Safeguarding personal information is a fundamental part of maintaining trust and providing a secure experience for customers, employees, business partners, suppliers, and other individuals who interact with our organization. We recognize that privacy expectations differ across countries and regions, and we therefore maintain data protection practices designed to meet applicable legal requirements while promoting transparency and responsible information management. Our privacy principles apply across the digital services, websites, applications, communication channels, and other platforms operated by our company and its affiliated businesses where we determine how personal information is collected and used.
This privacy framework explains the types of information that may be obtained, the reasons for processing it, the circumstances in which information may be shared, the safeguards applied to protect it, and the choices available to individuals. It also describes how information may be transferred between countries, how long different categories of information may be retained, and how individuals can exercise rights provided by applicable privacy regulations. Our objective is to collect and use information only for legitimate purposes and to maintain appropriate controls throughout the information lifecycle.
Personal information may be collected through many different interactions. Customers may provide information when creating an account, placing an order, completing a payment, requesting assistance, subscribing to communications, participating in promotions, submitting applications, or communicating with our teams. Depending on the nature of the interaction, information may include a name, business or residential address, telephone number, email address, account details, transaction information, and other contact or identification information necessary to provide requested services.
We may also collect certain information automatically when individuals visit our digital platforms. Technical information can include internet protocol addresses, browser characteristics, device information, operating system details, language settings, approximate location indicators, and records describing interactions with our websites or applications. Browsing information may include pages viewed, products examined, search activity, referral information, time spent on particular sections, and interactions with digital features. This information helps us understand how our services are being used, identify technical problems, improve performance, and create a more convenient digital experience.
Cookies, pixels, web beacons, activity logs, and comparable technologies may be used to support these functions. Such technologies can remember preferences, maintain account sessions, analyze website traffic, measure promotional performance, and support relevant content. Depending on the technology and applicable law, users may be able to manage these preferences through browser settings, device controls, privacy tools, or available preference centers. Certain privacy signals may also be recognized where required or supported by applicable regulations.
Information is processed for a variety of legitimate business purposes. These purposes may include fulfilling purchases, processing payments, arranging deliveries, providing customer service, maintaining accounts, preventing fraud, protecting digital systems, managing supplier relationships, conducting product research, improving services, and meeting legal or regulatory obligations. Personal information may also be used to communicate important service notices, product updates, promotional information, or other messages when appropriate authorization or another lawful basis exists.
Where marketing communications are provided, individuals generally have opportunities to manage their preferences. Promotional emails may include an unsubscribe option, while account settings or customer service channels may provide additional ways to control communication choices. Choosing not to receive marketing material does not normally prevent the delivery of essential service communications, such as transaction confirmations, shipping notifications, account security messages, or other information necessary to provide requested services.
Information may be shared with selected companies and service providers when doing so is necessary to perform legitimate business functions. These organizations may assist with payment processing, shipping, fulfillment, technology infrastructure, customer support, analytics, advertising administration, security, consulting, insurance, or other operational activities. Information provided to such parties is generally limited to what is reasonably necessary for the applicable service. Partners are expected to follow appropriate contractual, privacy, and security requirements when handling information on our behalf.
Information may also be disclosed when required or permitted by law. Circumstances may include responding to legal processes, complying with regulatory requirements, investigating suspected fraud, protecting individuals, enforcing agreements, defending legal rights, or addressing security incidents. In connection with corporate transactions such as a merger, acquisition, restructuring, financing, or transfer of business assets, relevant information may also be transferred as part of the transaction, subject to appropriate legal and security considerations.
Because our business operates across multiple regions, personal information may sometimes be processed or stored in countries other than the individual’s place of residence. International transfers are managed with consideration for applicable privacy requirements and appropriate safeguards. Where additional protections are required for cross-border transfers, measures may include contractual arrangements, risk assessments, technical controls, and other mechanisms intended to provide an appropriate level of protection.
Individuals may have a range of rights concerning their personal information depending on where they live and which laws apply. These rights can include requesting access to information, correcting inaccurate records, seeking deletion, restricting certain processing activities, objecting to particular uses, or requesting information in a portable format. In some circumstances, individuals may also withdraw consent or challenge certain automated decision-making activities. Requests may be subject to identity verification to prevent unauthorized disclosure, and applicable laws may permit reasonable limitations on repeated, excessive, or unsupported requests.
Additional privacy rights may apply to residents of particular jurisdictions. For example, certain state laws may provide specific controls over targeted advertising, data sharing, commercial use of personal information, or other processing activities. Eligible individuals may be provided with mechanisms to submit opt-out requests or exercise other statutory rights. The precise scope of available choices can depend on residency, the type of information involved, and the applicable legal framework.
We take additional precautions when handling information that may be considered sensitive. Information involving health, precise location, biometric characteristics, political or religious views, ethnic background, criminal history, or other protected categories is not intentionally requested unless there is a legitimate reason, appropriate legal basis, or valid authorization. Where sensitive information must be processed, additional safeguards are applied to reduce unnecessary access, disclosure, or misuse.
Protecting information relating to children is also an important consideration. Our services are not intended to encourage unauthorized collection of personal information from minors. Where applicable law requires parental or guardian involvement, appropriate measures may be used to obtain authorization. If we become aware that personal information belonging to a child has been collected improperly, reasonable steps will be taken to address and remove the information in accordance with applicable requirements.
We use administrative, technical, and organizational safeguards to reduce risks involving unauthorized access, alteration, disclosure, loss, or misuse of personal information. Security practices may include access restrictions, encryption, monitoring, authentication controls, system assessments, employee training, and operational procedures. Although substantial measures are maintained to protect information, no internet transmission or electronic storage system can be guaranteed to be completely secure. Individuals should also protect their passwords and account credentials and promptly report suspicious activity or unauthorized access.
Mobile services may collect certain device-related information to support functionality, account security, location-based features, cross-device experiences, or personalized content. Users can often manage location permissions, advertising controls, and other tracking preferences through their mobile operating system and application settings. These controls provide individuals with additional ways to determine how certain information is used.
Customer support technologies, including automated assistance and artificial intelligence tools, may also process information provided during service interactions. Contact details and conversation records may be retained where necessary to resolve inquiries, improve support quality, identify recurring problems, and enhance products or services. Such information remains subject to applicable confidentiality, security, and privacy requirements.
Privacy practices may change as our services develop, technologies evolve, or legal obligations are updated. When significant revisions are made, updated information may be published through appropriate communication channels. Individuals are encouraged to review the current privacy information periodically so they remain aware of how personal information is collected, processed, shared, retained, and protected.
Questions about privacy practices, personal information, or available rights may be directed to the designated privacy or customer support team. Individuals seeking to exercise applicable rights may be asked to provide sufficient information to verify their identity and properly process the request. Through ongoing improvements, responsible data practices, appropriate security controls, and clear communication, we remain committed to protecting personal information and supporting greater transparency and control throughout the customer relationship.