Privacy Statement
Last Updated: April 19, 2026
Waterloo Sparkling Water Corp. (“we,” “us,” or “our”) wants you to be familiar with how we collect, use, and disclose personal information. This Privacy Policy describes our practices in connection with information that we collect through:
- Websites operated by us from which you are accessing this Privacy Policy (the “Websites”);
- Our social media pages we operate (collectively, our “Social Media Pages”);
- HTML-formatted email messages that we send to you that link to this Privacy Policy or other communications with you; and
- Offline business interactions you have with us.
Collectively, we refer to the Websites, Social Media Pages, emails, and offline business interactions as the “Services.”
PERSONAL INFORMATION WE COLLECT
“Personal information” for purposes of this Privacy Policy is information that identifies you as an individual or relates to an identifiable individual.
| Personal information we collect from you | |
| Data Categories | Examples |
| Name, Contact, and Location Details | First name, last name, email address, and zip code |
| Business Contact Details | Business mailing address, telephone number, and email address |
| Survey Responses | Responses you choose to provide when responding to customer surveys |
| Requests and Feedback | Information you choose to provide when making a customer support request or providing feedback on our products or Services |
| Purchase and Transaction Details | Information regarding your purchases and transactions (for example, in connection with support requests) |
| User Content | Reviews about our Services and other content that you may create or share with us during our relationship, including posts on our Social Media Pages |
| Preferences | Language, preferred products, and other feedback/preferences that you might express during your use of our Services |
| Marketing and Communications | Your choices regarding our newsletters, surveys, and other marketing/advertising displayed or provided to you, and other choices you make about how we contact you |
| Personal information collected automatically through your use of our Services | |
| Data Categories | Examples |
| Online Activity Data | Pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our marketing emails or clicked links within them. |
| Browser and Device Information | Certain information is collected by most browsers or automatically through your device, such as your Media Access Control (MAC) address, computer type (Windows or Mac), screen resolution, operating system name and version, device manufacturer and model, language, Internet browser type and version and the name and version of the Services you are using. We use this information to ensure that the Services function properly. |
| IP Address | Your IP Address is a number that is automatically assigned to your computer by your Internet Service Provider. An IP Address may be identified and logged automatically in our server log files whenever a user accesses the Services, along with the time of the visit and the pages visited. We use IP Addresses for purposes such as calculating usage levels, diagnosing server problems, and administering the Services. We may also derive your approximate location from your IP Address. |
| We use the following tools for automatic data collection | |
| Cookies and Similar Technologies | We and our service providers use cookies, pixels, clear gifs, web beacons, and similar online tracking technologies (collectively, “Cookies”) on the Services. Cookies allow us to collect such information as browser type, time spent on the Services, pages visited, language preferences, unique identifiers, how you interact with our Services, including with our chatbox, content you view, click on, or share, screen actions, and other traffic data, including to determine which areas and features of the Services are popular and count visits. This information is used for security purposes, to power the interactive features of our Services, to facilitate navigation, to display information more effectively, to personalize your experience, to develop and improve the performance, functionality, and design of the Services, for advertising and marketing, and to help keep the Services free of bugs or errors. We also gather statistical information about use of the Services in order to continually improve their design and functionality, understand how they are used, and assist us with resolving questions regarding the Services. Cookies are also used to track the actions of users of the Services (including email recipients), conduct advertising, measure the success of our marketing campaigns, and compile statistics about usage of the Services and response rates. Cookies further allow us to select which of our advertisements or offers are most likely to appeal to you and display them while you are on the Services. We may also use Cookies in online advertising to track responses to our ads. We do not currently respond to browser do-not-track signals. If you do not want information collected through cookies, most browsers allow you to automatically decline cookies or be given the choice of declining or accepting a particular cookie (or cookies) from a particular website. You may also wish to refer to http://www.allaboutcookies.org/manage-cookies/index.html. If you do not accept cookies, you may experience some inconvenience in your use of the Services. |
| Analytics | We use Google Analytics, which uses cookies and similar technologies to collect and analyze information about use of the Services and report on activities and trends. This service may also collect information regarding the use of other websites, apps, and online resources. You can learn about Google’s practices by going to www.google.com/policies/privacy//, and exercise the opt-out provided by Google by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout. |
| Other sources from which we collect personal information | |
| Social Media | Profile pictures, social media account ID, and other public social media profile information, including lists of friends/followers on social media |
| Other Third Parties | We may collect information from other third-party sources, such as promotional or giveaway partners. |
We need to collect personal information in order to provide the requested Services to you. If you do not provide the information requested, we may not be able to provide the Services. If you disclose any personal information relating to other people to us or to our service providers in connection with the Services you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.
HOW WE USE PERSONAL INFORMATION
Below we provide an overview of how we and our service providers use personal information in connection with our Services:
| Purposes | Examples |
| Providing our Services | Contacting and interacting with you, offering products for sale, receiving and responding to your requests, providing the Services, processing payments, shipping and fulfilling your order, verifying your information, and sending you administrative information, such as changes to our terms, conditions, and policies. |
| Operations and General Business | Troubleshooting and diagnostic testing, conducting performance analyses of our systems and Services, testing new system features to evaluate their impact, system and log maintenance, technical support, system debugging, and hosting data. |
| Marketing | Sending you our marketing, updates, and promotions that we think may be of interest to you. |
| Relationship Building and Engagement | Facilitating and responding to any social sharing and posts on our Services, and other customer relationship building activities. |
| Personalizing the Services | Personalizing our interactions with you and providing you with information and/or offers tailored to your interests, such as delivering content via our Services that we believe will be relevant and interesting to you. |
| Improving and Developing Products and Services | Conducting data analysis (e.g., monitoring and analyzing use of the Services and utilizing data analytics to improve the efficiency of our Services), developing new products and Services, considering ways to enhance, improve, repair, maintain, or modify our products and Services, identifying usage trends (e.g., understanding which parts of our Services are most interesting to users), determining the effectiveness of our promotional campaigns, and operating and expanding our business activities. |
| Aggregation, De-identification, and/or Anonymization | Aggregating, de-identifying, and/or anonymizing personal information so that it will no longer be considered personal information. |
| Security and Fraud Prevention | Conducting audits, verifying that our internal processes function as intended and are compliant with legal, regulatory, or contractual requirements, and monitoring for and preventing fraud, including maintaining system security. |
| Legal and Compliance | Fulfilling our legal and compliance-related obligations, including complying with applicable laws, complying with legal processes, responding to requests from public and government authorities, meeting national security or law enforcement requirements, and complying with requirements set by industry-specific supervisory bodies. Enforcing our terms and conditions and standards, protecting our operations, protecting the rights, privacy, or property of our business, responding to auditors, allowing us to pursue available legal remedies and make insurance claims, defend claims, and limit the damages that we may sustain. |
HOW WE DISCLOSE PERSONAL INFORMATION
Here are the types of entities to which we may disclose personal information in providing the Services.
| Service Providers and Contractors | Our service providers and contractors include companies and individuals that provide services on our behalf or help us operate our Services or our business, such as companies that provide Website hosting services (including through provision of tools that enable us to analyze your interactions on our Services), data analysis, payment processing, order fulfilment, shipping support, information technology, customer support, email delivery, marketing, fraud prevention, auditing, and other services. |
| Third Parties for Marketing Purposes | We may disclose personal information to ad networks and social media platforms for advertising and marketing purposes. |
| Giveaway Partners | We may disclose personal information to our promotional or giveaway partners to administer the event or so that they can provide prizes or other giveaways to our participating customers. |
| Professional Advisors | We may use accountants, auditors, experts, consultants, lawyers, and financial institutions to support our business. |
| Government Authorities and Others | If we are required by law or legal process or if we deem the disclosure appropriate for other legal, compliance, or fraud-prevention purposes, we may disclose information to law enforcement, public, regulatory, and government authorities, or courts, or other entities that obtain valid subpoenas. |
| Other Online Services | When you interact with us, you may choose to share information and content on our Social Media Pages and other online services. Please note that any information you post or disclose through these services will become public and may be available to other users and the general public. |
| Business Transferees | We may disclose or transfer your personal information to third parties such as acquiring entities and their advisors in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings). |
SECURITY
We seek to use reasonable organizational, technical, and administrative measures to protect personal information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately.
YOUR CHOICES
If you no longer want to receive marketing-related emails from us on a going-forward basis, you may opt-out by following the unsubscribe instructions in any such message.
We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you opt out of receiving marketing from us, we may still send you important administrative messages, from which you cannot opt out.
If you are a U.S. consumer, please see the section at the end of this policy entitled “ADDITIONAL INFORMATION FOR U.S. CONSUMERS” for further information on privacy choices.
JURISDICTION AND CROSS-BORDER TRANSFER
We are located in the United States, and our Services are intended for individuals located in the United States. We may store and process your personal information in any country where we have facilities or in which we engage service providers. By using the Services, you understand that your information will be transferred to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country.
THIRD–PARTY SERVICES
This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any website or service to which the Services link. The inclusion of a link on the Services does not imply endorsement of the linked site or service by us or by our affiliates.
In addition, we are not responsible for the information collection, use, disclosure, or security policies or practices of other organizations, such as Facebook, Twitter, Instagram, YouTube, Pinterest, LinkedIn, Apple, Google, Microsoft, or any other app developer, app provider, social media platform, operating system provider, wireless service provider, or device manufacturer, including with respect to any Personal Information you disclose to other organizations through or in connection with our Social Media Pages.
THIRD-PARTY ADVERTISING
We use third-party advertising companies to serve advertisements regarding goods and services that may be of interest to you when you access and use the Services and other websites or online services. You may receive advertisements based on information relating to your access to and use of the Services and other websites or online services on any of your devices, as well as on information received from third parties. These companies place or recognize a unique Cookie on your browser. They also use these technologies, along with information they collect about your online use, to recognize you across the devices you use, such as a mobile phone and a laptop.
If you would like more information about this practice, and to learn how to opt out of it in desktop and mobile browsers on the particular device on which you are accessing this Privacy Policy, please visit http://optout.aboutads.info/#/ and http://optout.networkadvertising.org/#/.
USE OF SERVICES BY MINORS
The Services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from individuals under 13.
UPDATES TO THIS PRIVACY POLICY
The “Last Updated” legend at the top of this Privacy Policy indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on the Services.
CONTACTING US
If you have any questions or concerns regarding this Privacy Policy, please contact us at product@drinkwaterloo.com.
ADDITIONAL INFORMATION FOR U.S. CONSUMERS
Pursuant to U.S. state consumer privacy laws, we are providing the following additional details regarding the categories of personal information we collect, use, and disclose about U.S. consumers in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. This section supplements the information provided in the Privacy Policy, above.
NOTICE AT COLLECTION
Collection, Processing, Disclosure, and Sharing of Personal Information
The following chart details which categories of personal information we collect and process, as well as which categories of personal information we disclose for our operational business purposes, including within the preceding 12 months. The chart also details the categories of personal information that we “share” for purposes of cross-context behavioral or targeted advertising, including within the preceding 12 months.
| Categories of Personal Information | Disclosed to Which Categories of Recipients for Operational Business Purposes (See “How We Disclose Personal Information” above for a detailed description of each Processing Purpose) | Shared with Which Categories of Third Parties for Cross-Context Behavioral or Targeted Advertising | Processing Purposes (See “How We Use Personal Information” above for a detailed description of each Processing Purpose) | |
| Identifiers, such a name, postal address, email address, phone number, unique personal identifiers, IP address, other online identifiers | Service Providers and Contractors; Affiliates; Professional Advisors; Government Authorities and Others; Other Online Services (where you choose to disclose personal information) | Ad networks; social media platforms | Providing our Services; Operations and General Business; Marketing; Relationship Building and Engagement; Personalizing the Services; Improving and Developing Products and Services; Aggregation, De-identification, and/or Anonymization; Security and Fraud Prevention; Legal and Compliance | |
| Personal information as defined in the California customer records law, such as name, contact information, company employment information | Service Providers and Contractors; Affiliates; Professional Advisors; Government Authorities and Others; Other Online Services (where you choose to disclose personal information) | None | Providing our Services; Operations and General Business; Marketing; Relationship Building and Engagement; Personalizing the Services; Improving and Developing Products and Services; Aggregation, De-identification, and/or Anonymization; Security and Fraud Prevention; Legal and Compliance | |
| Protected Class Information, such as characteristics of protected classifications under California or federal law, such as age | Service Providers and Contractors; Affiliates; Professional Advisors; Government Authorities and Others | None | Providing our Services; Operations and General Business; Relationship Building and Engagement; Personalizing the Services; Improving and Developing Products and Services; Aggregation, De-identification, and/or Anonymization; Security and Fraud Prevention; Legal and Compliance | |
| Commercial Information, such as transaction information | Service Providers and Contractors; Affiliates; Professional Advisors; Government Authorities and Others; Other Online Services (where you choose to disclose personal information) | None | Providing our Services; Operations and General Business; Marketing; Relationship Building and Engagement; Personalizing the Services; Improving and Developing Products and Services; Aggregation, De-identification, and/or Anonymization; Security and Fraud Prevention; Legal and Compliance | |
| Internet or network activity information, such as interactions with our online properties or ads | Service Providers and Contractors; Affiliates; Professional Advisors; Government Authorities and Others | Ad networks; social media platforms | Providing our Services; Operations and General Business; Marketing; Relationship Building and Engagement; Personalizing the Services; Improving and Developing Products and Services; Aggregation, De-identification, and/or Anonymization; Security and Fraud Prevention; Legal and Compliance | |
| Geolocation Data, such as approximate location derived from IP address | Service Providers and Contractors; Affiliates; Professional Advisors; Government Authorities and Others] | Ad networks; social media platforms | Providing our Services; Operations and General Business; Marketing; Relationship Building and Engagement; Personalizing the Services; Improving and Developing Products and Services; Aggregation, De-identification, and/or Anonymization; Security and Fraud Prevention; Legal and Compliance | |
| Audio/Video Data. Audio, electronic, visual, and similar information, such as video recordings taken at our events for our business purposes | Service Providers and Contractors; Affiliates; Professional Advisors; Government Authorities and Others | None | Providing our Services; Operations and General Business; Relationship Building and Engagement; Improving and Developing Products and Services; Aggregation, De-identification, and/or Anonymization; Security and Fraud Prevention; Legal and Compliance | |
| Employment Information. Professional or employment-related information, such as business contact information and company title | Service Providers and Contractors; Affiliates; Professional Advisors; Government Authorities and Others; Other Online Services (where you choose to disclose personal information) | None | Providing our Services; Operations and General Business; Marketing; Relationship Building and Engagement; Personalizing the Services; Improving and Developing Products and Services; Aggregation, De-identification, and/or Anonymization; Security and Fraud Prevention; Legal and Compliance | |
To request to opt out of any future targeted advertising, including the “sharing” of your personal information for cross-context behavioral advertising, click here.
We do not “sell” personal information, as defined under applicable law, and we have not done so in the 12 months preceding the date this Privacy Policy was last updated. Without limiting the foregoing, we do not sell or knowingly “share” the personal information, as defined under applicable law, of minors under 16 years of age.
Retention Periods
We retain each category of personal information, including any sensitive personal information, for as long as needed or permitted in light of the purpose(s) for which it was collected. The criteria used to determine our retention periods include:
- The length of time we have an ongoing relationship with you and provide services to you, for example, for as long as you have an account with us or keep using our services, and the length of time thereafter during which we may have a legitimate need to reference your personal information to address issues that may arise;
- Whether there is a legal obligation to which we are subject, for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them; and
- Whether retention is advisable in light of our legal position, such as in regard to applicable statutes of limitations, litigation or regulatory investigations.
Rights and Requests
You may make the following requests, subject to applicable law:
- To know whether we process your personal information, and to access such personal information.
If you are a California consumer, you may also request that we disclose to you the following information:
- The categories of your personal information we collected and the categories of sources from which we collected your personal information;
- The business or commercial purpose for collecting or “sharing” your personal information;
- The categories of your personal information that we “shared” and the categories of third parties to whom we “shared” your personal information;
- The categories of your personal information that we disclosed for a business purpose and the categories of service providers or contractors to whom we disclosed your personal information; and
- The categories of third parties to whom we disclosed your personal information.
If you are an Oregon or Minnesota consumer, you may also request that we disclose to you the following information:
- The categories of personal information we process about you; and
- The third parties to whom we have disclosed your personal information.
If you are a Delaware or Maryland consumer, you may also request that we disclose to you the categories of third parties to whom we disclosed your personal information.
- To correct inaccuracies in your personal Information.
- To have your personal information deleted.
- To receive the specific pieces of your personal information, including a copy of your personal information in a portable format.
- To opt out of targeted advertising, including the “sharing” of your personal information for cross-context behavioral advertising.
You have the right not to be unlawfully retaliated against for exercising your privacy rights under applicable law.
To make a request under #1-4, above, please contact us at webpage for submitting requests online or 1-866-568-3566. We will verify and respond to your request consistent with applicable law, taking into account the type and sensitivity of the personal information subject to the request. We may decline to honor your request where an exception applies. We may need to request your name, email address and phone number, in order to verify your identity and protect against fraudulent requests. If you make a request to delete, we may ask you to confirm your request before we delete your personal information.
To request to opt out of any future targeted advertising, including the “sharing” of your personal information for cross-context behavioral advertising, click here.
We also process opt-out preference signals, such as the Global Privacy Control. These signals set your opt-out preferences only for the particular browser or device you are using. For information about how to use the Global Privacy Control, please visit https://globalprivacycontrol.org/.
Appeal Process
If we refuse to take action on your request, you may appeal this refusal within a reasonable period after you have received notice of the refusal. You may file an appeal by contacting us via product@drinkwaterloo.com or 1-866-568-3566.
Authorized Agents
If an agent would like to make a request on your behalf as permitted under applicable law, the agent may use the submission methods noted in the section entitled “Rights and Requests.” We will process the agent’s request consistent with applicable law. As part of our verification process, we may request that the agent provide, as applicable, proof concerning their status as an authorized agent. In addition, we may require that you verify your identity as described in the section entitled “Rights and Requests” or confirm that you provided the agent permission to submit the request.
De-Identified Information
Where we maintain or use de-identified information, we will continue to maintain and use the de-identified information only in a de-identified fashion and will not attempt to re-identify the information.
