US Privacy Notice
Last Updated: August 4, 2025
This US Privacy Notice applies to residents of specific US states,
including California, Virginia, Connecticut, Colorado, Utah, Texas,
Oregon, Montana (effective October 1st, 2024), and effective of
January 1, 2025 - Nebraska, New Hampshire, New Jersey, Delaware, and
Iowa, under their respective privacy laws (collectively,
“US Privacy Laws” and “Covered States”). Lean Labs
Ltd. trading as SlimminGood, together with its subsidiaries and
affiliated companies (collectively with its subsidiaries and
affiliates, “SlimminGood”, "Company", "we" or "us"), provide this US
Privacy Notice to supplement our general Privacy Policy and inform
residents of these Covered States about their rights regarding the
collection, use, and disclosure of their Personal Information during
the use of our Site, Product and Services. That, also with regard to
California Residents under the California Consumer Privacy Act of 2018
(“CCPA”).
This Notice is an integral part of our
Privacy Policy and supplements it
with additional information under US Privacy Laws; capitalized terms
used but not defined in this US Privacy Notice will have the meanings
set out therein or as defined under the applicable privacy law of the
respective state. If there is any conflict or inconsistency between
the terms of this Notice and the Privacy Policy, the terms of this
Notice will prevail solely for eligible consumers.
(A) Categories of Personal Information We Collect
As detailed under Section 3 of our Privacy Policy, we collect and
process various types of Non-Personal Data and Personal Data, or
Personal Information under applicable US Privacy Laws.
Personal Information under applicable US Privacy Laws further includes
Sensitive Personal Information (“SPI”). However, as provided in
the table below, we generally do not process such SPI.
In addition, under US Privacy Laws, Personal Information does
not include : Publicly available information that is lawfully made available from
government records, that a consumer has otherwise made available to
the public; de-identified or aggregated consumer information; any
other types of information excluded from US Privacy Laws, such as:
Health or medical information covered by the Health Insurance
Portability and Accountability Act of 1996 (HIPPA) and the California
Confidentiality of Medical Information Act (CMIA) or clinical trial
data; Personal information covered by certain sector-specific privacy
laws, including the Fair Credit Reporting Act (FRCA), the
Gramm-Leach-Bliley Act (GLBA) or California Financial Information
Privacy Act (FIPA) and the Driver's Privacy Protection Act of 1994.
As further elaborated under Section 4 to the Privacy Policy, in the
last twelve (12) months, we have collected as a “Business” or
“Controller” the following categories of Personal Information:
Category under the CCPA |
Example |
Whether Collected and examples |
A. Identifiers. |
A real name, alias, postal address, unique personal
identifier, online identifier, Internet Protocol address,
email address, account name, Social Security number, driver's
license number, passport number, or other similar identifiers.
|
Yes: Contact Communications info and as part of purchasing our
products and interacting with the Services if provided by you.
|
B. Personal information categories listed in the California
Customer Records statute
|
A name, signature, Social Security number, physical
characteristics or description, address, telephone number,
passport number, driver's license or state identification card
number, insurance policy number, education, employment,
employment history, bank account number, credit card number,
debit card number, or any other financial information, medical
information, or health insurance information.
|
Yes: Credit Card and payment data if you are a Customer.
|
C. Protected classification characteristics under California
or federal law.
|
Age (40 years or older), race, color, ancestry, national
origin, citizenship, religion or creed, marital status,
medical condition, physical or mental disability, sex
(including gender, gender identity, gender expression,
pregnancy or childbirth and related medical conditions),
sexual orientation, veteran or military status, genetic
information (including familial genetic information).
|
Yes: Gender, Age |
D. Commercial information. |
Records of personal property, products or services purchased,
obtained, or considered, or other purchasing or consuming
histories or tendencies.
|
Yes: Purchase records and Payment Data. |
E. Biometric information. |
Genetic, physiological, behavioral, and biological
characteristics, or activity patterns used to extract a
template or other identifier or identifying information, such
as, fingerprints, faceprints, and voiceprints, iris or retina
scans, keystroke, gait, or other physical patterns, and sleep,
health, or exercise data.
|
No |
F. Internet or other similar network activity. |
Browsing history, search history, information on a consumer's
interaction with a website, application, or advertisement.
|
Yes: IP address, Cookie identifiers, hardware type, operating
system, interaction with the Services.
|
G. Geolocation data. |
Physical location, approximate location derived from IP
address or movements.
|
Yes: Approximate location inferred from IP. |
H. Sensory data. |
Audio, electronic, visual, thermal, olfactory, or similar
information.
|
No |
I. Professional or employment-related information. |
Current or past job history or performance evaluations. |
No |
J. Non-public education information |
Education records directly related to a student maintained by
an educational institution or party acting on its behalf, etc.
|
No |
K. Inferences drawn from other personal information. |
Profile reflecting a person's preferences, characteristics,
psychological trends, predispositions, behavior, attitudes,
intelligence, abilities, and aptitudes.
|
No |
L. Sensitive personal information. |
Including without limitation precise geolocation, racial or
ethnic origin, religious or philosophical beliefs, or union
membership, the contents of a consumer's mail, email, and text
messages unless the business is the intended recipient of the
communication, genetic data, biometric data, information
concerning health, sexual life or sexual orientation.
|
Health-related data, if provided by you voluntarily for
customization of the Product and our offerings.
|
(B) Disclosures of Personal Information (for a Business Purpose)
We may disclose your Personal Information to a contractor or service
provider for business purposes. When we disclose Personal Information
for a business purpose, we enter into a contract that describes the
purpose and requires the recipient to both keep that Personal
Information confidential and not use it for any purpose except
fulfilling the contract. We further restrict the contractor and
service provider from selling or sharing your Personal Information.
Section 5 of the Privacy Policy provides details regarding the sharing
of Personal Data with third parties. The below disclosure is
designated to provide further disclosure in accordance with US Privacy
Laws, and specifically the CCPA.
In the preceding twelve (12) months, we have disclosed the following
categories of Personal Information for a business purpose:
Business Purpose |
Category (corresponding with the table of our Privacy Policy)
|
Category of Recipient |
Providing our services and selling our products through the
use of external vendors
|
Category A Category B Category C Category D Category F Category G
|
e-commerce platforms, distributors and resellers, shipping and
logistics vendors, payment processors, Email and SMS delivery
systems, Other Users of our Services, etc.
|
Helping to ensure security and integrity to the extent the use
of Personal Information is reasonably necessary and
proportionate for these purposes.
|
Category A Category B Category C Category D Category F Category G
|
Security prevention providers, operating systems. |
Debugging to identify and repair errors that impair existing
intended functionality.
|
Category A Category B Category C Category D Category F Category G
|
Security prevention providers, operating systems. |
Performing services on behalf of the business, including
maintaining or servicing accounts, providing customer service,
processing or fulfilling orders and transactions, verifying
customer information, processing payments, providing
financing, providing analytic services, providing storage, or
providing similar services on behalf of the business.
|
Category A Category B Category C Category D Category F Category G
|
Payment processors, distributors and resellers, affiliated
companies, operating systems, CRM, ERP, etc.
|
Undertaking internal research for technological development
and demonstration.
|
Category A Category B Category C Category D Category F Category G
|
Developers, operating systems, cloud and hosting providers.
|
Undertaking activities to verify or maintain the quality or
safety of a service or device that is owned, or controlled by
the business, and to improve, upgrade, or enhance the service
or device that is owned or controlled by the business.
|
Category A Category B Category C Category D Category F Category G
|
Developers, operating systems, cloud and hosting providers.
|
Operating our services and products |
Category L |
cloud computing and storage vendors, providing infrastructure
to our Services.
|
Complying with our legal obligations, and providing
governmental authorities with require information
|
Any Type and Category of Data |
Any governmental or similar authority |
Sharing information with our affiliates and collaborators
|
Any Type and Category of Data |
Our subsidiaries and third-party affiliates, collaborating
with us for the provision of the Services
|
(C) Disclosures for Cross-Context Behavioral and Targeted Advertising
Purposes
This section describes the categories of personal information we may
disclose for “cross-context behavioral advertising” (“CCBA”) or
“Targeted Advertising” as such terms are defined under the US Privacy
Laws — i.e. delivering targeted advertising to consumers based on
personal information we may obtain from their activity across
businesses, distinctly-branded websites, applications, or services,
other than those with which they intentionally interact. We do not
“sell” information as most people would commonly understand that term,
meaning we do not, and will not, disclose your Personal Information in
direct exchange for money or some other form of payment. We may
“share” Personal Information for “interest-based advertising” or
“cross-context behavioral advertising”. In other words, we may share
your Personal Information with a third party to help serve
personalized content or ads that may be more relevant to your
interests, and to perform other advertising-related services such as
enabling our partners to serve such personalized content.
In the preceding twelve (12) months, we “sell” or “share” the
following categories of Personal Information for a business purpose:
Category of Recipient |
Shared Information |
Purpose of Sharing |
Marketing and Advertising Firms and Networks. |
Category A Category B Category C Category D Category F Category G
|
For the avoidance of doubt, we never share any sensitive
information for such third-parties' purposes.
|
We may disclose personal information to entities that perform
marketing, advertising or market research on our behalf or help us
determine the effectiveness of our marketing.
(D) Your Rights
If you are a resident of a Covered State, subject to certain
limitations set forth by applicable law and per the specific
circumstances, you may be able to exercise the following rights
(Nevada specific rights are separately detailed below):
Privacy Right |
Details |
Right to Know and be informed.
|
You may have right to know what Personal Information we have
collected about you, including the categories of personal
information, the categories of sources from which the Personal
Information is collected, the business or commercial purpose
for collecting, selling, or sharing Personal Information, the
categories of third parties to whom the business discloses
Personal Information, and the specific pieces of Personal
Information we have collected about you. That right is being
also provided to you through our Privacy Policy and that
Notice.
|
Right to Access Personal Information.
|
You have the right to obtain access to the personal data we
have collected about you and, where required by law, the right
to obtain a copy of the personal data in a portable and.
|
The Right to Correct Personal Information.
|
You may have the right to request that we correct inaccurate
personal information that we maintain about you.
|
Right to delete personal information.
|
You have the right to request the erasure of certain Personal
Data if specific conditions are satisfied. This right is not
absolute. We may reject your request under certain
circumstances, including where we must retain the data in
order to comply with legal obligations or defend against legal
claims, other legitimate interests such as record keeping with
regards to our engagements, completing transactions, providing
a good or service that you requested, taking actions
reasonably anticipated within the context of our ongoing
business relationship with you, fulfilling the terms of a
written warranty, detecting security incidents, protecting
against malicious, deceptive, fraudulent, or illegal activity,
or prosecuting those responsible for such activities;
debugging products to identify and repair errors that impair
existing intended functionality; exercising free speech,
ensuring the right of another consumer to exercise their free
speech rights, or exercising another right provided for by
law; and engaging in public or peer-reviewed scientific,
historical, or statistical research in the public interest
that adheres to all other applicable ethics and privacy laws,
when the information's deletion may likely render impossible
or seriously impair the research's achievement, if you
previously provided informed consent.
You do not need to create an account with us to submit a
deletion request.
|
Non-Discrimination Right. |
You may have the right not to receive discriminatory treatment
for the exercise of privacy rights, including (where relevant)
an employee's, applicants, or independent contractor's right
not to be retaliated against for the exercise of their rights,
denying a consumer goods or services, charging different
prices or rates for goods or services, providing you a
different level or quality of goods or services, etc. We may,
however, charge different prices or rates, or provide a
different level or quality of goods or services, if that
difference is reasonably related to the value provided to us
by your Personal Information.
|
Data Portability Right |
You may have the right, where feasible, to obtain a copy of
the Personal Information you provided to us in a portable
format.
|
Opt-Out of Sharing for Cross-Contextual Behavioral Advertising
or from selling, where applicable.
|
You have the right to opt-out of the “sharing” of your
personal information for “cross-contextual behavioral
advertising,” often referred to as “interest-based
advertising” or “targeted advertising.”, you may opt out
through the “do not sell or share my personal information”
button available within the Websites' footer. You may opt out
through device settings (opt-out from tracking AAID, ADID,
please see the following for information applicable to all
devices:
https://thenai.org/opt-out/mobile-opt-out/). Further, you can opt-out from interest-based
advertising, CCBA, by using Self-Regulatory Program for Online
Behavioral Advertising such as:
Digital Advertising Alliance's (“DAA”), and the
Network Advertising Initiative (“NAI”). Last, you can join Global Privacy Control (“GCP”) for
opting out generally through your browser:
https://globalprivacycontrol.org/. Our Cookie toolbar at the Website will know to read all of
these signals and ensure compliance with your request. In
any event, please keep in mind:
-
Opt-out tools are limited to the browser or device you use
because they work off your browser ID and device ID. If
you're not signed-in to your customer account or don't
have a customer account, you will need to opt-out on each
browser and device you use.
-
Your browser may save some information in its cookies and
cache to maintain your privacy preferences. Clearing these
may remove opt-out preferences, requiring you to opt-out
again.
-
If you opt-out, you will still see ads online, but these
ads will not be based on your inferred interests.
-
Some automated means may still be used to collect
information about your interactions with our online
services for the other purposes such as to remember user
preferences or enable specific functionality.
-
We use necessary cookies to make our properties work.
Necessary cookies enable core functionality such as
security, network management, and accessibility. You
cannot disable those.
|
Right to opt out from Profiling and automated Decision Making
|
We do not profile you, thus we do not provide an opt-out
mechanism in this regard.
|
If you want to exercise your rights, please fill in this
DSR form to and sending it to us by mail:
support@slimmingood.com.
Before processing your request, we will need to verify your identity
and confirm you are a resident of a state that offers the requested
right(s). In order to verify your identity, we may require you to
provide additional personal information, including, but not limited
to, your name, email address, mailing address, date of your last
interaction with us, and the general nature of your interactions with
us. If we are able to verify your identity, we will respond to your
request or provide an explanation as to why we are unable to comply
with your request.
In certain circumstances, we may decline a request to exercise the
rights described of our Privacy Policy, particularly where we are
unable to verify your identity or locate your information in our
systems. If we are unable to comply with all or a portion of your
request, we will explain the reasons for declining to comply with the
request.
(E) Authorized Agents
In certain circumstances, and subject to applicable Data Protection
Laws, you may permit an authorized agent to submit requests on your
behalf. The authorized agent must provide a letter signed by you
confirming the agent has permission to submit a request on your behalf
or must provide sufficient evidence to show that the authorized agent
has been lawfully vested with power of attorney. For security
purposes, we may need to verify your identity and confirm directly
with you that you have provided the authorized agent with permission
to submit the request, and it may take additional time to fulfill
agent-submitted requests. We may deny a request in the event we are
not able to verify the authorized agent's authority to act on your
behalf. Please note that for privacy and security reasons, we will
direct future communications to the individual on whose behalf the
request was made.
(F) Response Time and Format
We will respond to a verifiable request within the timeframes set by
applicable Data Protection Laws (usually up to 45 days). We reserve
the right to extend the response time by an additional period as
permitted by Data Protection Laws. If we determine that the request
warrants a fee, we will tell you why we made such a decision and
provide you with a cost estimate before completing your request.
(G) Appeals
Depending on your state of residency, you may be able to appeal a
decision we have made in connection with your privacy rights request,
by contacting us as instructed in our response. Please send your
appeal request with a summary of the request and decision you want to
appeal to
support@slimmingood.com.
Not more than 60 days after receipt of an appeal we will inform you in
writing of any action taken or not taken in response to the appeal,
including a written explanation of the reason for the decisions.
If you are not happy with our response, depending on your
jurisdiction, you may have the right to lodge a complaint against us
with the relevant State's Attorney General:
(H) Additional Information for California Residents
Depending on your state of residency, you may be able to appeal a
decision we have made in connection with your privacy rights request,
by contacting us as instructed in our response. Please send your
appeal request with a summary of the request and decision you want to
appeal to
support@slimmingood.com.
-
1. Notice Of Financial Incentive
We do not offer financial incentives to consumers for providing
Personal Information.
-
2. Do Not Track Settings and Shine the Light Law for California
Residents
Cal. Bus. And Prof. Code Section 22575 also requires us to notify
you how we deal with the “Do Not Track” settings in your browser.
As of the effective date listed of our Privacy Policy, there is no
commonly accepted response for Do Not Track signals initiated by
browsers. Therefore, we do not respond to the Do Not Track
settings. Do Not Track is a privacy preference you can set in your
web browser to indicate that you do not want certain information
about your web page visits tracked and collected across websites.
For more details, including how to turn on Do Not Track, visit:
www.donottrack.us.
(I) Nevada Residents Rights
Nevada law allows Nevada residents to opt out of the sale of certain
types of personal information. Subject to several exceptions, Nevada
law defines “sale” to mean the exchange of certain types of personal
information for monetary consideration to another person. If you are a
Nevada resident, you still may submit a verified request to opt out of
sales and we will review your requests' applicability. You may send
opt-out requests to
support@slimmingood.com.
UPDATES:
This notice was last updated in August 2025. As required under the
CCPA, we will update this US Privacy Notice every 12 months.
The last revision date will be reflected in the “Last Updated” heading
at the top of this US Privacy Notice.