PRIVACY POLICY OF YOUNG LIVING INDONESIA

Updated July 10, 2024

Company Privacy

This policy describes how PT Young Living Indonesia, hereinafter referred to as “Young Living”, collects, processes, uses, discloses, or shares your information. When you use our sites, products, or services or establish a relationship with us, we may obtain data from you and the devices you use to interact with us. This policy is designed to provide transparency regarding our privacy practices and principles in a format that you can navigate, read, and understand. We are committed to treating your personal information with care and respect and providing methods for you to contact us if you have any questions or concerns about the use of your information. You may have received additional privacy documentation from us when you used certain sites, products, or services from us. In this case, the documentation you received should be read in conjunction with this Notice.

This policy describes:

Scope of This Policy

This policy describes the processing of information provided or collected on our sites and applications where this privacy policy is posted. In some cases, we may provide additional data privacy notices specific to certain products, practices, or regions. Those terms should be read in conjunction with this policy. If you provide information to us on a third-party site or platform, the information you provide may be collected separately by that third-party site or platform. The privacy practices of such third-party sites or platforms will govern the use of your information. The choices you make on such third-party platforms will not apply to our use of information we have collected through our sites, products, or services.

Your Privacy Rights

If you are a resident of a certain state or country, you may have the right to know, access, correct, transfer, restrict the processing of, opt-out of certain types of processing (e.g., targeted advertising, sale of personal data, limiting the use and disclosure of sensitive information, and profiling, as defined by applicable state law), and delete your personal information. If you choose to exercise any of these options, we will not discriminate against you for making such a decision.

You may exercise your privacy rights by clicking the “My Privacy Choices” link at the bottom of our website and selecting the applicable request, or by contacting us at DPO@youngliving.com. When we receive a request to exercise a privacy right, we will review the information we have collected about you (if any) with the identifying information you may provide to us (such as login, email address, mailing address, zip code, or transaction or order number) to authenticate your identity. If you use an authorized agent to submit a request, we may require the authorized agent to provide proof that you have given the agent written permission to submit the request. We may also require you to confirm directly to us that you have given the authorized agent permission to submit the request. There may be situations where we cannot grant your request. In such situations, we will explain our reasons to you and will respect your right to appeal where applicable.

Information Collected or Processed

In recent months, Young Living may have collected or processed the categories of personal information identified below when you visit our website. We generally collect the information listed below to secure, improve, and provide our services to our customers.

Browser Type;
Operating System;
Internet Service Provider;
IP Address;
The date and time of your visit to our site; and
Information about the website from which your system originates to or through our website.

Sources of Information

The sources from which personal information may have been collected or processed are as follows: information you provide to us, online tracking technologies, automated data collection technologies, social media platforms and networks, business partners, etc. The purposes of such collection or processing include: providing our products and services, communicating with you, administering the Brand Partner program, marketing and promotional purposes (which may include targeted advertising), analysis and personalization, security and fraud prevention, legal obligations, core business functions, job applicant processes, etc.

How We Disclose Information

Young Living does not believe that we have Sold (for monetary or other valuable consideration) or Shared (for cross-context behavioral advertising purposes) your personal information in recent months, as defined by certain state laws. However, we may disclose your information to our subsidiaries and affiliates, along with our third-party service providers and processors to provide services to you.

We may also disclose your information to service providers and third parties when necessary to comply with laws and regulations; respond to subpoenas and court orders; exercise our legal rights or defend against legal claims; investigate, prevent, or take action regarding illegal activities, suspected fraud, potential threats to our property or the physical safety of any person, or violations of applicable instructions for use and terms and conditions; facilitate the financing or insurance of our business or the disposal of all or part of our business or assets, or as otherwise permitted or required by law. We may disclose anonymized or aggregated data at our discretion, in accordance with applicable law. If you post your information or content to our online forums or media sites, this information is public on the Internet. We cannot prevent or control the further use of this information and refer you to the privacy policies and terms of use of third-party sites to learn more about their privacy practices.

Your Controls and Choices

You can control how and when you want to receive marketing emails from Young Living by clicking the “unsubscribe” link located at the bottom of our email communications to you. This will not affect your receipt of administrative emails (e.g., emails about your account, transactions, or policy changes) for your registered account.

Our Commitment to Protecting Children's Information

Our services are not intended for children under the age of 16. We do not knowingly collect information through our sites, products, and services from users under the age of 16. If you use our Services, you represent that you are at least the age of majority in your jurisdiction of residence. If you believe your child has provided personal information to us, please notify us at DPO@youngliving.com. If we become aware that we have collected personal information from a minor, we will promptly take steps to delete that information and terminate the minor's account.

Cookies and Other Technologies

Cookies are identifiers that we transfer to your browser or device that allow us to recognize your browser or device and tell us how and when pages and features in our services are visited and by how many people. You may be able to change the preferences on your browser or device to prevent or limit your device's acceptance of cookies, but this may prevent you from taking advantage of some of our features. We recommend that you keep cookies enabled. We have divided our cookies into several categories to help you understand their function.

Essential: These cookies are necessary to use our services. For example, they are required to access our website and log into your account.
Performance: These cookies track how you interact with our website. For example, they tell us which pages on our website are slow to load or are not optimized for mobile use. We use this information to make improvements to our user experience.
Functionality: These cookies track information about you to make it easier to use our website. For example, we may store information such as your login status and display preferences.
Marketing and Analytics: These cookies help us create a targeted advertising experience on our website.

You can manage your cookie preferences on our cookie banner that appears when you first visit our website.

Global Privacy Control

If you wish to control the use of cookies and similar internet technologies on your computer, you can use a web browser registered with the Global Privacy Control tool installed in it. This browser limits cookie technology and how it works as you browse the internet. You can find a list of browsers with the Global Privacy Control tool installed in them here:

https://globalprivacycontrol.org/#download. The use of websites and web browsers located at the above site is at your own risk, subject to the agreements of the developers of such web browsers, and subject to their privacy policies. Young Living accepts no liability whatsoever in connection with your use of the above websites or any content you may download from such websites.

Our Global Data Transfer Practices

We store and process your personal information on our servers located in the United States but may transfer your personal information to other countries outside the United States for the purposes described in this Privacy Policy. By using our website, products, or services, you consent to the global transfer, processing, and storage of your personal information.

Contacting a Supervisory Authority

If you wish to file a complaint against us, you may contact your local privacy regulator. If you have difficulty finding a privacy regulator, please contact our privacy office at DPO@youngliving.com and they will assist you in contacting the appropriate law enforcement agency.

Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page. If we make any material changes to how we treat your personal information, we will notify you via email at the primary email address specified in your account and through a notice on our site's homepage. You are responsible for ensuring we have an up-to-date email address to contact you. You are advised to review this privacy policy periodically for any changes. Changes to this privacy policy are effective when they are posted on this page.

How to Contact Us

If you have any questions about how we process your information, you can contact us at:

PT Young Living Indonesia
Agro Plaza 12th Floor
Jalan HR Rasuna Said
Kavling X-2, No. 1, Kunnigan Timur, Setiabudi
Jakarta, 12950 DKI Jakarta, Indonesia.
Email: DPO@youngliving.com
This policy was last updated on: July 10, 2024

Relationship-Specific Details

Website Users

Description

Data subjects who use the website.

Categories of Information

Internet data such as browser name, operating system, internet service provider, IP address, the date and time of your visit to our site, and information about the website from which your system originated to or through our website.

Categories of Data Subjects

Information your computer provides to the Young Living website.

Source of This Information Collection

Information your computer provides to the Young Living website.

Purpose of Processing

This information is processed to operate the website, optimize the website, and for security.

Legal Basis for Processing

There is a legitimate business purpose for processing this information.

Automated Processing or Profiling

Does this product/service/process use automated processing: Yes ☐, No ☒
If yes, the general methods and logic used are: N/A
Does automated processing affect the rights of the data subject? N/A

Information Distribution

Cloud service providers
IT infrastructure providers
Log monitoring
Security applications
Customer chat
Customer service

This information is collected to perform essential functions for the website such as: Back-end system operations like cloud service providers, log file administration, security, customer service and chat, and IT infrastructure.

☐ Sold,
☒ Shared.

Sensitive Personal Information

N/A

Is Personal Information Transferred Internationally

This information is transferred to the United States and is subject to internal transfer mechanisms.

Retention Period

For information related to member relationships and customer support, records are kept for 4 years after the termination of the membership relationship.

For customer information used for account creation, the information is stored for three years after the termination of the relationship.

Brand Partner

Description

When a web user places an order through the Young Living site, they can register as a Retail Customer or a Brand Partner.

Categories of Data Subjects

Retail customers and Brand Partners.

Source of Information Collected

This information is provided by retail customers and Brand Partners.

Purpose of Processing

This information is processed to form a relationship as a retail customer or Brand Partner.

Legal Basis for Processing

This information is collected to create and form a contractual relationship with retail customers and Brand Partners.

Automated Processing or Profiling

Does this product/service/process use automated processing: ☐ Yes, ☒ No
If yes, the general methods and logic used: None
Does this automated processing affect the rights of the data subject? None

Information Distribution

Shipping companies
Payment processors
Fraud monitoring
E-commerce entities
Business analytics tools
Young Living subsidiaries
IT infrastructure
Security
Chat and customer services
Cloud service providers

This information is collected to fulfill the contractual agreement between Young Living and retail customers as well as Brand Partners. Information is used to process orders, ship orders, back-end administration, process payments, provide analytics services, customer service, and security.

☐ Sold,
☒ Shared

Sensitive Personal Information

☒ National Identity Card (KTP), Deed of Establishment or Business License
☒ Log-in information, financial account, debit or credit card number along with security code, password, or other credentials to access an account
☐ Citizenship and political affiliations

This information is stored for the duration of the contract, then stored in accordance with the legal expiration period for claims that may arise from the contract. Currently, that period is no more than 10 years.

Is Personal Information Transferred Internationally

This information is transferred to the United States and is subject to internal transfer mechanisms.

Retention Period

Employees / Employee Prospects / Leads / Candidates

Description

Personal data collected through the recruitment process, employment relationship, or employment contract.

Categories of Information

Identifiers, Characteristics that are part of a protected class, Professional or employment-related information, Education information, Internet data.

Categories of Data Subjects

Young Living collects this data directly from employees, candidates, prospects, and employee prospects.

Purpose of Processing

Young Living processes this information to evaluate whether to form an employment relationship with a candidate.

Legal Basis for Processing

Young Living collects this information to create or perform a contract.

Automated Processing or Profiling

Does this product/service/process use automated processing:
☒ Yes
☐ No

If yes, the general methods and logic used are: Automated processing is used to ensure applications are forwarded to Young Living's HR department. Young Living does not use automated processing or profiling to make HR decisions such as hiring, promotions, or disciplinary actions.

Does this automated processing affect the rights of the data subject? No.

Information Sharing

Cloud infrastructure
Employee benefit facility providers
Payroll management and processing entities
Office management software
IT/Security services

Young Living's business purpose in providing this information is to support the employment relationship and/or recruitment process. Young Living shares this information with service providers for business purposes.

☐ Sold,
☒ Shared

Sensitive Personal Information

☒ National Identity Card (KTP), Deed of Establishment or Business License, Passport
☐ Log-in information, financial account, debit or credit card number along with security code, password, or other credentials to access an account
☐ Precise geographic location
☒ Racial or ethnic origin, religious or philosophical beliefs, or trade union membership
☒ The contents of a consumer's mail, email, and text messages unless the business is the intended recipient
☐ Genetic data
☐ The processing of biometric information for the purpose of uniquely identifying a consumer.
☒ Personal information collected and analyzed concerning a consumer’s health
☒ Personal information collected and analyzed concerning a consumer’s sex life or sexual orientation

Young Living only collects sensitive personal information, as defined by applicable state privacy laws, with your consent, and does not use this information to infer characteristics about you.

Young Living stores this information for the duration of the employee's employment relationship with Young Living and as needed or permitted by applicable laws and regulations. If an employment relationship is not formed, the information will be deleted.

Is Personal Information Transferred Internationally

United States (USA)

Retention Period

Product Details

Aroma Connect

Description

Information collected through the Aroma Connect application.

Categories of Information

Identifiers such as: email address and password

Application data related to how you use the application, the time the application is accessed, and the duration of application use

Categories of Data Subjects

Aroma Connect users.

Purpose of Processing

This information is used to create and manage user accounts, control the Luna Mist and Wake Up Light diffusers, and create diffuser routines.

This information is used to provide information tailored to your region.

This information helps analyze application usage data and improve services.

Legal Basis for Processing

Consent.

Automated Processing or Profiling

Does this product/service/process use automated processing: ☐ Yes, ☒ No
If yes, the general methods and logic used: None
Does automated processing affect the rights of the data subject? None

Information Sharing

Cloud infrastructure
IT/Security services
Young Living related entities
Chat and customer support services
Analytics tools to understand how the application is used

This information is used to provide the Aroma Connect application to users.

☐ Sold,
☒ Shared

Sensitive Personal Information

None

Is Personal Information Transferred Internationally

United States (USA)

Retention Period

Application data is stored as long as the account is active and for 5 years after the account is terminated.

Account holders can request data deletion by contacting us at DPO@youngliving.com. We will endeavor to delete your data within 30 days of such a request.