Privacy Policy

Exhale Wellness LLC and its Affiliates (collectively, “Exhale,” “the Company,” “we,” “us,” and “our”) are committed to safeguarding your privacy and protecting your personal information. This Privacy Policy (“Policy”) outlines the types of data we collect, how we use, share, and protect it, as well as the choices available to you regarding your personal information.

This Policy applies to the personal data we collect through our websites (including mobile versions), social media platforms, or any other interaction you have with our products and services (collectively, the “Services”). By using our Services, you agree to the terms outlined in this Policy. If you do not agree, please refrain from using our Services.

Personal Information Defined “Personal Information” refers to data that can identify an individual, either directly or when combined with other information. This excludes anonymous or aggregated data that cannot identify a specific person. The exact definition may vary depending on your jurisdiction.

European Union (EU) Residents If you are a resident of the EU, please review the “European Privacy Rights” section of this Policy for more information on your privacy rights.

California Residents If you reside in California, please see the “California Privacy Rights” section of this Policy for details on your privacy rights.

Collection of Personal Information We collect Personal Information when you interact with us, such as when you visit our Site, place an order, create an account, subscribe to newsletters, participate in contests, provide product reviews, or otherwise engage with our Services. This may include:

• Identifiers: Name, alias, birthdate, gender, and online identifiers (if provided by you).
• Contact Information: Email, phone numbers, shipping and billing addresses, social media profiles.
• Account Information: Username, password, purchase history, and other account details.
• Commercial Information: Payment information, including credit/debit card details (processed by third-party vendors; we do not store credit card data).
• Communications: Information from your interactions with us, including your product use or questions.
• Health Information: Any reactions to our products or health-related information you share with us.
• Social Media Data: Information from interactions on social media platforms like Instagram, Facebook, Twitter, and others, as shared by you or the platform.
• Online Activity Information: Data related to your devices, IP address, geolocation, browser type, and activities on our Site (including cookies and tracking tools).

We may also collect information from third parties such as business partners, data providers, and publicly available sources, as well as create data based on your interactions with us.

Use of Personal Information We use your Personal Information to conduct business activities such as:

• Enabling access to our Site and services.
• Personalizing your experience on our Site.
• Processing transactions and fulfilling orders.
• Improving our products, services, and customer support.
• Complying with legal requirements and industry standards.
• Conducting market research and promotions.
• Protecting against fraud and ensuring the security of our Site and systems.

We may also send you marketing communications and updates about our products and services, and you can unsubscribe at any time.

Sharing of Personal Information We may share your information with:

• Employees: Those who need access to perform their jobs.
• Affiliates: Our parent or subsidiary companies.
• Third-Party Service Providers: Vendors who assist with operations, such as hosting, data storage, payment processing, and customer service.
• Business Transfers: In the event of a merger, acquisition, or sale of assets.
• Legal and Compliance: When required by law, or to protect our rights, property, or safety.

We may also share aggregate, non-personal data with third parties for lawful purposes.

Cookies We use cookies to enhance your experience on our Site, help you navigate, and analyze usage. You can manage cookie settings through your browser, but disabling cookies may limit some features of our Site.

Tracking and Third-Party Advertising We and our third-party service providers use tracking tools such as pixels, web beacons, and cookies to gather data on your online activities across our Site and third-party websites. This data helps deliver targeted advertising and marketing.

Data Retention and Protection We retain your Personal Information only as long as necessary for the purposes outlined in this Policy. We implement various security measures to protect your data, but no system can be completely secure. You are also responsible for safeguarding your account password.

Data Transfers Your Personal Information may be processed outside your country of residence, including in the United States, where data protection laws may differ.

Children’s Privacy Our Site is not intended for children under 21, and we do not knowingly collect personal data from minors. If you believe a minor has provided us with personal information, please contact us so we can delete it.

Links to Third-Party Sites Our Site may contain links to third-party websites that are not controlled by us. These third-party sites have their own privacy policies, and we are not responsible for their content or practices.

Changes to the Privacy Policy We may update this Policy from time to time. Any changes will be posted on the Site, with the “Last Updated” date at the bottom. Your continued use of the Site after such updates means you accept the changes.

California Privacy Rights

Under the California Consumer Privacy Act (CCPA), California residents are entitled to certain rights regarding their personal information, including:

• The right to know, as detailed in our Privacy Policy and upon specific request, the categories of personal information we collect from you, where it comes from, how we use it, whether we disclose or sell it, and to whom.
• The right to “opt-out” of Exhale’s sale of your personal information to any third parties.
• The right to request that Exhale stop sharing your personal information with third parties.
• The right, with some exceptions, to have your personal information deleted from Exhale’s records.
• The right to correct any inaccuracies in your personal information.
• The right to receive equal service and pricing from Exhale even if you exercise any of your privacy rights.

For California residents, we will respond to such inquiries within 45 days at no cost. Verification of identity may be required, and depending on the personal information involved, additional information may be requested. You, or someone registered with the California Secretary of State who is authorized to act on your behalf, may submit up to two requests within a 12-month period.

While we do not sell your personal information to third parties in the traditional sense, we may permit certain third parties (e.g., online advertising partners) to collect it through automated technologies on our site in exchange for non-monetary benefits, like targeted content and advertising. If you are a California resident and wish to learn more about these third-party services or opt out of tracking, please refer to our “Tracking and Third-Party Advertising” section.

 

European Privacy Rights

This section pertains to our handling of personal data under the General Data Protection Regulation (GDPR) for residents of the European Economic Area (EEA), the United Kingdom, and Switzerland.

We collect and process your data only when we have a lawful basis to do so, which may include:

• The need to provide or operate our services, offer customer support, and secure our services.
• Our legitimate interest (not overridden by your data protection interests) in research, marketing, and safeguarding our rights.
• Your consent for a specific purpose.
• Compliance with legal obligations.

If you are a resident of the EU, EEA, UK, or Switzerland, you have rights regarding your personal data, including:

• Access: The right to know if we are processing your personal data and to request a copy.
• Correction: The right to have inaccurate or incomplete data updated.
• Erasure: The right to request deletion of your personal data when it is no longer needed, if consent has been withdrawn, or where your rights outweigh our legitimate interests.
• Portability: The right to obtain a copy of your data in a structured format and transfer it to another controller.
• Restriction of Processing: The right to limit how we process your data if you dispute its accuracy, believe it was unlawfully obtained, or object to its use.
• Withdrawal of Consent: When data is processed with your consent, you may withdraw consent without impacting prior processing.
• Objection: The right to object to processing based on legitimate interests or for direct marketing purposes.
• Complaint: The right to file a complaint with your local Supervisory Authority regarding our data handling practices.

Retention
We retain personal data as needed to fulfill the purposes outlined in this Privacy Policy, unless required otherwise by law or for dispute resolution and legal protection.

Cross-Border Transfer
Personal data collected through our site is stored on servers in the U.S. For data transfers from the EEA or UK, we rely on standard contractual clauses approved by the European Commission. No transfers occur unless adequate protections are in place.

Data Security
We use reasonable measures to protect personal data, though no data system can be completely secure. If you believe there is a security issue with your interaction, please contact us immediately.

Do Not Sell My Personal Information
California Resident – Request to “Stop Sale of Personal Information”

If you are a California resident, the California Consumer Privacy Act (CCPA) allows you or your authorized agent to opt out of the “sale” of your personal information to third parties.

Our Privacy Policy outlines the limited situations where we may share your information with third parties outside of our company. To request this for yourself, please read the “Individual Request” section. If an authorized agent will be submitting the request on your behalf, skip to the “Authorized Agent Request” section below.

Individual Request
Yes, I am a California resident, and I would like to opt out of any “sales” of my personal information.

Please note that opting out of sharing your personal information, as defined under the CCPA “sale” guidelines, means:

• You will still receive cookies, tags, pixels, etc., essential for our site’s functionality.
• You will continue to see advertisements, though they may be less personalized or relevant to you.
• We will still share your personal information with service providers as needed to support the services on our site.
• This request will only prevent the “sale” of your personal information after submission; it does not apply to any past sharing of information.