Updated October 12, 2026
Privacy Notice
The form opens during the published promotion period. Submission details are transmitted securely to the program administrator and used to send the participant’s confirmation email. Payment-card information is never requested.
Controller and contact
Sazerac Company, Inc. is the proposed data controller for this promotion. Privacy questions and rights requests may be sent to Privacy@Sazerac.com or Sazerac Company, Attn: Compliance Department, 10101 Linn Station Road, Suite 400, Louisville, Kentucky 40223.
Information collected
The entry form collects a participant’s full legal name, email address and confirmation, date of birth, country, state of residence, eligibility confirmation, acceptance of the program terms and privacy notice, submission timestamps, and limited technical information required for security and bot prevention. Optional marketing consent is separate and unchecked by default.
Why information is used
Information will be used to administer the promotion, validate eligibility and entry limits, prevent fraud, conduct the random selection, notify and verify potential selected participants, coordinate fulfillment, maintain required legal and tax records, respond to rights requests, and protect the program and its participants. Marketing use requires separate consent where applicable.
Service providers and disclosures
Vercel provides website hosting, server-side form processing, and private record storage. Resend provides transactional email delivery. Submission details are made available only to authenticated campaign administrators; the confirmation email sent to the participant does not include the participant’s date of birth. Information may also be disclosed when required by law or to protect legal rights.
Retention
Entry information is proposed to be retained for the promotion, verification, fulfillment, and applicable corporate, tax, and legal recordkeeping obligations, for no longer than five years unless a longer period is legally required. Non-selected entry data should be deleted or de-identified earlier when approved retention requirements permit.
Security
The site uses encrypted transport, server-side validation, a hidden bot field, minimum completion-time checks, managed hosting controls, and data minimization. Participant records are encrypted at the application layer before being written to a private Vercel Blob store, and access is limited to authenticated campaign administrators using expiring secure sessions. The website does not collect payment-card information.
Your choices and rights
Depending on the participant’s state, applicable rights may include access, correction, deletion, portability, restriction, objection, withdrawal of marketing consent, and appeal. Identity verification may be required before a request is completed. Participants may contact Privacy@Sazerac.com to exercise applicable rights.
Age and geographic eligibility
The promotion is intended only for eligible United States residents age 21 or older. Information associated with an ineligible or underage attempted entry will not be accepted into the promotion and should be deleted according to the approved security and retention procedure.
Other Sazerac privacy terms
This campaign notice supplements the Sazerac Privacy Policy. If the final campaign terms conflict with this review copy, the final approved notice and applicable law control.