Last Updated: June 21, 2026
INTRODUCTION
This Privacy Policy (“Privacy Policy”) describes how KMO HAUS (“the Company,” “we,” or “us”) collects and processes personal information about our consumers. This Privacy Policy contains a comprehensive description of our online and offline practices regarding our collection, use, sale, sharing, and retention of their personal information, along with a description of the rights they have regarding their personal information.
PERSONAL INFORMATION CATEGORIES (ILLINOIS COMPLIANCE)
We collect and use information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal information”). Personal information does not include:Publicly available information, including from government records, through widely distributed media, or that the consumer made publicly available without restricting it to a specific audience.Lawfully obtained, truthful information that is a matter of public concern.Deidentified or aggregated consumer information.
Personal Information Categories
Pursuant to the Illinois Personal Information Protection Act (PIPA) and applicable state data privacy standards, we provide the following details regarding the categories of personal information we collect, use, and disclose. The chart below identifies which categories of information KMO HAUS has collected and disclosed for a business purpose within the last 12 months:
Below outlines the "Categories of Personal Information" and if they are "Collected" and "Disclosed for a Business Purpose" and the "Categories of Recipients"
1) Category of Personal Information: Basic Identifiers
- Real name, alias, postal address, email address, unique online identifier, or Internet Protocol (IP) address.
- Collected: COLLECT
- Disclosed for a Business Purpose: COLLECT
- Categories of Recipients: Service Providers, CRM Vendors, Data Analytics Providers
2) Category of Personal Information: Customer Record Information
- Telephone number, company name, or professional contact details submitted via forms.
- Collected: COLLECT
- Disclosed for a Business Purpose: COLLECT
- Categories of Recipients: Service Providers, CRM Vendors, Data Analytics Providers
3) Category of Personal Information: Internet & Electronic Network Activity
- Browsing history, search history, and automated analytics regarding your interaction with our website or advertisements.
- Collected: COLLECT
- Disclosed for a Business Purpose: COLLECT
- Categories of Recipients: Service Providers, Marketing Partners, Web Analytics Providers
4) Category of Personal Information: Approximate Geolocation Data
- General physical location derived from your device's IP address.
- Collected: COLLECT
- Disclosed for a Business Purpose: COLLECT
- Categories of Recipients: Data Analytics Providers
5) Category of Personal Information: Commercial Information
- Records of services considered, inquiries made, or purchasing histories relating to our consulting and agency services.
- Collected: COLLECT
- Disclosed for a Business Purpose: COLLECT
- Categories of Recipients: Service Providers, CRM Vendors
6) Category of Personal Information: Biometric Information
- Physiological or biological characteristics, fingerprints, faceprints, iris scans, or voiceprints. Note: Illinois strictly regulates this under BIPA.
- Collected: DO NOT COLLECT
- Disclosed for a Business Purpose: DO NOT COLLECT
- Categories of Recipients: DO NOT COLLECT
7) Category of Personal Information: Stricter Government Identifiers
- Social Security numbers, driver's license numbers, state ID cards, or passport numbers. Note: Highly restricted data under Illinois PIPA.
- Collected: DO NOT COLLECT
- Disclosed for a Business Purpose: DO NOT COLLECT
- Categories of Recipients: DO NOT COLLECT
8) Category of Personal Information: Financial Account Data
- Credit/debit card numbers or bank account details. (Processed strictly through secure third-party payment gateways if applicable).
- Collected: DO NOT COLLECT
- Disclosed for a Business Purpose: DO NOT COLLECT
- Categories of Recipients: DO NOT COLLECT (Managed via Third-Party Processor)
Crucial Additions to the "How We Use" Section for Illinois:
Because you are shifting your policy compliance to Illinois, add this short clause directly underneath the table:
Illinois Specific Disclosures & Data Minimization:
In accordance with Illinois state laws, we do not publicly display, transmit unencrypted, or require the submission of highly sensitive government identifiers (such as Social Security numbers). Furthermore, we strictly observe a "need-to-know" data minimization practice, ensuring that any collected network identifiers or customer record details are strictly accessible to verified third-party processors necessary to operate our website and agency services.
SOURCES OF PERSONAL INFORMATION
We obtain the categories of personal information listed above from the following categories of sources:
- Personal information you disclose to us: We collect personal information about you when you interact with our website and services, such as when you fill out a contact form.
- Personal information automatically collected by tracking technologies: We automatically collect certain personal information about your device and usage of our website or services through automatic data technologies. This information may include your IP address, browser type, device identifiers, pages viewed, links clicked, and other usage information. We use this data to understand how visitors use our site, improve performance, and deliver relevant content. The technologies we use for this automatic data collection may include:
-- Cookies: A cookie is a small file placed on your device when you interact with the services. Cookies help us recognize your browser, remember your preferences, and improve your overall experience. We use cookies for marketing, sales, and analytics purposes. Some cookies are placed by us to support essential site functionality, while others are placed by third-party technology vendors, such as HubSpot. These vendors use cookies and similar tracking tools to help us analyze how our site is used, measure effectiveness of our marketing and communications, and deliver personalized content. The information they collect may be associated with your personal information. Please note that we do not control these third-party tracking technologies or how they use the information they collect. Their use of your information is governed by their own privacy policies and terms. We encourage you to review the privacy policies of any third-party services you interact with for more information about their privacy practices. You may refuse to accept or disable cookies by adjusting your browser or device settings. However, if you choose to block or delete cookies, you may have trouble accessing and using some of the pages or features on our website. Please note that the browser management tools for cookies are outside of our control, and we cannot guarantee their effectiveness.
-- Web Beacons: Some parts of the services or emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those parts or opened an email and for other related statistics (for example, recording the popularity of certain content and verifying system and server integrity).
-- Pixels: Pixels are small pieces of code embedded on a webpage that collect information about user interactions, such as when a page is viewed or an email is opened. Our website includes tracking pixels to help us monitor website visits and engagement so that we can better understand interest in our services and follow up with individuals through our own outreach. We use this information for our internal marketing and analytics purposes only.Personal information collected from other sources: We may receive personal information about you from our service providers, contractors, or business partners who perform services on our behalf, such as payment processors, analytics providers, customer support vendors, or marketing partners. These parties collect and provide information to help us operate, analyze, and improve our services.
HOW WE USE PERSONAL INFORMATION
Personal Information Collection, Use, and Disclosure Purposes
We may use and disclose the personal information we collect to advance the Company’s business and commercial purposes, specifically to:
- Deliver, develop and improve our services, and enhance client experience.
- Fulfill contractual obligations, comply with laws, and respond to legal requests.
- Notify you about updates, changes, and relevant information with respect to our services.
- Administer systems, troubleshoot, and protect the Company and its assets, personnel and operations.
- Maintain and manage your relationship with us.Conduct research, testing, performance analysis, data analytics and benchmarking.
- Exercise or defend legal rights of the Company and its employees, affiliates, clients, contractors, and agents.
Sensitive Personal Information
We do not collect, use, or disclose any sensitive personal information as defined under the CCPA.
Additional Categories or Other Purposes
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice. If required by law, we will also seek your consent before using your personal information for a new or unrelated purpose.
We may collect, process, and disclose aggregated or deidentified consumer information for any purpose, without restriction. When we collect, process, or disclose aggregated or deidentified consumer information, we will maintain and use it in deidentified form and will not attempt to reidentify the information, except to determine whether our deidentification processes satisfies any applicable legal requirements.
Selling or Sharing Personal InformationWe do not sell, or share for cross-context behavioral purposes, your personal information to third parties and have not sold or shared it in the preceding 12 months.
RETENTION OF PERSONAL INFORMATION
We retain personal information only for as long as reasonably necessary to fulfill the business or commercial purposes for which it was obtained. In determining the appropriate retention period, we consider the duration of our relationship with you, legal and regulatory obligations, and operational business needs.
YOUR RIGHTS AND CHOICES
Certain U.S. state privacy laws, including the CCPA, provide residents with specific rights regarding their personal information. Depending on where you reside, these rights may include:
Right to Know and Data Portability Requests
You have the right to request that we disclose certain information to you about our collection and use of your personal information, including the specific pieces of personal information we have collected about you. Our response will cover the 12-month period preceding the request, although we will honor requests to cover a longer period that do not extend past January 1, 2022, unless doing so would be impossible or involves disproportionate effort. You may exercise your right to know twice within any 12-month period. Once we receive your request and confirm your identity (see How to Exercise Your Rights), we will disclose to you:The categories of personal information we collected about you, and sources from which we collected your personal information.The business or commercial purpose for collecting your personal information and, if applicable, selling or sharing your personal information.If applicable, the categories of persons, including third parties, to whom we disclosed your personal information, including separate disclosures identifying the categories of your personal information that we disclosed for a business purpose to each category of persons, and sold or shared to each category of third parties.If you choose, we will send you a copy of your personal information in a portable, readily usable format so that you can transmit it to another entity if you choose, subject to any permitted redactions (“data portability”).For more on exercising this right, see Exercising the Rights to Know, Delete, or Correct.Right to Delete and Right to CorrectYou have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions and limitations. Once we receive your request and confirm your identity, we will delete your personal information from our systems unless an exception allows us to retain it. We will also notify our service providers, contractors, and other recipients to take appropriate action.You also have the right to request correction of personal information we maintain about you that you believe is inaccurate. We may require you to provide documentation, if needed, to confirm your identity and support your claim that the information is inaccurate. Unless an exception applies, we will correct personal information that our review determines is inaccurate and notify our service providers, contractors, and other recipients to take appropriate action.For more on exercising these rights, see Exercising the Rights to Know, Delete, or Correct.Right to Limit Sensitive Personal Information UseYou have the right to ask businesses that use or disclose your sensitive personal information to limit those actions to just the CCPA’s permitted purposes. As we do not use or disclose sensitive personal information, we do not currently provide this consumer right.Personal Information Sales or Sharing RightsYou have the right to request that businesses stop selling or sharing your personal information at any time, including through a user-enabled opt-out preference signal. As we do not sell or share consumers’ personal information, we do not currently provide these consumer rights.Right to Non-DiscriminationYou have the right not to be discriminated or retaliated against for exercising any of your privacy rights.
HOW TO EXERCISE YOUR RIGHTS
Exercising the Rights to Know, Delete, or Correct To exercise the right to know, data portability, delete, or correct described above, please submit a verifiable request to us by emailing us at [email protected] describe your request with sufficient detail so we can properly understand, evaluate, and respond to it. You or your authorized agent may only submit a request to know, including for data portability, twice within a 12-month period.Verification Process and Authorized AgentsOnly you, or someone legally authorized to act on your behalf, may make a request to know, delete, or correct related to your personal information. We may request specific information from you or your authorized representative to confirm your or their identity before we can process your right to know, delete, or correct your personal information.We cannot respond to your request to know, delete, or correct if we cannot verify your identity or authority to make the request and confirm the personal information relating to you. To verify your identity, we ask you to provide us with your full name and phone number or email. We will only use this information to verify your identity or authority to make the request.Responding to Your Requests to Know, Delete, or CorrectWe will confirm receipt of your request within 10 business days. If you do not receive confirmation within the ten-day timeframe, please contact us at [email protected] endeavor to substantively respond to a verifiable request within 45 days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing. We will deliver our written response to your verified email address. Our substantive response will tell you whether or not we have complied with your request. If we cannot comply with your request in whole or in part, we will explain the reason, subject to any legal or regulatory restrictions. Applicable law may allow or require us to refuse to provide you with access to some or all of the personal information that we hold about you, or we may have destroyed, deleted, or made your personal information anonymous in compliance with our record retention policies and obligations.Any disclosures we provide will cover information for the 12-month period preceding the request’s receipt date. We will consider requests to provide a longer disclosure period unless doing so would be impossible or involve a disproportionate effort. However, we will not provide any personal information collected before January 1, 2022.For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.We do not charge a fee to process or respond to your verifiable request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
HOW WE PROTECT YOUR PERSONAL INFORMATION
We use commercially reasonable administrative, physical, and technical measures designed to protect your personal information from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal information. Any transmission of personal information is at your own risk. The safety and security of your information also depends on you. You are responsible for taking steps to protect your personal information against unauthorized use, disclosure, and access.
THIRD PARTY WEBSITES AND LINKS
Our website may contain links to third-party websites, social media platforms, or other online services that are not operated or controlled by us. This Privacy Policy does not apply to those third-party sites, and we are not responsible for their content, privacy practices, or security measures. If you access other websites through links on our site, we encourage you to review the privacy policies of those websites before providing any personal information. The inclusion of a link does not imply our endorsement of the linked site or its operators.PERSONAL
INFORMATION REGARDING CHILDREN
We recognize the importance of protecting children’s privacy. We do not knowingly collect or process personal information from children under the age of 18. If we learn we have collected or received personal information from a child under the age of 18, we will delete that information in accordance with applicable law. Please note that any images of minors appearing on our website are licensed or provided for illustrative or marketing purposes only. We do not collect personal information from minors in connection with any such images.PRIVACY POLICY CHANGES
We may update this Privacy Policy from time to time, and we will provide notice of any such changes to the Privacy Policy as required by law. The date the Privacy Policy was last updated is identified at the top of the page. We will notify you of changes to this Privacy Policy by updating the “last updated” date and posting the updated Privacy Policy. We may email or otherwise communicate reminders about this Policy, but you should check our website periodically to see the current Policy and any changes we have made to it.
CONTACT INFORMATION
If you have any questions or comments about this policy, the ways in which we collect and use your information described here, or your choices and rights regarding such use, please do not hesitate to contact us at:
Website: kmohaus.com
Email: [email protected]
If you need to access this Privacy Policy in an alternative format due to a disability, please contact us at [email protected].