California Privacy Notice

Last Updated: May, 10 2023

This California Privacy Notice describes how Vistar (“we” or “us”) uses, discloses, and processes California residents’ (“you” and “your”) personal information within the scope of the California Privacy Rights Act of 2020 (CPRA). This California Privacy Notice supplements the information contained in our Privacy Policy and applies only to residents of California. This California Privacy Notice should be read in conjunction with our Privacy Policy, which is incorporated by reference into this California Privacy Notice.

Your continued use of our website and/or apps means that you accept the terms of this Privacy Policy. To make sure you stay informed of all changes, you should check these policies periodically. Updates will be referenced by the "Last Updated" date shown above

Personal Information We Collect About You and How We Use It

The term “personal information” as used in this California Privacy Notice means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. “Personal information” does not include any publicly available, deidentified, aggregated or anonymized information. We also collect certain “sensitive personal information” as that term is defined by the CPRA. Your continued use of our website means that you accept the foregoing terms. To make sure you stay informed of all changes, you should check these policies periodically. Updates will be referenced by the "Last Updated" date shown above.

Category of Personal Information	Examples	Categories of Sources from which Personal Information Collected	Purposes for Collection / Use
Identifiers	Your name, alias, title, user ID, email  address, email communication  preferences, postal address, phone  number, signature, driver's license or  state ID card number, IP address	Directly from you  Cookies, beacons, pixels and related  technology  From third-party brokers	Fulfill orders and deliver your  purchases  Send you information and updates  Send you marketing communications  Contact you to obtain information about  your product preferences and how we can  improve our products, services, business,  website, and apps   Detect and prevent fraud against you  and / or us  To respond to your requests for information, products, services, including managing your online accounts with us  To identify and contact potential job candidates for recruitment purposes
Protected characteristics	Date of birth	Directly from you	Fulfill orders and provide refunds  Detect and prevent fraud against you and / or us
Payment Information	Including credit and debit card information	Directly from you	Fulfill orders and provide refunds  Detect and prevent fraud against you and / or us
Commercial Information	Purchase history, products or  services purchased, obtained or  considered, and other purchasing or  consuming histories or tendencies	Directly from you  Cookies, beacons, pixels, and  related technology  Our Service Providers	Provide you with appropriate products,  recommendations, and updates  Fulfill orders and deliver your purchases  Send you information and updates  Send you marketing communications  To improve our website and apps, set  defaul options, and provide you with a  better shopping and website experience
Employment information	Job title, employment history,  professional credentials, etc.	From third-party brokers	To identify and contact potential job  candidates for recruitment purposes
Education information	Degrees and certification information	From third-party brokers	To identify and contact potential job  candidates for recruitment purposes
Internet or other  electronic network activity  information	Browsing history, search history, and  information regarding your interactions  with our website, apps, and advertisement,  geolocation data inferred from your IP  address	Directly from you  Cookies, beacons, pixels and related  technology	For website administration and analytics  Improve our website and apps, set default  options, and provide you with a better  shopping and website experience  To make it easier for you to log into our  website and apps  Protect the security of our website and apps  Detect and prevent fraud against you  and / or us
Geolocation data	Your IP address	Directly from you  Cookes, beacons, pixels and related technology	Make it easier for you to log into our  website and apps  Improve our website and apps, set default  options, and provide you with a better  shopping and website experience  Protect the security of our website and apps  Detect and prevent fraud against you  and / or us
SENSITIVE PERSONAL INFORMATION
Sensitive Personal Identifiers	Your driver's license or state ID card  number	Directly from you	Fulfill orders and deliver your purchases  Detect and prevent fraud against you and / or us

How Long We Keep Your Personal Information

Vistar will only retain your personal information for as long as is needed for the purpose(s) for which it was collected and other permitted purposes, including retention of personal information pursuant to any applicable contract, law or regulation. Our retention periods vary based on business, legal and regulatory needs.

How We Share and Sell Personal Information

We do not “sell” your data as that term is commonly understood. However, we may disclose Personal Information to our third-party analytics partners, like Google Analytics, which may be considered a sale of Personal Information or sharing for cross-context behavioral advertising of Personal Information under California law. In the past 12 months, we have disclosed Identifiers, Commercial Information, and Internet or other electronic network activity information to our third-party analytics providers for the purpose of optimizing our website, services, and advertising.

How We Disclose Personal Information to Our Service Providers and Contractors

We may also disclose Personal Information to our service providers or contractors pursuant to a written contract. The information we have disclosed to our service providers or contractors in the past 12 months and the applicable business purpose is set forth in the chart below.

Applicable Business Purposes
Category of Personal Information or Sensitive Personal Information	Auditing & Ad Impressions	Security & Integrity	Functionality & Debugging	Short-Term /  Transient Use, Including Non- Personalized Advertising	Services Performed on Our Behalf	Marketing Services	Research & Development	Quality Control & Improvement of Our Products and Services
Identifiers	✔	✔	✔	✔	✔	✔	✔	✔
Payment Information					✔
Commercial information				✔	✔	✔	✔	✔
Internet or other electronic network  activity information	✔	✔	✔	✔	✔	✔	✔	✔
Geolocation data		✔	✔	✔	✔			✔

Submitting Requests Relating to Your Personal Information

California residents may submit requests relating to your personal information as described below by submitting a request through by email to privacyrequests@pfgc.com or by phone at 1-800-473-4434. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with any of the requests described below. To verify your identity, we may require you to provide certain information we are likely to already have on-file about you based on the type of relationship you have with us. If you exercise your right to request specific pieces of your personal information, we will require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.

Right to Opt-Out of the Sale and Sharing of Your Personal Information. California residents may opt-out of the sale of their personal information or the sharing of their personal information for cross-context behavioral advertising. To opt-out, click here, or download and use a browser supporting the Global Privacy Control (GPC) browser signal. If you choose to use the GPC signal, you will need to turn it on for each browser you use.

Right to Limit the Use of Your Sensitive Personal Information. Under the CPRA California residents may have the right to limit the use of their Sensitive Personal Information. Given how we use your Sensitive Personal Information, as described above, this right does not apply to you.

Right to Request More Information. This California Privacy Policy discloses our practices with respect to the collection of your personal information. In addition to these disclosures, you may also submit a request to know: (1) the specific pieces of personal information we have collected about you; (2) the categories of personal information we collected about you; (3) the categories of personal information we sold or shared about you and the categories of third parties to whom each category of personal information was sold or shared; (4) the categories of personal information we disclosed about you for a business purpose and the categories of persons to whom it was disclosed; and (5) a list of all third parties to whom we have disclosed personal information, as defined under California Civil Code Section 1798.83(e) (a/k/a the “Shine the Light Law”), during the preceding year for third-party direct marketing purposes.

Please note that due to the different requirements of the applicable laws, our response times may vary depending on the specific type(s) of information sought. We respond to all verifiable requests for information as soon as we reasonably can and no later than legally required.

Right to Correct Inaccurate Information. If you believe that any of the personal information we maintain about you is inaccurate, you may submit a request for us to correct that information. Upon receipt of a verifiable request to correct inaccurate personal information, we will use commercially reasonable efforts to correct the information as you direct.

Right to Request Deletion of Your Personal Information. You have the right to request that we delete your personal information. Following receipt of a verifiable request, we will let you know what, if any, personal information we can delete from our records. If we cannot delete all of your personal information, we will let you know why.

Right to Non-Discrimination for the Exercise of Your Privacy Rights. If you choose to exercise any of your rights you have the right to not receive discriminatory treatment by us.