PRIVACY POLICY

Last updated September 22, 2026

This Privacy Notice for Living Human LLC (“we,” “us,” or “our”) describes how and why we may access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:

  • Visit our website at https://www.livinghuman.co or any website of ours that links to this Privacy Notice

  • Create or use a Living Human account

  • Purchase memberships, digital products, physical merchandise, or other products or Services

  • Engage with us in other related ways, including marketing, communications, events, or customer support

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services.

If you have questions or concerns, please contact us at lodge@livinghuman.co.

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice. More information about each topic is provided in the full Privacy Notice below.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the products and features you use.

Do we process sensitive personal information? Some information may be considered “special” or “sensitive” under certain laws, such as information concerning racial or ethnic origins, sexual orientation, or religious beliefs. We do not knowingly process sensitive personal information unless specifically disclosed to you and permitted by applicable law.

Do we receive information from third parties? We may receive limited personal information from third-party service providers in connection with payment processing, order fulfillment, shipping, analytics, website operations, account management, security, and other services necessary to operate our Services.

How do we process your information? We process information to provide, improve, and administer our Services, maintain accounts, fulfill orders, communicate with you, provide customer support, protect our Services, prevent fraud, and comply with legal obligations. We may also process information for other purposes with your consent when required.

When and with whom do we share personal information? We may share information with service providers and other third parties that help us process payments, fulfill and ship orders, operate our website and accounts, provide analytics and communications, maintain security, and otherwise provide our Services.

How do we keep your information safe? We use organizational and technical measures designed to protect personal information. However, no method of electronic transmission or storage can be guaranteed to be completely secure.

What are your rights? Depending on where you live, applicable privacy law may provide you with certain rights regarding your personal information.

How do you exercise your rights? To request access to, correction of, or deletion of your personal information, or to exercise another applicable privacy right, contact us at lodge@livinghuman.co.

We will consider and act upon requests in accordance with applicable law.


TABLE OF CONTENTS

  1. WHAT INFORMATION DO WE COLLECT?

  2. HOW DO WE PROCESS YOUR INFORMATION?

  3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

  4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

  5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

  6. HOW LONG DO WE KEEP YOUR INFORMATION?

  7. HOW DO WE KEEP YOUR INFORMATION SAFE?

  8. DO WE COLLECT INFORMATION FROM MINORS?

  9. WHAT ARE YOUR PRIVACY RIGHTS?

  10. CONTROLS FOR DO-NOT-TRACK FEATURES

  11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

  12. DO WE MAKE UPDATES TO THIS NOTICE?

  13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

  14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?


1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register for the Services, create an account, make a purchase, become a member, express an interest in our products or Services, participate in activities through the Services, communicate with us, or otherwise contact us.

Personal Information Provided by You. The personal information we collect depends on the context of your interactions with us, the choices you make, and the products and features you use.

The personal information we collect may include:

  • names

  • phone numbers

  • email addresses

  • mailing and shipping addresses

  • usernames and account credentials

  • billing addresses

  • order and purchase information

  • membership and account information

  • payment and transaction information

  • information you voluntarily provide when communicating with us

Sensitive Information. We do not knowingly process sensitive personal information unless specifically disclosed to you and permitted by applicable law.

Payment Data

Payments made through our Services are processed using third-party payment service providers.

When you make a purchase, payment information necessary to complete the transaction may be collected and processed directly by those providers in accordance with their own privacy policies and security practices.

Living Human may receive and retain limited information relating to the transaction, such as:

  • billing information

  • transaction identifiers

  • payment status

  • payment method type

  • limited payment details provided by the payment processor

  • purchase and order information

Living Human does not directly store your complete credit or debit card number or card security code.

Information Received From Service Providers

We may receive limited personal information from third-party service providers when necessary to operate our Services.

This may include:

  • transaction and payment status information from payment processors

  • order and shipping information from fulfillment and shipping providers

  • website and account information from technology providers

  • analytics and usage information

  • fraud-prevention and security information

  • other information necessary to maintain accounts, fulfill orders, provide customer support, or operate our website and Services

All personal information you provide to us must be true, complete, and accurate, and you should notify us of material changes to such information.

Information automatically collected

In Short: Some information, such as your Internet Protocol (IP) address and browser or device characteristics, may be collected automatically when you use our Services.

We automatically collect certain information when you visit, use, or navigate the Services.

This information generally does not directly reveal your identity, such as your name or email address, but may include device and usage information such as:

  • IP address

  • browser type

  • device characteristics

  • operating system

  • language preferences

  • referring URLs

  • device information

  • country or general geographic location

  • pages viewed

  • dates and times of access

  • website interactions

  • technical and diagnostic information

This information may be used to maintain the security and operation of our Services, troubleshoot technical problems, prevent fraud, understand how our Services are used, and perform internal analytics and reporting.

Log and Usage Data

Log and usage data may include service-related, diagnostic, usage, and performance information generated when you access or use our Services.

Depending on how you interact with our Services, this information may include:

  • IP address

  • browser type

  • device information

  • settings

  • date and time information

  • pages or files viewed

  • features used

  • referring and exit pages

  • system activity

  • error reports

  • device event information

Device Data

We may collect device information about the computer, phone, tablet, or other device you use to access the Services.

Depending on the device, this may include:

  • IP address or proxy server

  • device or application identifiers

  • browser type

  • hardware model

  • Internet service provider or mobile carrier

  • operating system

  • system configuration information

  • approximate location

Approximate Location Data

We may collect or infer general location information, such as your country, state, region, or approximate location, based on information such as your IP address and device information.

We do not require precise GPS location information to use our website unless a specific feature expressly requests it.

Google API

If our Services use information received through Google APIs, our use of that information will comply with applicable Google API user-data requirements and limitations.


2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process personal information to provide, improve, and administer our Services, communicate with you, maintain accounts, fulfill orders, protect our Services, and comply with law.

We may process personal information for the following purposes:

  • To create and manage user accounts. We may process information so you can create an account, log in, maintain access to products or memberships, and otherwise keep your account functioning.

  • To provide products and Services. We may process information to provide memberships, digital content, Training Maps, Journeys, programs, guides, merchandise, account access, and other requested products or Services.

  • To manage membership access. We may process account, membership, purchase, and transaction information to administer membership access, renewals, cancellations, expiration, and related account functions.

  • To respond to inquiries and provide customer support. We may process information to answer questions, resolve problems, and provide support.

  • To send administrative communications. We may process information to send information about accounts, purchases, orders, memberships, product access, security, policy changes, or other service-related matters.

  • To fulfill and manage orders. We may process information to manage purchases, payments, shipping, fulfillment, returns, exchanges, refunds, and related transactions.

  • To deliver physical merchandise. We may process shipping and order information so merchandise can be produced, fulfilled, and delivered.

  • To request feedback. We may contact you to request feedback about our products or Services.

  • To send marketing and promotional communications. We may process information for marketing purposes in accordance with your preferences and applicable law. You may opt out of marketing communications at any time.

  • To protect our Services. We may process information as part of our efforts to prevent fraud, misuse, unauthorized access, and security incidents.

  • To understand and improve our Services. We may use analytics and usage information to understand how visitors and users interact with our website and products and to improve the user experience.

  • To comply with legal, financial, and accounting obligations. We may retain or process information as necessary to satisfy tax, accounting, recordkeeping, regulatory, or other legal requirements.

  • To protect vital interests. We may process information where necessary to protect an individual’s vital interests, such as preventing serious harm.


3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: Where applicable law requires a legal basis for processing personal information, we rely on appropriate legal grounds such as consent, performance of a contract, legitimate interests, compliance with legal obligations, or protection of vital interests.

If you are located in the European Economic Area or United Kingdom

Where the General Data Protection Regulation, UK GDPR, or similar laws apply, we may rely on the following legal bases:

Consent

We may process personal information when you have given us permission to use it for a specific purpose.

Where processing is based on consent, you may withdraw your consent at any time.

Performance of a Contract

We may process personal information when it is necessary to fulfill contractual obligations to you or take steps at your request before entering into a contract.

This may include processing necessary to:

  • administer memberships

  • provide account access

  • provide digital products and Services

  • process purchases

  • fulfill and ship orders

Legitimate Interests

We may process information when reasonably necessary to pursue legitimate business interests and those interests are not overridden by your fundamental rights and freedoms.

Examples may include:

  • operating and improving our website

  • preventing fraud

  • maintaining website and account security

  • diagnosing technical problems

  • understanding how users interact with our Services

  • communicating relevant information about products and Services

  • improving user experience

Legal Obligations

We may process information where necessary to comply with applicable laws, regulations, legal processes, financial recordkeeping requirements, or regulatory requests.

Vital Interests

We may process personal information where necessary to protect your vital interests or those of another person.

If you are located in Canada

Where applicable Canadian privacy law applies, we may process information based on express or implied consent as appropriate.

You may withdraw consent where permitted by law.

In certain circumstances, applicable law may permit or require us to process information without consent, including:

  • where collection is clearly in an individual’s interests and consent cannot be obtained in a timely manner

  • for fraud prevention or investigations

  • for qualifying business transactions

  • where disclosure is legally required

  • where information is publicly available as defined by law

  • where processing is otherwise authorized or required by applicable law


4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share personal information with service providers and other third parties when necessary to operate our Services, process transactions, fulfill orders, provide customer support, maintain our website, comply with law, or otherwise carry out the purposes described in this Privacy Notice.

We may share personal information in the following circumstances:

Service Providers

We may share personal information with third-party vendors and service providers that perform services for us or help us operate our business.

These may include:

  • payment processors

  • website hosting providers

  • ecommerce technology providers

  • account and membership technology providers

  • security and fraud-prevention providers

  • email and communications providers

  • analytics providers

  • customer-support providers

  • cloud and data-storage providers

  • other operational service providers

These providers may process personal information only as reasonably necessary to provide their services and subject to applicable contractual and legal obligations.

Order Fulfillment and Shipping

When you purchase physical merchandise, we may share information necessary to manufacture, fulfill, and deliver your order.

This may include:

  • your name

  • shipping address

  • email address or other contact information

  • products ordered

  • size or product-selection information

  • order identifiers

  • other information reasonably necessary to fulfill the order

This information may be shared with merchandise fulfillment providers, manufacturers, shipping carriers, and other parties involved in completing your order.

Payment Processing

Information necessary to process transactions may be transmitted to third-party payment service providers.

Those providers process payment information according to their own privacy and security practices.

Business Transfers

We may share or transfer personal information in connection with, or during negotiations involving, a merger, financing, sale of company assets, acquisition, restructuring, or transfer of all or part of our business.

Affiliates

We may share information with companies under common ownership or control with us where appropriate and permitted by law.

Business Partners

We may share information with business partners when necessary to provide a product, service, event, promotion, collaboration, or other offering in which you choose to participate.

Legal Obligations and Protection of Rights

We may disclose information when we reasonably believe disclosure is necessary to:

  • comply with applicable law or regulation

  • respond to lawful governmental or legal requests

  • comply with court orders or legal processes

  • enforce our agreements or policies

  • protect our rights or property

  • investigate suspected fraud, misuse, or security issues

  • protect the safety and rights of Living Human, our users, or others


5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and similar technologies to operate, protect, understand, and improve our Services.

We may use cookies and similar tracking technologies, including pixels and similar technologies, when you interact with our website.

These technologies may help us:

  • keep accounts and sessions functioning

  • remember preferences

  • maintain website security

  • prevent fraud

  • prevent or diagnose technical problems

  • understand how users interact with our website

  • analyze website performance

  • improve our Services

We may also permit third-party service providers to use online tracking technologies for analytics, communications, advertising, or other business purposes depending on the technologies we use.

Where applicable law considers certain online tracking activities to constitute a “sale,” “sharing,” or targeted advertising, you may have the right to opt out.

Cookie choices may also be available through cookie or privacy controls provided on our website.

Google Analytics

We may use Google Analytics or similar analytics services to help understand how visitors interact with our Services.

These technologies may process information such as:

  • device information

  • IP address

  • pages viewed

  • website interactions

  • referring pages

  • usage information

  • approximate geographic information

You may be able to limit certain analytics or advertising features through your browser, device settings, cookie preferences, or privacy tools provided by the applicable service provider.


6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Notice unless a longer period is required or permitted by law.

Retention periods vary depending on the type of information and why it was collected.

Account and membership information may generally be retained for as long as you maintain an account or have access to products or Services through that account.

Transaction, payment, order, fulfillment, tax, accounting, fraud-prevention, dispute, and legal records may be retained after an account is closed when reasonably necessary to:

  • comply with legal obligations

  • maintain financial or business records

  • prevent fraud

  • resolve disputes

  • respond to chargebacks or claims

  • enforce agreements

  • protect our legal rights

Certain purchase and access records may also be retained where necessary to continue providing access to digital products that include ongoing or permanent account access.

When we no longer have an ongoing legitimate business or legal need to process personal information, we will delete or anonymize it where reasonably practicable.

If immediate deletion is not possible, such as when information exists in secure backup systems, we will appropriately protect the information until deletion becomes possible.


7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We use reasonable technical and organizational security measures designed to protect personal information.

We have implemented technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, misuse, or loss.

However, no electronic transmission over the Internet and no information-storage technology can be guaranteed to be completely secure.

We therefore cannot guarantee that unauthorized third parties will never be able to defeat security safeguards or improperly access, collect, steal, or modify information.

You are responsible for maintaining the confidentiality of your account credentials and should access the Services using a secure device and Internet connection.


8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect personal information from or market our Services to children under 18 years of age or the equivalent age specified by applicable law.

We do not knowingly collect or solicit personal information from children under 18 years of age or the applicable age of majority where required by law.

We also do not knowingly sell personal information belonging to children.

By using the Services, you represent that you are at least 18 years old or otherwise legally permitted to use the Services.

If a parent or guardian permits a minor dependent to use the Services where legally permitted, the parent or guardian accepts responsibility for that use.

If we learn that personal information from a child has been collected in violation of applicable law, we will take reasonable steps to delete the information or otherwise address the situation as required.

If you believe we may have improperly collected information from a minor, contact us at lodge@livinghuman.co.


9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on where you live, applicable privacy laws may give you rights relating to your personal information.

Depending on the applicable law, these rights may include:

  • the right to know whether we process your personal information

  • the right to request access to personal information

  • the right to obtain a copy of personal information

  • the right to correct inaccurate personal information

  • the right to request deletion

  • the right to restrict certain processing

  • the right to data portability

  • the right to object to certain processing

  • the right to withdraw consent where processing is based on consent

  • rights relating to certain automated decision-making

  • the right to opt out of certain targeted advertising, sales, sharing, or profiling where applicable

  • the right not to receive discriminatory treatment for exercising privacy rights

These rights are not absolute and may be subject to exceptions or limitations under applicable law.

To exercise an applicable privacy right, contact us at:

lodge@livinghuman.co

We may need to verify your identity before processing certain requests.

European Economic Area, United Kingdom, and Switzerland

If applicable European, UK, or Swiss privacy laws apply to you, you may have additional rights under those laws.

You may also have the right to submit a complaint to the appropriate data protection authority if you believe your personal information has been processed unlawfully.

Withdrawing Consent

If we rely on your consent to process personal information, you may withdraw that consent where permitted by applicable law.

Withdrawal will not affect processing that was lawful before your consent was withdrawn or processing conducted under another valid legal basis.

Marketing Communications

You may unsubscribe from marketing or promotional emails at any time by using the unsubscribe link included in those communications.

You may also contact us at lodge@livinghuman.co.

After you opt out of marketing communications, we may still send non-marketing messages necessary to:

  • administer your account

  • provide membership or product access

  • fulfill orders

  • communicate transaction information

  • respond to customer-service requests

  • provide security notifications

  • communicate important policy or service updates

SMS Communications

If you separately opt in to SMS communications, you may opt out by following the instructions included in those communications, including replying “STOP” where applicable.

Mobile information and text-message opt-in consent will not be shared with unaffiliated third parties for their own marketing or promotional purposes.

Information may be shared with service providers where necessary to provide messaging, customer support, account administration, or related Services.

Account Information

If you would like to review or change information in your account, you may:

  • log in to your account and update information that is available for editing

  • contact us at lodge@livinghuman.co

If you request account deletion or termination, we may deactivate or delete information from active systems where appropriate.

However, we may retain certain information where reasonably necessary to:

  • maintain records of purchases or product access

  • comply with tax or accounting requirements

  • prevent fraud

  • resolve disputes

  • investigate misuse

  • respond to claims

  • enforce our agreements

  • comply with applicable law


10. CONTROLS FOR DO-NOT-TRACK FEATURES

Some web browsers, devices, and applications include a Do-Not-Track (“DNT”) feature or similar setting that allows users to communicate preferences concerning online tracking.

At this time, there is no single universally accepted technical standard governing how websites must recognize or respond to DNT signals.

Accordingly, we do not currently respond to traditional DNT browser signals unless otherwise required by applicable law.

Where applicable law requires us to recognize another legally valid opt-out preference signal or mechanism, we will comply as required.

If applicable standards or legal requirements change, we may update this Privacy Notice accordingly.


11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Depending on your state of residence and applicable law, you may have specific rights regarding your personal information.

These may include the right to:

  • know whether personal information is being processed

  • access personal information

  • request correction

  • request deletion

  • obtain a portable copy of personal information

  • opt out of certain targeted advertising

  • opt out of certain sales or sharing of personal information

  • opt out of certain profiling

  • limit certain uses of sensitive personal information

  • appeal certain decisions regarding privacy requests

  • exercise privacy rights without discrimination

These rights vary by state and are subject to exceptions and limitations under applicable law.

Categories of Personal Information We Collect

The categories below describe personal information we may have collected within the preceding twelve months.

The examples are illustrative and do not necessarily mean we collect every type of information listed about every individual.

CategoryExamplesCollected
A. IdentifiersName, postal address, phone number, online identifier, IP address, email address, account nameYES
B. Personal information contained in customer recordsName, contact information, billing information, account information, financial or transaction informationYES
C. Protected classification characteristicsGender, age, race, ethnicity, national origin, marital status, and similar informationNO
D. Commercial informationTransaction information, order information, purchase history, payment informationYES
E. Biometric informationFingerprints, voiceprints, facial templates, or similar biometric identifiersNO
F. Internet or similar network activityWebsite activity, pages viewed, device information, log information, interactions with our websiteYES
G. Geolocation dataApproximate location inferred from an IP address or device informationYES
H. Audio, electronic, visual, sensory, or similar informationAudio, photographs, video, or similar information created in connection with business activitiesNO
I. Professional or employment-related informationJob title, work history, professional qualificationsNO
J. Education informationStudent records or similar education-related informationNO
K. InferencesInferences used to create a profile concerning preferences or characteristicsNO
L. Sensitive personal informationPersonal information classified as sensitive under applicable lawNO

We may collect personal information when you:

  • create or maintain an account

  • become a member

  • make a purchase

  • communicate with customer support

  • participate in surveys, promotions, or events

  • use our website

  • interact with our emails or communications

  • request or receive our Services

We retain these categories of information for only as long as reasonably necessary for the purposes described in this Privacy Notice or as otherwise required or permitted by law.

Sources of Personal Information

We may collect personal information:

  • directly from you

  • automatically when you use our Services

  • from payment processors

  • from merchandise fulfillment or shipping providers

  • from website and technology service providers

  • from analytics providers

  • from fraud-prevention and security services

  • from other service providers involved in providing our Services

How We Use and Share Personal Information

We use personal information for the purposes described throughout this Privacy Notice.

We may disclose personal information to service providers and other third parties as described in Section 4, “WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?”

Sale and Sharing of Personal Information

We do not sell personal information for monetary consideration.

We may disclose personal information to service providers and other parties for legitimate business purposes, including:

  • payment processing

  • order fulfillment

  • shipping

  • website hosting and operation

  • analytics

  • communications

  • account administration

  • security

  • customer support

Under some US state privacy laws, certain disclosures involving online advertising, analytics, or tracking technologies may legally be considered a “sale” or “sharing” even where no money is exchanged.

Where applicable, you may have the right to opt out of such processing through available privacy controls or by contacting us.

Exercising Your Rights

To exercise an applicable US privacy right, contact us at:

lodge@livinghuman.co

Please describe the request you are making and provide enough information for us to reasonably identify the account or personal information involved.

We will respond in accordance with applicable law.

Request Verification

We may need to verify your identity before fulfilling certain privacy requests.

We may use information already maintained by us or request additional information reasonably necessary to verify:

  • your identity

  • the information to which the request relates

  • your authority to make the request

Information collected for verification purposes will be used for verification, security, and fraud-prevention purposes.

Authorized Agents

Where permitted by applicable law, you may authorize another person to submit a privacy request on your behalf.

We may require reasonable documentation showing that the individual has authority to act for you and may separately verify your identity where permitted or required.

Appeals

Where applicable state law provides a right to appeal a decision regarding a privacy request, you may submit an appeal by emailing:

lodge@livinghuman.co

We will respond to qualifying appeals in accordance with applicable law.

California “Shine The Light” Law

California Civil Code Section 1798.83 may permit California residents to request certain information regarding disclosures of personal information to third parties for their own direct-marketing purposes.

If this law applies to you and you would like to submit such a request, contact us at:

lodge@livinghuman.co


12. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes. We may update this Privacy Notice to reflect changes in our business, Services, technologies, or applicable laws.

We may revise this Privacy Notice from time to time.

The updated version will be identified by the “Last updated” date at the top of the Privacy Notice.

If we make material changes, we may provide notice by:

  • posting the updated Privacy Notice on our website

  • prominently displaying a notice on the website

  • contacting users directly where appropriate

  • using another method permitted or required by applicable law

We encourage you to review this Privacy Notice periodically to remain informed about how personal information is processed.


13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions, comments, or requests concerning this Privacy Notice, your personal information, or our privacy practices, you may contact us at:

Living Human LLC

Email: lodge@livinghuman.co


14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Depending on applicable law, you may have the right to:

  • request access to personal information we maintain about you

  • obtain information about how your personal information has been processed

  • request correction of inaccurate information

  • request deletion of personal information

  • obtain a copy of certain personal information

  • withdraw consent where applicable

  • exercise other privacy rights provided by applicable law

These rights may be subject to legal exceptions or limitations.

To request access to, correction of, or deletion of your personal information, or to exercise another applicable privacy right, contact us at:

lodge@livinghuman.co

Please provide enough information for us to reasonably identify your account or the personal information related to your request.

We may need to verify your identity before completing certain requests.

We will consider and respond to qualifying requests in accordance with applicable law.