28th November, 2025

It is our aim through this PEPSICO PRIVACY NOTICE (“Notice”) to explain how we collect, use and share your personal data when you interact with us on our websites, mobile sites, and applications (collectively, the “Sites”). This Notice does not describe our practices on Sites where it is not referenced. Your use of our Sites indicates you agree to our collection, use, and sharing of your personal data as set forth in this Notice.

Who are we?

We’re PepsiCo, Inc., a global food and beverage company headquartered at 700 Anderson Hill Road, Purchase, NY 10577, USA. We act as the data controller of the personal data provided by you within our Sites. Together with our local affiliates, we’re responsible for managing the information you share with us.

Information we may collect

We may collect different types of personal information depending on how you interact with our Sites. This may include:

• Identifiers and contact information: such as your name, social media identifiers, cookie identifiers, postal code, email address or phone number. For example, we may use your name and contact information to create an account for you and send you relevant communications.
• Content you create or share: such as comments, ratings, photos, videos, and any preferences you choose to provide (for example, dietary preferences, favourite recipes, menu selections, or shopping lists) so that we can personalize your experience.
• Usage and technical information: such as IP address, browser type, device type, device information, domain name, and how you interact with our Sites, to help us understand performance and improve our Sites.
• Information you choose to provide such as when you email us, complete a form, participate in promotions, or otherwise actively submit information to us.

We do not intentionally collect any sensitive personal information (such as health data, religious beliefs, or racial or ethnic origin) unless you voluntarily provide it (for example, if you voluntarily share your health conditions in relation to dietary or nutritional needs) and only with your consent where required by applicable law.

Providing optional and required information

Some information you provide to us is optional, and some may be required depending on how you interact with our Sites. You may use many of our features without providing optional information. However, certain required information may be needed to create an account, verify your identity, or enable specific features and services.

If you choose to provide optional information, such as preferences or marketing consent, this helps us personalise your experience and communicate with you in a more relevant and meaningful way. You can change your communication preferences or withdraw marketing consent at any time by contacting us here (if from Brazil) or here (for all other countries).

How we collect information?

We collect information in different ways, including directly from you when you interact with us. For example, we may collect information when you:

• register or create an account on one of our Sites;
• create user profiles, save and share recipes, create menu plans, or use shopping list features;
• interact with content or features on our Sites. For example, rate, review, or comment on recipes and articles;
• when you visit our Sites through the use of cookies and similar technology (where permitted by law);
• join our loyalty programs;
• sign up for our email newsletters and other notifications;
• participate in promotions such as sweepstakes or contests;
• fill out a survey;
• contact us with questions or requests.

Information Received from Third Parties

We may receive personal information about you from other sources, in accordance with applicable laws and your privacy settings with those parties. For example, this may include information from:

• business or promotional partners who work with us;
• companies that provide aggregated consumer insights or audience analytics
• social media or platform providers;
• advertising or measurement partners regarding your interactions with our ads or content on third-party sites.

We may also combine information collected from different sources to help us better understand your preferences, improve the relevance of our Sites, and provide a more consistent experience. For example, we may combine information collected offline with information collected online, or information obtained from third-party sources with information we already hold about you.

How we use the information we collect?

We may use your personal information for the following purposes:

• To deliver and operate our Sites, including providing you access to features, products, and account-related functions.
• To personalise your experience, such as offering relevant recipe suggestions, remembering your preferences, and tailoring content, features, or communications based on your interactions and interests.
• To communicate with you, including responding to your questions, supporting customer service needs, and facilitating participation in promotions, competitions, or other activities.
• To improve our Sites, including analysing usage, enhancing functionality, and developing new features, offerings, or products that may interest you.
• To send you marketing communications, where you have provided your consent or where permitted by applicable law.
• To request feedback and understand how we can continue to improve your experience.
• To support security and fraud-prevention efforts, and to protect our users, platforms, company, and the public.
• To manage our business operations, including maintaining records, performing analytics, and exercising or defending legal rights where necessary.

We may use your information as permitted by applicable law, such as to comply with legal obligations or exercise our rights, and as described in this notice or any updates provided to you before processing. Where we rely on your consent, we will only process your information for the purposes you agreed to, including for example profiling (e.g., using algorithms to analyze your preferences for recipe recommendations) and personalization as described above.

How We Share Your Information

We may share information within the PepsiCo family of companies and brands. This includes current and future PepsiCo subsidiaries, affiliates, and joint venture partners. This also includes current brands such as Pepsi, Frito-Lay, Gatorade, and Quaker; and all future brands. For a list of PepsiCo brands, visit https://www.pepsico.com/our-brands/creating-smiles/our-products. We may also share your information with third parties with whom we have an ownership interest or commercial relationship, including companies whose products we distribute or collaborate to deliver our services.

We may share information with third-party vendors. We may share information with companies who serve as our vendors or third parties who perform services on our behalf. These partners help us deliver products and services to you. For example, companies that operate our websites and apps or manage our promotions. Whenever we share information with such vendors or service providers, we ensure that appropriate contracts and safeguards are in place to protect your information and require them to use it only for the purposes we specify.

We may share information with select business partners. For example, if you register for a joint promotion, your information may be collected and used by both us and the participating partner, which may include retailers. We require these partners to handle your information responsibly and in accordance with applicable laws. Your information will be used by us as described in this Notice and by our partners as described in their own privacy policies.

We work with analytics and advertising partners. Our online Sites may use analytics, advertising and other third-party content or functionality through which our partners may collect internet and electronic network activity information, such as device and usage information. For additional information, please visit our About Our Ads policy.

We will share information when required by law or when necessary to protect our rights. For example, we may disclose information to comply with a court order, subpoena, or other legal process. We may also share information in response to requests from government agencies or law enforcement authorities, whether in the United States or other jurisdictions. Additionally, we may share information as part of investigations into potential fraud, security incidents, or other unlawful activities.

We may share information with a successor to all or part of our business. For example, if we sell, merge, or transfer a portion of our business, your information may be included as part of that transaction.

PepsiCo operates globally, which means your personal information may be transferred to, stored, and processed in countries outside your country of residence, including the United States. These countries may have data protection laws that differ from those in your country. Whenever we transfer your personal information internationally, we implement appropriate safeguards to ensure an adequate level of protection, such as using contractual clauses approved by applicable data protection authorities and other legally recognized mechanisms.

You can contact us here (if from Brazil) or here (for all other countries)if you wish to obtain more information or a copy of the safeguards used for international data transfers.

Legal Basis for Processing

We only use your personal information for clear and lawful reasons. These reasons may differ depending on where you live, but generally include the following:

• Consent: Where you have provided consent for specific uses of your personal information, such as receiving marketing communications, participating in targeted advertising or profiling, or enabling the use of non-essential cookies. You may withdraw your consent at any time.
• Legitimate Interests: Where the processing is necessary for our legitimate interests or those of a third party, provided these interests are not overridden by your rights and interests. For example, we have a legitimate interest in analysing how our Site is used to improve our content and user experience, and in protecting our Sites against fraud and security threats.
• Performance of a Contract: Where the processing of personal information is necessary to deliver products and services you have requested, or to perform and administer contractual obligations arising from our relationship with you.
• Legal and regulatory compliance: Where processing is required to comply with applicable laws, regulations or legal obligations. This includes enforcing our terms and conditions, protecting our operations, assets, and users, and responding to lawful requests from public or regulatory authorities, enforcement bodies, or supervisory agencies

Your Rights & Choices

• Opt out of email marketing: You can stop receiving promotional emails by following the unsubscribe instructions included in any marketing email we send. Please note that even if you opt out of marketing emails, you may still receive non-marketing communications from us where permitted by law.
• To stop receiving promotional emails from us, follow the instructions in any promotional email message you get from us. If you opt out of getting marketing email messages, you may continue to receive non-marketing email messages from us where permitted by law.
• Manage Cookies and Tracking tools: You can control how we and our partners use cookies and other tracking tools. To learn more and manage your preferences, please read our About Our Ads policy. You can also manage cookies through your browser settings or opt-out mechanisms. Keep in mind that opting out may not eliminate all ads, and you may need to renew your choices periodically or on each device/browser.
• Do-Not-Track Signals and Similar Mechanisms Some browsers transmit "do-not-track" signals. Because there is no industry standard for these signals yet, we do not respond to them.

Depending on where you reside, you may have certain additional rights in relation to your personal information, as outlined below. We will honour these rights where required by applicable law.

• You may have the right to confirm whether we process your personal information and to access and obtain a copy of personal information we hold about you in a portable format.
• You may have the right to request deletion of your personal information.
• You may have the right to request correction of inaccurate personal information.
• You may have the right to opt out of the sale, sharing or use of your personal information for targeted advertising.
• You may have the right to withdraw consent at any time (without affecting prior processing carried out prior to the withdrawal).
• You may have the right to object to the processing of your personal information.

These rights may differ depending on your jurisdiction and may be subject to certain legal limitations or exceptions. If you wish to exercise any of the rights provided to you under applicable privacy laws, you may submit a request through our secure web portal accessed here (if from Brazil) or here (for all other countries).

How we may sell or share your personal information

We do not sell, share, or transfer your information for money or other valuable consideration, but our Sites may use analytics and advertising technologies, including those provided by advertising partners that use your personal information to serve you targeted advertising that is based on your activity across our Sites and third-party websites and services (such as remarketing or lookalike audiences).

Retention of personal information

We keep the categories of personal information described in this Notice for as long as necessary to fulfil the purposes outlined here or as permitted or required by applicable law. Specifically, we keep your personal information while your account remains active or until you cancel or delete your account. Inactive accounts will be automatically deleted after three (3) years of inactivity. This generally means we hold your information for as long as any of the following apply:

• It is reasonably necessary to manage our operations, maintain your relationship with us, or fulfil the purpose for which it was collected.
• It is needed to carry out a disclosed purpose that is compatible with the context in which the information was collected.
• It is required to protect or defend our rights or property, including compliance with applicable laws.
• We are otherwise required or permitted to retain it under applicable laws or regulations.
• Dealing with any complaints.
• Compliance with record retention requirements under the law.

Children’s Privacy

Our Sites are not intended for children under the applicable legal age. We do not knowingly collect personal information from children under that age without verifiable parental consent. If we discover that we have collected such information without consent, we will delete it promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us here (if from Brazil) or here (for all other countries) to request deletion.

Security measures

We use various technical and organizational measures and mechanisms to secure our Sites. While we strive to use industry-standard protections, please note that no data storage system or transmission over the Internet or any public network can be guaranteed to be completely secure. Our security measures include:

• Encryption of data at rest and in transit
• Access controls to limit unauthorized access
• Regular security audits and vulnerability assessments
• Employee training on data protection practices
• Incident response protocols to address potential breaches

We also require our third-party service providers to maintain similar security measures to protect your information. response management. We also require third parties to implement similar measures.

Third Party Links

Our Sites may include links to third-party websites, plug-ins, or applications. Clicking on those links or enabling those connections may allow third parties to collect or share information about you. We do not control these third-party websites and are not responsible for their privacy practices or the content of their sites. When you leave our Sites, we encourage you to read the privacy notice of every website you visit.

We may update this Notice

From time to time, we may change this Notice. When we do, we will notify you of any material changes as required by law. This may include posting an updated copy here and updating the “Last Updated” date. Please check this Notice periodically for updates.

Contact Us

If you have any questions about this Notice or how we handle your personal information, please contact us here (if from Brazil) or here (for all other countries).