OUR PRIVACY POLICY:

Your privacy is very important to us. and its affiliates, KIMIAWELLNESS (“we”, “us”, “our”, or “KIMIAWELLNESS”), respect your privacy and are committed to protecting it through our compliance with this policy. This Policy describes how we collect, use, store, process, protect and disclose “Personal Information,” which is generally information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or device, as more fully described below, which we obtain from you when you visit the websites that we own or control (today or in the future) (the “Sites”), all services made available through the Sites, and all other mobile applications, digital resources, programs, or communications offered by us and other data collection services that we own or control (today or in the future) (the “Apps”), use any services we provide through the Sites or the Apps (collectively, with the Sites and the Apps, the “Services”), use our products, or that you provide to us by other means.

This Policy also governs the use of Personal Information we obtain from you from any third-party site or application that you authorize to provide us with Personal Information. Please be aware that we cannot control the privacy policies or practices of sites or companies that we do not own or control and cannot control the actions of people we do not employ or manage. This Policy also sets forth your rights and choices regarding how we collect, use, and share your Personal Information.

Please read this Policy carefully. This Policy is incorporated into and is subject to the Terms of Use for the applicable Services. In the event of a conflict between this Policy and such Terms of Use, the applicable Terms of Use will control. We have tried to make this Policy clear and easy to  navigate,  but  if  you  have  any  questions  about  this  Policy,  please  e-mail  us at info@kimiawellness.com or contact us by another method described in this Policy. If you do not want us to collect, use, store or share your Personal Information in the ways described in this Policy, please do not use the Services. By using the Services, you consent to our collection, use, storage and sharing of your Personal Information as identified in this Policy.

I. Information We Collect

Information You Provide to Us

We collect information that you provide to us. When you use some of our Services, you may choose to provide certain information directly to us, to request more information, or for other reasons. We will collect, use, store and/or share such information, which may include Personal Information, consistent with this Policy. Examples of the Personal Information we collect that you provide to us include information you provide when you:

• fill in forms or create an account on one of our Sites or Apps or otherwise use the Services

• request customer service, ask product-related questions, ask service-related questions, sign up for our email newsletter, share suggestions or feedback, or otherwise correspond with us using the Services, email, phone, or access or interact with our Sites, pages or accounts on third-party social media platforms search for information using the Services

• purchase products or services or training from us

• submit reviews or comments on our Services or social media pages

• participate in a promotion, survey, sweepstakes, or contest

The types of Personal Information you may share with us include your name, email address, physical or postal address, phone number (including your mobile phone number), and the username and password you select to use the Services. We will also collect and maintain information about all transactions associated with your accounts.

Examples of information that we collect that you provide to us that do not constitute Personal Information include:

“Non-Personal Information” is any information that does not does not identify a natural person and is not identifiable to a natural person, such as:

• Anonymized information;

• Aggregated information; and

• Information about your business operations, including, but not limited to: 

  • The name, form, and contact details of legal persons in their business capacity.

When data is described as “anonymized,” it means that the data is no longer associated with a particular person. When data is described as “aggregated,” it means that such information has been combined with other data in such a way that no person can be identified or linked to any specific action or information.

Information We Receive From Third Parties

We may collect your Personal Information from third party affiliates or business partners such as social media sites, ad networks, analytics providers, our business partners, and advertising and marketing agencies and vendors. We may also receive information from other sources to help us supplement our records, improve the personalization of our service to you, and detect fraud. Our goal is to limit the information we collect to the information needed to support our business.

Information We Collect Through Automatic Data Collection Technologies

You also provide us information in other ways through technology to help our Sites and Apps work properly and support customer service, marketing, and analytics efforts to help us understand our customers’ needs and provide information about our products and services. Some of this information may be linked to you personally. When you use our Services, our servers automatically record information that your browser or device sends whenever you visit a website or utilize an application. This information may include your IP address, the type of device you are using, the internet service provider or mobile carrier you are using, your device identifiers, your mobile telephone number, your geographic location and your activities within the Services, including the links you click, the pages or screens you view, your session time, the number of times you click a page/screen or use a feature of the Services, the date and time you click on a page or use a feature and the amount of time you spend on a page or using a feature.

Our Sites also use “cookie” technology to collect additional website usage data and to improve the Sites and our Services. A cookie is a small data file that we transfer to your computer’s hard disk. A session cookie enables certain features of the Sites and is deleted from your computer when you disconnect from or leave the Sites. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our Sites. We may use both session and persistent cookies to better understand how you interact with our Sites, to monitor aggregate usage by our uses and web traffic routing on our Sites, and to improve our Sites and Services. You may also be able to configure your computer or mobile device to limit the collection of these “cookies,” but that limitation may also limit our ability to provide all of the services or functionalities of the Sites.

We may also automatically record certain information from your device by using various types of technology, including “clear gifs” or “web beacons.” This automatically collected information may include your IP address or other device address or ID, web browser and/or device type, the pages or other content you view or otherwise interact with on our Sites and the dates and times that you visit, access or use our Sites. We may also use these technologies to collect information regarding your interaction with email messages, such as whether you opened, clicked on or forwarded a message, to the extent permitted under applicable law.

We also use Google Tag Manager and Google Analytics to collect information automatically. Google Analytics only collects the IP address assigned to you on the date you visited the site and does not gather your name or other identifying information. We do not combine the information collected through Google Analytics with your identifiable information. Although Google Analytics plants a permanent cookie on your web browser to identify you as a unique user the next time you visit the site, the cookie cannot be used by anyone but Google. You can prevent Google Analytics from recognizing you on return visits to this site by disabling cookies on your browser. For information about how to opt-out of Google Analytics Advertising Features, visit:

https://tools.google.com/dlpage/gaoptout/

We use Google Tag Manager to install, store, and manage marketing tags, which allows us to track activity on the Sites, such as link and button clicks, form submissions, file downloads, video views.

In short, we use these automated technologies to collect the following information:

• your IP address, browser type, and operating system;

• the mobile device you use and its temporary or persistent unique device identifiers;

• pages you view within the Services;

• video viewing history for videos you watch on the Services;

• emails from us that you open and/or forward;

• offers or links from us to which you connect; and

• information about products you purchase using the Services, including payment method, the date and time of the transaction, items purchased, the purchase price, and other order or purchase related information.

Information Collected by Third Parties

We may display third-party content on the Sites and the Apps, including third-party advertising. Third-party content may use cookies, web beacons or other mechanisms for obtaining data in connection with your interaction with such third-party content. Information collected through third-party web beacons and buttons is collected directly by these third parties, not by us. Please consult such third party’s data collection, use and disclosure policies for more information. If you do not consent to such third-party data collection, use and disclosure practices, do not use or interact with the third-party content on the Sites and Apps.

Links to Other Websites

The Sites and Apps may contain links to other websites. The fact that we link to a website is not an endorsement, authorization or representation of our affiliation with that third party. We do not exercise control over third party websites. These other websites may place their own cookies or other files on your computer or mobile device, collect data or solicit Personal Information from you. Other sites follow different rules regarding the use or disclosure of the Personal Information you submit to them. We are not responsible for the content, privacy and security practices, and policies of third party sites or services to which links or access are provided through our Sites and Apps. We encourage you to read the privacy policies or statements of the other websites you visit.

II. How We Use The Information We Collect

Non-Marketing Purposes

We may use the information we collect for non-marketing purposes including:

• validating your identity and managing your account with us;

• processing your transactions and providing our products and services to you;

• communicating with you for non-marketing purposes, including order processing and fulfillment and about employment opportunities and job openings;

• sending you push notifications or e-mails to provide you with alerts and updates about your account and our Services;

• conducting statistical or demographic analysis;

• complying with legal and regulatory requirements;

• customizing and improving your experience with the Services or our products;

• protecting and defending KIMIAWELLNESS and its affiliates against legal actions or claims;

• detecting and preventing fraud;

• debt collection;

• satisfying contractual obligations;

• cooperating with law enforcement or other government agencies for purposes of investigations, national security, public safety or matters of public importance when we believe that disclosure of Personal Information is necessary or appropriate to protect the public interest;

• improving customer service;

• providing you the features and functionalities associated with the Services;

• any other purposes for which we obtain your consent; and

• for other business purposes permitted under applicable law or disclosed at the time we collect the data (collectively, “Non-Marketing Purposes”).

These purposes may be necessary for us to perform a contract to which you are a party, comply with a legal obligation to which we are subject, protect our vital interests or the interests of another natural person, or otherwise pursue our legitimate business purposes and objectives. We may obtain your consent to process your Personal Information if and as necessary.

Marketing Purposes

We may use the Personal Information we collect for our own marketing purposes including notifying you of special promotions, offers and events via push notifications, email and other means, subject to compliance with applicable laws and consent requirements. We may also link Personal Information (including your name, mobile phone number, and email address) with non-personal information (including Personal Information automatically collected as described in this Policy) and use such information for our own marketing purposes.

Other Purposes

We may also use information in the aggregate to understand how our users as a group use the Services provided on our Sites and Apps. We will not collect additional categories of Personal Information or use the Personal Information we collect for materially different, unrelated or incompatible purposes without providing you notice.

Because Non-Personal Information does not personally identify you, we may use and disclose such information for any purpose. In some instances, we may combine this information with Personal Information (such as combining your name with your location data), but in such instance, we will treat the combined information as Personal Information.

III. How and With Whom We Share Your Information

For business purposes, we may share certain Personal Information we receive from and about you, and about your transactions with us, with our affiliates and certain third parties, including our advertising/digital agencies and other vendors, including our contractors, service providers and other third parties we use to support our business. Doing so allows us to provide the Services you request.

We may also share your Personal Information with the following third parties:

Third Party Service Providers

Your Personal Information may be shared with or collected by third party service providers who provide us with services, including, but not limited to, facilitating mailing information and services, data hosting or processing, payment and credit card processing, processing and fulfilling transactions, and shipping and delivering products you order. We require these third-party service providers to exercise reasonable care to protect your Personal Information and restrict their use of your Personal Information to the purposes for which it was provided to them.

We may also allow third party service providers to use cookies or similar technologies to collect information about your browsing activities over time and across different websites following your use of the Services. For example, we use Google Analytics and Google Tag Manager, as explained above.

Anonymous Information/Aggregated Information

We may freely use aggregated and anonymized information as allowed by law and share it with third parties. Any anonymized information we provide to third parties does not identify you and is not considered Personal Information, and, as such, is not subject to the terms of this Policy.

Sale of our Business; Bankruptcy

In the event of a merger, acquisition, bankruptcy or other sale of all or a portion of our assets, we may transfer or allow third parties to use information owned or controlled by us. We reserve the right, in connection with these types of transactions, to transfer or assign your information and other information we have collected to third parties or to authorize third parties to use any such information retained by us. Other than to the extent ordered by a bankruptcy or other court, the use and disclosure of all transferred user information will be subject to this Policy. However, any information you submit or that is collected after this type of transfer may be subject to a new Privacy Policy adopted by the successor entity.

Compliance with Laws and Law Enforcement

We cooperate with government and law enforcement officials or private parties to enforce and comply with the law. To the extent permitted under applicable law, we may disclose any information about you to government or law enforcement officials or private parties as we believe is necessary or appropriate to investigate, respond to, and defend against legal claims, for legal process (including subpoenas), to protect the property and rights of us or a third party, to protect us against liability, for the safety of the public or any person, to prevent or stop any illegal, unethical, fraudulent, abusive, or legally actionable activity, to protect the security or integrity of the Services and any equipment used to make the Services available, or to comply with applicable law.

IV. Access to Information and Your Choices

We provide you with the opportunity to access, update or delete certain information and to unsubscribe or opt-out from certain communications. For example, you may exercise your choices as explained below. Please be aware that, if you do not allow us to collect and use your personal information, we may not be able to deliver certain products, services, promotions, and offerings to you. To protect your privacy and security, we reserve the right to take reasonable steps to verify your identity before granting you account access or making corrections to your information. You are responsible for maintaining the secrecy of your unique password and account information at all times.

Account Management Options

You may access, correct or update certain personal information you have provided to us at any time by accessing your KIMIAWELLNESS user account, if you have one. If you have a KIMIAWELLNESS user account, you may also choose to close it by accessing your profile online. You may also choose how and whether to receive promotional or marketing communications from us by exercising your choices by following instructions available on the Services or in communications sent to you, or by contacting us using one of the methods described in this Privacy Policy.

Opt-Out/Correction/Deletion Requests

You may receive mailings or emails from us with news or other information on events, products, services, discounts, special promotions, upcoming events or other offers from us or on our behalf. If at any time you wish to stop receiving emails, mailings, or other communications from us please reply to any of our emails and type “unsubscribe” in the subject line or send us an email to info@kimiawellness.com and we will remove you from our mailing list. Please note that we may continue to send transactional or account-related messages to you.

Alternatively, for email communications, you may opt out of receiving such communications by following the unsubscribe instructions set forth in the messages you receive from us. Your unsubscribe request or email preferences change will be processed promptly, though this process may take several days. During that processing period, you may receive additional email communications from us.

We will support your ability to access, correct, and delete your Personal Information. If we have obtained your Personal Information from another third party, we may confirm your request through them. For assistance with exercising your choices, or if you have any questions about your choices, please contact us at info@kimiawellness.com.

V. Our Use of Facebook

We tell you how we use your data and what your choices are when you interact with us on Facebook. We offer Facebook pages, posts and ads primarily as a communication channel to introduce, inform, educate and encourage. This privacy policy will not tell you what Facebook does with your data. We encourage you to review Facebook’s privacy policy and settings to make sure you understand how they collect, use, and share information. To help us manage these Facebook activities, we work with vendors who have contractually promised to handle or use the data in ways that are approved by us.

When you interact with us through Facebook, the information that we can access and store is affected by the permissions you grant and the privacy settings you maintain through Facebook. We will handle your information in accordance with this Privacy Policy.

We obtain information about you through our Facebook pages, including comments that you post (typically in response to our posts) and personal information you submit either via a Facebook application on one of our pages or participation in one of our Facebook contests/giveaways. The privacy implications of each are outlined below.

Our Facebook Pages

We enjoy interacting with our users through Facebook and encourage you to engage with our pages by tagging us, leaving comments, posting photos, etc. When you do engage with us via one of these actions, please remember that it’s public and use caution when posting personal information. We won’t use it outside of Facebook, but it will remain on our Facebook pages, unless we feel we need to remove or block your content to maintain an atmosphere of respect.

If you opt to receive communications from us on Facebook, we will collect the minimum amount of personal information needed to administer the activity. This may include collecting your name, address, age, and email address. We will delete as much as we can as soon as these purposes have been met. Where we use vendors to help us with these tasks, we’ll contractually ask them to do the same. Where possible, we will also offer you an alternative way of participating in the contest that does not involve Facebook.

Our Facebook Posts

We may customize our posts to you, using categories provided by Facebook, where we feel we can improve your experience without compromising your privacy and in compliance with our privacy policy.

If we mention your comment in our posts, we will only identify you by your first name to preserve your privacy.

Our Facebook Ads

We place Facebook ads for the purpose of introducing Facebook users to our products and services, encouraging them to contribute to our community-based activities, and raising their awareness of our campaigns and Facebook presence.

Facebook requires us to choose which countries we want our ads to run in. This also helps us to determine which language to serve the ad in. Where we feel we can improve your experience without compromising your privacy, we may further customize our Facebook ads using categories provided by Facebook. These are carefully reviewed for compliance with our privacy policy and Facebook doesn’t share any of your personal information with us. For example, we may target a Facebook ad to residents of a city where we have an event.

Facebook/Meta Pixel

With your consent, the Meta pixel is used on our website. The Meta pixel with the remarketing function is provided by Meta and helps us measure the effectiveness of our advertisements by understanding what actions visitors take when they visit our websites or mobile applications. This allows us to target, based on visitors’ prior use of this website, advertisements to visitors of this website once they visit the social network Facebook and to create custom audiences on the social media platform and serve advertisements to users who match the characteristics of these audiences. Through the Meta pixel a direct connection to the Meta servers is made when visitors visit this website. This will send the information to the Meta server that a visitor visited this website, and Meta will process this information and can assign this information to a visitor’s personal Facebook user account.

We may share with Facebook/Meta certain data regarding actions that you take on our Websites such as your visits to our Websites, your interactions on our Websites, and information collected from cookies or similar technologies including the Meta pixel. This allows us to measure the effectiveness of our advertising, improve our marketing practices, and helps us deliver more relevant advertising to you and people like you (including on social media such as Facebook). We are a joint data controller with Meta for this processing. This means that we must provide you with this notice, but you should contact Facebook if you wish to exercise your data protection rights.

You can manage your privacy and ads preferences through your account settings on Facebook. Further information, including how Facebook enables you to exercise your data protection rights, and subsequently processes your information as independent data controller can be found in Meta’s Data Policy, which is accessible at https://www.facebook.com/about/privacy

The legal basis for using the Meta pixel and the subsequent processing of the data collected in connection with the Meta pixel is your consent. We will only use the Meta pixel if you explicitly allow it. If you permitted the use of the Meta pixel, you can withdraw your consent and disable the Meta pixel at any time by updating your cookie settings or by updating your Facebook account settings.

You have the right to object, on grounds relating to your particular situation, at any time to such processing. To exercise this right you may at any time deactivate the use of non-essential cookies in the cookie settings.

VI. Security

We are committed to protecting the security of the Personal Information you provide to us and that we collect about you. We maintain commercially reasonable safeguards to maintain the security and privacy of Personal Information that you provide to us. Our safeguards vary based on the sensitivity of the information that we collect and store.

Nevertheless, when disclosing Personal Information, you should remain mindful that there is an inherent risk in the use of email and the internet. Your information may be intercepted without our consent, collected illegally and used by others without your consent. We cannot guarantee the security of any information you disclose online, and you do so at your own risk. You are responsible for maintaining the security of your account username and password. We recommend that you change your password periodically. If you believe that your account username and/or password have been stolen or been made known to others, it is your responsibility to immediately contact us at info@kimiawellness.com and change your password. We are not responsible if someone else accesses your account through information they have obtained from you.

VII. Underage Persons

The Services are for use by persons who are at least 13 years of age. If you are younger than 13, you may not access, attempt to access, or use the Services. We do not knowingly collect or allow the collection of Personal Information via the Services from persons under the age of 13. Should we become aware that anyone between the age of 13 and 18 has submitted personal information to our online and mobile resources without parental or legal guardian’s consent, we will delete that information and not use it for any purpose. If you believe that someone under the age of 18 has submitted personal information through the Services, please contact us info@kimiawellness.com. We encourage parents and legal guardians to talk with their children about the potential risks of providing personal information over the internet.

VIII. Collection and Use of Personal Information of Employment Applicants

If you complete an application for employment with KIMIAWELLNESS or its affiliates or request information regarding such opportunities, we may collect personal information that you provide (such as information contained in a resume or cover letter) in connection with your request for information and/or to evaluate your application for employment. We may also collect personal information about you from third parties to supplement, update, or verify your information, and/or to process your application. Applicable law may require that you authorize a third party to share your personal information with us before we can acquire it. Failure to provide any requested information may negatively impact consideration of your employment application. By applying to become an employee of KIMIAWELLNESS or its affiliates, you consent to our collection, use, and disclosure of your personal information as described above, to the extent permitted by applicable law.

IX. Retention

We retain personal information for as long as necessary to fulfill the purposes for which it is collected or processed. We also retain information for related business purposes, security, legal compliance, and disputes and claims handling as permitted by applicable law.

X. Changes to this Policy

We may revise this Policy from time to time in our sole discretion, and the updated Privacy Policy applies to you after the effective date of the revision. Your continued access or use of the Services following any amendments to the Policy constitutes your acceptance of the Policy as amended. It is your sole responsibility to monitor our website for changes to the Policy.

XI. Contact Us

If you would like to review, update or correct your information or modify your communication preferences, or if you have questions regarding our Privacy Policy or the use of information collected, you can contact us at: info@kimiawellness.com.

XII. EU Privacy Rights

GDPR

The General Data Protection Regulation (“GDPR”) provides EU data subjects several privacy rights. Those rights include the following:

1. The Right to Access: Allows you to request information from us about your Personal Information, including what data we have and how and why it is being processed.

2. The Right to Rectification: Allows you to correct or supplement your Personal Information where it is inaccurate or incomplete.

3. The Right to Erasure: Allows you to request that we erase Personal Information about you that we have in our possession.

4. The Right to Restriction of Processing: Allows you to restrict our use of your Personal Information so that it is only processed with your consent.

5. The Right to Object to Processing: Allows you to object to our processing of your Personal Information carried out on the basis of its legitimate interests, to carry out tasks in the public interest, or to exercise official authority. In cases where you object to our processing of your Personal Information for direct marketing purposes, the processing will cease.

6. The Right to Data Portability: Allows you to request from us a copy of your Personal Information that it has on file and to transfer that information to someone else without any interference from us. In some cases, you may be able to request that we transfer your Personal Information directly to a third party on your behalf.

In addition, to the extent that we process any of your Personal Information on the basis of your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing that was based on your consent before its withdrawal. Please note that each of these rights may be subject to limitations or exceptions under applicable law. Consult your legal counsel for information about what rights are available to you and under what circumstances they apply. Please contact us using the contact information below for assistance in exercising your rights.

If you are a natural person residing in the EU and at any time you believe we have violated one of your rights listed above, or if you believe we are in violation of one or more of the provisions of the GDPR, you have the right to lodge a complaint with a Data Protection Authority. More information about the Data Protection Authorities can be found at:
https://commission.europa.eu/law/law-topic/data-protection/reform_en

International Information Transfers

KIMIAWELLNESS is headquartered in the United States of America, and its controlled affiliates and independent authorized dealers are located in countries throughout the world. Personal Information may be accessed in or transferred to the United States or to our controlled affiliates, authorized dealers, and data processors elsewhere in the world for the Purposes described in this Privacy Policy. When we access or transfer Personal Information, we do so in compliance with applicable law. Additionally, we protect the privacy and security of Personal Information in the manner described in this Privacy Policy, regardless of where it is processed or stored.

Personal Information that we receive in the United States concerning persons in the European Union is transferred subject to appropriate safeguards, including the European Union’s standard contractual clauses for the transfer of personal data to third countries. A copy of these clauses is available upon request, free of charge. To request a copy of the standard contractual clauses, please contact us using the information provided in this Privacy Policy.

XIII. California Privacy Rights

If you are a California consumer, the following provisions apply to our processing of information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household (“California Personal Information”). For California consumers, the following provisions prevail over any conflicting provisions in other sections of this Privacy Policy.

We have collected the following categories of California Personal Information within the last 12 months from the sources listed below:

• Identifiers, such as a real name, physical address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers. This category of information is collected from you, your devices, third parties (such as linked sites), and public databases.

• Personal information described in Section 1798.80(e) (California customer records statute), such as a name, address, telephone number. This category of information is collected from you, your devices, our affiliates, or other third parties such as our business partners.

• Characteristics of protected classifications under California or federal law such as age and gender. This category of information is collected from you when you choose to provide it to us directly or indirectly through our service providers and business partners as part of our surveys and market research.

• Commercial information, including products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. This category of information is collected from you, our affiliates, or other third parties such as our business partners.

• Internet or other similar network activity, including, but not limited to, browsing history, search history, browser settings like language preference, and information regarding a consumer’s interaction with a website, application, or advertisement. This category of information is collected from you and your devices.

• Sensory data, including electronic, visual, or similar information. This category of information, such as photos, is collected from you and third parties (such as linked sites), or our service providers.

• Inferences, such as a profile about a consumer’s preferences, characteristics, and behavior, drawn from information we collect and insights we receive from third parties such as our marketing and advertising partners and data analytics providers.

Please see the “Information We Collect” section of our Policy to learn more about the types of information we collect and how we collect them.

For each of the above categories, we use the California Personal Information for a variety of business purposes such as:

• Fulfilling your orders and requests for products, services, and information;

• Audits and reporting relating to particular transactions and interactions, including online interactions, you may have with us or others on our behalf;

• Detecting and protecting against security incidents, and malicious, deceptive, fraudulent or illegal activity, and prosecuting the same;

• Debugging to identify and repair errors in our systems;

• Short-term, transient use including contextual customization of ads;

• Providing services on our behalf or on behalf of another, including maintaining or servicing accounts, providing customer service, fulfilling transactions, verifying identity information, processing payments, and other services;

• Conducting internal research to develop and demonstrate technology;

• Conducting activity to verify, enhance, and maintain the quality of services or devices which we may own, control, or provide;

• Other business purposes described in the “How We Use The Information We Collect” Section of this Policy.

We may also use the information we collect for our own operational purposes, purposes for which we provide you additional notice, or for purposes compatible with the context in which the California Personal Information was collected.

Within the last 12 months, we have disclosed California Personal Information for our business purposes. To learn more about the categories of third parties with whom we share such information, please see the “How and With Whom We Share Your Information” Section of this Policy.

We do not sell and, within the last 12 months, we have not sold, California Personal Information, including California Personal Information of individuals under 16 years of age.

Your California Privacy Rights

If you are a California consumer, you have certain rights related to your California Personal Information, including:

• The right to request that we disclose to you:

  • the specific pieces of California Personal Information we have collected;

  • the categories of California Personal Information we have collected about you;

  • the categories of sources from which the California Personal Information is collected;

  • our business or commercial purpose for collecting or selling California Personal Information; and

  • the categories of third parties with whom we share California Personal Information.

  • The right to request that we delete California Personal Information about you.

You may request to exercise these rights by:

• Calling us at (424) 274-2632; or

• Emailing us at info@kimiawellness.com; or

• Writing to us at: KIMIAWELLNESS, 6320 Commodore Sloat Dr., Los Angeles, CA 90048.

As required under applicable law, please note that we will take steps to verify your identity before granting you access to information or acting on your request to exercise your rights. We may require you to provide your first name, last name, and email address to verify your identity in response to exercising requests of the above type. You will, therefore, need access to your email account to receive our communications necessary to process your request. Please make sure to check your spam inbox to ensure these important communications are not missed. We may limit our response to your exercise of the above rights as permitted under applicable law. When you submit a request to exercise your rights above, we will use the information you provide to process your request and to maintain a record of your request and our response, as permitted under applicable law.

Under California law, you may designate an authorized agent to make a request on your behalf. You may make such a designation by providing the agent with written permission to act on your behalf. We will require the agent to provide proof of that written permission. We may require you to verify your own identity in response to a request, even if you choose to use an agent.

Non-Discrimination

We may not discriminate against you because of your exercise of any of the above rights or any other rights, subject to the rights and the obligations under the California Consumer Privacy Act, including by:

• Denying you goods or services;

• Charging different prices or rates for goods or services, including through the use of discounts, loyalty programs, or other benefits or imposing penalties;

• Providing you a different level or quality of goods or services; or

• Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

We will not discriminate against you for exercising your CCPA privacy rights.

California Job Applicants—for California Residents Only

This California Job Applicant Notice describes how we and our subsidiaries and affiliates, handle personal information about you when you submit your resume or application materials to us for employment or other professional working relationship purposes, or sign up for job alerts. We may collect the following categories of personal information about you: identifiers (e.g., name, address, email address, and phone number); protected characteristics (e.g., sex, gender, age, citizenship, disability status, and veteran status); professional or employment-related information (e.g., employment history, educational background, certificates and licenses, work eligibility information and other information obtained from your resume, cover letter, your responses to our application questions, background check forms, and your references); other personal records (e.g., signature, photograph, and criminal background information); and inferences drawn from personal information collected (e.g., creating a profile that reflects your abilities and aptitudes). If you choose to connect your application to social media platforms like LinkedIn, we may also collect your personal information viewable by us on that social media platform.

We collect the above categories of personal information for the following business purposes: to evaluate your candidacy for the position you applied for; to perform recruitment and hiring services; to communicate with you when positions matching your job alert become available; to manage the workforce; to comply with federal and state laws, and to maintain security (e.g., detecting security risks and incidents, protecting against fraudulent or illegal activity, and complying with our policies and procedures).

If you accept a position and are employed by us, the information obtained through the application and recruitment process will become part of your employment record and used for employment-related purposes subject to applicable law.

We may share some of the personal information with third-party vendors as necessary for us to consider a particular job applicant for employment. Such vendors could include the entity that hosts our job applicant portal.

For more information about our careers and recruiting, please contact us by:

• Calling us at (424) 274-2632; or

• Emailing us at info@kimiawellness.com; or

• Writing to us at: KIMIAWELLNESS, 6320 Commodore Sloat Dr., Los Angeles, CA 90048.

Do Not Track

California Business & Professions Code Section 22575(b) (as amended effective January 1, 2014) provides that California residents are entitled to know how we respond to “Do Not Track” browser settings. We do not currently take actions to respond to Do Not Track signals because a uniform technological standard has not yet been developed.

XIV. Other State Law Privacy Rights

Nevada Residents

Nevada residents who wish to exercise their sale opt-out rights under Nevada Revised Statutes Chapter 603A may submit a request to this designated address: info@kimiawellness.com. However, please know we do not sell data triggering that statute’s opt-out requirements.

Virgina Residents

Your Virginia Privacy Rights. This section applies to Virginia consumers as defined by the Virginia Consumer Data Protection Act (“VCDPA”) that access or use our Products. This section describes our collection, use, and disclosure of “Personal Data” (as defined in the VCDPA). Please review our Privacy Policy above to learn more about the categories of Personal Data we process, the purpose for processing your Personal Data, and the categories of third parties with whom we disclose Personal Data.

If you are a Virginia resident, subject to certain conditions and restrictions set out in the VCDPA and other applicable laws, you have the following rights with regard to your Personal Data:

1. Right to Access. You have the right to request access to and obtain a copy of any personal data that we may hold about you.

2. Right to Correct. You have the right to request that we correct inaccuracies in your personal data.

3. Right to Delete. You have the right to request that we delete personal data that we have collected from or obtained about you.

4. Right to Opt Out of Targeted Advertising. You have the right to opt out of targeted advertising and the sale of your data (as defined under Virginia law). We do not use your data for targeted advertising, so we do not offer this right.

5. Right to Opt Out of Sales. We do not sell your Personal Data and as such do not offer this right.

6. Right to Opt Out of Profiling. You have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We do not profile in a manner that would result in legal or similarly significant effects and as such do not offer this right.

7. Right to Appeal. If you are unsatisfied with our actions related to the exercise of one of your privacy rights above, you may appeal our decision, by submitting a written notice of appeal to us via email at info@kimiawellness.com; or writing us at: KIMIAWELLNESS, 6320 Commodore Sloat Dr., Los Angeles, CA 90048. Your appeal will be reviewed and we will provide you with a written decision within 60 days explaining any action taken or not taken in response to your appeal and the reasons for such decisions, along with further rights that may arise from your appeal.

To respond to some requests we may need to verify your request either by asking you to log in and authenticate your account or otherwise verify your identity by providing information about yourself or your account. Authorized agents can make a request on your behalf if you have given them legal power of attorney or we are provided proof of signed permission, verification of your identity, and, in some cases, confirmation that you provided the agent permission to submit the request.

You may exercise your privacy rights under the VCDPA no more than twice in a 12-month period. If you choose to exercise any of the privacy rights described above, you will not receive discriminatory treatment from us.

Colorado Residents

Your Colorado Rights Regarding Your Personal Data. Colorado law provides some Colorado residents with the rights listed below. To exercise these rights see the “Exercising Your Colorado Privacy Rights” section below.

Right to Know. You have the right to know and see what personal data we have collected about you in a portable format.

Right to Correct. You have the right to request that we correct inaccurate personal data.

Right to Delete. You have the right to request that we delete the personal data we have collected about you.

Right to Opt Out. You have the right to opt out of targeted advertising and the sale of your data (as defined under Colorado law). We do not sell or use your data for targeted advertising, so we do not offer this right.

Exercising Your Colorado Privacy Rights. To request access to or deletion of your personal data, or to exercise any other privacy rights under Colorado law, please contact us by calling us toll-free at (844) 552-880; emailing us at info@kimiawellness.com; or writing us at: KIMIAWELLNESS, 6320 Commodore Sloat Dr., Los Angeles, CA 90048.

Exercising Your Appeal Rights. To appeal our decision regarding a request related to these rights, please submit a written notice of appeal to us via any of the methods set forth above. Your appeal will be reviewed and we will provide you with a written decision within 60 days explaining any action taken or not taken in response to your appeal and the reasons for such decisions, along with further rights that may arise from your appeal.

To respond to some requests we may need to verify your request either by asking you to log in and authenticate your account or otherwise verify your identity by providing information about yourself or your account. Authorized agents can make a request on your behalf if you have given them legal power of attorney or we are provided proof of signed permission, verification of your identity, and, in some cases, confirmation that you provided the agent permission to submit the request.

Connecticut Residents

Your Connecticut Rights Regarding Your Personal Data. Connecticut law provides some Connecticut residents with the rights listed below. To exercise these rights see the “Exercising Your Connecticut Privacy Rights” section below.

Right to Know. You have the right to know and see what personal data we have collected about you in a portable format.

Right to Correct. You have the right to request that we correct inaccurate personal data.

Right to Delete. You have the right to request that we delete the personal data we have collected about you.

Right to Opt Out. You have the right to opt out of targeted advertising and the sale of your data (as defined under Connecticut law). We do not sell or use your data for targeted advertising, so we do not offer this right.

Exercising Your Connecticut Privacy Rights. To request access to or deletion of your personal data, or to exercise any other privacy rights under Connecticut law, please contact us via toll-free at (844) 552-880; emailing us at info@kimiawellness.com; or writing us at: KIMIAWELLNESS, 6320 Commodore Sloat Dr., Los Angeles, CA 90048.

Exercising Your Appeal Rights. To appeal our decision regarding a request related to these rights, please submit a written notice of appeal to us via any of the methods set forth above. Your appeal will be reviewed and we will provide you with a written decision within 60 days explaining any action taken or not taken in response to your appeal and the reasons for such decisions, along with further rights that may arise from your appeal.

Utah Residents–Effective December 31, 2023

Your Utah Rights Regarding Your Personal Data. Utah law provides some Utah residents with the rights listed below. To exercise these rights see the “Exercising Your Utah Privacy Rights” section below.

Right to Know. You have the right to know and see what personal data we have collected about you in a portable format.

Right to Delete. You have the right to request that we delete the personal data we have collected about you.

Right to Opt Out. You have the right to opt out of targeted advertising (as defined under Utah law) or the sale of your personal data. We do not sell or use your data for targeted advertising, so we do not offer this right.

Exercising Your Utah Privacy Rights. To request access to or deletion of your personal data, or to exercise any other privacy rights under Utah law, please contact us via toll-free at (844) 552-880; emailing us at info@kimiawellness.com; or writing us at: KIMIAWELLNESS, 6320 Commodore Sloat Dr., Los Angeles, CA 90048.