Who we are

Lennox Company, a Colorado corporation (the “Company”), is committed to maintaining the privacy of its subscribers and users of its websites, applications, connected products and services (collectively referred to herein as the “Service”). The Company’s Privacy Policy (the “Privacy Policy”) describes how it collects and processes your Personal Data through its website, including lennoxco.com (the “Website”). The Company encourages you to read this Privacy Policy, as well as the Company’s Terms and Conditions of Use (the “Terms”).

BY USING THE SERVICE, YOU CONSENT TO THE COLLECTION, USE AND TRANSFER OF YOUR PERSONAL DATA FOR PROCESSING WITHIN THE UNITED STATES AS DESCRIBED IN THIS PRIVACY POLICY.  

I. Residents of the European Union

In order to comply with the requirements of the European General Data Protection Regulation (“GDPR”) for the European consumers and users of the Service, this Privacy Policy outlines the legal basis upon which the Company will collect and process your Personal Data, and will provide other information as required by the GDPR. Further guidance concerning your rights under the GDPR are available in Section IX, below.

II. Personal Data Collected by the Company

The Company collects Personal Data you voluntarily provide in order to ensure you receive the best experience with the Service. The term “Personal Data” means any data that can be used to directly or indirectly identify you, which may include, but is not limited to, your name, address, phone number, location, and email address. Personal Data is collected when you register on the Company’s website, place an order, subscribe to the Company’s newsletter, or fill out a form on the Company’s website.

The Company may also collect Personal Data automatically, such as Functional Data or other information collected by using “cookies” (as further described below) and similar technologies when you use, access or interact with the Company through its website. The term “Functional Data” means information that is necessary for the Company’s products to provide the desired services and to ensure the products are working properly. Functional Data may include your email address, location, language preference, product serial number, IP address, and Company account login information.

The Website use “cookies” and similar technologies for a variety of purposes, including, to analyze trends, administer the Website, track the movements of visitors around the Website, to gather demographic information about the visitors and users of the Website as a group and to collect information about visitors’ and users’ browsing histories in order to help tailor advertising to the interests of such visitors and users. Cookies are small data files that a website or its service provider transfer to your computer’s hard drive through your Web browser (if you so allow) that enable the website or service providers’ systems to recognize your browser and capture and remember certain information.

Like other Functional Data, the Company uses cookies to remember and save your session on the Website and to process other activities that are strictly necessary in connection with the operation of the Website, such as in relation to the distribution of visits on the Website. The Company also uses cookies to save your browsing preferences for future visits and to optimize your browsing experience on the Website. In addition, the Company also uses cookies to process information related to your use of the Service and to compile aggregate data about website traffic and interaction to allow the Company to provide better website experiences and tools to its customers. The Company may also contract with third-party service providers to assist it in gaining better understanding of visitors to the Website. However, the Company does not permit the use of information collected by third parties on behalf of the Company to be used for any reason except to assist the Company in the operation and improvement of the Website and its businesses.

The Company maintains a current list of the third party service providers associated with the Website which are:

1. Webflow
2. Quickbooks
3. Klaviyo
4. Ninja Forms

Please refer to the privacy policies of such service providers for additional information regarding how such service providers use cookies.

The Website use both session ID cookies as well as persistent cookies. A session ID cookie expires when you close your browser. A persistent cookie remains on the hard drive of your computer device for a set period of time or until you delete it.

When you first visit the Website, you will be asked to consent to the use of cookies and similar technologies on the Website in accordance with the terms set forth in this Policy and if you consent, we will store cookies and similar technologies on your computer device. Some of the services used in the operation of the Website may collect statistics in an anonymized and aggregated manner and may not require your consent.

The Company does not target or intend to collect any Personal Data from children under the age of 18. Please contact the Company if you become aware of the collection of Personal Data without parental consent of a child under the age of 18.

III. Why the Company Collects Personal Data

The Company collects your Personal Data to operate and improve the Service. The Company may also use your Personal Data in the following ways:

1. To personalize your experience as your information helps the Company to better respond to your individual needs;
2. To create and manage your account;
3. To verify and authenticate your identity and protect against unauthorized use of the Service from your account;
4. To allow the Company to more effectively respond to your customer service requests and support needs including, responding to inquiries, diagnosing problems with the Service, and other customer care and support;
5. To process your transactions involving the Service, including processing, completing and invoicing purchase transactions and the like.
6. To communicate with you by sending periodic emails, which may include news, updates and related product or service information. You may opt out of these emails, or elect to receive only certain communications, by following the instructions provided in the body of the email;
7. To improve the products and services offered by the Company to include maintaining and improving the performance of the Service, developing new features and capabilities, producing error reports to improve functioning, using search queries and clicks to improve the relevance of your search results and using data to determine what new features to prioritize;
8. For security, safety and dispute resolution by detecting and preventing identity theft, fraud and other unlawful activities, resolving disputes and enforcing the Company’s agreements;
9. To improve or facilitate business operations by developing aggregate analysis and business intelligence that enables the Company to operate, protect and make informed decisions; and
10. For marketing and/or advertising. The Company may collect Personal Data to personalize communications with you and provide the most relevant advertising.

The Company will not sell, exchange or transfer your Personal Data to any other company or third-party for any reason without your consent unless for the express purpose of delivering the Service requested. The Company does use third-parties to carry out certain Service such as website management, hosting and online purchases and credit card processing. The Company only shares your Personal Data as necessary, such as to complete a transaction or provide a Service you have otherwise requested or authorized, and only with third-parties or agents providing services on behalf of the Company for the purposes describe in this Privacy Policy. In such cases, your Personal Data will be shared only for the limited purpose of performing the service on behalf and under the instruction of the Company and in accordance with this Privacy Policy.

IV. Transfer of Personal Data to Other Countries

The Personal Data, and all associated Service and systems, to include registration, may be housed on servers located all over the world. The data protection and privacy laws in the United States and in the countries where the servers are located may offer a lower level of protections than in your country and/or region.

By using the Service and providing your Personal Data, you agree to the transfer, storage, and/or processing of your Personal Data within the United States. Where and as required, the Company will seek your explicit consent as outlined within this Privacy Policy.

V. Legal Basis for Processing Your Personal Data

For the purpose of applicable data protection laws, the Company is the controller of the Personal Data you provide (the “Data Controller”). As Data Controller, the Company will process all Personal Data in accordance with this Privacy Policy.

The legal bases for processing your Personal Data include performance of a purchase transaction and other legitimate business interests. The use of your Personal Data may be necessary for the Company to perform its contractual obligations related to a purchase transaction between you and the Company, for example, to: (a) complete your purchase of products and services; (b) register and maintain your account; (c) allow for and/or assist in the delivery of products and services; (d) handle customer support requests; and (e) ensure the Service functions as intended. The Company may also use your Personal Data for its legitimate business interests such as analyzing and improving products and services as well as the operation of the Service and improving the Content on the Website, and to send notifications and updates on the Service and other products, services and the like.

VI. Informed Consent

In some instances, the Company will seek your consent prior to processing your Personal Data. Your consent may be indicated by checking a box on the Company website to confirm: (a) your consent to providing the Company with your Personal Data; (b) registering or creating an account with the Company; and (c) the processing of your Personal Data as describe in this Privacy Policy. The Company may also seek your consent to share your Personal Data with a third-party service in order to offer certain goods, services or other programs.

In some cases, separate consent from you is not required to use your Personal Data. For instance, the Company does not need to need separate consent from you for the performance of its contractual obligations related to a purchase transaction, to meet legal obligations or for legitimate interests in operation of its business including without limitation, communication regarding the Service, promotional messaging, personalized marketing, surveys, compliance with laws concerning public safety, improvement and development of the Company’s Service, enforcement of the terms and conditions of this Privacy Policy, or in support of a contemplated merger, acquisition or other business reorganization. In the event separate consent is required, the Company shall notify you by email, which will include a description of the basis for the request and instructions on providing the requested consent.

VII. Limitations on Use by the Company

Any Personal Data collected will be used and processed only as necessary to accomplish the stated purpose for collecting such information. Access to your Personal Data will also be limited to those needing access in order to accomplish the purposes stated herein.

VIII. Security, Storage and Retention of Personal Data

(a) Security. The Company implements appropriate technical and organizational safeguards to protect against unauthorized or unlawful processing of Personal Data and accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to Personal Data. The Company cannot eliminate all risk associated with the storage and transmission of Personal Data.

(b) Storage and Retention. The Company will retain your Personal Data for as long as you maintain an account with the Company, or as otherwise necessary to provide you the Service. The Company will also retain your Personal Data as necessary to comply with its legal obligations, resolve disputes, and enforce its agreements. When the Company no longer needs to process your Personal Data for the purposes set out in this Privacy Policy, it will delete your Personal Data from its systems. Where permissible, the Company will also delete your Personal Data upon request. For further information on making such a request, see Section X below.

IX. Rights Regarding Personal Data for Residents of the European Economic Area

If you are a resident of the European Economic Area, you have a number of rights concerning the collection, use and storage of your Personal Data pursuant to the GDPR. These rights include:

1. The right of access to your Personal Data. You have the right to obtain confirmation from the Company whether your Personal Data is being processed, where and for what purpose.
2. The right to correction of your Personal Data, as permitted by law.
3. The right to data portability. You have the right to request and receive, free of charge, a copy of any Personal Data collected by the Company. This information must be provided to you in a structured, commonly used and machine-readable format.
4. The right to withdraw consent to the collection, use, processing, and/or storage of your Personal Data.
5. The right to erasure, which means the right to request the Company to erase your Personal Data, cease any further dissemination of your Personal Data, and to have the Company request that any third-party that has received a copy of your Personal Data pursuant to an authorized purpose also ceases to use and/or further disseminate your Personal Data. The Company shall erase your Personal Data upon receipt of such request if certain conditions are met, including if the Personal Data is no longer relevant to the original purpose for processing.
6. The right to request that the Company transmit your Personal Data to another controller. This may include having it transmitted directly if technically feasible.
7. The right to restriction of processing. You have the right to request that Company limit the processing of your Personal Data, including when: (1) the accuracy of your Personal Data is contested; (2) the processing is unlawful and you oppose the erasure of your Personal Data and request instead the restriction of the use of the Personal Data; or (3) you have objected to the processing pursuant to Article 21(1) of the GDPR; and
8. The right to object to the Company’s processing of your Personal Data. This right is limited to processing based upon Article 6(1)(e) or (f) of the GDPR which includes profiling based upon those provisions, and processing for direct marketing purposes. The Company will no longer process your Personal Data unless it can demonstrate compelling legitimate grounds for such processing that override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

(a) Disclosure. The GDPR and other national laws of the European Union member states permit the sharing of Personal Data relating to users who are residents of the European Economic Areas with third-parties only under certain circumstances. The Company will only share your Personal Data as described within this Privacy Policy if it is permitted to do so under applicable European and national data protection laws and regulations.

(b) Marketing. Where legally required, the Company will ask you for your prior consent prior to providing you with promotional or marketing materials or information. You have the right to revoke this consent at any time, which will not affect the processing of your Personal Data undertaken until such revocation.

(c) Additional Use of Personal Data. Additional use of your Personal Data outside the purposes and uses described herein will only occur as required by statute or upon the receipt of your consent.

(d) Legal Basis for Processing Personal Data under the GDPR. The following provides information on the legal bases for this the Company may process your Personal Data, as required by Article 13 and 14 of the GDPR:

1. When you register for an account, such processing is necessary for the performance of Service.
2. When you communicate with the Company or sign up for promotional material, the Company will process such data on the basis of its legitimate interest and the Company’s legitimate interest in providing promotional messages. When required by local law to obtain additional consent for sending marketing information, the Company’s legal basis shall be that consent.
3. When the Company collects cookies, device IDs, and other data connected to your use of the Service, the Company processes such data based upon the consent you provide and the legitimate business interest of the Company. This processing is also based upon the Company’s legitimate interest to provide you with better Service and marketing.
4. The Company may aggregate or centralize data. Such actions are necessary for the performance of Service or based on the legitimate business interests of the Company.
5. Where your Personal Data is disclosed to affiliates and third parties, Company shall process your data based either upon your prior consent, or where such processing is necessary for the performance of Service or based upon other legitimate business interests such as providing better Service.
6. Where your Personal Data is collected in the event or in preparation of an actual or contemplated sale, the Company processes such data for its legitimate interest in offering, maintaining, providing and improving its Service.
7. When the Company conducts analytics, it processes your Personal Data on the basis of its legitimate interests in enhancing your experience and to develop and improve its Service.
8. When the Company investigates suspected illegal or wrongful activity, it processes such data on the basis of its legitimate interest to ensure compliance with legal requirements and law enforcement requests as well as for public safety purposes.

(e) Dispute Resolution. You have the right to file a complaint before the Data Protection Authority, a competent data protection supervisory authority within the EU member state in which you reside. In addition, if you are a California resident, you have may have additional rights to obtain information about the use of your Personal Data.