You may unsubscribe from our email marketing at any time via the "Unsubscribe" link in the message or your account settings. Transactional messages (such as receipts) will still be sent as permitted by law.

DISCLOSURES OF YOUR PERSONAL INFORMATION

We disclose, and in the preceding 12 months have disclosed, your personal information with your consent or as permitted or required by law, with:

• Our corporate affiliates;
• Delivery carriers to administer and deliver your orders;
• Service providers that help host and operate the Websites;
• Service providers that help us maintain the security of your information;
• Service providers that store and help us manage and use our data, such as cloud providers, Enterprise Resource Planning (ERP) and Customer Relationship Management (CRM) providers, and data management platforms;
• Service providers that support customer service;
• Service providers that assists us with our recruiting;
• Service providers that facilitate and manage our communications with you, including through email and Website chat functions;
• Service providers that provide advertising, marketing, and analytics services to help us understand interactions with the Websites and improve our Websites, advertising and marketing, and communications with you;
• Service providers that process payment transactions;
• Personnel who need access for business purposes to provide and operate the Websites and related services;
• Professional advisers (e.g., lawyers, bankers, auditors, insurers) and regulators or authorities as required; and
• Social media services.

We will also disclose your personal information:

• To comply with law or legal process, protect our interests or property, prevent fraud or illegal activity, or protect the rights, property, or safety of any person; and
• In connection with business transfers related to business transactions such as mergers, acquisitions, asset sales, or restructurings.

DATA SECURITY

The security of your information is very important to us. We implement reasonable technical and organizational security measures to protect the personal information submitted to us, both during transmission and once it is received. We take steps to ensure that such data remains private and confidential, and restrict access to personal information to our employees, contractors, and agents who need to know that information in order to operate, develop, or improve the Websites. These individuals are bound by confidentiality obligations and may be subject to discipline if they fail to meet these obligations.

Please understand, however, that no data transmissions over the Internet can be guaranteed to be 100% secure. Consequently, we cannot ensure or warrant the security of any information you transmit to us, and you understand that any information that you transfer to us is done at your own risk. If we learn of a security breach, we may attempt to notify you electronically so that you can take appropriate protective steps. By using the Websites or providing information to us, you agree that we may communicate with you electronically regarding security, privacy and administrative issues relating to your use of the Websites. We may post a notice via the Websites if a security breach occurs. We may also send an email to you at the email address you have provided to us or postal mail in these circumstances. Depending on where you live, you may have a legal right to receive notice of a security breach in writing. If you have any questions about the security of your personal information, you can contact us at DPO@bunn.com.

RETENTION OF PERSONAL INFORMATION

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, reporting, or training requirements, unless a longer retention period is required or permitted by law.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information; the potential risk of harm from unauthorized use or disclosure of the personal information; the purpose for which we use the personal information; whether we can achieve the purposes through other means; and the applicable legal requirements. If we de-identify personal information, we will maintain it in de-identified form and not attempt to re-identify it except as required or permitted by law.

LINKS TO THIRD-PARTY WEBSITES

Our Websites may link to third-party sites. After leaving our Websites, third-party policies govern, and we are not responsible for the data collection and use practices of third-parties. We recommend you review third-party policies before providing personal information.

CHAT FEATURES

Our Websites may include third-party chat features, which may use artificial intelligence. These features may collect contents of your communications with the chat feature and any personal information you provide. Please discontinue use of the chat feature if you do not consent to such collection and use of your information.

DISCLAIMER REGARDING VIDEO CONTENT

The site may contain video content, audiovisual content, or content of a like nature (collectively, "Video Content"). In connection with our provision of Video Content, the Websites may utilize online tracking technologies and code-based tools, including, but not limited to, Software Development Kits, pixels, and Cookies. Cookies on the site may result in information about your activity on the site being transmitted from your browser to us and third parties, which, in turn, may result in the display of targeted advertisements on third-party websites, platforms, and services, including advertisements for our content. In addition, whether cookies on the site result in your browser's transmission of information to third parties depends on a number of factors that may be outside of our knowledge or control, including what third-party websites you use, what personal information you have provided to such third parties, and whether (and the extent to which) you have limited the use of cookies by the operators of those third-party websites, platforms, and services.

DATA TRANSFERS (CANADA)

We are headquartered in the United States and use service providers worldwide; your personal information may be collected, transferred, used, or stored outside of Canada and may be accessible to foreign authorities. If you are located in Quebec, your personal information may be communicated outside Quebec. If you are in Alberta, you may contact us for information regarding our policies and practices with service providers outside Canada.

DATA TRANSFERS (EEA, SWITZERLAND, AND THE UK)

BUNN is headquartered in the United States, and we have operations, entities, and service providers in the United States and throughout the world. Many of our external third parties are based outside the European Economic Area ("EEA"), so their processing of your personal data will involve a transfer of data outside the EEA.

We will take steps to ensure that your personal data receives an adequate level of protection in the jurisdictions in which we process it. Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.

YOU ACKNOWLEDGE THAT THE LAWS OF THE UNITED STATES TREAT YOUR PERSONAL INFORMATION IN A MANNER THAT MAY BE SUBSTANTIALLY DIFFERENT FROM, AND LESS PROTECTIVE THAN, THE TREATMENT REQUIRED UNDER THE LAWS OF OTHER COUNTRIES AND JURISDICTIONS. IF YOU DO NOT WANT YOUR PERSONAL INFORMATION TRANSFERRED TO THE UNITED STATES, YOU SHOULD NOT SHARE YOUR PERSONAL INFORMATION WITH US OR MAKE USE OF THE WEBSITES.

TO THE EXTENT ALLOWED BY THE LAW OF THE COUNTRY IN WHICH YOU ARE LOCATED, YOU EXPRESSLY WAIVE ANY RIGHT YOU MAY HAVE TO REQUIRE US TO TREAT YOUR PERSONAL INFORMATION IN ACCORDANCE WITH THE LAWS OF ANY COUNTRY OR JURISDICTION OTHER THAN THE UNITED STATES. HOWEVER, THE FOREGOING WAIVER MAY NOT BE LEGALLY BINDING IN SOME COUNTRIES, SUCH AS THE MEMBER STATES OF THE EUROPEAN UNION OR THE UNITED KINGDOM. TO THE EXTENT IT IS NOT LEGALLY BINDING IN THE COUNTRY IN WHICH YOU ARE LOCATED, THE FOREGOING WAIVER DOES NOT APPLY TO YOU.

YOUR LEGAL RIGHTS IN THE EEA, SWITZERLAND, AND THE UK

Subject to applicable law, you may have rights to access, correct, erase, object to, restrict, and port your personal data, and withdraw your consent where processing is based on consent. We may request information to verify identity and may charge a fee or refuse requests that are unfounded, repetitive, or excessive. We will respond within the time periods permitted by law.

Users who are located in the EEA, the European Union, the UK, or Switzerland have the right to lodge a complaint about our data collection and processing actions with the relevant supervisory authority in their country of residence. Contact details for data protection authorities are available here:

• In the EEA: https://edpb.europa.eu/about-edpb/about-edpb/members_en
• In the UK: https://ico.org.uk/global/contact-us/contact-us-public/
• In Switzerland: https://www.edoeb.admin.ch/edoeb/de/home/deredoeb/kontakt.html

To exercise any of these rights, please contact us using the information provided below.

PRIVACY RIGHTS FOR CALIFORNIA RESIDENTS

The California Consumer Privacy Act provides California residents with the following rights:

• You have the right to know and right to access information about the categories and specific pieces of personal information we have collected about you, as well as the categories of sources from which such information is collected, the purpose for collecting such information, and the categories of third parties with whom we share such information. You also have the right to know if we have sold or shared your personal information. You may also request a copy of the personal information we have collected, and upon request, we will provide this information to you in readily usable electronic form.
• You have the right to request the deletion of your personal information, subject to certain exceptions.
• You have the right to opt out of the "sale" or "sharing" of your personal information to third parties. This includes opting out of targeted advertising.
• You have the right to correct your personal information if inaccurate.
• You have the right to limit the use and disclosure of your sensitive personal information if we use such information to infer characteristics about you. Note that for precise geolocation information collected through a mobile device, you will need to update your settings. To do this on an iPhone, (1) go to Settings > Privacy > Location Services > and choose an app; (2) Select the app > tap on "location;" (3) Scroll down and slide the "Precise Location" toggle to Off. To do this on an Android, (1) go to Location Services > Google Location Accuracy; and (2) Toggle Improve Location Accuracy to Off.
• You have the right to not be discriminated against for exercising any of these rights, including where financial incentives are offered.

PRIVACY RIGHTS FOR RESIDENTS OF OTHER U.S. STATES

Residents of certain states may have rights to access, delete, and correct personal information; to obtain lists of third parties to whom we disclose personal information; to opt out of sales, targeted advertising, or profiling in furtherance of decisions with legal or similarly significant effects; and to be free from discrimination.

PRIVACY RIGHTS FOR RESIDENTS OF CANADA

Under certain circumstances, Canadian residents may have rights under privacy laws in relation to their personal information. Such rights may include the following:

• Request access to or correction of your personal information. Subject to certain permitted or required exceptions under applicable laws, you may have the right to access, update and/or correct your personal information that we hold. You may be required to provide proof of identity to help us avoid disclosing your personal information to someone other than yourself.
• Withdraw your consent. You can generally withdraw your consent to continued use, communication or disclosure of your personal information, subject to contractual restrictions and reasonable notice. We may need to retain your personal information for certain permitted purposes, even after you withdraw your consent, to use it for the purposes that it was collected. If you withdraw your consent, we may be unable to provide you with certain products, services or Website features.

HOW TO EXERCISE YOUR RIGHTS

To exercise rights, ask a question, or submit a complaint, contact our Data Protection Officer at DPO@bunn.com or by phone at 217-585-7585 or 844-376-2866.

Authorized agents may submit requests on your behalf as permitted by law; we may require proof of authorization and identity verification.

OUR VERIFICATION PROCESS

We will provide verification instructions, which may require you to submit information we can match to our records. We will confirm receipt within 10 business days and aim to respond within the time period permitted by law (45 calendar days, lawful extension permitting). If we must deny a request, we will explain why, as required by law.

CALIFORNIA "SHINE THE LIGHT"

California residents may request information about our disclosures of personal data to third parties for their own direct marketing in the prior calendar year by writing to us or emailing DPO@bunn.com with "Request for California Privacy Information." We will respond as required by law. Not all information sharing is covered by this law.

NEVADA DISCLOSURE

Residents of Nevada have the right to opt out of the sale of certain personal information to third parties. We do not sell your personal information as defined by Nevada law.

U.S. NOTICE OF FINANCIAL INCENTIVE

We may offer discounts and special offers in exchange for your contact information (e.g., name and email). When you sign up for an email list or other discounts and special offers, you opt in to a financial incentive. You may withdraw at any time by opting out of our emails. When legally required, we assign a good-faith value to personal information related to the estimated cost of providing the relevant financial incentive(s) for which the information was collected.

UPDATES TO THIS POLICY

We may modify this Policy; the most current version governs and will be posted at http://www.bunn.com/privacy-policy. We will notify you of material changes to this Policy by posting a notice on the Websites. You may contact us to obtain prior versions.

CONTACT US

If you have questions, requests, or complaints about this Policy or our privacy practices, please contact us as provided below:

Bunn Commercial LP and Bunn-O-Matic Corporation of Canada
5020 Ash Grove Drive
Springfield, Illinois 62711
+1 (217) 529-6601

Data Protection Officer: DPO@bunn.com | +1 217-585-7585 or 844-376-2866