Privacy Policy
Privacy Policy
Effective
January 23, 2023
The Hain Celestial Group, Inc. is committed to the privacy and security of personal information. The purpose of this Privacy Policy (“Policy”) is to provide you with information about how Hain Celestial collects, uses, discloses, and safeguards certain of the personal information it gathers. It also describes options you have concerning your personal information. In general, our processing of personal information is designed to improve the purchasing experience of consumers and to provide relevant information about our products, services, and promotions.
About this policy
This Policy describes the privacy practices of Hain Celestial and its subsidiaries, divisions, and affiliates (collectively and/or individually, “Hain Celestial”, “Company”, “our”, or “we”). Except as otherwise provided, it applies to our interactions with our customers and visitors, including, but not limited to:
- Use of our websites, including mobile websites, applications
- Visits to our stores/locations or attendance at one of our events
- Phone and email communications
- Social media interactions on our websites and other third party websites like Facebook, YouTube, Pinterest, Google+/Currents, Instagram and Twitter
- Viewing our online advertisements or emails
- Through our authorized service providers
Please read this Policy carefully before using the Website or submitting information to us. By accessing or visiting the Website, you indicate your understanding that the collection, use, and sharing of your information is subject to the terms of this Policy and our Terms of Use. Except as otherwise noted, any capitalized terms not defined in the Policy have the meaning set forth in the Terms of Use. If you do not consent to the collection, use, and sharing of your information as described in this Policy, please do not provide us with such information. The nature of our business requires that we gather and maintain information that is of a personal nature that you may wish to keep protected. This Policy does not apply to third-party websites accessible through our Website or other applications.
Personal Information We Collect
As described below, Company may collect or has collected in the preceding 12 months the following categories of personal information (“PI” or “personal information”). We may add to the categories of personal information we collect about you. In that case, we will inform you.
Identifiers and Contact Information. This category includes names, addresses, telephone numbers, mobile numbers, email addresses, signatures, account names, dates of birth, bank account information, and other similar contact information and identifiers.
Protected Classification Information. This category includes characteristics of protected classifications under California or federal law.
Commercial Information. This category includes, without limitation, products and services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Education Information. This category includes, without limitation, information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, Sec. 1232g; 34 C.F.R. Part 99).
Internet or Other Electronic Network Activity Information. This category includes, without limitation, browsing history, search history, or a consumer’s interactions with a website, application, or advertisement.
Geolocation Data. Such as location information when using one of our apps.
Audio, Electronic, Visual, Thermal, Olfactory, or Similar Information. This category includes, for example, information collected from voicemail messages, while speaking with one of our service representatives, and/or by video camera.
Biometric Information. This category includes, without limitation, an individual’s physiological, biological, or behavioral characteristics used or intended for use – singly or in combination with each other or with other identifying data – to establish individual identity.
Professional and Employment-Related Information. This category includes, without limitation, information regarding job applications, information related to onboarding for payroll and benefits, and information needed for evaluating performance.
Sensitive Personal Information
This category includes:
- social security, driver’s license, state identification card, or passport number;
- log-in, financial account, debit card, or credit card number, in combination with any required security or access code, password, or credentials allowing access to an account;
- precise geolocation;
- racial or ethnic origin, religious or philosophical beliefs, or union membership;
- content of mail, email, and text messages unless the Company is the intended recipient of the communication;
- genetic data;
- biometric information; and
- information concerning health and sex life or sexual orientation.
Consumer Profile. This category includes information drawn from any of the categories above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, and behaviors.
NOTE: Personal information does not include certain categories of information, such as publicly available information from government records, and deidentified or aggregated consumer information.
Retention. We retain your personal information for as long as necessary to process your order, manage your relationship with the Company, and otherwise operate our business, and in accordance with the Company’s data retention schedule. We may retain your personal information for longer if it is necessary to comply with our legal or reporting obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, enforce our legal agreements and policies, address other legitimate business needs, or as permitted or required by applicable law. We may also retain your personal information in a deidentified or aggregated form so that it can no longer be associated with you. To determine the appropriate retention period for your personal information, we consider various factors, such as the amount, nature, and sensitivity of your information; the potential risk of unauthorized access, use or disclosure; the purposes for which we collect or process your personal information; and applicable legal requirements.
Why We Collect Your Personal Information
Set forth below are the business or commercial purposes for which we have or will use the PI we have collected about you. We may, in the future, use your PI for additional or different purposes. Before doing so, we will inform you and obtain your consent when required by law.
- To provide you with information, products or services that you request from us.
- To fulfill or meet the reason for which the information is provided. For example, if you purchase a product from us, we will collect your address for shipping purposes or to fulfill our tax collection and reporting obligations.
- To contact you and/or provide you with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you.
- To engage in marketing activities, including to help design products and services appropriate for our clients.
- To communicate with you via social media concerning our products and services.
- To carry out our obligations and enforce our rights including those arising from any contracts entered into between you and us, including for billing, payment, and collections.
- To review, improve, and monitor our website, applications, online services, and overall client experience, including to provide customization to meet specific needs, ensure a consistent experience, and assess trends, interests, and demands of clients.
- To provide customer service and engage in quality control activities concerning our products and services.
- For testing, research, analysis and product and service development.
- To respond to law enforcement requests and as required by applicable law, court order, governmental regulations, or other lawful processes.
- As described to you when collecting your personal information or as otherwise set forth in the California Consumer Privacy Act, as amended.
- To process applications for employment, as well as to evaluate and improve our recruiting efforts.
- As necessary or appropriate to protect the rights, property, security, and safety of us, our employees, our consumers, our information systems, and the public.
- To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.
Sources of Personal Information
The categories of sources of PI are described below. The examples provided are for illustration purposes and are not exhaustive.
- You. Examples of when we collect PI about you include:
- During a website visit, when you complete a web-form, or when you visit us at one of our stores, locations, or participate in an event.
- If you upload or share a photo, submit a request, submit information, or post other digital content through one of our websites, or via social media interactions on third party websites like Facebook or Twitter.
- If you participate in a sweepstakes, contest, promotion, program, clinic, or workshop.
- If you apply for or inquire about employment. See our Applicant Privacy Policy.
- In connection with your interactions with us as a registered user of our websites we may use tracking tools like browser cookies, flash cookies, and web beacons.
- Your friends and family, such as when they provide your information through one of our refer-a-friend type features or programs. Persons who share such information in connection with those features or programs should only submit email addresses of individuals with whom they have a close personal or family relationship, who would be interested in receiving the communication, and who have authorized the sharing of their email address.
- News outlets
- Social media and related services
- Advertising networks
- Data analytics providers
- Data brokers
Disclosure of Personal Information
In general, we will not disclose your personal information except with your consent or as described in this Policy. We may disclose your personal information for the same reasons that we may use it, as described in this Policy, which includes disclosing it to our affiliates and non-affiliates, as we deem necessary to carry out those purposes. We endeavor to choose affiliates and non-affiliates whose standards for the protection of data match ours.
The following chart describes the categories of personal information we have collected or may collect about you and, for each category, identifies the categories of third parties to whom we may disclose that information.
Categories of Personal Information | Categories of Third Parties to Whom Disclosed & Purposes for Disclosure |
---|---|
Address and other identifiers – such as name, postal address, email address, phone number, account name, date of birth, social security number, driver’s license number, photograph, passport number, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers
. NOTE: The information in this category may include the following elements of Sensitive Personal Information: social security number, driver’s license number, state identification card number, and/or passport number. | Third parties as directed by you. We may disclose your personal information to the third parties to whom you direct. Our business partners. For example, we might disclose your personal information to one of our business partners for purposes of collaborating on providing services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose personal information. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them. Third parties that perform services on our behalf. For example, we may disclose information to certain service providers, including professional service providers, information technology providers, payroll and benefits managers, and data storage companies. We might also authorize our service providers to collect personal information on our behalf. Governmental entities, legal service providers. We may disclose your personal information in order to comply with the law. We may also disclose information if a government agency or investigatory body submits a request. Successors to all or portions of our business. If all or part of our business is sold, we may disclose personal information in preparation for or as part of that transaction. |
Protected status – such as citizenship, ethnic background, gender, or other similar identifiers NOTE: The information in this category may include the following elements of Sensitive Personal Information: racial, ethnic, or national origin. | Third parties as directed by you. We may disclose personal information to those third parties to whom you direct. Our business partners. For example, we might disclose your personal information to one of our business partners for purposes of collaborating on providing services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose personal information. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them. Third parties that perform services on our behalf. For example, we may disclose information to certain service providers, including professional service providers, information technology providers, payroll and benefits managers, and data storage companies. We might also authorize our service providers to collect personal information on our behalf. Governmental entities, legal service providers. We may disclose personal information in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request. Successors to all or portions of our business. If all or part of our business is sold, we may disclose personal information in preparation for or as part of that transaction. |
Financial information – such as bank account details, credit history, income details or other similar identifiers NOTE: The information in this category may include the following elements of Sensitive Personal Information: log-in, financial account, debit card, or credit card number, in combination with any required security or access code, password, or credential allowing access to an account. | Third parties as directed by you. We may disclose your personal information to the third parties to whom you direct. Our business partners. For example, we might disclose personal information to one of our business partners for purposes of collaborating on providing products or services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose personal information. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them. Third parties that perform services on our behalf. For example, we may disclose information to certain service providers, including professional service providers, information technology providers, payroll and benefits managers, and data storage companies. We might also authorize our service providers to collect personal information on our behalf. Governmental entities, legal service providers. We may disclose your personal information in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request. Successors to all or portions of our business. If all or part of our business is sold, we may disclose personal information in preparation for or as part of that transaction. |
Commercial information – such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies or other similar identifiers | Third parties as directed by you. We may disclose your personal information to the third parties to whom you direct.
Our business partners. For example, we might disclose personal information to one of our business partners for purposes of collaborating on providing products or services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose personal information. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them. Third parties that perform services on our behalf. For example, we may disclose information to certain service providers, including professional service providers, information technology providers, payroll and benefits managers, and data storage companies. We might also authorize our service providers to collect personal information on our behalf. Governmental entities, legal service providers. We may disclose personal information in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request. Successors to all or portions of our business. If all or part of our business is sold, we may disclose personal information in preparation for or as part of that transaction. |
Education or professional information, including veteran status or other similar identifiers NOTE: The information in this category may include the following elements of Sensitive Personal Information: union membership. | Third parties as directed by you. We may disclose your personal information to the third parties to whom you direct. Our business partners. For example, we might disclose personal information to one of our business partners for purposes of collaborating on providing products or services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose personal information. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them. Third parties that perform services on our behalf. For example, we may disclose information to certain service providers, including professional service providers, information technology providers, payroll and benefits managers, and data storage companies. We might also authorize our service providers to collect personal information on our behalf. Governmental entities, legal service providers. We may disclose personal information in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request. Successors to all or portions of our business. If all or part of our business is sold, we may disclose personal information in preparation for or as part of that transaction. |
Internet or other electronic network activity – such as browsing history, search history, a consumer’s interaction with an internet website, application, or advertisement NOTE: The information in this category may include the following elements of Sensitive Personal Information: the contents of mail, email, or text messages, to which the business was not the intended recipient. | Third parties as directed by you. We may disclose your personal information to third parties to whom you direct. Our business partners. For example, we might disclose personal information to one of our business partners for purposes of collaborating on providing products or services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose personal information. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them. Third parties that perform services on our behalf. For example, we may disclose information to certain service providers, including professional service providers, information technology providers, payroll and benefits managers, and data storage companies. We might also authorize our service providers to collect personal information on our behalf. Governmental entities, legal service providers. We may disclose personal information in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request. Successors to all or portions of our business. If all or part of our business is sold, we may disclose personal information in preparation for or as part of that transaction. |
Geolocation data NOTE: The information in this category may include the following elements of Sensitive Personal Information: precise geolocation. | Third parties as directed by you. We may disclose your personal information to the third parties to whom you direct. Our business partners. For example, we might disclose personal information to one of our business partners for purposes of collaborating on providing products or services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose personal information. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them. Third parties that perform services on our behalf. For example, we may disclose information to certain service providers, including professional service providers, information technology providers, payroll and benefits managers, and data storage companies. We might also authorize our service providers to collect personal information on our behalf. Governmental entities, legal service providers. We may disclose personal information in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request. Successors to all or portions of our business. If all or part of our business is sold, we may disclose personal information in preparation for or as part of that transaction. |
Audio, electronic, visual, thermal, olfactory, or similar information. | Third parties as directed by you. We may disclose personal information to the third parties to whom you direct. Our business partners. For example, we might disclose personal information to one of our business partners for purposes of collaborating on providing products or services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose personal information. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them. Third parties that perform services on our behalf. For example, we may disclose information to certain service providers, including professional service providers, information technology providers, payroll and benefits managers, and data storage companies. We might also authorize our service providers to collect personal information on our behalf. Governmental entities, legal service providers. We may disclose personal information in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request. Successors to all or portions of our business. If all or part of our business is sold, we may disclose personal information in preparation for or as part of that transaction. |
Biometric Information
NOTE: Biometric information is considered an element of Sensitive Personal Information. | Third parties as directed by you. We may disclose your personal information to those third parties to whom you direct. Our business partners. For example, we might disclose personal information to one of our business partners for purposes of collaborating on providing products or services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose personal information. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them. Third parties that perform services on our behalf. For example, we may disclose information to certain service providers, including professional service providers, information technology providers, payroll and benefits managers, and data storage companies. We might also authorize our service providers to collect personal information on our behalf. Governmental entities, legal service providers. We may disclose personal information in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request. Successors to all or portions of our business. If all or part of our business is sold, we may disclose personal information in preparation for or as part of that transaction. |
Inferences drawn from personal information – such as individual profiles, preferences, characteristics, behaviors or other similar identifiers NOTE: The information in this category may include the following elements of Sensitive Personal Information: racial or ethnic origin, religious or philosophical beliefs, union membership, health information, genetic information, and/or information regarding an individual’s sex life or sexual orientation. | Third parties as directed by you. We may disclose your personal information to the third parties to whom you direct. Our business partners. For example, we might disclose personal information to one of our business partners for purposes of collaborating on providing products or services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose personal information. Where applicable, we encourage you to review each such business partner’s privacy statement before signing on with them. Third parties that perform services on our behalf. For example, we may disclose information to certain service providers, including professional service providers, information technology providers, payroll and benefits managers, and data storage companies. We might also authorize our service providers to collect personal information on our behalf. Governmental entities, legal service providers. We may disclose personal information in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request. Successors to all or portions of our business. If all or part of our business is sold, we may disclose personal information in preparation for or as part of that transaction. |
We do not disclose personal information in exchange for money and, with limited exceptions, only use and disclose sensitive personal information for purposes of providing the services or goods reasonably expected by an average consumer who requests those goods or services. We do, however, disclose certain personal information to certain of the third parties identified in the chart above under circumstances which may be considered “selling” or “sharing” under the CCPA, even if we don’t receive money in exchange for the information. If you are a California resident, you may have the right to opt-out of the sale or sharing of your personal information. Please see our CA Policy below for additional information.
Please note that third parties may collect information about your online activities over time and across different websites when you use our websites.
We do not knowingly sell the personal information of minors under 16 years of age.
Cookies and Other Tracking Technologies
Cookies. As is true of most websites, we gather some PI automatically and store it in log files. This information may include the Internet Protocol (“IP”) address, browser type, language, internet service provider (“ISP”), referring and exit page, operating system, and date/time stamp. In addition to the purposes above, we use this PI to understand and analyze trends, to administer the Website, to learn about user behavior on the Website, and to gather demographic information about our user base as a whole. To monitor use of the Website and improve its quality, we may compile statistical information concerning the use of the Website through analytics services, such as those provided by Google Analytics. Examples of this information may include: the number of visitors to the Website or to sections or pages within the Website, patterns of traffic flowing through the Website, length of time spent on the Website, or in sections or pages of the Website, the other sites that refer visitors to the Website, the pages of the Website that visitors frequently use as entry and exit points, utilization of the browser and operating systems and versions used by visitors to the Website. We also may use this PI in our marketing and advertising services.
We may use various kinds of software devices to collect PI about use of our Website. Small files called "cookies" may be attached to your Web browser. These files identify your browser and save information such as passwords so that websites can recognize you. You can set your browser to disable cookies, but some portions of this Website (and possibly other sites) may not work properly if you do this. We may also use web beacons to review how visitors navigate the Website. If you would like more information about this practice, and your choices and how they relate to this practice, please contact us.
Social Media. This Website may use social media plugins (e.g. Facebook and LinkedIn) to enable you to easily share information with others. When you visit our Website, the operator of the social media plugin can place a cookie on your computer, enabling that operator to recognize individuals who have previously visited our Website. If you are logged into the social media website (e.g. Facebook, Twitter) while browsing our Website, the social media plugins allow that social media website to disclose data about your activities on our Website with other users of their social media website. For example, Facebook Social Media Plugins allow Facebook to show your likes and comments on our pages to your Facebook friends. Facebook Social Media Plugins also allow you to see your friends’ Facebook activity on our website. We do not control any of the content from the social media plugins. For more information about social media plugins from other media websites you should refer to those sites’ privacy and data/information sharing statements/policies.
Third Party Website Links. Some portions of our Site may contain links to other websites on the Internet that are neither maintained by us nor under our control. Such links do not constitute an endorsement by us of those other websites, the content displayed therein, or the persons or entities associated therewith. You acknowledge that we are providing these links to you only as a convenience, and you agree that we are not responsible for the content of such websites. Your use of these other linked websites is subject to the respective terms of use and privacy policies located on the linked websites.
Email and SMS Communications. We may collect your email address via cookies and pixels on the Site through the use of trusted third-party partners. These partners may combine your email information with other information they have access to, such as mailing addresses, to enable us to send relevant marketing offers to you via direct mail.
You may elect to receive text messages from us. When you sign up to receive text messages, we will send you information about promotional offers and more. These messages may use information automatically collected based on your actions while on our Site and may prompt communications such as cart abandoned messages. To the extent you voluntarily opt to have SMS notifications sent directly to your mobile phone, we receive and store the information you provide, including your telephone number and when you read a text message. You may opt out of receiving text messages at any time by texting “STOP” to our text messages.
IMPORTANT: By using the Website, you consent to the processing of any PI provided or collected for the analytics purposes and functions described above.
Do Not Track
“Do Not Track” is a privacy preference that you can set in your Internet search browser that sends a signal to a website that you do not want the website operator to track certain browsing information about you. However, because our Website is not configured to detect Do Not Track signals from a user’s computer, we are unable to respond to Do Not Track requests.
Our Sites and Children
We do not knowingly collect or solicit PI from children under 13 years of age. We are concerned about the safety of children when they use the Internet and will never knowingly request PI from anyone under the age of 13. If the parent or guardian of a child under 13 believes that the child has provided us with any PI, the parent or guardian of that child should contact us and ask to have this PI deleted from our files. If we otherwise obtain knowledge that we have PI about a child under 13 in our files, we will delete that information from our existing files so that it is not in retrievable form.
Security
While we use reasonable measures to protect our websites and your information, the Internet is never 100% secure. The measures we use are appropriate for the type of information we collect. We cannot guarantee use of our websites is 100% secure. We encourage you to use caution when using the Internet.
Applicable Law
This Policy is governed by the laws of the State of New York, without regard to its conflict of laws principles. Jurisdiction for any claims arising under or out of this Privacy Policy shall lie exclusively with the state and federal courts within New York. If any provision of this Policy is found to be invalid by a court having competent jurisdiction, the invalidity of such provision shall not affect the validity of the remaining provisions of this Policy, which shall remain in full force and effect.
Notice to Website Users Located Outside the U.S.
The Company operates in accordance with the laws of the U.S. When you access our Website from outside the U.S., we may transfer the PI that we collect from you to a location outside of your jurisdiction, including the U.S. The data protection laws in these jurisdictions may not provide you with the same protections as those of your jurisdiction. By using this Website you acknowledge that these laws may provide a different standard of protection and you consent to the transfer of your personal data to other jurisdictions, including the U.S.
Contact Us
If you have additional questions you may call us at (800) 689-6823 or reach us by email at HCGUS.DataPrivacy@hain.com.
You can write to us at:
The Hain Celestial Group, Inc.
4600 Sleepytime Drive
Boulder, CO 80301
Attention: Legal Department
Changes to this Privacy Policy
Effective Date: March 2, 2023
From time to time we may change our privacy policies. We will notify you of any material changes to our Privacy Policy by posting an updated version on our website. Please check our Website periodically for updates.
Questions
If you have questions about this Policy, please contact us as described above in the Privacy Policy.
For California Residents
This section of the Privacy Policy (“CA Policy”) supplements and amends the information contained in our Privacy Policy with respect to California residents. This CA Policy applies solely to individuals, visitors, users, and others who are natural persons and residents of the State of California (“consumers” or “you”). THIS ADDENDUM TO THE PRIVACY POLICY DOES NOT APPLY TO USERS WHO ARE NOT NATURAL PERSONS AND NOT CALIFORNIA RESIDENTS.
The CA Policy describes Hain Celestial’s policies and practices regarding the personal information we collect, use, and disclose about you, including personal information you submit or we obtain when you access the Site and via other channels, including, without limitation, when you visit our locations or attend our events, phone and email communications, social media interactions, or through our authorized services providers. This CA Policy is adopted in part to comply with the California Consumer Privacy Act, as amended (“CCPA”).
Any terms defined within the CCPA have the same meaning when utilized within this CA Policy. The other provisions of the Policy continue to apply except as modified in this CA Policy. Note, however, that personal information as used in this CA Policy does not include:
- Publicly available information from government records.
- De-identified or aggregated consumer information.
- Information excluded from the CCPA's scope, such as personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA), the California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994. Please read this CA Policy carefully before using the Site or submitting information to us. By accessing or visiting the Site, you indicate your understanding that the collection, use, and sharing of your information is subject to the terms of this CA Policy.
IF YOU DO NOT CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR PERSONAL INFORMATION AS DESCRIBED IN THIS CA POLICY, PLEASE DO NOT PROVIDE US WITH SUCH INFORMATION.
Consumer Rights
Pursuant to the CCPA, and as detailed below, consumers have various rights with respect to their PI.
- Request to Delete. You have the right to request that we delete your PI from our records and direct any service providers to delete your PI from their records, subject to certain exceptions. Upon receipt of a confirmed verifiable consumer request (see below), and as required by the CCPA, we will delete and direct any service providers to delete your personal information from our records.
Hain Celestial is not required to comply with your request to delete your PI if it is necessary for the Company (or its service provider or contractor) to maintain your PI in order to:
- Complete the transaction for which the PI was collected, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between the Company and you.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for that activity.
- Debug to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the Company’s deletion of the information is likely to render impossible or seriously impair the achievement of such research, if you have provided informed consent.
- To enable solely internal uses that are reasonably aligned with your expectations based on your relationship with the Company.
- Comply with a legal obligation.
- Otherwise use your PI, internally, in a lawful manner that is compatible with the context in which you provided the information.
Upon receipt of a confirmed verifiable consumer request (see below), and as required by the CCPA, we will provide a response to such requests.
If you are under the age of 18, and a registered user of any Site where this CA Policy is posted, California law permits you to request and obtain removal of content or information you have publicly posted. You may submit your request using the Data Subject Access Request (“DSAR”) form available on the Site or using the contact information in the Privacy Policy. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.
- Request to Know. You have the right to request that we disclose the following to you upon receipt of your verifiable consumer request:
- The categories of PI we have collected about you.
- The categories of sources from which the PI was collected.
- The business or commercial purpose for collecting, selling, or sharing PI, if applicable.
- The categories of PI we sold or disclosed for a business purpose.
- The categories of third parties to whom we disclose PI.
- The specific pieces of PI we collected about you.
Upon receipt of a verifiable consumer request (see below), and as required by the CCPA, we will provide a response to such requests.
In addition to the CCPA, California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your personal information by certain members of the Company to third parties for the third parties’ direct marketing purposes. Consumers who have provided their personal information to us may request information about our disclosures of certain categories of personal information to third parties for their direct marketing purposes. Such request must be submitted to us by calling (800) 689-6823, or emailing us at HCGUS.DataPrivacy@hain.com. Please mention in your call or email that you are making a "California Shine the Light" inquiry. Within 30 days of receiving such a request, we will provide a list of the categories of personal information disclosed to third parties for third-party direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties. This request may be made no more than once per calendar year. We reserve our right not to respond to requests that are not submitted in accordance with this paragraph.
- Right to Correct. You have the right, subject to certain limitations, to request that we correct any inaccurate personal information we maintain about you. Upon receipt of a verifiable consumer request (see below), and as required by the CCPA, we will take appropriate steps to respond to your request.
- Right to Opt-Out of Selling or Sharing. You have the right, subject to certain limitations, to opt-out of having your personal information sold or shared. In accordance with the CCPA, we will take appropriate steps to respond to your request.
- Right to Limit Use or Disclosure of Sensitive Personal Information. You have the right, subject to certain exceptions, to request that we limit the use and disclosure of your sensitive personal information. Upon receipt of a verifiable consumer request (see below), and as required by the CCPA, we will take appropriate steps to respond to your request.
- Nondiscrimination. We will not discriminate against you in violation of the CCPA for exercising any of your CCPA rights. For example, we generally will not provide you a different level or quality of goods or services if you exercise your rights under the CCPA.
Submitting Consumer Rights Requests
To submit any of the Consumer Rights requests outlined above, please contact us at (800) 689-6823 or submit a request using the DSAR form available on the Site. We reserve the right to only respond to verifiable consumer requests. A verifiable consumer request is one made by any individual who is:
- the consumer who is the subject of the request,
- a consumer on behalf of the consumer’s minor child, or
- a natural person or business entity authorized to act on behalf of a consumer.
What to Submit. If we request, you must provide us with sufficient information to verify your identity and/or authority to act on behalf of the consumer. In general, we may ask you to provide identifying information that we already maintain about you or we may use a third-party verification service. In either event, we will try to avoid asking you for sensitive PI to verify your identity. We may not be able to respond to your request or provide you with PI if we cannot verify your identity or authority to make the request and confirm the PI relates to you. However, making a verifiable consumer request does not require you to create an account with us.
Additionally, you will need to describe your request with sufficient detail to allow us to review, understand, assess, and respond. PI collected from an individual to determine whether a request is a verifiable consumer request may not be used or disclosed for any other purpose except as required by law.
Our Response. We will endeavor to respond to a verifiable consumer request within forty-five (45) calendar days of receipt, but we may require an extension of up to forty-five (45) additional calendar days to respond and we will notify you of the need for the extension.
If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the receipt of your verifiable consumer request. With respect to personal information collected on and after January 1, 2022, and to the extent expressly permitted by applicable regulation, you may request that such disclosures cover a period beyond the 12 months referenced above, provided doing so would not be impossible or require a disproportionate effort by us. The response we provide will also explain the reasons we cannot comply with a request, if applicable. To the extent permitted by the CCPA, we will respond to no more than two requests during any 12-month period.
Authorized Agent. You may authorize a natural person or a business entity to act on your behalf with respect to your rights under this CA Policy. When you submit a Request to Know, Request to Correct, or a Request to Delete, unless you have provided the authorized agent with a qualifying power of attorney, you must provide your authorized agent written permission (signed by you) to act on your behalf and verify the authorized agent’s identity with us. We reserve the right to deny requests from persons or businesses claiming to be authorized agents that do not submit sufficient proof of their authorization.
Questions
If you have questions about this Policy, please contact us as described above in the Privacy Policy.