We may collect or obtain the following categories of personal information through this Site or by other means including through any email message, webform, chat box, survey, social media page, event, or other communication or correspondence:

Contact Data	Name, phone number, e-mail, mailing address, and country
Transaction Data	Purchase and sale information, billing/payment information, shipping and fulfillment information, Customer ID, and details concerning your order
Message Data	Messages and correspondences, including email, web chat, or web form messages, and any personal information contained therein
Telephone Recordings	Telephone recordings when you speak with us or our representatives over the telephone, e.g., telephone orders and customer support
Survey Data	Information you may provide in a survey, poll, or the like, including your responses
Social Media Data	Information and messages shared with us through our social media pages, including your associated profile information
Referral Data	Information about you provided to us from other sources, including your email address
Interaction Data	Information that may be identifiable to you when you access or use the Site or otherwise interact with us, including: Log Data (e.g., IP addresses, referral URLs, date and time, and crash data); Device Data (e.g., information about your device, including type of device, operating system, application IDs, and unique device identifiers); Browser Data (e.g., information about your browser type and settings, language preferences, and cookie data); and Analytics Data (e.g., approximate geolocation, information about your time of access, session and duration, and your interactions with the Site)
Mobile App Data	Information that we collect in relation to the use of the AirDoctor, AquaTru, and AromaTru mobile applications, including name, e-mail, phone number, zip code, country, state, city, Wi-fi password, IP address, router name, location information, device and user analytics (e.g., time, usage), log data (e.g., defaults, crash, schedule), and mobile app login credentials
Adverse Event Data	Information that you report in relation to an Adverse Event, which may include information about your health, medical history, or treatment
Recruiting and Job Applicant Data	Information concerning your recruitment and/or application for employment, including resume data, references, education records, certificates, biodemographic information (e.g., race, ethnicity, gender, sexual orientation, nationality, veteran status), trade union membership, citizenship and residency information, SSN, and reputational information, as may be provided by you or through a recruiter, staffing agency, or other referring party, and background check information, as may be provided by you or supplied by a background verification service and/or consumer reporting agencies

We may use personal information collected about you for the following purposes:

• Presenting the Site and its contents to you;
• Processing and fulfilling sales orders, including billing and shipment;
• Operating and administering our business;
• Corporate transactions;
• Communicating by email, phone, and other means;
• Business insights and product development;
• Sales and marketing, including analytics for tracking and measuring online and app interactions;
• Evaluating and processing applications for employment;
• Detecting and preventing abuse and security threats;
• Complying with legal and regulatory obligations, including reporting Adverse Events to the FDA;
• Reporting Adverse Events;
• Providing product-related mobile applications;
• Providing you with information that you request from us;
• Notifying you about changes to the Site, our Terms & Conditions, or this Privacy Notice; and
• For any other purpose upon your intention, direction, or consent.

• We may use various technologies, including small data files placed on your computer or device when you visit the Site, such as “Cookies,” “Pixels,” “Web Beacons,” and similar technologies. A Cookie file may contain information that can identify you each time you visit the Site. The Site may use Cookies as a way to measure activity and traffic patterns on the Site in order to improve your experience, monitor usage, compile analytics, and for advertising and marketing purposes.Your browser can be set to warn you before accepting Cookies and you can choose to refuse Cookies by turning them off in your browser. You do not need to have Cookies turned on to visit the Site, but you may need them to use certain features of the Site.

Under the California Online Privacy Protection Act (“CalOPPA”), we want to inform you about our “Do Not Track” (“DNT”) request policy. DNT is a feature that some web browsers offer to allow users to send signals to websites so that no information about their browser session will be shared. While we take all reasonable steps to protect your online privacy, we cannot promise that our current Site will address every browser setting or preference. In particular, we have not implemented the necessary programming changes to honor “DNT” browser signals. Please return to this Privacy Notice for further updates on this topic. You can learn more about DNT here: https://www.eff.org/issues/do-not-track

We may disclose any category of personal information and Interaction Data to the following categories of recipients for the purposes described below:

Subsidiaries and Affiliates	We may disclose personal information and Interaction Data within the ILM family of companies to operate and improve our business and for sales and marketing purposes
Business Services Providers	We may disclose personal information to our IT services providers, call centers, fulfillment services, and others within our vendor base to operate the Site and our business and to process and fulfil sales orders
Specialized Services Providers	We may disclose personal information to specialized services providers, including contractors, business and marketing consultants, security consultants, auditors, information services providers, and professional advisors
Advertising Services and Networks	We may disclose personal information to our advertising services providers, advertising networks, and social media platforms to deliver advertising and promote our products and brands
Recruiting Services Providers	We may disclose personal information to recruiting and staffing service providers to identify job candidates and facilitate the evaluation and processing of applications for employment
Government and Legal Process	We may disclose personal information to public authorities and third parties as may be required by applicable law, regulation, or legal process which may include reporting Adverse Event information to the FDA
Corporate Transaction	We may disclose personal information as part of a corporate transaction e.g., to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of assets, whether as a going concern or as a part of a bankruptcy, liquidation or similar proceeding

Your personal information may be transferred to countries other than the country from which it originated. Such countries may have different or less protective privacy and data protection laws than the originating country. Where required, ILM ensures that international transfers of personal information are subject to an appropriate transfer mechanism or consent.

This section supplements the Privacy Notice and applies only to residents of the state of California:

Categories of personal information we collect

We may collect, and have collected in preceding 12-months, the following categories of personal information:

Categories of Personal Information	Purposes for use and disclosure	Source	Disclosed for Business Purpose	Sold or Shared
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers	Processing and fulling sales orders including billing and shipping; Operating and administering our business; Communicating and providing information requested, Sales and marketing including analytics; Evaluating and processing applications for employment; Complying with legal and regulatory obligations; Adverse Event reporting; Notifying about changes to the site and notices	From you, directly or indirectly, or third-party partners and affiliates	Yes, to Subsidiaries and Affiliates; Business Services Providers; Specialized Services Providers; and Recruiting Services Providers	Yes, to Advertising Services and Networks
Personal information described in subdivision (e) of Section 1798.80 (e.g., name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information)	Processing and fulling sales orders including billing and shipping; Operating and administering our business; Evaluating and processing applications for employment; Complying with legal and regulatory obligations; Adverse Event reporting	From you, directly, or third parties	Yes, to Subsidiaries and Affiliates; Business Services Providers; Specialized Services Providers; and Recruiting Services Providers	No
Characteristics of protected classifications under California or federal law (e.g., Age 40 years or older, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions, reproductive health decisions, sexual orientation, veteran or military status, genetic information (including familial genetic information)	Evaluating and processing applications for employment; Complying with legal and regulatory obligations	From you, directly	Yes, to Subsidiaries and Affiliates; Business Services Providers; Specialized Services Providers; and Recruiting Services Providers	No
Commercial information including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies	Processing and fulling sales orders including billing and shipping; Operating and administering our business; Communicating and providing information requested, Business insights and product development, Sales and marketing including analytics; Complying with legal and regulatory obligations, Notifying about changes to the site and notices	From you, directly or indirectly, or third-party partners and affiliates	Yes, to Subsidiaries and Affiliates; Business Services Providers; and Specialized Services Providers	Yes, to Advertising Services and Networks
Biometric information	Not collected	Not applicable	No	No
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website application, or advertisement	Presenting the Site and its contents; Business insights and product development, Sales and marketing including analytics; Notifying about changes to the site and notices, Detecting and preventing abuse and security threats	From you, indirectly, or third-party partners and affiliates	Yes, to Subsidiaries and Affiliates; Business Services Providers; and Specialized Services Providers	Yes, to Advertising Services and Networks
Sensory information, such as audio, electronic, visual, thermal, olfactory, or similar information (e.g., recorded meetings and phone calls)	Processing and fulling sales orders including billing and shipping; Operating and administering our business; Communicating and providing information requested; Evaluating and processing applications for employment; Complying with legal and regulatory obligations	From you, directly or indirectly, or third parties	Yes, to Subsidiaries and Affiliates; Business Services Providers; Specialized Services Providers; and Recruiting Services Providers	No
Professional or employment-related information	Operating and administering our business; Evaluating and processing applications for employment; Complying with legal and regulatory obligations	From you, directly, or third parties	Yes, to Subsidiaries and Affiliates; Business Services Providers; Specialized Services Providers; and Recruiting Services Providers	No
Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99)	Evaluating and processing applications for employment; Complying with legal and regulatory obligations	From you, directly, or third parties	Yes, to Subsidiaries and Affiliates; Business Services Providers; Specialized Services Providers; and Recruiting Services Providers	No
Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes; interaction data collected about you when you interact with us such as websites or mobile apps including log data (information collected when you access our website including IP address, URLs and crash data), device data (information about your device including type, operating system and unique identifiers), browser data (information about your browser type, settings cookie data),	Presenting the Site and its contents; Operating and administering our business; Communicating and providing information requested, Business insights and product development, Sales and marketing including analytics; Detecting and preventing abuse and security threats	From you, directly or indirectly, or third parties	Yes, to Subsidiaries and Affiliates; Business Services Providers; and Specialized Services Providers	Yes, to Advertising Services and Networks

• • • • Categories of sensitive personal information we collect

        From you, directly or indirectly, or from third parties, we may collect, and have collected in preceding 12-months, the following categories of sensitive personal information:

Categories of Sensitive Personal Information	Purposes for use and disclosure	Source	Disclosed for Business Purpose	Sold or Shared
Sensitive identifier (e.g., social security number, driver’s license, state identification card, or passport number)	Evaluating and processing applications for employment; Complying with legal and regulatory obligations; Adverse Events reporting	From you, directly	Yes, to Subsidiaries and Affiliates; Business Services Providers; Specialized Services Providers; and Recruiting Services Providers	No
Account information (e.g., account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account	Providing mobile applications	From you, directly	Yes, to Subsidiaries and Affiliates; Business Services Providers; and Specialized Services Providers	No
Precise geolocation (within a geographic area that is equal to or less than the area of a circle with a radius of 1,850 feet)	Providing mobile applications	From you, indirectly	Yes, to Subsidiaries and Affiliates; Business Services Providers; and Specialized Services Providers	No
Demographic information (e.g., racial or ethnic origin, religious or philosophical beliefs, or union membership)	Evaluating and processing applications for employment; Complying with legal and regulatory obligations	From you, directly	Yes, to Subsidiaries and Affiliates; Business Services Providers; and Specialized Services Providers	No
Communications content (e.g., mail, email, and text messages unless the business is the intended recipient of the communication)	Not collected	Not applicable	No	No
Genetic data	Not collected	Not applicable	No	No
Biometric information processed for the purpose of unique identification	Not collected	Not applicable	No	No
Personal information collected and analyzed concerning health	Adverse Event reporting; Business insights and product development	Not applicable	Yes, to Subsidiaries and Affiliates; Business Services Providers; Specialized Services Providers; and Government and legal	No
Personal information collected and analyzed concerning sex life or sexual orientation	Not collected	Not applicable	No	No

• • • Retention period or criteria

      ILM retains personal information for a period commensurate with the purposes for which the personal information was collected or obtained. For example, the criteria used to determine the retention of personal information includes any time necessary to complete a transaction or for legal and compliance purposes or security purposes. Personal information may be retained in archival format (e.g., data backups) beyond its retention period so long as it is not subject to further access.

      • • Sale and sharing of personal information

          ILM may “sell” or “share” your personal information as described in California Privacy Rights. You may exercise your right to opt-out of the sale and sharing of your personal information by using the methods provided in Opt-out of the sale and sharing of personal information.

          Opt-out preference signals

          At this time, we do not accept opt-out preference signals, including with respect to global privacy controls, from any platform, technology, or mechanism (e.g., web browsers).

          Personal information of minors

          ILM has no knowledge of having collected the personal information of minors under 16 years of age.

          California Privacy Rights

          Under the California Consumer Privacy Act of 2018, as amended, and its respective implementing regulations (the “California Privacy Laws”), eligible California residents may be entitled to certain privacy rights subject to certain limitations, including:
          • • Right to Know. You may have the right to access the personal information collected about you, the sources from which such information was obtained, the categories of information that have been sold or disclosed for a business purpose, and the commercial purpose for which the information was collected or sold, provided to you in a reasonably portable format.
            • You may have the right to request that we delete any of the personal information we have collected or maintain about you.
            • You may have the right to correct inaccuracies in your personal information.
            • Opt-out of the “Sale” and “Sharing” of Personal Information. You may have a right to opt-out of the “sale” and “sharing” of your personal information.
            • Sensitive Personal Information. You may have the right to opt-out of the use and disclosure of your sensitive personal information in certain circumstances.
            • Restrict Profiling. You may have the right to restrict the use of your personal information for the purposes of profiling.
            • You may have the right to obtain a copy of certain personal information in portable (e.g., machine readable) format.
            • Opt-out of Automated Decision-making. You may have the right to opt-out to certain types of automated decision-making, subject to certain exceptions.
            • Non-Discrimination. You may have the right to not be discriminated against in the event you exercise your California privacy rights, such that you will not be denied goods or services, charged a higher rate, or provided with lower quality products or services.

          Exercising your rights under the California Privacy Laws

          You, or an authorized agent, may exercise your rights by submitting a request at https://preferences.idealliving.com/privacy. Unless otherwise required by law, ILM will allow two disclosure requests per 12-month period at no cost to you. For subsequent requests, we may charge a fee if we determine that the request is excessive, repetitive, or manifestly unfounded, but will not do so without providing you with a cost estimate before processing your request. We respond to legitimate privacy requests within 10 days of receipt and process requests within 45 days unless there is cause for an extension. We will notify you with further information if any extension is necessary. Except with respect to requests to “opt-out” of the sale or sharing of personal information, all privacy requests are subject to proper prior verification before processing. Typically, this means you will be required to verify certain pieces of information we maintain about you, such as name, phone number, date of birth, transaction details, or other information. Requests involving a high risk to personal information may require completion of a Sworn Declaration. If you are the authorized agent of an individual making a request, you may have to take additional steps to verify your identity and demonstrate that you can exercise the individual’s rights on their behalf.

          Do not sell or share my personal information

          • • ILM may “sell” or “share,” and has sold or shared in the preceding 12-months, personal information, such as internet or electronic activity information and unique device identifiers, for cross-context behavioral advertising.

          Opt-out of the sale and sharing of personal information

          To opt-out of the sale or sharing of your personal information, please visit https://preferences.idealliving.com/form/opt_out. Please note that your opt-out choices may apply only to this specific web browser and persist only until the opt-out Cookie is removed or “cleared” from your web browser, e.g., by clearing Cookies in your browser settings.

          California “Shine the Light” Law

          ILM does not share personal information, as defined by Cal. Civ. Code § 1798.83, with third parties for their direct marketing purposes.

Residents of certain U.S. states may have the following rights:

• You may have the right to access the personal information collected about you.
• You may have the right to request that we delete any of the personal information we have collected or maintain about you.
• You may have the right to correct inaccuracies in your personal information.
• Opt-out of the “Sale” of Personal Information, Profiling, and/or Targeted Advertising. You may have a right to opt-out of the “sale” of your personal information, profiling, and/or the use of your personal information for targeted advertising.
• Sensitive Personal Information. You may have the right to consent (opt-in) prior to the use and disclosure of your sensitive personal information in certain circumstances.
• You may have the right to obtain a copy of certain personal information in portable (e.g., machine readable) format.
• Opt-out of Automated Decision-making. You may have the right to opt-out to certain types of automated decision-making, subject to certain exceptions.
• Non-Discrimination. You may have the right to not be discriminated against in the event you exercise your privacy rights.

Exercising your U.S. state consumer privacy rights

You, or an authorized agent, may exercise your rights by submitting a request at https://preferences.idealliving.com/privacy.

Opt-out of the sale of personal information and its use for targeted adverting

To opt-out of the sale of your personal information and targeted advertising, please visit https://preferences.idealliving.com/form/opt_out.

Under the Data Protection Act 2018 (the “UK GDPR”), UK data subjects have the following rights concerning their personal data (referred to as “personal information”).

• • Withdraw Consent. If processing is on the basis of consent, you may have the right to withdraw consent to our processing at any time.
  • Access and Rectification. You may have the right to access, correct, and update your personal information.
  • Deletion/Erasure. You may have the “right to be forgotten” through the erasure or deletion of your personal information.
  • You may have the right to move, copy, and/or transfer certain Personal Information from our service to another service.
  • Stop Processing. If processing is on the basis of legitimate interests, you may have the right to object to the processing of your personal information and to ask us to restrict the processing of your personal information, subject to certain limitations.
  • Submit a Complaint. You have the right to submit a complaint to a data protection authority about our collection and use of your Personal Information. Contact details for the UK ICO can be found here: https://ico.org.uk/global/contact-us/contact-us-public/

Lawful basis of processing

We process the personal information of UK data subjects on the following lawful basis:

• • Legitimate Interests. Where the processing is necessary for the purposes of the legitimate interests pursued by ILM or a third party and not overridden by your rights and freedoms;
  • Performance of a Contract. Where the processing is necessary for the performance of a contract with you;
  • Consent. Where you have given consent to the processing of your personal information for one or more specific purposes; and
  • Legal Obligation: Where processing is necessary for compliance with a legal obligation to which ILM is subject.

Exercising your rights under the UK GDPR

You, or an authorized agent, may exercise your rights by submitting a request at https://preferences.idealliving.com/privacy. We respond to and process requests promptly and within the timeframes required by the European Data Protection Laws, typically, this means within 30 days from receipt. Please note that all requests are subject to proper prior verification before processing. If you are the authorized agent of an individual making a request, you may have to take additional steps to verify your identity and demonstrate that you can exercise the individual’s rights on their behalf.

Transfer of UK personal information

Your personal information may be transferred to third countries, including to the United States. By sharing personal information with us, you consent to the transfer of your personal information to such third countries. Where applicable, we have adopted appropriate transfer mechanisms to safeguard the transfer of your personal information in accordance with applicable laws, including, the EU Standard Contractual Clauses.

Retention of UK personal information

ILM retains personal information for a period commensurate with the purposes for which the personal information was collected or obtained. The criteria used to determine the retention of personal information includes any time necessary for legal and compliance purposes. Personal information may be retained in archival format (e.g., data backups) beyond its retention period.

Data protection inquiries

You may contact ILM regarding data protection matters at the following: privacy@idealliving.com (833) 548-1937

Under Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”) and the Provincial Privacy Acts (collectively, the “Canadian Privacy Laws”), and their respective amendments and implementing regulations, Canadian residents may be entitled to certain privacy rights. If you are a Canadian resident, subject to certain limitations, you have the following rights concerning your Personal Information:

• • Openness and Transparency. You may have the right to know the personal information we collect about you and the purposes for its collection.
  • Access. You may have the right to access personal information we maintain about you, subject to certain exceptions.
  • Correction. You may have the right to correct inaccuracies in personal information we maintain about you.
  • Deletion. You may have the right to request that we delete personal information we have collected or maintain about you.
  • De-indexing. You may have the right to request your personal information be “de-indexed” from certain types of distribution.
  • Withdraw Consent. You may have the right to withdraw consent to our use of your personal information, subject to certain exceptions.

Exercising your rights under the Canadian privacy laws

You, or an authorized agent, may exercise your rights by submitting a request to https://preferences.idealliving.com/privacy. We respond to and process requests promptly and within the timeframes required by the Canadian Privacy Laws. Please note that all requests are subject to proper prior verification before processing. If you are the authorized agent of an individual making a request, you may have to take additional steps to verify your identity and demonstrate that you can exercise the individual’s rights on their behalf.

Transfer of Canadian personal information

Your personal information may be transferred to third countries where an adequate level of data protection can be ensured. By providing personal information to us, you consent to the transfer of your personal information to such third countries.

Our Site includes links to other websites, social media widgets, such as the Facebook “Follow Us” button, and other interactive features, blogs, and videos hosted by third parties whose privacy practices may differ from our own. When you use a link to go from our Site to an unaffiliated website, or interact with any such features, the privacy policies of those respective third parties will apply to the processing of your personal information.

ILM does not knowingly collect personal information from or about minors. Minors should not use the Site or otherwise provide us their personal information. If we learn that we have collected or received personal information from a minor without parental consent, we will delete that information.

Taking into account the nature and scope of the processing and the particular risks to personal information, ILM utilizes reasonable technical and organizational measures to help protect personal information. Such measures include, as applicable, the Payment Card Industry Data Security Standards (PCI DSS).