Updated June 10, 2022
Exhale (“Exhale” or “We” or “Us”) has a strong commitment to providing excellent service to all of our customers (“Users”), including respecting their concerns about privacy. We understand that visitors to our website or digital applications may have questions about whether and how our website or digital application collects and uses information, and is committed to protecting your privacy. In support of this, we only use the personally identifiable information (“personal information” or “personal data”) that you provide in accordance with the terms outlined below.
1. Principles for Processing Personal Information
We respect your privacy and are committed to protecting your personal information in compliance with the applicable legislation. This compliance is consistent with our desire to keep you informed and to recognize and respect your privacy rights. We agree to observe the following principles when processing personal information: • Data will be processed fairly and in accordance with applicable law. • Data will be collected for specified, legitimate purposes and not processed further in ways incompatible with those purposes. • Data will be relevant to and not excessive for the purposes for which they are collected and used. For example data may be rendered anonymous if deemed reasonable, feasible and appropriate, depending on the nature of the data and the risks associated with the intended uses. • Data will be accurate and, where necessary kept up up-to-date. Reasonable steps will be taken to rectify or delete personal information that is inaccurate or incomplete. • Data will be kept only as it is necessary for the purposes for which it was collected and processed. Those purposes shall be described in this Policy. • Data will be deleted or amended following a relevant request by the concerned data subject, should such notice comply with the applicable legislation each time. • Data will be processed in accordance with the individual’s legal rights (as described in this Policy or as provided by law). • Appropriate technical, physical and organizational measures will be taken to prevent unauthorized access, unlawful processing and unauthorized or accidental loss, destruction or damage to data. In case of any such violation with respect to personal data, we will take appropriate steps to end the violation and determine liabilities in accordance with applicable law and will cooperate with the competent authorities.
2. Information We Collect
Personal Information Users may be asked for, as appropriate: • name; • email address; • mailing address; • social security or national identification number; • date of birth; • employment history; • payment card information; and • phone number. Users may, however, visit our Sites anonymously. We will collect personal identification information from Users only if they voluntarily submit such information to us. Users can always refuse to supply personal identification information, except that it may prevent them from engaging in certain activities on the Sites. Non-personal Information We may collect non-personal identification information about Users whenever they interact with our Sites. Non-personal identification information may include the browser name, the type of computer and technical information about Users means of connection to our Sites, such as the operating system and the Internet service providers utilized and other similar information. Web Browser Cookies We collect information about how you use our Sites by setting and accessing cookies on your computer. A cookie is a small piece of information sent by our Sites that is saved on your hard drive by your computer’s browser. The cookie holds information our Sites may need to personalize or enhance your experience and to gather statistical data, such as which pages are visited, the Internet provider’s domain name and the addresses of the sites visited immediately before coming to and immediately after leaving the Sites. The information in the cookie lets Exhale trace “clickstream” activity (i.e., the paths taken by visitors to our Sites as they move from page to page) to enable us to better serve our customers by revealing which portions of our Sites are the most popular. We may link the anonymous visitor ID from your cookie to a user ID in our database to help us analyze web traffic and statistics. From time to time, other companies may help us with data research and analysis, but they will be prohibited from using that data for any other purpose. You may disable cookies on your browser. Please review your browser’s instructions for doing so. Note that certain features of the Sites may not be available if you delete or reject cookies. Pixel Tags We may use pixel tags (also called web beacons or clear gifs) on our Sites. They can help us analyze what our customers like to do on our Sites and the effectiveness of our features and advertising. They can also help us customize your browsing experience. We may use information collected through pixel tags or tracked links in combination with your personal information. We may also combine personal information you provide to Exhale with other personal information (such as purchase history and demographic information). If we work with other companies to help us track, collect and analyze this information, they will be prohibited from using this information for any other purpose.
3. How We Collect Information
We may collect personal information from Users in a variety of ways, including when Users: • visit our site; • create an account; • apply for a job; • make a purchase; • subscribe to the text service or similar listserve; • respond to a survey; and • fill out a form. We also collect personal information from Users in connection with other activities, services, features or resources we make available on our Sites.
4. How We Use Collected Information
Exhale collects and uses Users’ personal information for the following purposes: • To personalize user experience; • To facilitate purchases and transactions; • To verify your eligibility for rewards; • To improve our Sites; • To improve customer service; • To share your information with third parties (see Section 7 (Sharing your personal information)); • To administer a content, promotion, survey or other Sites feature; • To send Users information they agreed to receive about topics we think will be of interest to them; • To send periodic emails or mobile/SMS messages; and • If a User decides to opt-in to our mailing list, they will receive emails that may include company news, updates, related product or service information, etc. If at any time the User would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email or User may contact us via our Sites or email us directly at [email protected]. We may also use information in the aggregate to understand how our Users as a group use the services and resources provided on our Sites. If you apply for a job through our Sites, we may also use the information to: • assess qualifications and personal experience to determine if it meets specific job requirements; and • help us inform candidates of future openings at Exhale.
5. How We Protect Your Information
We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal information, username, password, transaction information and other data stored on our Sites. Sensitive and private data exchange between the Sites and its Users happens over a Secure Socket Layers (SSL) secured communication channel and is encrypted and protected with digital signatures.
6. Secure Shopping and Payment Card Information (if applicable)
We offer multiple options for processing credit card payments. Exhale goes to great lengths to keep financial information you provide to us private and safe. We use SSL, the industry standard in transferring information to process your orders. All credit card transactions occur in a secure area of our Site, to protect you from any loss, misuse or alteration of information collected. When you have finished shopping and begin the checkout process, you will move into the secure area of our Site. Once you’ve entered, the page address (URL) will change from http to https, to let you know you are in a secure area. You acknowledge, however, that no transmission of data over the Internet or mobile phone devices can be guaranteed to be 100% secure, despite our efforts. We also cannot protect financial or personal information that is not under our control. Thus, while we will use every means possible to ensure the security of information you transmit to us, we cannot guarantee that such information will not be intercepted by third parties.
7. Sharing your personal information
We may share your information with third parties: • to help us operate our business and the Sites or administer activities on our behalf, such as sending out newsletters or surveys for those limited purposes provided that you have given us your permission; • to verify your eligibility for rewards or other services; • to protect payment transactions against fraud or identity theft; and • to provide you with offers and marketing that may be of interest to you.
8. Third party websites
Users may find advertising or other content on our Sites that link to the sites and services of our partners, suppliers, advertisers, sponsors, licensors and other third parties. We do not control the content or links that appear on these sites and are not responsible for the practices employed by websites linked to or from our Sites. In addition, these sites or services, including their content and links, may be constantly changing. These sites and services may have their own privacy policies and customer service policies. Browsing and interaction on any other website, including websites which have a link to our Sites, is subject to that website’s own terms and policies.
The Sites are not directed to children under the age of 21 and Exhale does not intentionally collect any information from or about children under the age of 21. If you believe a child has provided us with information, contact us [email protected].
11. Text/SMS Messages and Email Communications
We may periodically contact you via e-mail and provide information about Exhale special offers and promotions that may be of interest to you. We use a third party e-mail service provider to send e-mails. This service provider is prohibited from using your e-mail address for any purpose other than to send Exhale related e-mail. In addition, every time you receive an e-mail you will be provided the choice to opt-out of future e-mails.
12. Notice to EU Residents
This Policy is intended to provide adequate and consistent safeguards for the handling of personal information in accordance with Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (“the Directive”) and all the relevant transposing legislation of the Directive in the European Union/European Economic Area, the Swiss Federal Data Protection Act, as such laws may from time to time be amended and valid during the application of this Policy, the Privacy Shield, and any other privacy laws, regulations and principles concerning the collection, storage, use, transfer and other processing of personal data transferred from the European Economic Area or Switzerland to the United States including but not limited to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“the General Data Protection Regulation”) as of its entry into force on 25 May 2018.
13. Your Rights
You have the right to be provided with information as to the nature of the personal information stored or processed about you by Exhale and may request deletion or amendments. You may email [email protected] to review, update, and revise your personal information. If access is denied, you have the right to be informed about the reasons for denial. You may resort to the dispute resolution described in this Policy as well as in any competent regulatory body or authority. Exhale shall handle in a transparent and timely manner any type of internal dispute resolution procedure about personal information. If any information is inaccurate or incomplete, you may request that the data be amended. It is your responsibility to provide use with accurate personal information about yourself and to inform us of any changes. (e.g. new home address or change of name). If you demonstrate that the purpose for which the data is being processed in no longer legal or appropriate, the data will be deleted, unless the applicable law requires otherwise. You also have the right to request the deletion of your personal data for any reason by emailing. [email protected]
14. Additional Enforcement Rights and Mechanisms
If at any time, you believe that your personal information has been processed in violation of this Policy, you may report the concern to the competent Exhale official. In particular, if you have any inquires or complaints about the use or limitation of use of your personal information, you may contact our corporate headquarters:
Exhale 4310 W Flamingo Rd, Las Vegas, NV 89103, United States
or email us at [email protected]
15. California Privacy Rights
If you are a California resident, you have the right to request information from us regarding the manner in which Exhale shares certain categories of personal information with third parties for their direct marketing purposes, in addition to the rights set forth above. Under California law, you have the right to send us a request at the designated address listed below to receive the following information: 1. The categories of information we disclosed to third parties for their direct marketing purposes during the preceding calendar year; 2. the names and addresses of the third parties that received the information; and 3. if the nature of the third party’s business cannot be determined from their name, examples of the products or services marketed. This information may be provided in a standardized format that is not specific to you. The designated email address for these requests is: [email protected] Also, please note that we have not yet developed a response to browser “Do Not Track” signals, and do not change any of our data collection practices when we receive such signals. We will continue to evaluate potential responses to “Do Not Track” signals in light of industry developments or legal changes.
16. Obligations to Data Protection Authorities (“DPAs”)
We will respond diligently and appropriately to requests from DPAs about this Policy or compliance with applicable data protection privacy laws and regulations. We will, upon request, provide DPAs with names and contact details of the individuals designated to handle this process. With regard to transfers of personal information, we will (i) cooperate with inquiries from the DPA responsible for the entity exporting the data and (ii) respect its decisions, consistent with applicable law and due process rights. With regard to transfers of data to third parties, we will comply with DPAs’ decisions relating to it and cooperate with all DPAs in accordance with applicable legislation.
17. Your Consent and Updates to this Policy
If you have any questions about your privacy or security on our Sites, please contact us using the following information:
Exhale 4310 W Flamingo Rd, Las Vegas, NV 89103, United States
or email us at [email protected]