NEW: Our Growth Strategy—Announcing Hain 3.0—Learn More WORLDWIDE SITES COMPANY BRANDS INVESTOR RELATIONS CAREERS Privacy Policy Terms of Use The Hain Celestial Group, Inc. Privacy Policy (Effective December 1, 2020) The Hain Celestial Group, Inc. is committed to the privacy and security of personal information. The purpose of this Privacy Policy (“Policy”) is to provide you with information about how Hain Celestial collects, uses, shares, and safeguards certain of the personal information it gathers. It also describes options you have concerning your personal information. In general, our processing of personal information is designed to improve the purchasing experience of consumers and to provide relevant information about our products, services, and promotions. About this Policy This Policy describes the privacy practices of Hain Celestial and its subsidiaries, divisions, and affiliates (collectively and/or individually, “Hain Celestial”, “Company”, “our”, or “we”). Except as otherwise provided, it applies to our interactions with our customers and visitors, including, but not limited to: Use of our websites, including mobile websites, applications Visits to our stores/locations or attendance at one of our events Phone and email communications Social media interactions on our websites and other third party websites like Facebook, YouTube, Pinterest, Google+/Currents, Instagram and Twitter Viewing our online advertisements or emails Through our authorized service providers Please read this Policy carefully before using the Website or submitting information to us. By accessing or visiting the Website, you indicate your understanding that the collection, use, and sharing of your information is subject to the terms of this Policy and our Terms of Use. Except as otherwise noted, any capitalized terms not defined in the Policy have the meaning set forth in the Terms of Use. If you do not consent to the collection, use, and sharing of your information as described in this Policy, please do not provide us with such information. The nature of our business requires that we gather and maintain information that is of a personal nature that you may wish to keep protected. This Policy does not apply to third-party websites accessible through our Website or other applications. Personal Information We Collect As described below, Company may collect or has collected in the preceding 12 months the following categories of personal information (“PI” or “personal information”). We may add to the categories of personal information we collect about you. In that case, we will inform you. Identifiers. Examples include real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, or other similar identifiers. Other elements. Examples include name, signature, characteristics or description, address, telephone number, education, employment, employment history, bank account number, credit card number. Characteristics of protected classifications under California or federal law. Examples include race, religion, and age. Commercial information. This includes services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. Education information. This includes information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, Sec. 1232g; 34 C.F.R. Part 99). Internet or other electronic network activity. Examples include browsing history, search history, a consumer’s interaction with an internet website, application, or advertisement. Geolocation data. This might include location information while using one of our apps. Audio, electronic, visual, thermal, olfactory, or similar information. Examples of this category including identifiable information obtained about you while speaking with our customer service representatives on the telephone. Professional or employment-related information. Consumer profile. This includes inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, and behaviors. Why We Collect Your Personal Information Set forth below are the business or commercial purposes for which we have or will use the PI we have collected about you. We may, in the future, use your PI for additional or different purposes. Before doing so, we will inform you and obtain your consent when required by law. To provide you with information, products or services that you request from us. To fulfill or meet the reason for which the information is provided. For example, if you purchase a product from us, we will collect your address for shipping purposes or to fulfill our tax collection and reporting obligations. To contact you and/or provide you with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you. To engage in marketing activities, including to help design products and services appropriate for our clients. To communicate with you via social media concerning our products and services. To carry out our obligations and enforce our rights including those arising from any contracts entered into between you and us, including for billing, payment, and collections. To review, improve, and monitor our website, applications, online services, and overall client experience, including to provide customization to meet specific needs, ensure a consistent experience, and assess trends, interests, and demands of clients. To provide customer service and engage in quality control activities concerning our products and services. For testing, research, analysis and product and service development. To respond to law enforcement requests and as required by applicable law, court order, governmental regulations, or other lawful processes. As described to you when collecting your personal information or as otherwise set forth in the California Consumer Privacy Act. To process applications for employment, as well as to evaluate and improve our recruiting efforts. As necessary or appropriate to protect the rights, property, security, and safety of us, our employees, our consumers, our information systems, and the public. To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred. Sources of Personal Information The categories of sources of PI are described below. The examples provided are for illustration purposes and are not exhaustive. You. Examples of when we collect PI about you include: During a website visit, when you complete a web-form, or when you visit us at one of our stores, locations, or participate in an event. If you upload or share a photo, submit a request, submit information, or post other digital content through one of our websites, or via social media interactions on third party websites like Facebook or Twitter. If you participate in a sweepstakes, contest, promotion, program, clinic, or workshop. If you apply for or inquire about employment. See our Applicant Privacy Policy. In connection with your interactions with us as a registered user of our websites we may use tracking tools like browser cookies, flash cookies, and web beacons. Your friends and family, such as when they provide your information through one of our refer-a- friend type features or programs. Persons who share such information in connection with those features or programs should only submit email addresses of individuals with whom they have a close personal or family relationship, who would be interested in receiving the communication, and who have authorized the sharing of their email address. News outlets Social media and related services Advertising networks Data analytics providers Data brokers Sharing Personal Information Of the categories of PI noted above, during the past 12 months, we shared the following: Categories of Personal Information Disclosed Categories of Third Parties to Whom Disclosed Identifiers Other elements Characteristics of protected classifications under California or federal law Commercial information Education information Internet or other electronic network activity Geolocation data Audio, electronic, visual, or similar information Biometric Information Professional or employment-related information Consumer profiles Third parties as directed by you. We will share your PI with those third parties to whom you direct. For example, if you decide to send one of our products as a gift, we may include your name. Our business partners. For example, we might share your PI with one of our business partners for purposes of collaborating on providing services to you, or to invite you to an event we are organizing. These business partners should also have their own privacy statements that set out the manner in which they will collect, use, and disclose PI. Where applicable, we encourage you to review each such business partner's privacy statement before signing on with them. Third parties who perform services on our behalf. For example, we share information with certain service providers, including marketing companies, professional service providers, debt collectors, information technology providers, and data storage companies. We might also authorize our service providers to collect PI on our behalf. Governmental entities, legal service providers. We may share your PI in order to comply with the law and in the course of providing our products and services. We may also disclose information if a government agency or investigatory body submits a request. Successors to all or portions of our business. If all or part of our business is sold, we may disclose PI in preparation for or as part of that transaction. We do not share your personal information in exchange for money. We do, however, share personal information with certain third parties, which may be considered a “sale” under the CCPA even if we don’t receive money in exchange for the information. If you are a California resident, you have a right to opt-out of the sale of your personal information. To do so, please call (800) 689-6823 or email us at HCGUS.DataPrivacy@hain.com. Please note that third parties may collect information about your online activities over time and across different websites when you use our websites. We do not knowingly sell the personal information of minors under 16 years of age. Use of Your Personal Information on Our Website As is true of most websites, we gather some PI automatically and store it in log files. This information may include the Internet Protocol (“IP”) address, browser type, language, internet service provider (“ISP”), referring and exit page, operating system, and date/time stamp. In addition to the purposes above, we use this PI to understand and analyze trends, to administer the Website, to learn about user behavior on the Website, and to gather demographic information about our user base as a whole. To monitor use of the Website and improve its quality, we may compile statistical information concerning the use of the Website through analytics services, such as those provided by Google Analytics. Examples of this information may include: the number of visitors to the Website or to sections or pages within the Website, patterns of traffic flowing through the Website, length of time spent on the Website, or in sections or pages of the Website, the other sites that refer visitors to the Website, the pages of the Website that visitors frequently use as entry and exit points, utilization of the browser and operating systems and versions used by visitors to the Website. We also may use this PI in our marketing and advertising services. We may use various kinds of software devices to collect PI about use of our Website. Small files called "cookies" may be attached to your Web browser. These files identify your browser and save information such as passwords so that websites can recognize you. You can set your browser to disable cookies, but some portions of this Website (and possibly other sites) may not work properly if you do this. We may also use web beacons to review how visitors navigate the Website. If you would like more information about this practice, and your choices and how they relate to this practice, please contact us. This Website may use social media plugins (e.g. Facebook and LinkedIn) to enable you to easily share information with others. When you visit our Website, the operator of the social media plugin can place a cookie on your computer, enabling that operator to recognize individuals who have previously visited our Website. If you are logged into the social media website (e.g. Facebook, Twitter) while browsing our Website, the social media plugins allow that social media website to share data about your activities on our Website with other users of their social media website. For example, Facebook Social Media Plugins allow Facebook to show your likes and comments on our pages to your Facebook friends. Facebook Social Media Plugins also allow you to see your friends’ Facebook activity on our website. We do not control any of the content from the social media plugins. For more information about social media plugins from other media websites you should refer to those sites’ privacy and data/information sharing statements/policies. IMPORTANT: By using the Website, you consent to the processing of any PI provided or collected for the analytics purposes and functions described above. Do Not Track “Do Not Track” is a privacy preference that you can set in your Internet search browser that sends a signal to a website that you do not want the website operator to track certain browsing information about you. However, because our Website is not configured to detect Do Not Track signals from a user’s computer, we are unable to respond to Do Not Track requests. Our Sites and Children We do not knowingly collect or solicit PI from children under 13 years of age. We are concerned about the safety of children when they use the Internet and will never knowingly request PI from anyone under the age of 13. If the parent or guardian of a child under 13 believes that the child has provided us with any PI, the parent or guardian of that child should contact us and ask to have this PI deleted from our files. If we otherwise obtain knowledge that we have PI about a child under 13 in our files, we will delete that information from our existing files so that it is not in retrievable form. Security While we use reasonable measures to protect our websites and your information, the Internet is never 100% secure. The measures we use are appropriate for the type of information we collect. We cannot guarantee use of our websites are 100% secure. We encourage you to use caution when using the Internet. Applicable Law This Policy is governed by the laws of the State of New York, without regard to its conflict of laws principles. Jurisdiction for any claims arising under or out of this Privacy Policy shall lie exclusively with the state and federal courts within New York. If any provision of this Policy is found to be invalid by a court having competent jurisdiction, the invalidity of such provision shall not affect the validity of the remaining provisions of this Policy, which shall remain in full force and effect. Notice to Website Users Located Outside the U.S. The Company operates in accordance with the laws of the U.S. When you access our Website from outside the U.S., we may transfer the PI that we collect from you to a location outside of your jurisdiction, including the U.S. The data protection laws in these jurisdictions may not provide you with the same protections as those of your jurisdiction. By using this Website you acknowledge that these laws may provide a different standard of protection and you consent to the transfer of your personal data to other jurisdictions, including the U.S. Contact Us If you have additional questions you may call us at (800) 689-6823 or reach us by email at HCGUS.DataPrivacy@hain.com. You can write to us at: The Hain Celestial Group, Inc. 1111 Marcus Avenue Lake Success, NY 11042 Attention: Legal Department Changes to this Privacy Policy Effective Date: December 1, 2020 From time to time we may change our privacy policies. We will notify you of any material changes to our Privacy Policy by posting an updated copy on our website. Please check our Website periodically for updates. For California Residents This section of the Privacy Policy (“CA Policy”) supplements and amends the information contained in our Privacy Policy with respect to California residents. This CA Policy applies solely to individuals, visitors, users, and others who are natural persons and residents of the State of California (“consumers” or “you”). THIS ADDENDUM TO THE PRIVACY POLICY DOES NOT APPLY TO USERS WHO ARE NOT NATURAL PERSONS AND NOT CALIFORNIA RESIDENTS. The CA Policy describes Hain Celestial’s policies and practices regarding the personal information we collect, use, and disclose about you, including personal information you submit or we obtain when you access the Site and other sources. This CA Policy is adopted in part to comply with the California Consumer Privacy Act (“CCPA”). Any terms defined within the CCPA have the same meaning when utilized within this CA Policy. The other provisions of the Policy continue to apply except as modified in this CA Policy. Note, however, that personal information as used in this CA Policy does not include: Publicly available information from government records. De-identified or aggregated consumer information. Information excluded from the CCPA's scope, such as personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994. Consumer Rights Pursuant to the CCPA, and as detailed below, consumers have various rights with respect to their PI. Request to Delete. You have the right to request that we delete your PI from our records and direct any service providers to delete your PI from their records, subject to certain exceptions. Upon receipt of a confirmed verifiable consumer request (see below), and as required by the CCPA, we will delete and direct any service providers to delete your personal information from our records. Hain Celestial is not required to comply with your request to delete your PI if it is necessary for it (or its service provider) to maintain your PI in order to: Complete the transaction for which the PI was collected, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between the Company and you. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity. Debug to identify and repair errors that impair existing intended functionality. Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law. Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the Company’s deletion of the information is likely to render impossible or seriously impair the achievement of such research, if you have provided informed consent. To enable solely internal uses that are reasonably aligned with your expectations based on your relationship with the Company. Comply with a legal obligation. Otherwise use your PI, internally, in a lawful manner that is compatible with the context in which you provided the information. Upon receipt of a confirmed verifiable consumer request (see below), and as required by the CCPA, we will provide a response to such requests. If you are under the age of 18, and a registered user of any Site where this CA Policy is posted, California law permits you to request and obtain removal of content or information you have publicly posted. You may submit your request using the Data Subject Access Request (“DSAR”) form available on the Site or using the contact information in the Privacy Policy. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested. Request to Know. You have the right to request that we disclose the following to you as it relates to the 12-month period preceding its receipt of your verifiable consumer request: The categories of PI we have collected about you. The categories of sources from which the PI was collected. The business or commercial purpose for collecting PI. The categories of PI we disclosed for a business purpose. The categories of third parties with whom we share PI. The specific pieces of PI we collected about you. Upon receipt of a verifiable consumer request (see below), and as required by the CCPA, we will provide a response to such requests. In addition to the CCPA, California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your personal information by certain members of Company to third parties for the third parties’ direct marketing purposes. Consumers who have provided their personal information to us may request information about our disclosures of certain categories of personal information to third parties for their direct marketing purposes. Such request must be submitted to us by calling (800) 689-6823, or emailing us at HCGUS.DataPrivacy@hain.com. Please mention in your call or email that you are making a "California Shine the Light" inquiry. Within 30 days of receiving such a request, we will provide a list of the categories of personal information disclosed to third parties for third-party direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties. This request may be made no more than once per calendar year. We reserve our right not to respond to requests submitted other than to the address specified in this paragraph. Nondiscrimination. We will not discriminate against you in violation of the CCPA for exercising any of your CCPA rights. For example, we generally will not provide you a different level or quality of goods or services if you exercise your rights under the CCPA. Submitting Consumer Rights Requests To submit any of the Consumer Rights requests as outlined above, please contact us at (800) 689-6823 or submit a request using the DSAR form available on the Site. We reserve the right to only respond to verifiable consumer requests. A verifiable consumer request is one made by any individual who is: the consumer who is the subject of the request, a consumer on behalf of the consumer’s minor child, or by a natural person or person registered with the Secretary of State authorized to act on behalf of a consumer. If we request, you must provide us with sufficient information to verify your identity and/or authority to act on behalf of the consumer. In general, we may ask you to provide identifying information that we already maintain about you or we may use a third-party verification service. In either event, we will try to avoid asking you for sensitive PI to verify your identity. We may not be able to respond to your request or provide you with PI if we cannot verify your identity or authority to make the request and confirm the PI relates to you. However, making a verifiable consumer request does not require you to create an account with us. Additionally, you will need to describe your request with sufficient detail to allow us to review, understand, assess, and respond. PI collected from an individual to determine whether a request is a verifiable consumer request may not be used or disclosed for any other purpose except as required by law. We will endeavor to respond to a verifiable consumer request within forty-five (45) calendar days of receipt, but we may require an extension of up to forty-five (45) additional calendar days to respond and we will notify you of the need for the extension. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the receipt of your verifiable consumer request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. To the extent permitted by the CCPA, we will respond to no more than two requests during any 12-month period. You may authorize a natural person or a business registered with the California Secretary of State to act on your behalf with respect to the right under this CA Policy. When you submit a Request to Know or a Request to Delete, unless you have provided the authorized agent with a qualifying power of attorney, you must provide your authorized agent written permission (signed by you) to act on your behalf and verify the authorized agent’s identity with us. We reserve the right to deny requests from persons or businesses claiming to be authorized agents that do not submit sufficient proof of their authorization. Questions If you have questions about this Policy, please contact us as described above in the Privacy Policy. 2/19/2021, 7:06:16 PM COMPANY INVESTOR RELATIONS CAREERS BRANDS CONTACT US Copyright ©2021 Hain Celestial Covid Statement California Transparency in Supply Chains Act Terms of Use Privacy Policy Copyright Policy Do Not Sell My Personal Information We also share information about your use of our site with our social media, advertising and analytics partners.Privacy Policy Do Not Sell My Personal Information