Effective Date: March 2, 2026

1. Introduction

Lamb's Beverage Company dba Original Henry Lambert's Beer ("Company," "we," "us," or "our") is a New York City–based beer company committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website at www.lambertsbeer.com (the "Site"), place an order for beer, or otherwise interact with us.

This Privacy Policy is designed to comply with applicable federal and state laws, including the New York Stop Hacks and Improve Electronic Data Security Act ("SHIELD Act"), the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA"), and other applicable state privacy laws.

By using the Site, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described herein, please do not use the Site.

2. Information We Collect

2.1 Personal Information You Provide

We may collect personally identifiable information that you voluntarily provide to us when you:

• Create an account or register on the Site
• Place an order for beer or other products
• Subscribe to our newsletter or mailing list
• Participate in promotions, surveys, or contests
• Contact us with inquiries or feedback

This information may include:

• Full name
• Date of birth (required for age verification)
• Email address
• Mailing address and shipping address
• Phone number
• Payment information (credit card number, billing address)
• Account login credentials
• Government-issued identification information (for age verification at delivery)

2.2 Information Collected Automatically

When you access the Site, we may automatically collect certain information about your device and usage, including:

• IP address
• Browser type and version
• Operating system
• Referring URLs and pages visited
• Date and time of your visit
• Time spent on pages and clickstream data
• Device identifiers
• Geolocation data (to verify delivery eligibility)

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activity. Cookies are small data files stored on your device that help us improve the Site and your experience. You may set your browser to refuse cookies or to alert you when cookies are being sent; however, some parts of the Site may not function properly without cookies.

3. How We Use Your Information

We may use the information we collect for the following purposes:

• To process and fulfill your beer orders, including shipping, delivery, and payment processing
• To verify your age (21 or older) and eligibility to purchase alcoholic beverages in compliance with the New York ABC Law
• To verify that your delivery address is in a jurisdiction where we are legally permitted to ship beer
• To create and manage your account
• To communicate with you about your orders, account, or inquiries
• To send you promotional communications, newsletters, and marketing materials (with your consent where required by law)
• To personalize your experience on the Site and deliver content and offers tailored to your interests
• To improve our Site, products, and services
• To detect, prevent, and address fraud, security issues, and technical problems
• To comply with legal obligations, including New York State Liquor Authority requirements, tax reporting, and alcohol regulatory compliance
• To enforce our Terms of Service and other agreements

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We may share your information with third-party vendors and service providers who perform services on our behalf, such as payment processing, order fulfillment, shipping and delivery (including licensed alcohol delivery services), age verification services, data analytics, email delivery, hosting, customer service, and marketing. These providers are contractually obligated to use your information only as necessary to provide services to us and to maintain appropriate data security measures.

4.2 Legal and Regulatory Requirements

We may disclose your information if required to do so by law or in response to valid legal process, including subpoenas, court orders, or government requests. We may also disclose information to the New York State Liquor Authority, the New York City Department of Consumer and Worker Protection, law enforcement agencies, or other regulatory bodies as required by applicable law. We may also disclose information when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4.4 With Your Consent

We may share your information for any other purpose with your express consent.

5. Age-Gating and Alcohol Regulatory Compliance

Because we sell and ship beer, we take additional steps to ensure compliance with the New York ABC Law and other applicable regulations:

• We implement age-verification measures on our Site, including an age gate at entry and age verification at the point of purchase.
• We do not knowingly market or sell beer to individuals under 21 years of age.
• An adult signature from a person aged 21 or older with valid, government-issued photo identification is required upon delivery of all beer orders.
• We maintain records of sales transactions as required by the New York State Liquor Authority.
• We cooperate with law enforcement and regulatory authorities, including the NYSLA, as required by applicable law.
• We do not ship beer to jurisdictions where direct-to-consumer shipment of alcoholic beverages is prohibited.

6. Data Security and the New York SHIELD Act

We take the security of your personal information seriously. In compliance with the New York SHIELD Act (N.Y. Gen. Bus. Law § 899-bb), we implement and maintain reasonable administrative, technical, and physical safeguards to protect the security, confidentiality, and integrity of private information, including:

6.1 Administrative Safeguards

• Designating one or more employees to coordinate our data security program
• Identifying reasonably foreseeable internal and external risks to the security of private information
• Assessing the sufficiency of safeguards in place to control identified risks
• Training and managing employees in security program practices and procedures
• Selecting service providers capable of maintaining appropriate safeguards and requiring them to do so by contract

6.2 Technical Safeguards

• Assessing risks in the design and infrastructure of network and software systems
• Using encryption of sensitive data, including payment information, during transmission over public networks
• Assessing risks of information processing, transmission, and storage
• Detecting, preventing, and responding to intrusions and system failures
• Regularly testing and monitoring the effectiveness of key controls, systems, and procedures

6.3 Physical Safeguards

• Assessing risks of information storage and disposal
• Detecting, preventing, and responding to intrusions
• Protecting against unauthorized access to or use of private information during or after collection, transportation, and destruction
• Disposing of private information in a secure manner within a reasonable time after it is no longer needed

Despite these measures, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. Data Breach Notification

In the event of a breach of the security of your private information, we will comply with the notification requirements of the New York SHIELD Act (N.Y. Gen. Bus. Law § 899-aa) and any other applicable state breach notification laws. We will notify affected New York residents in the most expedient time reasonable and without unreasonable delay, consistent with the legitimate needs of law enforcement and any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system.

Notification may be provided by written notice, electronic notice (if you have consented to electronic communications), or by posting a notice on our website and notifying major statewide media, as permitted by law.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When your information is no longer needed, we will securely delete or anonymize it.

Transaction records related to the sale of beer may be retained for a minimum period as required by applicable New York State tax, accounting, and NYSLA regulatory requirements. Age verification records may also be retained as required by applicable alcohol regulations.

9. Your Rights and Choices

9.1 Access and Correction

You may access, update, or correct your personal information by logging into your account or by contacting us at the information provided below.

9.2 Deletion

You may request the deletion of your personal information, subject to certain exceptions required by law (such as record-keeping obligations under the New York ABC Law and tax regulations). We will respond to your request within the timeframe required by applicable law.

9.3 Opt-Out of Marketing Communications

You may opt out of receiving promotional emails from us by clicking the "unsubscribe" link in any marketing email or by contacting us directly. Please note that even if you opt out of marketing communications, we may still send you transactional or administrative messages related to your account or orders.

9.4 Do Not Track Signals

Some browsers include a Do Not Track (DNT) feature. The Site does not currently respond to DNT signals. However, you may manage your cookie preferences through your browser settings.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what personal information we have collected, used, disclosed, or sold about you.
• The right to request deletion of your personal information.
• The right to opt out of the sale or sharing of your personal information. (We do not sell personal information.)
• The right to correct inaccurate personal information.
• The right to limit the use and disclosure of sensitive personal information.
• The right not to be discriminated against for exercising your privacy rights.

To exercise any of these rights, please contact us at info@lambertsbeer.com. We will verify your identity before processing your request.

11. Other State Privacy Laws

Residents of other states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, and others) may have similar rights to access, correct, delete, and opt out of certain processing of their personal information. Please contact us to exercise any applicable rights under your state's law.

12. Children's Privacy

The Site is not intended for individuals under the age of 21. We do not knowingly collect personal information from anyone under the age of 21. If we become aware that we have collected personal information from a person under 21 years of age, we will take steps to delete that information promptly. If you believe we may have collected information from a person under 21, please contact us immediately.

13. Third-Party Links and Services

The Site may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices or content of third-party websites.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Effective Date" at the top of this page and, where required by law, notify you by email or through a notice on the Site. We encourage you to review this Privacy Policy periodically.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Lamb's Beverage Company dba Original Henry Lambert's Beer
Email: info@lambertsbeer.com