Privacy Policy

Revised: September 15, 2022

This Privacy Statement describes how WD-40 Company and its affiliates (collectively “WD-40,” “we,” and “us”) collect, use and disclose personal information we collect when you visit or use our websitesor mobile applications (each a “Site” and collectively “Sites”), contact our customer service team, engage with us on social media, participate in our sweepstakes or contestsor otherwise interact with us (collectively, our “Services”). By using our Sites and Services, you consent to the collection, processing, use,and disclosure of your personal information in accordance with this Privacy Statement.

Click here to download a copy of this Privacy Statement.

This Privacy Statement does not apply to information collected in connection with employment from job applicants, current and former employees and, where applicable, to current and former workers and contractors who provide services to us.

Contents

1. Information We Collect
2. How We Use Your Information
3. Sharing and Disclosure of Information
4. Marketing Communications
5. Security
6. Cookies, Analytics, and Other Tracking Technology
7. Links to Other Sites
8. Retention of Information
9. Children
10. How to Update Your Information
11. Contact Us
12. Changes to this Privacy Statement
13. Country/Region/State Specific Provisions

1. Information We Collect

We collect different categories of personal information dependingon your interaction with us. The key categories and types of personal information that we may collectand process are set out below.

• Contact Information: When you create an account onour Sites, sign up for our newsletter or mailinglist, enter a contest, redeem a promotion, or enter a sweepstake, or otherwise communicate or interact with us, we may collect yourname, title, email address, mailing address, telephone number, birthdate, occupation and hobbies.
• Identifiers: When you visit our Sites, we may collect your IP address, user name, account number, password and other security information for authentication and access.
• Geolocation Data: When you visit our Sites, we may collect the general region or area from which you access our site.
• Usage Data: When you visit our Sites, we may collect data concerning your Internet or other electronic activity including browsing and click history, device types, operating system, browser settings, IP address, language settings, and Site use data including information about how you navigate the Site, other websites, and the Internet.
• Social Media Profiles: When you interact with us or our Sites through various social media networks, such as when you like us on Facebook or when you follow us or share our content on Facebook, Twitter, Snapchat, LinkedIn, Instagram or other sites, we may receive information from those social networks including your profile information, user ID associated with your social media account, and any other information you allow the social network to share with third parties.
• User Generated Content: When you contact us directly, e.g.,by email, phone, mail or by completing an online form or by participating in an online chat, we will record your comments and opinions. We will also record comments and opinions you express when responding to surveys, entering sweepstakes or taking part inpromotions we run.
• Audio/Visual Data: When you visit one of our officesor event booths, participate in one of our promotions or contests,or submit photos or videos to us, we may collect audio, electronic, photographic, visual or similar data including videos, photographs, or audio recordings.
• Commercial Information: When you inquire about our products or provide us information regarding products you purchased, we may collect records of products or services purchased, obtainedor considered, or other purchasing or consuming histories.
• Inferences: We combine information we obtain from different sources with publicly available information, including to create inferences about you. For example, we may combineinformation we have with information that we have collected: (i)offline andonline, (ii) across other third-party sites, (iii) across devices, such as computers and mobile devices, and (iv)from a third party.We may also use information from the categories described above inorder to create a profile about you, to reflect your preferences, characters, behavior and attitudes.

We do not collect or process personal information pertaining to your racial or ethnic origin, political opinions, religion or philosophical beliefs, health or medical condition, criminal background, trade union membership, genetic or biometric data, sexual life or orientation (referred to as "sensitive personal information"). We ask that you not send nor disclose, any sensitive personal information tous. We may, however, ask you to disclose to us information related to your health or medical condition when necessary to analyze and address incidents with our products or packaging. Furthermore, we will process such information if you communicate it to our agents during a call or you are voluntarily expressing consent through a communication or any other means.

2. How We Use Your Information

We use your personal information for the following purposes:

• Inquiries and Requests: We use your contact information, identifiers, and commercial information to respond to your inquiries, complaints and suggestions.
  Legal Basis for Processing: Our legitimate interests to handle, adequately and in a timely manner, customers' inquiries, complaints and suggestions regarding the Sitesand Services. 
• Analytical Purposes: We use your identifiers, usage data, geolocation data, commercial information, social media profiles, user generated content, and inferences to analyze preferences, trends and statistics.
  Legal Basis for Processing: Our legitimate interests toimprove our Sites and Services and evaluate the performance of our employees and contractors and your consent.
• Marketing Purposes: We use your contact information, identifiers, commercial information, usage data, geolocation data, social media profile, user generated content, audio/visual data, and inferences to send you our newsletter, improve our marketing efforts, create social media posts or advertisements, and provide you with information about us, including personalized marketing communications.
  Legal Basis for Processing: Your consent
• Offers and Promotions: We use your contact information, identifiers, commercial information, usage data, social media profiles, audio/visual data, user generated content, geolocation data, and inferences to allow you to participate in promotions, contests, special events,prize draws and other offers/promotions (e.g.,for sending you reminder emailsor prize notifications andtransferring your personal informationto fulfilment partners).
  Legal Basis for Processing: The processing of your personal information for this purpose is based on performance of the relevant promotion terms and conditionsand your consent.
• Maintenance and Improvement of the Sites and Services: We use your contact information, commercial information, identifiers, user generated content, social media profiles, geolocation data, audio/visual data, and usage data to improve our Services and Sites, provide and maintain functionality on our Sites, and help us diagnose technical and service problems and administer our Sites.
  Legal Basis for Processing:  Our legitimate interests to improve our Sites and Services and evaluate the performance of our employees and contractors.
• Security and Fraud Prevention: We use your contact information, identifiers, commercial information, social media profiles, user generated content, geolocation data, usage data, audio/visual data, and inferences to protect our Sites and Services; protect us, our affiliated companies,our employees, and others; and to prevent fraud, theft and misconduct.
  Legal Basis for Processing:  Our legitimate interests toprotect our organization and to prevent fraud, theft and misconduct.
• Legal: We use your contact information, identifiers, social media profiles,commercial information, user generated content, geolocation data, usage data, audio/visual data, and inferences to comply with our legal obligations, including reporting requirements, and defend us in legal proceedings, and protect us and our property, employees, and others through legal proceedings.
  Legal Basis for Processing: Our legitimate interests toprotect our organization and to comply with our legal obligations.
  
  

3. Sharing and Disclosure of Information

We will share personal information in the belowcircumstances or as otherwise described in this Privacy Statement.

Service Providers: We may share personal information with vendors and service providers who support the operation of the Services, the Sites,and our business and who need access to such information to carry out their work for us (including, for example, web hosting, analytics, email delivery, marketing, insurance, storage and warehouse services, customer support services, and the administration, judging and prize fulfillment aspects of promotions, competitions and sweepstakes). In some cases, the vendor or service provider may directly collect the information from you on our behalf. 

Affiliates: We may share personal information with and among our parent company, subsidiaries, affiliates, or their successors or assigns.

Marketing/Analytics/Advertising Partners: We may share personal information with third-party marketing, analytics or advertising partners, including social media platforms and networks, for commercial purposes such as sending you marketing emails and advertisements.

Professional Advisors: We may share information with professional advisors, such as lawyers, bankers, auditors, and insurers, where necessary in the course of the professional services that they render to us.

Government Entities: We share information with regulatory and government entities including government, administrative, law enforcement and regulatory agencies; tax authorities; corporate registries; and other public agencies or authorities if we think we should in order to comply with any applicable law, regulation, legal process or other legal obligation. This includes cooperating with law enforcement when we think it is appropriate, obtaining legal remedies or limiting our damages, and to enforcing or protecting our contracts, legal rights or the rights of others, including by responding to claims asserted against us.

Corporate Transaction Recipients: We may share information with potential investors, purchasers, merger partners, and their advisors in the event we: (i) sell or transfer, or are considering selling or transferring, all or a portion of our business or assets; or (ii) are considering or engaging in any reorganization, conversion, merger, sale, joint venture, assignment, transfer or disposition of all or any portion of our ownership interest, business or operations.

With Your Consent or At Your Direction: We may share information with third parties whenever you consent to or direct such sharing.

Other Reasons: We may share information for other reasons we may describe to you.

4. Marketing Communications

You can opt out of marketing or advertising emails and newsletters by using the "unsubscribe" link or mechanism noted in communications you receive from us. You may also request to opt out of marketing or advertising emails by contacting us through one of the methods specified in the Contact Us section of this Privacy Statement. Once we process your request, we will cease using the information for such purposes at no charge to you.

5. Security

6. Cookies, Analytics, and Other Tracking Technology

Cookies and Tracking Technology: We want you to be aware that certain online tools exist to help us serve and recognize you when you visit our Sites. We receive and store certain types of information when you visit our Sites.When you access the Sites, we(including companies we work with) may place small data files on your computer or other device. These data files may be web beacons, cookies, clear gifs, pixel tags, e-tags, flash cookies, log files, or other local storage provided by your browser or associated applications. These tracking technologies, which are often referred to collectively as cookies, allow us to understand how users navigate to and around our Sites, view different pages, access content and request Services. We may use them, for example, to keep track of your preferences and profile information and collect general usage and volume statistical information. For more information about our use of Cookies on the Sites, including instructions on how optout of certain types of cookies, please click Manage Cookies.

Do Not Track Signals: Some browsers have a “do not track” feature. It lets you tell websites you visit that you do not want them to track your online activity. These features are not yet uniform across browsers. Our Sites are thus not currently set up to respond to these signals. For more information on Do Not Track signals, please visit https://allaboutdnt.com/.

Third-party Analytics and Advertising: We allow others to provide analytics services and serve advertisements on our behalf across the Internet and in mobile applications. These entities may use cookies, web beacons, device identifiers and other technologies to collect information about your use of the Sites and other websites and applications, including your IP address, web browser, mobile network information, pages viewed, time spent on pages or in mobile apps, links clicked and conversion information. We use this information to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests, and better understand your online activity.

Google Analytics: We use analytics services provided by Google Analytics. If you would like more information on how Google uses data when you visit or use our Sites, please visit www.google.com/policies/privacy/partners. If you would like to optout, Google provides a an opt-out tool which is available at https://tools.google.com/dlpage/gaoptout.

Global Privacy Control and Opt-Out Preference Signals: Some browsers or browser extensions also allow you to tell websites not to share your information for cross-contextual behavioral advertising through the “Global Privacy Control” or other opt-out preference signals. If you have enabled Global Privacy Control or an opt-out preference signal on your browser or extension, we will honor such requests that can be recognized by our Site by disabling analytics and advertising technologies. Please note that we may not be readily able to associate an opt-out preference signal with other personal information such as your email address. You will also only be opted out of online sales or sharing of personal information, and will need to turn it on for each browser you use. Refer to the “Exercising Your Rights” above if you would like to extend your opt-out request beyond the online advertising practices described above.”

7. Links to Other Sites

Our Sites may include links to other websites or applications whose privacy practices may differ from ours. If you submit personal information to any of those websites or applications, your information is governed by their privacy statements. We encourage you to carefully read the privacy statement of any website you visit. 

8. Retention of Information

You should be aware that if you provide comments, ideas, suggestions, testimonials, photographs, audio, videos, product reviews, product uses and potential uses, product ideas, feedback, end user content, or other information about you, the Website, the Services, our products, or any other content that we identify as relevant to our business interests (collectively, "Submissions"), to us either directly or on the Website or through the Services, we may use the Submissions, together with your name, initials, social media handle, or user name for our commercial and/or marketing purposes without acknowledgment or compensation to you. 

We keep your personal informationfor aslong as necessary to provide you with the Services, for legitimate and essential business purposes, such as making data-driven business decisions, complying with our legal obligations, and resolving disputes. Personal information is not kept for longer than is necessary for the purpose for which it was collected, held, and processed. The retention periods for personal informationvaries depending on whether that data is held as part of a legally required business record.

9. Children

We do not knowingly collect or store any personal information from anyone under the age of 13. If we become aware that we have collected or stored personal information from an individual under age 13, we will remove theirpersonal information from our files. If you are a parent or guardian and believe we may have inadvertently collected personal information from your child, please notify us immediately by sending an email to privacy@wd40.com.

10. How to Update Your Information

To change or update the information we hold and which relates to you please contact us, using the contact details at section 11.

11. Contact Us

If you have questions or concerns regarding our privacy practices or this Privacy Statement, you may contact by writing or emailing us at the address below:

WD-40 Company
Attn: Privacy
Address: 9715 Businesspark Avenue, San Diego, CA 92131
Email: privacy@wd40.com.  

12. Changes to this Privacy Statement

We may revise or update this Privacy Statement from time to time. The last updated date above indicates the most recent date of revision. The updated Privacy Statement will be posted on our Sites. Your continued use of the Services or Sites after we post a revised Privacy Statement signifies your acceptance of the revised Privacy Statement. 

13. Country/Region/State Specific Provisions

California

For residents of California, the following additional provisionsapply to you.

Shine The Light: If you are a California resident, this section applies to you. The California Shine the Light law (Cal. Civ. Code § 1798.83) permits residents of California to request certain details about how their information is shared with third parties for the thirdparties’ direct marketing purposes.If you are a California resident and would like to make such a request, please send an email to privacy@wd40.com and include “CA Shine the Light” in the subject line of your email. 

California Consumer Privacy Act (CCPA) Disclosures: 

Categories and sources of personal information we collect: In the preceding 12 months, we have collected the following categories of personal information: contact information, identifiers, social media profiles, user generated content,commercial information, geolocation data, usage data, audio/visual data and inferences. For details about the data points we collect and the categories of sources of such collection, please see section 1 above.

Purposes for which we use personal information: We collect personal information for the business and commercial purposes described in section 2 above.

Disclosure for a business purpose: In the preceding 12 months, we have disclosed the following categories of personal information for the business purposes set forth in section 3 above to the following categories of recipients:

For a more expansive description of the categories of recipients, please see section 3 above.

Your Rights Under the CCPA

Subject to certain exceptions,the CCPA affords California consumers the following rights:

1. The Right to Know About Personal Information Collected,Disclosed, or Sold
   
   You have a right to request what personal information we have collected, used, disclosed and sold about you in the preceding 12 months. You canal so request the specific pieces of personal information we have collected about you. You canal so request the following categories of information:
   • The categories of personal information we have collected about you.
   • The categories of sources from which the personal information was collected.
   • The business or commercial purpose for collecting or selling the personal information.
   • The categories of third parties with whom we shared personal information.
     
     
2. Right to Request Deletion of Personal Information
   
   You canal so request that we delete your personal information. We may not delete all of your personal information if one of the exceptions to the CCPA applies. Please note that if we delete your personal information, the Services provided may not maintain the same functionality. For example, your previous opt-out requests will not be saved and saved preferences and information will no longer be available.
3. Right to Opt Out of Sale of Information
   
   You have a right to opt out of the sale of your personal information. The CCPA defines a "sale" as disclosing or making available to a third party personal information in exchange for monetary or other valuable consideration. While we do not sell personal information for monetary value, we may disclose personal information to third parties, such as marketing/analytics/advertising partners , in such a way that may be considered a “sale” of personal information under the CCPA. We do not sell personal information of min ors who we know are under 16 years of age. 
   
   
4. Right to Not Be Discriminated Against 
   
   You have a right to not be discriminated against for exercising any of your CCPA rights. We will not discriminate against you, deny you services, charge you a different price, or provide you with a lesser quality of services if you exercise any of your CCPA rights. 
   
   Exercising Your Rights Under the CCPA
   
   To exercise any of your CCPA rights, please click here or call us at 1 - 877 - 906 - 1824 . For all requests, you must pro vide us with your name, email address, phone number, and mailing address. Failure to provide all of the foregoing information will prevent us from processing your request. 
   
   Further, in order to verify your identity, w e will provide a verification form to you at your email address. Please be aware that you must complete the verification form and submit it to us in order for us to match that information to the information we have in our systems and process your request. Additionally, some requests may be subject to additional identity verification procedure. In order to designate an authorized agent to act on your behalf, you must send a signed, written authorization to us at privacy@wd40.com. 
   
   Other Consumer Rights Information: Under California Civil Code Section 1789.3, we are required to provide California residents with the following information:
   
   
   • The Site is owned and operated by WD - 40 Company . 
   • Unless otherwise expressly stated, this Site is provided without charge. 
   • To file a complaint regarding this Site or to receive further information regarding use of this website, please contact us via email at privacy@wd40.com . You also may contact the Complaint Assistance Unit of the Division of Consumer Services of California’s Department of Consumer Affairs in writing at 400 R Street, Suite 1080, Sacramento, California 95814 or by telephone at (916) 445 - 1254 or (800) 952 - 5210. 

European Economic Area (EEA), the United Kingdom, and Switzerland

For residents of the European Economic Area (EEA),the United Kingdom, and Switzerland, the following additional provisionsapply to you.

Controller: The controller of your personal information is: WD-40 Company Limited

Disclosure and Cross-Border Transfer: Personal information that is shared with affiliates and third parties as described in this Privacy Statement is done pursuant to contracts that include the requisiteprotections under the GDPRor UK GDPR,as applicable. We are a global company, and your personal information will be shared among us and transferred outside of your country of residence. By using the Sites or Services, you acknowledge your personal information may be transferred to and processed in jurisdictions outside your own andthat the data protection laws and regulations that apply to your personal information transferred to the United States or other countries may be different from the laws in yourcountry of residence.In accordance with GDPRand UK GDPR, personal information that is transferred outside of the European Economic Area is conducted in accordance with compliant arrangements such as data transfer agreements that contain standard contractualclauses adopted by the European Commission that provide safeguards for such transfers or legally recognized certifications.

Your Rights Over Your Personal Information: You have the right to request that we:

• confirm whether we are processing your personal information;
• provide you or a third party that you designate with certain of your personal information in a commonly used, machine readable format;
• update or correct your personal information when it is inaccurate or incomplete;
• cancel or delete your personal information in certain circumstances;
• to limit processing of or stop processing your personal information in certain circumstancesincluding for marketing activities and profiling for marketing activities and profiling for statistical purposes;
• or to revoke consent previously granted to the extent permitted by law.

To exercise any of these rights pleasecontactusat privacy@wd40.com.

You must use “GDPR Request” in the subject line of your email or letter . For all requests, you must provide us with your name, email address, phone number, and mailing address. Failure to provide all of the foregoing information will prevent us from processing your request. 

Further, in order to verify your identity, we will provide a verification form to you at your email address. Please be aware that you must complete the verification form and submit it to us in order for us to match that information to the information we have in our systems and process your request. 

We encourage interested persons to raise any concerns using the contact information provided and we will  investigate  and  attempt  to  resolve  any  matters  related  to  the  use  and  disclosure  of  your  personal information.

Mexico

For residents of Mexico, the following additional provisions apply to you.

Data Controller: Your data controller is WD-40 Co. Mexico, S. de R.L. de C.V.

Use of Your Personal Data: Personal data that we collect is used only for the purposes contained in section 1 of this Privacy Statement or as stated within materials you receive.

Consent to Processing: In accordance with the Federal Law on Protection of Personal Data Held by Private Parties and its accompanying regulations, you consent to the processing of your personal data in accordance with the provisions of this Privacy Statement unless you express your objection in the manner provided for under the Your Rights section of thisPrivacyStatement. We may process financial or asset information to provide you with our products and services forthe purpose of fulfilling obligations under a legal relationship between you and us.

Your Rights: You have five (5) days after this Privacy Statement has been brought to your attention to refuse to allow the processing of your personal information for purposes that are different than those that are necessary pursuant toa legal relationship between you and us; otherwise, you are deemed to have consented to such processing. You also have the right to access your personal information; to rectify such information when it is inaccurate or incomplete; to cancel or delete your personal information; to oppose the use your information for a specific purpose; or to revoke consent previously granted to the extent permitted by law. If you cancel or revoke our abilityto use certain personal information, we may not be able to provide certain goods and services to you.

To exercise any of the rights described above, please email us at privacy@wd40.com.. You must include in the email (a) your full name;(b) your contact information, including your mailing address, email address, and telephone number; (c) the right you wish to exercise; (d) proof of your identity or your legal representative; and (e) any other information, item or document that will assist us in locating your personal data.

We will respond to your request within twenty(20)days after receipt of your request and verification of your identity or any longer period permitted by law. We may contact you (i) to request additional information from you if we are not able to verify your identity from the information you provide in your email request; (ii) to inform you of the timeframe within which you will receive a response to your request; (iii) to provide you with directions on how you must submit your request, including the forms you can use to submit your application, if any, and; (iv) to inform you about how we will deliver to you the information you requested (which usually would be copies of documents or information).

Data Transfers: We may transfer your personal data as provided for in section 3 of this Privacy Statement. Such transfer is to third parties who are necessary for providing our goods and Services to you, to our affiliates, or third parties that are necessary pursuant to our legal relationship with youor to protect our legal rights. We will seek your consent when required if such transfer is not for the stated purposes identified in this Privacy Statement.