Rain Bird Privacy Notice

Effective Date: July 21, 2026

Introduction

Rain Bird Corporation and the affiliates and subsidiaries that it owns or controls, including OtO Inc. and Rachio, Inc. (collectively, "Rain Bird," "we," "us," or "our"), take the protection of personal data very seriously and value the privacy of the people whose personal data we process. Please read this Privacy Notice (“Notice”) to learn what we are doing with your personal data, how we protect it, and what Privacy Rights you may have under applicable data protection and privacy laws.

Rain Bird manufactures, supplies, and supports industry-leading irrigation technology, guided by our commitment to the Intelligent Use of Water™. Through our platforms, which include applications, mobile applications, connected devices, websites, and online stores (collectively, “Platforms”), we deliver services and solutions to achieve our business objectives. These services and solutions include the Platforms themselves, other Rain Bird products, and the related programs, events, information, opportunities, benefits, and support that we provide (collectively, including the Platforms, the “Services”). You can find our Site Terms of Use at:

• https://www.rainbird.com/resources/terms-use
• https://rachio.com/terms-and-conditions
• https://otolawn.com/policies/terms-of-service

Application and Scope of This Notice

This Notice applies to personal data that we process while pursuing our business objectives and providing our Services, including the personal data of Rain Bird customers, distributors, specifiers, installers, field testers, providers of goods and services, and end users of and visitors to our Platforms.

This Notice does not apply to the processing of personal data of Rain Bird employees, job applicants, temporary agency employees, and directors in the context of Rain Bird’s employment, recruitment, or related human resources functions.

Within the scope of this Notice, Rain Bird acts as a data controller or “business” for the personal data we process. This means that we decide how and why personal data is collected and processed.

How We Collect Your Personal Data

Personal Data You Provide to Us

We may collect personal data directly from you when you use our Services or otherwise interact with us, such as when you:

• Create or update an account on our Platforms;
• Download or use our Platforms or Services;
• Join or subscribe to our programs, such as training, rewards, or events;
• Make purchases or otherwise transact with us; and
• Communicate with us through our Services.

Automatically From Your Interactions with the Services

We may collect personal data automatically when you interact with our Services. For example:

Tracking Technologies

We may use cookies, tracking pixels, beacons, SDKs, Google Analytics, and other first- or third-party tracking technologies (collectively, “Cookies”) to collect your data for reasons including security and authentication, to enable the use of our Services, perform analytics, improve our Services, track and understand how you interact with our Services, improve your experience, provide relevant advertisements, and understand how you interact with advertisements. See the section of this Notice describing your Privacy Rights for information on how to opt out of selling or sharing your personal data for targeted advertising.

For more information about Cookies and how we use them, please see Rain Bird's Cookie Notice here.

Emails

We may use email tracking systems for emails we send that give us information such as who opened or forwarded an email, when it was opened, and whether the reader clicked any links in the email. We may make decisions about you based on automated processing of your information for email marketing and advertisements. For example, if you interact with a certain product or topic, keeping your preferences in mind, we may automatically add you to additional campaigns around that product or topic, to continue providing you with engaging, personalized content. Similarly, if you choose not to open our emails, we may automatically remove you from receiving our emails. You may unsubscribe at any time by clicking the unsubscribe link within the email or by contacting us directly.

How We Disclose Your Personal Data

Service Providers

We may disclose personal data to third parties who facilitate or support our Services, provide the Services on our behalf, perform Services-related services, or assist us in analyzing how our Services are used. These service providers have access to your personal data only to perform specified tasks on our behalf and are obligated to protect and secure your personal data. Our service providers typically fall into the following categories (but may include other categories as necessary to facilitate or support our Services):

• Payment services;
• Marketing services;
• Fulfillment services;
• Expense management services;
• Data management and storing services;
• Insurance and related support services; and
• Security services.

Affiliates

We may disclose personal data between Rain Bird and the affiliates and subsidiaries it owns or controls.

Acquirers

If we sell or transfer our business or parts of it, combine with another business or become involved in a reorganization, declare bankruptcy, become involved in a securities offering, or become involved in any other similar transaction, then we may disclose personal data in connection with such transaction, including with third-party acquirers.

Connected Services

You can choose to transfer your personal data between Rain Bird and connected services if you have an account and accept their terms. Any data shared is governed by the third party's policies; Rain Bird does not control or take responsibility for their content or privacy practices. Once transferred, the connected service manages your personal data. Please contact them directly with any questions or concerns about their handling of your information.

Marketing Services

We may disclose personal data to marketing partners and advertising networks to market our Services.

We may disclose personal data through the use of Cookies, including for marketing and advertising purposes. When you interact with our Services, third parties may place Cookies on your browser for targeted advertising purposes. You may be asked to opt in or opt out to the use of targeted advertising Cookies, depending on the data privacy and protection laws applicable to your personal data. For more information about Cookies, please see the Cookies section above.

For information on how to opt out of selling or sharing your personal data for targeted advertising purposes, please see the section of this Notice describing your Privacy Rights.

Shared Access Features

Our Services may allow users to share certain administrative or operative features and functions with other users of the Services. For example, our Services may enable users to share control of the irrigation features with other users, such as their gardener, to enable that user to program their watering schedule. Users are solely responsible for designating who may access the features and functions associated with their account and can change these designations in their account settings.

Utility and Rebate Programs

If you purchase our Services through a sponsored utility program or rebate program, you may be asked for your consent prior to the sharing of your profile, contact information, water usage data, or other personal data as described at the time of consent. If you agree to participate, the utility or rebate provider will be able to see the personal data detailed in the consent. The provider may contact you, through us or independently. To exercise any rights you may have with respect to your personal data held by the provider, you must contact the utility or rebate program sponsor identified at the time of sign-up. The utility or rebate program sponsor is solely responsible for the amount of any cancellation or other fees associated with your revocation of consent to participate in the associated program.

User Profiles

To enable users of the Services to learn from and share their experiences using our Services, such as watering schedules for similar climates, certain portions of the user profile information you provide to us, including your name, location, and any videos or images in your profile may be displayed to other users of the Services. Your Account privacy settings may allow you to limit which users can see the information in your profile. Please remember that any content you upload to your public profile, along with any personal data or content that you voluntarily disclose in your profile, may be collected and used by others.

Public Posts

When you post messages or comments or upload images or videos to the public areas of the Services, such as our message boards and comment sections, other users of the Services will be able to see the content of your post, as well as your username.

Social Networking Websites

When you post messages or comments or upload content to social networking websites, the terms of use and privacy policy of such websites apply. We will not be responsible or liable for: (i) the availability or accuracy of such websites; (ii) the content, products, or services on or available via such websites; or (iii) your use of any such websites.

Legal Requirements and Safety

We may disclose personal data to other third parties, including law enforcement and public authorities, in the good faith belief that the disclosure is necessary to:

• Comply with a legal obligation;
• Protect our rights and property;
• Prevent or investigate possible wrongdoing in connection with the Services; and
• Protect the personal safety of users of our Services, or the public.

Basis of Processing

We may rely on one or more of the following legal grounds to process your personal data, depending upon the applicable purposes of processing:

• Consent. When you have given us your permission to use your personal data for a specific reason.
• Performance of contract. When necessary to perform our obligations under any contract with you, or take necessary steps before entering into a contract with you.
• Legitimate interests. To pursue the legitimate interests of Rain Bird or another person. This works when we use your personal data in ways that make sense and do not unfairly intrude on your privacy, or when we have a very good reason.
• Complying with the law. When necessary for Rain Bird to comply with its legal obligations.

If we use legitimate interests as a reason for using your personal data, you can Contact Us to ask for more details about why we think it is a valid reason.

When we use your personal data based on your consent, you may withdraw your consent at any time. However, this will not undo the things we did with your data before you withdrew your consent. It also will not change the things we are allowed to do with your data based on other legal grounds.

Please note that if you do not provide us with personal data, you may not be able to use or access some or all parts, features, and functions of our Services. Where we receive your personal data as part of providing our Services to you to fulfill a contract, we require such personal data to be able to carry out the contract. Without such personal data, we will not be able to provide the Services to you.

Categories of Personal Data Processed and Disclosed

The following table summarizes: (i) the categories of your personal data we have processed over the past 12 months (Personal Data We Process), (ii) how we obtained the data (How We Obtain the Data), (iii) why we use that data (Processing Purposes) (iv) the types of third parties to whom we disclosed the data over the past 12 months (Categories of Third Parties Receiving Personal Data), and (v) the legal grounds on which we may process your personal data (Legal Bases):

Sale of Personal Data

Rain Bird does not sell your personal data. However, we may use services that help deliver interest-based advertisements to you or to analyze our website traffic, and may transfer personal data to business partners for their use. The disclosure of personal data (such as online identifiers or browsing activity) to these business partners may constitute “sale” or “sharing” under certain laws, such as the California Consumer Privacy Act (“CCPA”).

To the extent that certain laws, such as the CCPA, consider some sharing of personal data for advertising purposes to be “selling” or “sharing” of personal data, Rain Bird may have shared the following categories of personal data with the following categories of third parties in the past 12 months, including for cross-contextual behavioral advertising and analytics purposes:

For information on how to opt out of selling or sharing your personal data for targeted advertising, see the section of this Notice describing your Privacy Rights.

We do not “sell” or “share” the personal data of users we know are under 18 years old.

Credit Card Information and Fraud Prevention

Rain Bird does not collect, process, or store credit card numbers. We use third parties to facilitate payment processing. When you make a payment, your credit card numbers will be managed by such third-party service providers according to their own privacy policies and terms of service. We may use third-party service providers for fraud prevention, and in some cases, third-party fraud prevention companies may make automated decisions to prevent fraudulent purchases from being made.

How We Store Your Personal Data

We store your personal data using certain service providers situated in the United States and worldwide.

How Long We Keep Your Personal Data

We retain your personal data for as long as needed for the purpose we collected it and any other permitted linked purpose and in accordance with our data retention policies and legal requirements.

How We Secure Your Personal Data

Whenever personal data is collected and processed, there is always a risk that the personal data may be breached, misused, or otherwise used in ways that result in harm to you. 

We have implemented and will maintain technical, administrative, and physical measures that are reasonably designed to help protect personal data from unauthorized processing such as unauthorized access, use, disclosure, alteration, or destruction. Please be aware that no data security measures are 100% secure. We do not guarantee, and you should not assume, that your personal data or private communications will always stay secure or private. You also have a responsibility to take reasonable measures to protect your personal data from being disclosed or misused by others.

Terms of Service for Digital Messaging

Consent for Digital Messaging Communications

Information obtained as part of the digital messaging consent process will not be shared with third parties.

Types of Digital Messaging Communications

If you have consented to receive digital messages from Rain Bird, you may receive messages through our Platform, SMS, WhatsApp, email, or other digital messaging services related to marketing, customer service, including updates regarding your orders, deliveries, or other relevant information.

*Standard Disclosures Relating to Digital Messaging Services, including SMS Messages

• Message and data rates may apply.
• Messaging frequency may vary.
• You can opt out at any time by texting or replying "STOP."

For assistance, text or reply "HELP" or Contact Us using the details provided in this Notice or our Terms of Use.

Children's Privacy

The Services are not directed at, or intended for use by, any person under the age of 18. Rain Bird does not intentionally sell any Services to or gather any personal data from persons who are too young to agree, nor to any person under the age of 18 years. If you are a parent or guardian and you find out that your minor child has given us personal data, please Contact Us.

Third-Party Advertisements and Websites

The Platforms may include third-party advertising. Third-party advertising partners may collect information about you when you interact with their content, advertising, or services.

The Platforms may have links to other websites, mobile applications, or services that Rain Bird does not operate, such as Facebook, Instagram, LinkedIn, X (formerly Twitter), and YouTube. You will go to that third party's website or mobile application if you click on a third-party link. We do not control or take any responsibility for the content, privacy policies, or practices of any third-party websites, applications, or services.

Privacy Rights

You have the following rights regarding your personal data, subject to any applicable exceptions or limitations:

• The right to be informed of how we collect and process personal data. This means that you have the right to all information regarding our data processing activities that concern you, such as how we collect and use your personal data, how long we will keep it, and who it will be shared with, among other things. We are informing you of how we process your personal data with this Notice.
• The right to request categories of personal data disclosed for a business purpose, and to whom such personal data was disclosed.
• The right to request access to your personal data. This right allows you to (1) get confirmation of whether we process personal data about you (2) ask for full details of the personal data we hold about you and certain related information; (3) get a copy or access to the personal data. For security and legal compliance, we cannot disclose certain sensitive information like passwords, or security questions and answers. However, we can inform you if we have such information without disclosing specific details.
• The right to request that inaccurate personal data be rectified or completed if incomplete. If your account settings do not allow you to change the information yourself, please visit:
  • Rain Bird: https://www.rainbird.com/corporate/contact-us
  • Rachio: https://support.rachio.com/
  • OtO, Inc.: https://support.otolawn.com/
• The right to request erasure (deletion, anonymization, blocking) of your personal data. Sometimes we can delete, anonymize, or block your data, but other times it is not possible for either technical or legal reasons. If that is the case, we will consider if we can limit how we use your data.
• The right to restrict our processing or use of your personal data. This right allows you to ask us to use or store your personal data only for certain purposes. You have this right in certain instances, such as where you believe the data is inaccurate or the processing activity is unlawful.
• The right not to be subject to automated decision-making that may seriously impact you, including profiling.
• The right to obtain a copy of your personal data or to forward your personal data to an organization of your choosing, in a structured, commonly used and machine-readable format, and to reuse your personal data for your own purposes (also known as the right to data portability).
• The right to object to our processing of your personal data. This is your right to tell us to stop using your personal data. You have this right where we rely on a legitimate interest of ours (or of a third party), or if the processing is not necessary for the performance of a contract or compliance with applicable law. You may also object at any time to the processing of your personal data for direct marketing purposes.
  • We will stop processing the relevant personal data unless: (1) we have compelling legitimate grounds for the processing that override your interests, rights, or freedoms; or (2) we need to continue processing your personal data to establish, exercise, or defend a legal claim.
• The right to withdraw your consent for us to use your personal data, where we rely on your consent as the legal basis for processing your personal data. You also have the right to receive information on how you may refuse to consent to the processing of your personal data and the consequences of such refusal. If you have given consent for your details to be shared with a third party and wish to withdraw this consent, please also contact the relevant third party in order to change your preferences.
• The right to opt in to the use and disclosure of “sensitive” personal data (e.g., data revealing racial or ethnic origin, health data, precise geolocation data, biometric data, data of a known child).
• The right of non-discrimination. We will not discriminate against you for exercising any of your privacy rights.
• The right to appeal our decision regarding your privacy rights request.
• The right to opt out of the “sale” or “sharing” of your personal data for targeted advertising.
  • You may opt out of such “sales” or “sharing” by clicking the “Your Privacy Choices” link in the footer of our website. You may also set your browser to send the Global Privacy Control (GPC) signal. For more information on the GPC, please visit https://globalprivacycontrol.org/.
• The right to lodge a complaint with the applicable supervisory authority that supervises compliance with data protection laws in your jurisdiction, if you are not satisfied with how we process your personal data.
• The right to complain to us if you suspect that we have breached any data protection laws that are applicable to you.

Requests regarding the above rights are to be sent to us by completing this form: https://go.rainbird.com/privacy-request and will be handled in accordance with applicable law. Only you or your authorized agent may make inquiries pertaining to your personal data.

Exercise your Privacy Rights

The above list may not be an accurate or complete set of your privacy rights, because privacy rights vary from country to country and state to state.

If you have any questions regarding your privacy rights, please Contact Us.

Verification of Identity

In order to correctly respond to your Privacy Rights requests, we need to confirm that you made the request. Consequently, we may require additional information to confirm that you are who you say you are. We will verify your identity using information we already have concerning you in our system. We will only use the personal data you provide us in a request to verify your identity or authority to make the request.

Authorized Agents

If you are submitting a request on behalf of somebody else, we will need to verify your authority to act on behalf of that individual. When contacting us, please provide us with proof that the individual gave you signed permission to submit this request, such as a valid power of attorney on behalf of the individual. Alternatively, you may ask the individual to directly Contact Us to verify their identity with Rain Bird and confirm with us that they gave you permission to submit the request.

Additional Information for Residents of the European Union, United Kingdom, and Switzerland

International Transfers of Your Personal Data

If your personal data is safeguarded by the European Union or United Kingdom (UK) General Data Protection Regulation (collectively, the “GDPR”) or Swiss data protection law, before sending it to parties outside of the European Economic Area (EEA), the UK, or Switzerland, we will do one of two things: 

• Seek your consent; or 
• Demand privacy and security: We will ensure the third party maintains the same level of privacy and security for your personal data as we do. 

In some cases, the authorities of a country may have determined that the laws of other countries, territories, or sectors within a country provide a level of protection equivalent to domestic law. You can see here the list of countries, territories, and specified sectors that each of these jurisdictions recognizes as providing an adequate level of protection for personal data, at this link for the EEA, this link for the UK, and this link for Switzerland. 

We are accountable for the protection of your personal data when we transfer it to others. We either send it to a country, territory, or sector within a country that is recognized as providing the same level of personal data protection as the country of origin, or use safeguards like the Standard Contractual Clauses (also known as the “SCCs”) approved by the European Commission under Article 46(2) of the GDPR, with necessary adjustments for transfers from the UK or Switzerland, or use specific transfer instruments like the UK International Data Transfer Agreement. 

Additional Information for Residents of Argentina

Voluntary Provision of Personal Data

Rain Bird collects your personal data for various purposes, as described in the section on Purposes of Processing above. In general, you are not obligated to provide us with your personal data. However, if you fail to provide voluntary personal data, we may not be able to provide our services to you and engage with you.

Additional Information for Residents of Australia

Voluntary Provision of Personal Data

Rain Bird collects your personal data for various purposes, as described in the section on Purposes of Processing above. In general, you are not obligated to provide us with your personal data. However, if you fail to provide voluntary personal data, we may not be able to provide our services to you and engage with you.

Supervisory Authority

If you are not satisfied with how we process your personal data, you can complain to the Australian data protection authority at https://www.oaic.gov.au.

Additional Information for Residents of Brazil

Supervisory Authority

If you are not satisfied with how we process your personal data, you can complain to the Brazilian data protection authority at https://www.gov.br/anpd/pt-br.

Additional Information for Residents of Canada

Voluntary Provision of Personal Data

Rain Bird collects your personal data for various purposes, as described in the section on Purposes of Processing above. In general, you are not obligated to provide us with your personal data. You have the option to refrain from providing us with personal data for non-integral purposes by refusing to provide consent or withdrawing your consent for our processing of your personal data.

Geolocation

When you use the Platforms, Rain Bird may collect your geolocation data, as described in the section on Categories of Personal Data Processed and Disclosed above. You can enable such data collection by configuring the applicable settings on your mobile device and/or web browser.

Additional Information for Residents of Mexico

Consent for Transfers of Your Personal Data

We transfer your personal data to third parties for various purposes, as described in the section on How We Disclose Your Personal Data above. Subject to certain exceptions, such transfers require your consent. In particular, we require your consent to transfer your Personal Data to third parties in order to facilitate and monitor and improve our Services, and to conduct our marketing and sales activities.

How We Process Rights Requests

If, in connection with your submission of a privacy rights request, we need additional documentation to verify your identity, and you fail to provide any of the requested documentation, we may ask you to provide the missing documentation within 5 days of receipt of your request. You will then have 10 days thereafter to provide the missing documentation, and if you fail to do so within that timeframe your request will be ignored.

We will notify you within 20 business days of receipt of your request (or receipt of the complete set of required documentation, where requested) as to whether we are able to complete your rights request. Where we are able to do so, your request will be completed within 15 business days of our initial response. Please note, however, that the 20- and 15-day response timelines listed above may each be extended once for 20 or 15 days, respectively, where justified, and that in such cases we will explain the reasons for the extensions in our response.

Changes to This Notice

If we make any material change to this Notice, we will post the revised Notice to this webpage and update the “Effective Date” above to reflect the date on which the revised Notice became effective.

Data Protection Officer

We have appointed VeraSafe as our Data Protection Officer (DPO). You can contact VeraSafe on matters related to the processing of personal data using the contact form in the following section.

Contact Us

We are committed to working with you to resolve any queries you have regarding this Notice or the treatment of your personal data. If you have any questions about this Notice or its implementation, please contact Rain Bird and/or VeraSafe, Rain Bird’s DPO, using the following contact form:

https://go.rainbird.com/privacy-contact