Melaleuca of Canada, Inc. Privacy Policy

EFFECTIVE: January 1, 2026

INTRODUCTION:

We at Melaleuca of Canada, Inc. ("Melaleuca") know that you care about how your Personal Information is collected, used, and shared. Melaleuca takes your concerns very seriously. Your trust is an important part of what makes Melaleuca such a special business.

The Melaleuca of Canada, Inc. Privacy Policy ("Privacy Policy") describes how Melaleuca collects, processes, and discloses your Personal Information through its websites, products, services, online and physical stores, and applications. Please note that this Privacy Policy covers all the products, services, websites, and applications for Melaleuca of Canada, Inc. However, some geographic areas may privacy policies specific to them. These policies do not supersede this Privacy Policy but rather fit within it.

For purposes of this Privacy Policy, "Melaleuca" is defined as: Melaleuca of Canada, Inc. For international markets, please see the policies specific to those countries on the websites for those markets.

Note on Provincial Privacy Laws:

This Privacy Policy is intended to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial legislation, including:

  • Alberta's Personal Information Protection Act (PIPA);
  • British Columbia's Personal Information Protection Act (PIPA); and
  • Québec’s Act respecting the protection of personal information in the private sector (Law 25).

Where differences exist, Melaleuca will comply with the law that provides the highest level of protection for your personal information.

Accountability and Contact Information

Melaleuca of Canada, Inc. is responsible for the personal information under its control and has designated the following individual to oversee compliance with applicable Canadian privacy laws.

Melaleuca of Canada, Inc.

Michael Bauer, Privacy Counsel/Data Protection Officer

[email protected]

Attn: Melaleuca Privacy Team, Legal Department

4609 West 65th South

Idaho Falls, ID 83402

(208) 522-0700

1. What categories of Personal Information does Melaleuca collect?

We collect your Personal Information to provide the best customer experience possible and to continually improve our products and services. When we say "Personal Information" in this Privacy Policy, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you.

We may collect the following categories of Personal Information. We may not collect information from every category for every person. This Privacy Policy does not apply to any data that is publicly available or data that is aggregated or de-identified.

  • Identifying information such as first name, maiden name, last name, physical address, email address, social media address, telephone number, any other contact information you provide to us, and details regarding the services that you have subscribed to and/or products purchased.
  • Financial information such as payment card details, bank account numbers, and details about payments to and from you.
  • Technical information such as device IDs, your login data, access dates and times, browser type and version, device information, cookie data, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access any Melaleuca websites and apps.
  • Account information such as orders made by you, preferences, user-generated content, feedback, and survey responses.
  • Marketing information such as your preferences in receiving communications from us and our third parties and information about how you use our website, products, and services.

Sensitive Personal Information:

Within the definition of Personal Information, there is a sub-category called "Sensitive Personal Information." Examples of Sensitive Personal Information include but are not limited to driver's license number, gender expression, ethnic origin, and account login information.

Melaleuca seeks to limit the amount of Sensitive Personal Information that it collects and processes; however, some information that could be considered Sensitive Personal Information may be collected and processed for valid business purposes.

Nonpersonal Information:

Personal Information does not include information that is aggregated or information that cannot be reasonably linked to you. We may collect, use, and share aggregated data, such as statistical or demographic data for any purpose. Aggregation is a method of grouping data to perform analysis to improve our products and services. Aggregated data may be derived from your Personal Information but is not considered Personal Information since it does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature.

2. How does Melaleuca collect and process Personal Information?

Personal Information You Give Us Directly:

We collect information you provide to us when:

  • You purchase products and/or services from us.
  • Create a customer account with us.
  • Become a Marketing Executive.
  • Participate in public forums or other activities on our sites and applications.
  • Respond to surveys.
  • Visit our physical properties.
  • Interact with us using one or more devices.

Personal Information is required to use certain website features, for example: to create online accounts; purchase products or services; contact us via email or phone (where we may retain your message's content and our response); submit job application materials; receive or request data from us; correspond with your Marketing Organization; and respond to communications from us (e.g., surveys and promotional offers).

Personal Information We Automatically Receive:

We collect Personal Information through a variety of technologies, such as cookies, including when you visit our sites and applications using one or more devices, whether or not you are logged in or registered. As you navigate through and interact with our website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including details of your visits to our website and other communication data and information about your computer and internet connection, including your IP address, operating system, and browser type. Also, we may collect data about how you use your online account and the website when you are logged into your account. We may combine data automatically collected from you with other Personal Information about you as described within this Privacy Policy.

Personal Information We Receive from Third Parties:

We may collect Personal Information from trusted third parties, such as service providers and contractors; our affiliated companies and subsidiaries; vendors; business partners; Melaleuca Marketing Executives; merchants; data brokers; data analytics providers; or other parties who interact with us. We may collect Personal Information about you from publicly available sources, such as public profiles and websites. We may combine information that we receive from the various sources described in this Privacy Policy, including third party sources, and use or disclose the combined information for the purposes identified below.

Marketing Executives:

Melaleuca offers an opportunity for families to generate income by referring others to our products and services. Also, customers can elect to become a Marketing Executive. Marketing Executives are independent contractors and are not employed by Melaleuca.

If you are a customer, you may have shared your Personal Information with the Marketing Executive who enrolled you. This Personal Information will be sent to Melaleuca as part of your enrollment. Marketing Executives are subject to contracts with Melaleuca that restrict their use of the Personal Information they collect.

3. For what purposes does Melaleuca collect and process Personal Information?

Melaleuca uses your Personal Information to better understand your needs and provide you with better service and products. We collect and process your Personal Information in a manner that is reasonably necessary and proportionate to the business purposes listed below.

  • Provide you with the experiences, products, and services you request, view, engage with, or purchase.
  • Answer your questions about products and/or services.
  • Keep you informed of our products and/or services.
  • Communicate with you about your account or transactions with us.
  • Send you information or request feedback about features on our sites and applications or changes to our policies.
  • Handle your payments for the purchase of services and prevent dishonest transactions.
  • Customize the content of our websites in line with your preferences.
  • Diagnose problems with our server and administer our websites.
  • Analyze the traffic of users on our websites and adjust the content of our websites.
  • Fulfill legal obligations and assert claims or defend interests.
  • Contact you for market research purposes.
  • Operate, understand, optimize, develop, or improve our sites, applications, products, services, and operations, including by using survey research and analytics tools.
  • Detect, investigate, and prevent activities that may violate our policies, pose safety issues, or be fraudulent or illegal.
  • Notify you of product recalls or safety issues.

4. How does Melaleuca disclose Personal Information to third parties?

Melaleuca does not sell Personal Information for monetary compensation to third parties for their use. This has been the policy of Melaleuca for many years. When processing your Personal Information, we may use the services of other companies, agents, subcontractors, and third parties who provide services to Melaleuca. These entities may have access to your Personal Information as a part of the performance of their services. In all such cases, we take reasonable measures to confirm that these third parties treat your Personal Information with similar levels of care associated with our Privacy Policy.

We may disclose your Personal Information with select partners. Examples of how these entities may use your information include providing you with special offers, promotions, advertisements, and other materials. We may disclose information about you with our select partners when you purchase or seek products or services from a select partner. We may also disclose your information (1) at your direction or with your consent, (2) where we are legally required to disclose information to third parties, and (3) where doing so is necessary to protect our services, our rights and property, and/or the rights, property, and safety of others.

Additionally, Melaleuca may, at times, provide links to other websites. These sites are not controlled by Melaleuca, and we are not responsible for any content of any such website. While we try to link only to sites that share our high standards and respect for privacy, Melaleuca is not responsible for the privacy practices employed by other sites. We recommend that you review the privacy and security policies of each website you visit. We would like to draw your attention to the fact that if you agree to receive offers from our partners, our partners are responsible for enabling you to exercise any applicable rights.

5. Does Melaleuca use targeted advertising, profiling, or cookies?

Melaleuca does not engage in targeted advertising or process personal information for the purpose of profiling the consumer to make decisions that may produce legal effects or effects of similar significance as those terms are defined in applicable law.

We use cookies and similar tracking tracking technologies to:

  • Make our website function properly.
  • Provide personalized experiences.
  • Tailor our interactions with you.
  • Help with our marketing efforts.
  • Provide us with valuable data and statistics about the usage and effectiveness of our site and help us improve our site.
  • Help us improve our services.
  • Secure login services.

We may combine information from cookies with Personal Information, including data obtained from third parties.

6. Is your Personal Information secure with Melaleuca?

Melaleuca has implemented reasonable security measures designed to help prevent the loss and unauthorized access of your Personal Information. Melaleuca strives to keep your Personal Information accurate and secure. To prevent unauthorized access or disclosure, maintain data accuracy, and ensure the appropriate use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect from you. We use encryption technology when collecting or transferring sensitive data, such as credit card information. We operate data networks protected by firewall and password protection systems. Access to this information will be provided only to authorized individuals for legitimate business purposes. In addition, access to your Personal Information is restricted to staff and service providers on a need-to-know basis.

Despite these efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against interception or to be secure absolutely. As a result, while we strive to protect your Personal Information, we cannot ensure or warrant the security of any information you transmit to us or our online services. You can help protect your Personal Information by not reusing any passwords you use in connection with your Melaleuca accounts. If you suspect a website or mobile application is pretending to be that of Melaleuca’s (also known as “spoofing”), do not enter any Personal Information, but please contact us as soon as possible at [email protected].

7. How long does Melaleuca retain your Personal Information?

We will retain your Personal Information for the length of time needed to fulfill the purposes outlined in this Privacy Policy as well as your Customer Membership Agreement and/or Independent Marketing Executive Agreement unless a longer retention period is required or permitted by law. To determine the period for which your personal information will be retained, Melaleuca uses any applicable legal or contractual requirements to retain information for a certain period, including any retention obligations related to actual or potential litigation or government investigations.

For your reference, Melaleuca’s retention practices may include maintaining your Personal Information to provide you with the products or services you have requested and interact with you; maintain our business relationship with you; improve our business over time; ensure the ongoing legality, safety, and security of our services and relationships; resolve disputes and enforce our agreements; or otherwise in accordance with our internal retention procedures. If you choose to end your relationship with us, we may retain your Personal Information in our systems and records in order to ensure adequate fulfillment of surviving provisions in terminated contracts or for other legitimate business purposes, such as to enable easier future user onboarding, demonstrate our business practices and contractual obligations, or provide you with information about our products and services in case of interest.

8. Does Melaleuca collect or process Personal Information about minors?

Melaleuca does not knowingly collect or process Personal Information from or about minors. If you are under 16, do not use or provide any Personal Information to our company. If we learn we have collected or received Personal Information from a child under 16 without verification of parental consent, we will delete that Personal Information.

If you believe we might have any Personal Information from or about a child under 16, please contact us at [email protected].

9. What happens if there are changes to the Privacy Notice?

If our information practices related to Personal Information change at some time in the future, we will post the policy changes to our website to notify you of these changes. If you are concerned about how your Personal Information is used, you should check back at our website periodically. We will only use data collected after a policy has changed for purposes in harmony with the new policy.

10. Disclosure and Cross-Border Transfers

Information that is submitted to Melaleuca's web sites and applications will be collected, processed, stored, disclosed, and disposed of in accordance with applicable U.S. law.

We may disclose your personal information outside of Canada in the following ways:

  • To our affiliates and subsidiaries that support our Canadian operations.
  • To service providers performing functions on our behalf (e.g., payment processing, order fulfillment, analytics, marketing).
  • When required by law or to protect our rights and safety.

If you are a Canadian user, you agree and acknowledge that we may collect and use your personal data and disclose it outside your resident jurisdiction. In addition, such information may be stored on servers located outside your resident jurisdiction.

Melaleuca ensures that reasonable and appropriate contractual and organizational safeguards are in place to protect transferred information and maintain privacy protection.

11. Accuracy

We take reasonable steps to ensure that personal information is accurate, complete, and up to date for its intended use.

You may update or correct your information by contacting [email protected].

12. Third Party Links

Melaleuca may at times provide links to other websites. These sites are not controlled by Melaleuca, and we are not responsible for any content contained on any such website. While we try to link only to sites that share our high standards and respect for privacy, Melaleuca is not responsible for the privacy practices employed by other sites. We recommend that you review the privacy and security policies of each website you visit.


13. Your Privacy Rights

You have the following rights under Canadian federal and/or provincial privacy laws:

  • Access - Request confirmation of whether we hold personal information about you, how your personal information is used, and with whom it has been disclosed.
  • Correction - Request corrections to inaccurate or incomplete personal information.
  • Withdrawal of consent - Withdraw consent to the use of your information (subject to legal limits).
  • Information about automated processing - If decisions about you are made using automated systems, you may request the reasons and factors underlying the decision. Melaleuca does not use automated processing as that term is defined in Canadian law.

For residents of Québec, you have the following rights in addition to those listed above:

  • Deletion / cessation of dissemination - Request that we delete your personal information when no longer necessary or withdraw your consent.
  • Portability - Request that we provide your personal information in a structured, commonly used digital format.

To exercise any of these rights, contact the Privacy Officer, Michael Bauer, listed above. Your request must be in writing and specify which Privacy Right you are seeking to use.

To ensure the security of your web account, we will ask you to verify your request using the contact information you have already provided. You will not be asked to create an account or provide new information to exercise your Privacy Rights. Melaleuca will make every reasonable effort to assist you and respond as accurately as possible.

Melaleuca will not discriminate against any consumer for exercising their Privacy Rights under the PIPEDA or any provincial law.

If you are unsatisfied with our response, you may contact:

Office of the Privacy Commissioner of Canada (OPC)

1-800-282-1376 www.priv.gc.ca

Office of the Information and Privacy Commissioner of Alberta

403-297-2728 https://oipc.ab.ca/

Office of the Information and Privacy Commissioner of British Columbia

250-387-5629 hhtps://www.oipc.bc.ca/

Commission d’accès à l’information du Québec (CAI)

514-873-4169 www.cai.gouv.qc.ca

14. Breach Notification

As required by applicable law, if a confidentiality incident occurs that poses a risk of serious harm, Melaleuca will:

  • Notify affected individuals; and
  • Notify the Commission d’accès à l’information du Québec (for Québec residents) or the Office of the Privacy Commissioner of Canada, as applicable.

15. Language

In accordance with Québec's language laws, this policy is available in English and French.

If there is any inconsistency between the two versions, the French version will prevail for Québec residents.