Melaleuca, Inc. Privacy Policy
Effective Date: January 1, 2023
Last Updated: April 21, 2023
INTRODUCTION:
We at Melaleuca, Inc. (“Melaleuca”) know that you care about how your Personal Information is collected, used, and shared. Melaleuca takes your concerns very seriously. Your trust is an important part of what makes Melaleuca such a special business.
The Melaleuca, Inc. Privacy Policy (“Privacy Policy”) describes how Melaleuca collects, processes, and shares your Personal Information through its websites, products, services, online and physical stores, and applications. Please note that this Privacy Policy covers all the products, services, websites, and applications for Melaleuca, Inc. However, some geographic areas or categories have privacy policies specific to them. These policies do not supersede this Privacy Policy but rather fit within it
For purposes of this Privacy Policy, “Melaleuca” is defined as: Melaleuca, Inc. and Melaleuca of Canada, Inc. only.
For Our International Customers:
For international markets such as Melaleuca of Asia Ltd. Co., Melaleuca of Australia & New Zealand Pt. Ltd., Melaleuca of Canada, Inc., Melaleuca of Japan, Inc., Melaleuca of Korea, Ltd (a Korea corporation), Melaleuca Corporation, S. de R.L. de C.V., Melaleuca of Southeast Asia (Singapore) Pte Ltd. (a SNG corporation), Melaleuca of Europe, Ltd. (a UK corporation), Melaleuca of Southeast Asia (Malaysia) SDN. BHD., Melaleuca of Europe (Germany) GmbH., Melaleuca of the Philippines, Inc., please see the policies specific to those countries on the websites for those markets.
Residents of CA or VA:
Certain states in the United States (such as California and Virginia) provide specific rights to their citizens in relation to their Personal Information. Nevertheless, any state-specific policy fits within this Privacy Policy. For further information, go to the specific disclosures and information for your state at the end of this policy.
Marketing Executives:
If you are a Marketing Executive, we encourage you to review your Independent Marketing Executive Agreement and the Statement of Policies. The Privacy Policy works in conjunction with all Policies for Marketing Executives within those documents.
Customers who use Services through the Marketplace:
If you are taking advantage of the benefits of your Melaleuca Membership through the Marketplace (such as Home Security or Infoguard), please review the privacy policies related to those services. Further, some of the benefits provided through the Marketplace are serviced by third parties. We encourage you to review their privacy policies before using those services.
Employees of Melaleuca:
All questions regarding the privacy of employee data can be directed to your HR Business Partner.
All Parties:
Please ensure you read this Privacy Policy carefully before using our website or services and/or providing us with your Personal Information. As part of your review of this Privacy Policy, we encourage you to review the Terms of Use as well. By using Melaleuca’s websites, products, services, online and physical stores, and applications, you are consenting to the practices described in this Privacy Policy.
TABLE OF CONTENTS
This Privacy Policy covers the following topics:
1. What types of Personal Information does Melaleuca collect?
2. How does Melaleuca collect and process Personal Information?
3. For what purposes does Melaleuca collect and process Personal Information?
4. How does Melaleuca share Personal Information with third parties?
5. Does Melaleuca use cookies or targeted advertising?
6. Is your Personal Information secure with Melaleuca?
7. How long does Melaleuca retain your Personal Information?
8. What are your rights related to your Personal Information?
9. Does Melaleuca collect and process Personal Information about minors?
10. What happens if there are changes to the Privacy Policy?
11. Who do I contact with questions or concerns about this Privacy Policy?
12. State-specific additional disclosures—for residents of California
13. Consumer rights for residents of Virginia
14. Consumer rights for residents of Colorado
15. Questions or concerns about the Privacy Policy
If you have questions or concerns about this Privacy Policy, please contact us at
[email protected]
1. What types of Personal Information does Melaleuca collect?
We collect your Personal Information to provide the best customer experience possible and to continually improve our products and services. When we say “Personal Information” in this Privacy Policy, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you.
We may collect the following types of Personal Information. We may not collect information from every category for every person. This Privacy Policy does not apply to any data that is publicly available or data that is aggregated or deidentified.
• Identifying information such as first name, maiden name, last name, physical address, email address, social media address, telephone number, any other contact information you provide to us, and details regarding the services that you have subscribed to and/or products purchased.
• Financial information such as payment card details, bank account numbers, and details about payments to and from you.
• Technical information such as device IDs, your login data, access dates and times, browser type and version, device information, cookie data, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access any of Melaleuca websites.
• Account information such as orders made by you, preferences, user-generated content, feedback, and survey responses.
• Marketing information such as your preferences in receiving communications from us and our third parties and, information about how you use our website, products, and services.
Sensitive Personal Information:
Within the definition of Personal Information, there is a sub-category called “Sensitive Personal Information.” Examples of Sensitive Personal Information include but are not limited to driver’s license number, gender expression, ethnic origin, and account login information.
Melaleuca seeks to limit the amount of Sensitive Personal Information that it collects and processes; however, some information that could be considered Sensitive Personal Information may be collected and processed for valid business purposes.
Nonpersonal Information:
Personal Information does not include information that is aggregated or information that cannot be reasonably linked to you. We may collect, use, and share aggregated data, such as statistical or demographic data for any purpose. Aggregation is a method of grouping data to perform analysis to improve our products and services. Aggregated data may be derived from your Personal Information but is not considered Personal Information since it does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature.
2. How does Melaleuca collect and process Personal Information?
We may collect Personal Information through different methods.
Personal Information You Give Us Directly:
We collect information you provide to us when:
• You purchase products and/or services from us;
• Create a customer account with us;
• Become a Marketing Executive;
• Participate in public forums or other activities on our sites and applications;
• Respond to surveys;
• Visit our physical properties; and
• Interact with us using one or more devices.
Personal Information is required to use certain website features, for example: to create online accounts; purchase products or services; contact us via email or phone (where we may retain your message's content and our response); submit job application materials; receive or request data from us; correspond with your Marketing Organization; and respond to communications from us (e.g., surveys and promotional offers).
Personal Information We Automatically Receive:
We collect Personal Information through a variety of technologies, such as cookies, including when you visit our sites and applications using one or more devices, whether or not you are logged in or registered. As you navigate through and interact with our website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including details of your visits to our website and other communication data and information about your computer and internet connection, including your IP address, operating system, and browser type. Also, we may collect data about how you use your online account and the website when you are logged into your account. We may combine data automatically collected from you with other Personal Information about you as described within this Privacy Policy.
Personal Information We Receive from Third Parties:
We may acquire Personal Information from other trusted sources to update or supplement the information you provided or we collected automatically as described above.
Marketing Executives:
Melaleuca offers an opportunity for families to generate income by referring others to our products and services. Also, customers can elect to become a Marketing Executive. Marketing Executives are independent contractors and are not employed by Melaleuca.
If you are a customer, you may have shared your Personal Information with the Marketing Executive who enrolled you. This Personal Information will be sent to Melaleuca as part of your enrollment. Marketing Executives are subject to contracts with Melaleuca that restrict their use of the Personal Information they collect.
Analytics:
We use third parties to provide analytics and internet-based advertising services. These services collect data about your interactions with the Melaleuca website to send you targeted advertisements for goods and services. The data collected may be associated with your Personal Information. We also use this Personal Information to improve the functionality of the website and to improve our products.
3. For what purposes does Melaleuca collect and process Personal Information?
Melaleuca uses your Personal Information to better understand your needs and provide you with better service and products. Consistent with applicable law and choices and controls that may be available to you, we may use information collected from you, or from devices associated with you, to:
• Provide you with the experiences, products, and services you request, view, engage with, or purchase;
• Answer your questions about purchases, billing, etc.;
• Keep you informed of our products and/or services;
• Communicate with you about your account or transactions with us;
• Send you information or request feedback about features on our sites and applications or changes to our policies;
• Handle your payments for the purchase of services and preventing dishonest transactions;
• Customize the content of our websites in line with your preferences;
• Diagnose problems with our server and administer our websites;
• Analyze the traffic of users on our websites and adjust the content of our websites;
• Fulfill legal obligations and assert claims or defend interests;
• Contact you for market research purposes;
• Operate, understand, optimize, develop, or improve our sites, applications, products, services, and operations, including by using survey research and analytics tools;
• Detect, investigate, and prevent activities that may violate our policies, pose safety issues, or be fraudulent or illegal; and
• Notify you of product recalls or safety issues.
Remember that we always give you the opportunity to opt out of receiving direct marketing information whether by email or SMS.
4. How does Melaleuca share Personal Information with third parties?
Melaleuca does not sell Personal Information for monetary compensation to third parties for their use. This has been the policy of Melaleuca for many years. When processing your Personal Information, we may use the services of other companies, agents, subcontractors, and third parties who provide services to Melaleuca. These entities may have access to your Personal Information as a part of the performance of their services. In all such cases, we take measures to confirm that our service providers treat your Personal Information with similar levels of care associated with our Privacy Policy.
We may disclose your Personal Information with select partners. Examples of how these entities may use your information include providing you with special offers, promotions, advertisements, and other materials. We may disclose information about you with our select partners when you purchase or seek products or services from a select partner; for example, we may share information about you to assist a select partner with determining whether you may qualify for products or services you applied for with the select partner. We may also share your information (1) at your direction or with your consent, (2) where we are legally required to disclose information to third parties, and (3) where doing so is necessary to protect our services, our rights and property, and/or the rights, property, and safety of others.
Additionally, Melaleuca may, at times, provide links to other websites. These sites are not controlled by Melaleuca, and we are not responsible for any content of any such website. While we try to link only to sites that share our high standards and respect for privacy, Melaleuca is not responsible for the privacy practices employed by other sites. We recommend that you review the privacy and security policies of each website you visit. We would like to draw your attention to the fact that if you agree to receive offers from our partners, our partners are responsible for enabling you to exercise your rights, including the right to demand that they stop sending you offers.
As previously stated, we provide you the opportunity to let us know if you do not wish to receive unsolicited direct marketing materials from us and we will do everything we can to honor such requests. As part of any email or SMS message with marketing materials, there will be information on how to opt-out of any further messages.
5. Does Melaleuca use cookies or targeted advertising?
We use cookies and similar tracking technologies to:
• Make our website function properly;
• Provide personalized experiences;
• Tailor our interactions with you;
• Help with our marketing efforts;
• Provide us with valuable data and statistics about the usage and effectiveness of our site and to help us improve our site;
• Help us improve our services; and
• Secure login services.
We may combine information from cookies with Personal Information, including data obtained from third parties.
6. Is your Personal Information secure with Melaleuca?
Melaleuca has implemented reasonable security measures designed to help prevent the loss and unauthorized access of your Personal Information. Melaleuca strives to keep your Personal Information accurate and secure. To prevent unauthorized access or disclosure, maintain data accuracy, and ensure the appropriate use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect from you. We use encryption technology when collecting or transferring sensitive data, such as credit card information. We operate data networks protected by firewall and password protection systems. Access to this information will be provided only to authorized individuals for legitimate business purpose. In addition, access to your Personal Information is restricted to staff and service providers on a need-to-know basis.
Despite these efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against interception or to be secure absolutely. As a result, while we strive to protect your Personal Information, we cannot ensure or warrant the security of any information you transmit to us or our online services. You can help protect your Personal Information by not reusing any passwords you use in connection with your Melaleuca accounts. If you suspect a website or mobile application is pretending to be that of Melaleuca’s (also known as “spoofing”), do not enter any Personal Information, but please contact us as soon as possible at
[email protected].
Personal Information may be accessed by persons within our organization, or our third-party service providers, who require such access to carry out the purposes indicated above or such other purposes as may be permitted or required by the applicable law.
7. How long does Melaleuca retain your Personal Information?
We will retain your Personal Information for the length of time needed to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.
8. What are your rights related to your Personal Information?
Melaleuca takes data privacy seriously. As stated in this Privacy Policy, we honor that trust by creating and enforcing these policies. Some jurisdictions provide specific rights to their citizens. Please see the sections of this Privacy Policy for your jurisdiction to learn more about enforcing those rights.
9. Does Melaleuca collect or process Personal Information about minors?
Melaleuca does not collect or process Personal Information knowingly from or about minors. If you are under 16, do not use or provide any Personal Information to our company. If we learn we have collected or received Personal Information from a child under 16 without verification of parental consent, we will delete that Personal Information.
If you believe we might have any Personal Information from or about a child under 16, please contact us at
[email protected]
10. What happens if there are changes to the Privacy Notice?
If our information practices related to Personal Information change at some time in the future, we will post the policy changes to our website to notify you of these changes. If you are concerned about how your Personal Information is used, you should check back at our website periodically. We will only use data collected after a policy has changed for purposes in harmony with the new policy.
11. Who do I contact with questions or concerns about this Privacy Notice?
If you have comments or questions about our Privacy Policy, please contact us at
[email protected] or you can write to us at:
Melaleuca, Inc.
Attn: Melaleuca Privacy Team, Legal Department
4609 West 65th South
Idaho Falls, ID 83402
(208) 522-0700
[email protected]
12. State-Specific Additional Disclosures – For residents of California
These Additional Disclosures supplement the information contained in the Privacy Policy above and apply solely to residents of the State of California as defined in the applicable statutes and regulations. We adopt this section to comply with the California Consumer Privacy Act of 2018 (CCPA) and any terms defined in the CCPA have the same meaning when used in this Policy.
CCPA Mandatory Disclosures:
Personal Information We Collect
Melaleuca collects information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device (“Personal information”).Personal Information does not include:
· Publicly available information from government records;
· Deidentified or aggregated consumer information; or
· Information excluded from the CCPA’s scope, like:
· health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA), clinical trial data, or other qualifying research data;
· personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.
Melaleuca collected the following categories of Personal Information from consumers within the last twelve (12) months. While Melaleuca may collect information within a certain category, we may not collect all types of Personal Information listed within the Examples for that category.
Category |
Examples |
Collected |
A. Identifiers |
A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. |
YES |
B. Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). |
A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
Some Personal information included in this category may overlap with other categories. |
YES |
C. Protected classification characteristics under California or federal law. |
Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). |
YES |
D. Commercial information. |
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
YES |
E. Biometric information. |
Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. |
NO |
F. Internet or other similar network activity. |
Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. |
YES |
G. Geolocation data. |
Physical location or movements. |
Yes |
H. Sensory data. |
Audio, electronic, visual, thermal, olfactory, or similar information. |
YES |
I. Professional or employment-related information. |
Current or past job history or performance evaluations. |
NO |
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). |
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. |
NO |
K. Inferences drawn from other personal information. |
Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
YES |
How Melaleuca Collects
Melaleuca obtains the categories of Personal Information listed above from the following categories of sources:
· Directly from you
· Indirectly from you
· From third-party service providers
The Business Purposes for the Collection
The business and commercial purposes of collecting Personal Information are stated in our Melaleuca Privacy Policy under “3. For what purposes does Melaleuca collect and process Personal Information?”
Sharing Personal Information with Third Parties
Melaleuca does not share Personal Information for the purpose of cross-context targeted advertising.
We may disclose your Personal Information with service providers or contractors. These disclosures are governed by the contracts between Melaleuca and the other party. For example, if you apply for the credit card offered by our service provider, based on your direction to intentionally disclose the Personal Information, we disclose your Personal Information to the financial institution we partner with that issues the card. If you decide to obtain a product or service that is offered by these partners, the Personal Information you provide will be disclosed to us and them.
Further, we disclosed the following categories of Personal Information for a business purpose in the last 12 months: identifiers/contact information, demographic information (such as gender and age), payment card information associated with you, commercial information, Internet or other electronic network activity information, geolocation data, and inferences drawn from the above. We disclosed each category to Data Analytics Providers; Affiliates; and Service Providers. Further information is described in our Melaleuca Privacy Policy under “4. How does Melaleuca share Personal Information with third parties?”
Selling Personal Information
It is the policy of Melaleuca to not sell Personal Information for monetary consideration to third parties for their use. Melaleuca may disclose Personal Information to our service providers and contractors as described above as well as described in our general Privacy Policy.
Personal Information of Minors
We do not collect, process, or “sell” the Personal Information of known minors under 16 years of age.
Your Rights as a Resident of California:
The CCPA provides California residents with specific rights regarding their Personal Information. This section describes your CCPA rights and explains how to exercise those rights.
Right to Know
You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months (the “right to know”). Once we receive your request and confirm your identity, we will disclose to you:
· The categories of Personal Information we collected about you.
· The categories of sources for the Personal Information we collected about you.
· Our business or commercial purpose for collecting or selling that Personal Information.
· The categories of third parties with whom we share that Personal Information.
· If we sold or disclosed your Personal Information for a business purpose, two separate lists disclosing:
· sales, identifying the Personal Information categories that each category of recipient purchased; and
· disclosures for a business purpose, identifying the Personal Information categories that each category of recipient obtained.
· The specific pieces of Personal Information we collected about you (also called a data portability request).
Right to Correct Inaccurate Personal Information
You have the right to correct inaccurate Personal Information. Upon verifying your request as discussed below, Melaleuca will use commercially reasonable efforts to make your correction requests.
Right to Delete
You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions (the “right to delete”). Once we receive your request and confirm your identity, we will review your request to evaluate whether a legal exemption requires or permits us to retain the Personal Information. We may deny your deletion request if retaining the Personal Information is necessary for us or our service provider(s) to:
1. Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you;
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
3. Debug products to identify and repair errors that impair existing intended functionality;
4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;
5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.);
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent;
7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;
8. Comply with a legal obligation; and
9. Make other internal and lawful uses of that Personal Information that are compatible with the context in which you provided it
We will delete or deidentify Personal Information not subject to one of these exceptions from our records within 45 days and will direct our service providers to take similar action.
Right to Opt Out of Sale or Sharing of Your Personal Information
You have the right, at any time, to direct a business that sells or shares Personal Information about you to third parties to not sell or share your Personal Information. You also have the right to limit the use and disclosure of your Sensitive Personal Information. As previously stated, Melaleuca does not sell Personal Information for monetary consideration to third parties for their use.
How to Exercise Your Rights in California
You may exercise these rights by emailing us at
[email protected] or you can call 1-208-534-3000.
In your request, you MUST include the following information:
• Your name
• The right you are seeking to enforce
• If you are making a correction, list the Personal Information that is inaccurate and also list the correct information
• Your Melaleuca account number or the email address you used to create your account
This information is required to verify your identity, a mandatory step under the CCPA.
You may also use an authorized agent to submit an access or deletion request on your behalf consistent with the information below. Authorized agents may submit access and deletion requests at
[email protected]
An authorized agent must have your signed permission to submit a request on your behalf or provide proof that they have power of attorney in accordance with California probate law. A business entity offering deletion request services must be registered with the California Secretary of State to conduct business in California before we can recognize them as your authorized agent. Before completing requests from authorized agents, we may contact you directly to confirm you’ve given your permission and/or to verify your identity.
Melaleuca will not discriminate against a consumer because you have chosen to exercise one of these rights.
Shine the Light Act
Residents of the State of California have the right to request from companies conducting business in California a list of all third parties, if any, to which the company has disclosed personal information during the preceding year for direct marketing purposes. We comply with this law by offering California residents the ability to tell us not to share your personal information with third parties for their direct marketing purposes. To make such a request, please email us at
[email protected]. You must include “California Resident – Shine the Light Request” as the subject line, and your full name, email address, and Melaleuca Member Number in your message. Please note that our response to your request will be done within a reasonable time from receipt and, further, that the statute requires disclosure from the previous calendar year only.
13. Consumer rights for residents of Virginia
These Specific Disclosures supplement the information contained in Melaleuca’s Privacy Policy discussed above and apply solely to residents of the State of Virginia as defined in the applicable statutes. We adopt this section to comply with the Virginia Consumer Data Protection Act and any terms defined therein have the same meaning when used in this Policy.
Residents of Virginia have certain consumer rights pursuant to § 59.1-577 of the Virginia Consumer Data Protection Act. These rights include the following:
1. To confirm whether or not Melaleuca is processing your personal data and to access such personal data;
2. To correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of the processing of your personal data;
3. To delete personal data provided by or obtained about you;
4. To obtain a copy of your personal data that the consumer previously provided to the controller in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means; and
5. To opt out of the processing of the personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
How to Exercise Your Rights in Virginia
In your request, you MUST include the following information:
• Your name
• The right you are seeking to enforce
• If you are making a correction, list the information that is inaccurate and also list the correct information
• Your Melaleuca account number or the email address you used to create your account
This information is required to authenticate your identity, a mandatory step under the applicable statute. Per statute, Melaleuca will respond to your request within 45 days.
14. Consumer rights of residents of Colorado
These Specific Disclosures supplement the information contained in Melaleuca’s Privacy Policy discussed above and apply solely to residents of the State of Colorado as defined in the applicable statutes and regulations. We adopt this section to comply with the Colorado Privacy Act and any terms defined therein have the same meaning when used in this Policy.
Residents of Colorado have certain consumer rights pursuant to § 6-1-1306 of the Colorado Privacy Act. These rights include the following:
1. To confirm whether or not Melaleuca is processing your personal data and to access such personal data;
2. To correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of the processing of your personal data;
3. To delete personal data provided by or obtained about you;
4. To obtain a copy of your personal data that the consumer previously provided to the controller in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means; and
5. To opt out of the processing of the personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
How to Exercise Your Rights in Colorado
In your request, you MUST include the following information:
• Your name
• The right you are seeking to enforce
• If you are making a correction, list the information that is inaccurate and also list the correct information
• Your Melaleuca account number or the email address you used to create your account
This information is required to authenticate your identity, a mandatory step under the applicable statute. If Melaleuca cannot authenticate your identity as requested above, Melaleuca will deny the request as allowed under § 6-1-1306(2)(d).
You may authorize another person to act on your behalf to exercise your privacy rights. Your agent should provide proof of their identity, your identity, and that the agent is authorized to act on your behalf.
Per statute, Melaleuca will respond to your request within 45 days. Under specific circumstances stated within the applicable statute, Melaleuca may request an additional 45 days to complete your request. If this is the case, Melaleuca will inform you of the reason why the extension is occurring.
If Melaleuca denies your request to exercise any of these rights, you have the right to appeal the decision. If you wish to appeal, you may respond to our communication denying your request, stating that you are appealing our decision. You may include any information you believe to be relevant to appealing our decision within your communication. Melaleuca will respond to your appeal within 45 days.
15. Questions or concerns about This Privacy policy
If you have comments or questions about our Privacy Policy, please contact us at
[email protected] or you can write us at:
Melaleuca, Inc.
Attn: Melaleuca Privacy Team, Legal Department
4609 West 65th South
Idaho Falls, ID 83402
(208) 522-0700
[email protected]
Last Reviewed: JUNE 2023
© Copyright 2023 Melaleuca, Inc.
Any use or reproduction of these contents without the prior consent of Melaleuca, Inc. is strictly prohibited. All rights reserved.