Last Updated on April 16, 2026
Hay House LLC, a subsidiary of Penguin Random House LLC (“we”, “us”, or “our”) respects your concerns about privacy and values the relationship we have with you. This Privacy Policy describes our privacy practices with respect to information collected through our websites, email newsletters, mobile text messages, social media pages, event registration, mobile, and other applications owned and operated by us, our offline contacts, and any other services that link to this Privacy Policy (collectively referred to as the “Services”). This Privacy Policy does not apply to all of our products and services; certain products and services will display a different privacy policy.
Please carefully review this Privacy Policy below before using our Services. By using our Services, you are accepting the practices described in this Privacy Policy. If you do not agree to the terms of this Privacy Policy, please do not use the Services. We reserve the right to modify or amend the terms of our Privacy Policy from time to time without notice. Your continued use of our Services following the posting of changes to these terms will mean you accept those changes.
Please click on the links below to jump to the relevant section:
The Personal Information we collect depends on how you interact with us, the Services you use, and the choices you make. For example, when you use the Services by ordering a book, providing registration details, subscribing to a newsletter, subscribing to receive text messages from us and parties texting on our behalf, browsing our sites, completing a survey, entering a sweepstakes, requesting information from us or otherwise interacting with our Services, we gather Personal Information. “Personal Information” is information that identifies you as an individual or relates to an identifiable individual. Several different types of Personal Information can be gathered when you interact with the Services. Collection of Personal Information is necessary to provide the Services to you or to enhance your consumer experience.
If you disclose any Personal Information relating to other people to us or to our Service Providers in connection with the Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.
We collect information about you from different sources and in various ways when you use our Services, including information you provide directly, information collected automatically, third-party data sources, and data we infer or generate from other data.
We plan to collect and have collected in the previous twelve (12) months, the following categories of Personal Information:
Unless we request it, we ask that you not send us, and you not disclose, any sensitive Personal Information (e.g., social security numbers, political opinions, religion or other beliefs, health, biometrics or genetic characteristics or criminal background) on or through the Services or otherwise to us.
When you use our Services, we collect some information automatically. For example:
We and our service providers collect Personal Information in a variety of ways, including:
Link to our platform Shopify's Privacy Policy.
We and our providers use Personal Information we collect for the purposes described in this Privacy Policy or otherwise disclosed to you. For example, we use Personal Information for the following purposes:
| Purposes of Use | Categories of Personal Information |
|---|---|
|
Product and Service Delivery To provide the functionality of the Services, such as arranging access to your registered account and delivering our Services including troubleshooting, improving, and personalizing those Services. |
Contact information, demographic data, commercial and payment information, identifiers and device information, geolocation data, usage data. |
|
Business Operations To operate our business such as billing, accounting, completing your transactions, verifying your information, fulfilling your orders, improving our internal operations, securing our systems, taking other quality and safety assurance measures, detecting fraudulent or illegal activity, and meeting our legal, regulatory, and contractual obligations. |
Contact information, demographic data, commercial and payment information, identifiers and device information, geolocation data, usage data. |
|
Product Improvement, Development, and Research To conduct research and other data analysis and measurement via surveys, panels, public forums, and other means to maintain, improve, repair, modify, and enhance existing Services, develop new products, Services, and features, identify usage trends, and determine the effectiveness of promotional campaigns. |
Contact information, demographic data, commercial and payment information, identifiers and device information, geolocation data, usage data. |
|
Personalization To understand you, your interests, and your preferences to deliver relevant and tailored content via our Services and other interactions with you. To enhance your experience and enjoyment using our Services. |
Contact information, demographic data, commercial and payment information, identifiers and device information, geolocation data, usage data. |
|
Customer Support To provide customer support and respond to your inquiries when you contact us via one of our online contact forms or otherwise, for example, when you send us questions, suggestions, compliments, or complaints, or when you request a quote or other information about our Services. |
Contact information, demographic data, commercial and payment information, identifiers and device information, geolocation data, usage data. |
|
Communications To send you information including newsletters, mobile text messages, confirmations, invoices, technical notices, updates, security alerts, support messages, and administrative messages such as changes to our terms, conditions, and policies. |
Contact information, demographic data, commercial and payment information, identifiers and device information, geolocation data, usage data. |
|
Marketing To communicate with you about new Services, offers, promotions, rewards, sweepstakes, contests, upcoming events, and other information about our Services and those of our selected partners. To facilitate social sharing functionality that you choose to use. To offer you the opportunity to participate in sweepstakes, contests, or other promotions. |
Contact information, demographic data, commercial and payment information, identifiers and device information, geolocation data, usage data. |
|
Advertising To display advertising to you. |
Contact information, demographic data, commercial and payment information, identifiers and device information, geolocation data, usage data. |
We may aggregate and/or anonymize Personal Information so that it will no longer be considered Personal Information. We do so to generate other data for our use, which we may use and disclose for any purpose, as it no longer identifies you or any other individual.
By using the Services, you may elect to disclose Personal Information. We disclose Personal Information:
We will disclose Personal Information if we believe it is necessary to protect our customers and others, for example to prevent spam or attempts to commit fraud, or to help prevent the loss of life or serious injury of anyone, operate and maintain the security of our services, including to prevent or stop an attack on our computer systems or networks, or protect the rights or property of ourselves or others, including enforcing our agreements, terms, and policies.
We may also disclose your Personal Information for the other uses described above (e.g., to comply with applicable laws, respond to valid legal process, including from law enforcement or other government agency, and in connection with corporate transactions, including a merger, acquisition, dissolution, bankruptcy, or a transfer, divestiture or sale of all or a portion of our business or assets or other business transaction).
We use cookies, web beacons, mobile analytics and advertising IDs, and similar technologies to operate our websites and online services and to help collect data, including usage data, identifiers and device information.
Cookies are small text files placed by a website and stored by your browser on your device. A cookie can later be read when your browser connects to a web server in the same domain that placed the cookie. The text in a cookie contains a string of numbers and letters that may uniquely identify your device and can contain other information as well. This allows the web server to recognize your browser over time, each time it connects to that web server. Cookies allow us to collect information such as browser type, time spent on the Services, pages visited, language preferences, and other traffic data.
Pixel tags (also known as web beacons and clear GIFs) may be used to, among other things, track the actions of users of the Services (including email recipients), measure the success of our marketing campaigns, compile statistics about usage of the Services and response rates, and identify similar audiences to whom we can market our Services.
We, and our analytics and advertising partners, use these technologies in our websites, apps, and online services to collect Personal Information (such as the pages you visit, the links you click on and similar usage information, as well as identifiers and device information) when you use our Services, including Personal information about your online activities over time and across different websites or online services.
This information is used to store your preferences and settings, enable you to sign-in, analyze how our websites and apps perform, track your interaction with the site or app, develop inferences, deliver and tailor interest-based advertising, combat fraud, and fulfill other legitimate purposes. Additionally, the information is used for security purposes, to facilitate navigation, to display information more effectively, and to personalize your experience. We also gather statistical information about use of the Services to continually improve their design and functionality, understand how they are used, and assist us with resolving questions regarding them. Cookies further allow us to select which of our advertisements or offers are most likely to appeal to you and display them while you are on the Services. We may also use cookies or other technologies in online advertising to track responses to our ads. If you do not want information collected through the use of cookies, most browsers allow you to automatically decline cookies or be given the choice of declining or accepting a particular cookie (or cookies) from a particular website (including using the options described below in the section titled “What Controls are Available”). You may also wish to refer to All About Cookies. If, however, you do not accept cookies, you may experience some inconvenience in your use of the Services.
We and/or our analytics and advertising partners also share the information we collect or infer with other companies for these purposes.
We use analytics providers including but not limited to Google Analytics, ChartMogul, Amplitude, AppsFlyer, Braze, Firebase, and Klevu , which use cookies and similar technologies to collect and analyze information about use of the Services and report on activities and trends. We also use Localytics to track analytics on our mobile apps. These analytics services may also collect information regarding the use of other websites, apps and online resources. You can opt out of being tracked by Amplitude and Braze by submitting a data erasure request through our webform. AppsFlyer and Klevu only store anonymized information.
We may collect the physical location of your device by, for example, using satellite, cell phone tower or WiFi signals. We may use your device’s physical location to provide you with personalized location-based services and content.
We may also share your device’s physical location, combined with information about what advertisements you viewed and other information we collect, with our marketing partners to enable them to provide you with more personalized content and to study the effectiveness of advertising campaigns. In some instances, you may be permitted to allow or deny such uses and/or sharing of your device’s location, but if you do, we and/or our marketing partners may not be able to provide you with the applicable personalized services and content.
Choices for Cookies, Mobile IDs and Similar Technologies. See the Cookies section for choices about cookies and other analytics and advertising controls or to opt-out from or otherwise manage targeted advertising preferences.
Communication Preferences. We give you choices regarding our use and disclosure of your Personal Information for marketing purposes. You may opt out from:
We will comply with your request(s) as soon as reasonably practicable. Please note that if you opt out of receiving marketing related emails from us, we may still send you important administrative messages, from which you cannot opt out.
If you would like to request to access, correct, update, suppress, restrict, or delete, object to or opt out of the sale, sharing, or processing of Personal Information, or if you would like to request to receive a copy of your Personal Information for purposes of transmitting it to another company (to the extent these rights are provided to you by applicable law), you may contact us. We will respond to your request consistent with applicable law. If you are a California resident, please refer to the “Additional Information Regarding California” section at the end of this Policy for more information about the requests you may make under applicable law.
In your request, please make clear what Personal Information you would like to have changed or whether you would like to have your Personal Information suppressed from our database. For your protection, we may only implement requests with respect to the Personal Information associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable.
Some privacy laws provide a right to opt-out from profiling — including targeted advertising and appeal a decision regarding a request to exercise your rights. We process Personal Information by sharing your information with third parties who serve targeted advertising. To opt-out from such processing, please review our Cookies, Mobile IDs and Similar Technologies section.
Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion as further described in the Retention of Personal Information section below.
Unless we request it, we ask that you not send us, and you not disclose, any sensitive Personal Information (e.g., Social Security numbers, political opinions, religion or other beliefs, health, biometrics or genetic characteristics or criminal background) on or through the Services or otherwise to us. We do not store your credit card data on any of our servers and are fully PCI compliant.
We retain Personal Information for as long as needed or permitted in accordance with the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include:
We seek to use reasonable organizational, technical and administrative measures to protect Personal Information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contacting Us” section below.
This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any website or service to which the Services link. The inclusion of a link on the Services does not imply endorsement of the linked site or service by us or by our affiliates.
In addition, we are not responsible for the information collection, use, disclosure, or security policies or practices of other organizations, such as LinkedIn, Facebook, Google, or any other social media platform provider.
These Services are published in the United States. We attempt to protect the Personal Information of all users of our Services and we attempt to comply with local data protection and consumer rights laws to the extent they may apply to HAY HOUSE’s services, but our family of Services are located and targeted to United States citizens and our policies are directed at compliance with those laws. If you are uncertain whether this Privacy Policy conflicts with the applicable local privacy laws where you are located, you should not submit your Personal Information to HAY HOUSE.
If you are located outside the United States, you should be aware that your Personal Information may be transferred to and processed in the United States, the laws of which may have different levels of privacy protection from your country. By using our Services, you thereby consent to the general use of your information as provided in this Privacy Policy and to the transfer of that information to, and processing and storage of that information in, the United States. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in the United States may be entitled to access your Personal Information.
If you are a resident of California, we have certain obligations, and you have certain rights with respect to your Personal Information.
Pursuant to the California Consumer Privacy Act of 2018, as amended, including by the California Privacy Rights Act of 2023 (“CCPA”), we are providing the following additional details regarding the categories of Personal Information about California residents that we collect, use, disclose or sell. We are providing this Privacy Policy in addition to the information contained in our general Privacy Policy.
We disclose, sell or share Personal Information with the following categories of service providers and third parties:
The CCPA requires us to describe the categories of Personal Information we sell to or share with third parties and how to opt out of future sales or sharing. The CCPA defines Personal Information to include online identifiers, including IP addresses, cookies IDs, and mobile IDs. The law also defines a “sale” or “share” broadly to include simply making data available to third parties in some cases. In the preceding twelve (12) months, we disclosed for our operational business purposes or sold the following categories of Personal Information to the following categories of service providers and third parties:
| Categories of Personal Information | Disclosed to Which Categories of Third Parties for Operational Business Purposes | Purpose for Disclosure |
|---|---|---|
| Identifiers | Service Providers, Book Authors, Affiliates, Ad Networks, Social Networks, Authors, Business Partners, Contest Sponsors (in accordance with your choices), Marketing Partners, Legal Authorities, and Other Parties in Litigation. | Commercial or Business Purpose |
| Customer Records Information | Service Providers, Affiliates, Legal Authorities, and Other Parties in Litigation. | Commercial or Business Purpose |
| Protected Class Information | Service Providers, Affiliates, Legal Authorities, and Other Parties in Litigation. | Commercial or Business Purpose |
| Transaction Information | Service Providers, Affiliates, Legal Authorities, and Other Parties in Litigation. | Commercial or Business Purpose |
| Online Use Information | Service Providers, Ad Networks, Social Networks, Marketing Partners, Legal Authorities, and Other Parties in Litigation. | Commercial or Business Purpose |
| Geolocation Data | Service Providers, Legal Authorities, and Other Parties in Litigation. | Commercial or Business Purpose |
| Audio/Video Data | Service Providers, Legal Authorities, and Other Parties in Litigation. | Commercial or Business Purpose |
| Employment Information | Service Providers, Legal Authorities, and Other Parties in Litigation. | Commercial or Business Purpose |
| Inferences | Service Providers, Marketing Partners, Legal Authorities, and Other Parties in Litigation. | Commercial or Business Purpose |
| Online Use Information | Ad Networks, Social Networks, and Marketing Partners. | Sale and Sharing (as disclosed under the section on Disclosure and Sale above) |
Your CCPA Rights: Requests to Know, Requests to Correct, Requests to Delete.
If you are a California resident, you have certain rights with respect to Personal Information that we collect and process about you, including:
(1) Right to Know. You have a right to request that we disclose to you the Personal Information we have collected about you (“Request to Know”). You also have a right to request additional information about our collection, use, disclosure, sale, or sharing of such Personal Information. Note that we have provided much of this information in this Privacy Policy:
To make a Right to Know request or a request for additional information, please submit a privacy request.
(2) Right to Request Deletion. You also have a right to request that we delete Personal Information under certain circumstances, subject to a number of exceptions (“Request to Delete”). To make a request for deletion, please submit a privacy request
(3) Right to Correct Inaccurate Personal Information we collected from you (“Request to Correct”). To make a request to correct please submit a privacy request.
(5) Right to Limit Use of Sensitive Personal Information. Under the CCPA California Residents have the right to request that we limit the use and disclosure of their Sensitive Information for any purposes other than to provide the services or goods you request or as otherwise permitted by law. Note that we do not use sensitive personal information for any such additional purposes.
(6) Right to Designate an Authorized Agent. You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us (as further described below in the section titled “Responding to Individual Rights Requests”).
(7) Right to Non-Discrimination. You have the right to be free from unlawful discrimination for exercising your rights under the CCPA.
(8) Right to Notice of Privacy Practices. You have a right to receive notice of our practices at or before collection of Personal Information.
Additionally, under California Civil Code section 1798.83, also known as the “Shine the Light” law, California residents who have provided Personal Information to a business with which the individual has established a business relationship for personal, family, or household purposes (“California Customers”) may request information about whether the business has disclosed Personal Information to any third parties for the third parties’ direct marketing purposes.
Please note that we do not share Personal Information with any third parties for their direct marketing purpose. California Customers may request further information about our compliance with this law by submitting a request.
California residents under the age of eighteen (18) who are registered users of online sites, services, or applications have a right under California Business and Professions Code Section 22581 to remove, or request and obtain removal of, content or information they have publicly posted. To remove content or information you have publicly posted, submit a request. Alternatively, to request that we remove such content or information, please submit a request with a detailed description of the specific content or information you wish to have removed. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.
We may, at times, offer discount codes or other incentives, such as downloadable content, when you sign up for marketing content such as newsletters and mobile text messages. When you sign up for one of these programs, we typically collect your first and last name and email address and/or phone number, IP address, and location so that we may provide you with the offers you requested as well as other offers that we think may be of interest to you. We have not assigned a specific monetary value to the Personal Information we collect via these incentives as the value varies from consumer to consumer, based on the discounts and incentives each customer redeems, and the purchases they make. But we do receive value in the form of consumer engagement and purchases, which we estimate by comparing the total amount spent by our customers who redeem such discounts and incentives, less our expenses to provide the offering to those customers who do not redeem such discounts and incentives within the same timeframe less the costs of the discount and of administering the newsletter or mobile text message program. You can unsubscribe from these newsletters, mobile text messages, and related communications as described in the communications, which will opt you out from related discounts or other incentive offers and retain any incentive received prior to opting out.
We will verify and respond to requests from individuals to exercise their privacy rights consistent with applicable laws, taking into account the type and sensitivity of the Personal Information subject to the request. If you maintain a password-protected account with us, we may verify your identity through our existing authentication practices for your account and require you to re-authenticate yourself before disclosing, correcting or deleting your Personal Information. Alternatively, we may send our response to your request to the contact point in our records that is associated with the Personal Information that is requested. If you make a Request to Delete, we may ask you to confirm your request before we delete your Personal Information.
If you are the authorized agent of a consumer, making a Request to Know (or access), Correct, Port, or a Delete on behalf of the consumer, we will ask you for:
If an authorized agent has not provided us with a power of attorney from the consumer pursuant to Probate Code sections 4000-4465, we may also:
If you are the authorized agent of a consumer, making a Request to Opt-Out on behalf of the consumer, we may ask you for:
The “Last Updated” legend at the top of this Privacy Policy indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on the Services.
Hay House, LLC, located at P.O. Box 5100, Carlsbad, California, is the company responsible for the collection, use, and disclosure of your Personal Information under this Privacy Policy.
If you have any questions about this Privacy Policy, please contact us as follows:
By mail:
Online Privacy Attn: Customer Service Hay House LLC
P.O. Box 5100 Carlsbad, California 92018-5100
Because electronic communications are not always secure, please do not include credit card or other sensitive information in your communications with us.