Policy Scope & Updates
Personal Information. Personal information (“PI”) means any information that can be used to directly or indirectly identify a specific individual. We may collect personal information from a variety of sources. These sources include personal information that:
- you give to us directly (e.g., when you sign up for things like newsletters, sweepstakes, surveys or promotions or register for an account on our Sites and provide information like your name, email address and date of birth);
- we collect automatically (e.g., when you browse our Site and interact with us online, we (or our partners) may use cookies and tracking technologies to obtain your personal information); and
- we collect from other sources and partners (e.g., when we purchase personal information about you from a third party to better personalize your experience or market to your interests).
The types of personal information we obtain include:
- contact information, such as your name, postal address and/or zip code, email address, and telephone/mobile number; we may also collect your child’s name and date of birth from you;
- account information, such as your username and password (e.g., if you choose to create an account on the Site);
- purchase history information, such as when you make a purchase from us or our partners;
- loyalty and rewards information, such as when you sign up for loyalty programs;
- characteristics and attributes, such as age ranges, languages spoken, and marital and family status either collected by us or our partners;
- preferences, such as hobbies, interests, shopping preferences, and product propensity scores (e.g., likelihood of purchasing products) either collected by us or our partners;
- online or technical information, such as device, browser, mobile application, system and internet protocol addresses, and identifiers; and
- inferred information, such as information derived from the information listed in this section.
Sensitive Personal Information. For the purposes of processing listed in this Policy, we (or our partners) may collect and process sensitive personal information. This may include information such as your race, ethnicity, date of birth, or data related to your use of our Site or products associated with health status, such as pregnancy, allergies (e.g., allergy trigger quizzes), menstruation (e.g., period calculators), or incontinence. We may also make inferences about your preferences, behaviors, characteristics, health, or attributes related to your use of our Site or products where permitted by applicable law. When we collect data that may be considered “sensitive”, we (or our partners) will request your consent to process such sensitive personal information and we may provide other controls (like an opt-out of certain processing) when required by law. Please note that certain portions of the Site may require this data for us to fully provide our services, so your choice to not provide such information may limit the scope of available offerings. We respect our customers’ rights and heightened privacy interests pertaining to sensitive personal information. As such, we commit to verifying that law enforcement entities follow the laws and procedures in their jurisdictions before we respond to a request for such information. In the case where data requests for sensitive personal information are compliant with the laws of the requesting agency’s jurisdiction, we may make reasonable challenges to such requests.
Purposes of Processing. We collect, process, and disclose your personal information only for specific and limited purposes. For example, we may process your personal information across all Kimberly-Clark brands to:
- develop, provide and improve our products, services, communication methods, and the functionality of our Site;
- process requests and manage our business needs regarding the products, offers and services we provide; this also includes responding to your questions and verifying your identity when necessary when you contact us;
- provide personalized experiences, transactional and marketing communications, and targeted advertising including special offers and recommendations to you;
- better understand your interests and create profiles by analyzing information about your attributes, characteristics, and behaviors for internal research; and to establish, deliver and measure advertising/marketing campaigns to you or to people like you;
- secure and protect your personal information and our interests; this includes preventing and investigating illegal activities, fraud and violations of our various terms of use policies and other service conditions; and
- comply with legal requirements, including cooperating with law enforcement, government authorities, or governmental mandate (but when we do, we will disclose only the minimum amount of information required by law).
Legal Bases. Additionally, certain data protection laws require us to have a “legal basis” and defined purpose before processing any personal information about you. Our legal bases for which we may process your personal information may include:
- to establish or perform the contract we are about to enter (or have entered) into with you;
- for our legitimate interests (or those of a third party) which will not override your interests and fundamental rights; this includes many of purposes of processing listed above;
- with your consent; this includes, for example, to personalize, deliver and measure certain direct marketing and advertising communications concerning our products and services; our communications may be sent by both non-automated and automated means (e.g., email, social media messages, SMS, MMS, automated dialing systems, or calls by human operators);
- where we need to comply with a legal or regulatory obligation and/or respond to requests from public and government authorities. This may include disclosing your information to law enforcement agencies or as required to comply with laws or regulations (including antifraud laws, money laundering, or tax laws) as well as transferring your personal information in connection with any potential or actual merger or sale of assets as part of a corporate transaction. When we process personal information on this basis, consistent with this Policy, we carefully review each request to ensure it is valid and that the requestor is entitled to the personal information they seek (and may challenge such requests as appropriate); and/or.
- other legal bases recognized by applicable law in your jurisdiction.
Individual Rights. Where we process your personal information, you may be entitled to certain rights made available through applicable data protection laws. Some of these rights are explained below. You can reach Kimberly-Clark with any questions or to exercise your rights via the How to Contact Us section of this Policy. Please also consult the State- or Country-Specific Disclosures section of this Policy, as depending on the applicable data privacy laws in your jurisdiction, you may have the below rights regarding your personal information:
- The Right to be Informed. You may have the right to be informed about how we plan to process your information. This is the main purpose of this Policy;
- The Right to Deletion or Erasure. You may have the right to have your personal information deleted;
- The Right to Access Your Data. You may have the right to access and receive a copy of your personal information and other supplementary information;
- The Right to Port Your Data. You may have the right to obtain and reuse your personal information for your own purposes across different services and companies;
- The Right to Rectify Your Data. You may have the right to rectify your data if it is inaccurate or needs to be supplemented;
- The Right to Object. You may have the right to object to certain types of processing, including direct marketing;
-
The Right to Withdraw Your Consent;
- Email Marketing Communications. If you wish to withdraw the use of your personal information for email marketing for any or all of our brands, you may unsubscribe as directed in our marketing emails. You also may unsubscribe directly on some of our Sites (e.g., “unsubscribe” footers). You may also reach out to us via the “Contact Us” section of this Policy;
- Telephone or SMS Marketing Communications. If you wish to withdraw the use of your personal information for telemarketing or SMS marketing for any or all of our brands, text “Stop” as directed in the marketing text messages. You may also reach out to us via the “Contact Us” section of this Policy;
-
Postal Marketing Communications. If you wish to withdraw the use of your personal information for postal marketing for any or all of our brands, you may reach out to us via the “Contact Us” section of this Policy;
-
Interest-Based or Online-Behavioral Advertising. Online-behavioral advertising is automated, customized advertising that is tailored to your preferences and interests based on your online browsing activities over time and across multiple third-party websites and applications. Your preferences and interests are determined from personal information collected about you, whether by us or other parties. You may receive this advertising when using online services, like advertisements in mobile applications or on websites;
- To stop receiving interest-based advertising from companies who participate in the Digital Advertising Alliance, you can opt-out here. For Europe, you may opt-out here. Even if you opt-out, you may still see advertisements, but they will be based on the context of the sites you visit and not based on your viewing activities. For more information on online-behavioral advertising, go here;
- Kimberly-Clark is a participant of the Digital Advertising Alliance and the Digital Advertising Alliance of Canada.
-
Interest-Based or Online-Behavioral Advertising. Online-behavioral advertising is automated, customized advertising that is tailored to your preferences and interests based on your online browsing activities over time and across multiple third-party websites and applications. Your preferences and interests are determined from personal information collected about you, whether by us or other parties. You may receive this advertising when using online services, like advertisements in mobile applications or on websites;
- Loyalty, Special Offers, Sweepstakes or Financial Incentives. If you wish to remove your participation in these programs or offers, please reach out as directed in the “State- or Country-Specific Disclosures” section of this Policy.
- The Right Not to be Discriminated Against. You may have a right not to be discriminated against (e.g., be denied goods or service, charged different prices or rates for goods or services, provided a different level of quality of goods or services) for exercising your legal rights. However, we may offer a different price, rate, level, quality or selection of goods or services to you if you opt-out (or stop sharing your data) and such difference is reasonably related to the value provided to us by your data. For more information, see the “State- or Country-Specific Disclosures” sections of this Policy.
- The Right Not to Be Subject to Automated Decision Making or Profiling. You may have the right not to be subject to automated decision making (a decision that is created solely by automated means and without any human intervention) including the automated processing of personal information for the purposes of profiling or of the evaluation of certain things about you that have legal or similar significant effects, as defined by applicable law. You also may have the right to request human involvement, obtain an explanation of the decision, or challenge such decision;
- The Right to Restrict or Limit the Use of Your Sensitive Personal Information. You may have the right to have your sensitive personal information restricted or suppressed. For more information, see the “State- or Country-Specific Disclosures” sections of this Policy;
- The Right Not to Share or Sell Your Data and/or the Right to Opt-out of Targeted Advertising. You may have the right to not have your data sold or shared for certain purposes according to applicable law. Similarly, you may have the right to opt-out targeted advertising. This advertising may be when you receive advertising based on your personal information obtained from your activities over time and across non-affiliated websites or online applications. For more information, see the “State- or Country-Specific Disclosures” sections of this Policy; and/or
- Right to Lodge a Complaint with a Competent Supervisory Authority. You may have the right to lodge a complaint with a regulatory authority pertaining to our processing of your personal information. For more information, see the “State- or Country-Specific Disclosures” sections of this Policy.
Verifying Requests. To help protect your privacy and maintain security, we will, according to applicable law, take steps to verify your identity before processing certain rights requests, such as granting you access to your personal information or complying with your request. If you designate an authorized agent to make a request on your behalf, we may require you to (a) provide the authorized agent written permission to do so and to share such authorization with us when processing a rights request, or (b) verify your own identity directly with us.