Last Reviewed on: 15 September 2026

This Johnson Controls Privacy Notice Addendum for United States Residents (“Notice Addendum”) supplements the information contained in Johnson Controls’ Global Privacy Notice and provides additional details about how we collect, use, and disclose the personal information of United States residents that we collect both online and offline, pursuant to U.S. state comprehensive privacy laws that apply to Johnson Controls.

This Notice Addendum does not apply to personal information that we may collect about employees. For details about our processing of employee personal information, California residents can view our Employee Personal Information Privacy Notice for California Residents.

Collection, Processing, Disclosure, Sale, and Sharing of Personal Information

The following chart details which categories of personal information we collect and process, as well as which categories of personal information we disclose to other entities for our operational business purposes, including within the preceding 12 months. The chart also details the categories of personal information that we “sell” to third parties or “share” for purposes of cross-context behavioral or targeted advertising, including within the preceding 12 months.

We may also process your personal information or disclose it to a third party in the event of any reorganization, financing transaction, merger, sale, joint venture, partnership, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings). For purposes of this addendum, “sale” and “share” have the meanings assigned under applicable state privacy laws. “Targeted advertising” (also referred to as “cross-context behavioral advertising”) means displaying advertisements to a consumer where the advertisement is selected based on personal information obtained from that consumer’s activities over time and across nonaffiliated websites or online applications to predict preferences or interests. As listed in the above chart, we sell, share, and process for targeted advertising, and we have sold, shared, and processed for targeted advertising in the preceding 12 months, the following categories of personal information: identifiers, commercial information, internet or other network activity information, geolocation data, and inferences we may infer about you. We sell, share, and disclose for targeted advertising these categories of personal information to ad networks and social media platforms for marketing and analytics purposes. For example, we may use your personal information to deliver advertising based on your activities across nonaffiliated websites and applications. 

Depending on your state of residence, you may have the right to opt out of sale, sharing, and targeted advertising. To opt-out of sale, sharing, and targeted advertising via cookies and other online tracking technologies, click here to visit our cookie preference center and then click “Reject All.” To opt-out of sale, sharing, and targeted advertising in other contexts, please use our privacy request portal or call us at 888-317-5292. 

We do not knowingly “sell” or “share” (as defined in the state consumer privacy laws) the personal information, including the sensitive personal information, of minors under 16 years of age.

We collect, use, and disclose personal information for the following purposes:

• Providing our products or services to you and managing our contractual obligations and your ongoing relationship with us: We may require your personal information to deliver our service or product to you or to provide you with customer support (such as managing your account, billing management, helpdesk support, providing product or safety related notices or such other support as is required in relation to our products or services).
• Tailoring our services to your preferences: We may use your personal information to provide you with a personalized service or content, to deliver adverts which may be of particular interest or to provide you with special offers and promotions.
• Improvement of our products and services: We may need to improve and develop our products. From time to time, we may need to process your personal information to carry out product innovation and testing, analytics, market research and development.
• Maintaining secure and safe services and products: We may need to process your personal information to preserve and maintain the security of our websites, networks, systems and premises including protection against fraud and malicious security threats.
• Financial screening: We may need to process your financial information for security verification purposes such as screening for anti-money laundering, screening sanctions lists or other similar verification lists.
• Fulfilling our business obligations: We may need to process your personal information to allow us to carry out order management, payment processing, contract management, financial management and website and service administration.
• Managing our supply chain and business network: In order to provide our products and services to you, we may need to process your personal information in connection with the utilisation of our third-party partner business network.
• Corporate activity, including mergers, acquisitions and joint ventures: We may need to process your personal information in connection with certain corporate activity, such as a party acquiring all or part of the equity or assets of Johnson Controls or its business operations in the event of a sale, merger, liquidation, dissolution, or other.
• To comply with our legal obligations: We may need to process your personal information for purposes which are required by applicable law.

We may also deidentify any personal information we collect about you. When we do so, we take reasonable measures to ensure that the information cannot be associated with a consumer or household, and we maintain and use the information in deidentified form. We will not attempt to reidentify the information, except that we may attempt to reidentify the information solely for the purpose of determining whether our deidentification processes satisfy applicable legal requirements. After it has been deidentified, the information is no longer personal information and is not subject to this Notice Addendum.

Collection, Processing, and Disclosure of Sensitive Personal Information

We collect, process, and disclose sensitive personal information for purposes of: providing goods or services as requested; ensuring safety, security, and integrity; preventing, detecting, and investigating security incidents; resisting malicious, deceptive, fraudulent, or illegal actions; ensuring physical safety of natural persons; short-term, transient use such as displaying first party, non-personalized advertising; performing services for our business, including maintaining and servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of our business; activities relating to quality and safety control or product improvement; and other collection and processing that is not for the purpose of inferring characteristics about an individual. We do not use sensitive personal information beyond these purposes.

We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects for consumers, and we do not use automated decision-making technology to make significant decisions about consumers.

Retention of Personal Information

We will retain your personal information as long as necessary to provide the products you have requested, or to otherwise achieve the purpose for which the personal information was collected and processed. Typically, information is retained for the duration of any contractual relationship, or for as long as the information is required for other legitimate business purposes such as resolving disputes, complying with our legal obligations and enforcing our agreements, or as permitted by applicable law. As the purpose for processing the personal information can vary, the retention period for different categories of personal information can also vary. We determine our retention periods in accordance with legal and operational requirements.

Sources of Personal Information

We collect personal information from you and from our affiliates, trusted service providers, ad networks, data analytics providers, social networks, data brokers, publicly available databases, and joint marketing partners.

Rights and Requests

If you are a resident of a state with a comprehensive privacy law that applies to Johnson Controls, including California, Louisiana, Nebraska, and Texas, you may, subject to applicable law, make the following requests:

1. To know whether we process your personal information and to access your personal information.
2. If you are a California consumer, you may also request that we disclose to you the following information:
   1. The categories of your personal information we collected and the categories of sources from which we collected your personal information;
   2. The business or commercial purpose for collecting, selling, or “sharing” your personal information;
   3. The categories of your personal information that we sold or “shared” and the categories of third parties to whom we sold or “shared” your personal information; and
   4. The categories of your personal information that we otherwise disclosed, and the categories of third parties to whom we disclosed your personal information.
3. To correct inaccuracies in your personal information.
4. To delete personal information we have collected from or about you, depending on your state of residence.
5. To provide the specific pieces of personal information we have collected about you, including a copy in a portable format.
6. To withdraw your consent, if we have obtained consent from you to process sensitive personal information about you.
7. To opt out of the “sale” of your personal information.
8. To opt out of targeted advertising, including the “sharing” of your personal information for cross-context behavioral advertising.

You have the right not to be unlawfully discriminated or retaliated against for exercising your privacy rights.

To make a request under #1-6, above, please use our privacy request portal or call us at 888-317-5292.

Depending on the type of request you make, we may verify your identity and will respond to your request consistent with applicable law, taking into account the type and sensitivity of the personal information subject to the request. We may decline to honor your request where an exception applies. We may need to request your name, contact information, and information about your relationship with us, in order to verify your identity and protect against fraudulent requests. If you maintain a password-protected account with us, we may verify your identity through our existing authentication practices for your account and require you to re-authenticate yourself before disclosing or deleting your personal information. If you make a request to delete, we may ask you to confirm your request before we delete your personal information.

Further, to opt-out of sale, sharing, and targeted advertising via cookies and other online tracking technologies, click here to visit our cookie preference center and then click “Reject All.” To opt-out of sale, sharing, and targeted advertising in other contexts, please use our privacy request portal or call us at 888-317-5292 

Opt-Out Preference Signals

Some web browsers or devices offer settings that allow you to pre-set a signal to websites indicating that you do not want to have your network activity and browsing data sold, shared, or processed for targeted advertising purposes. We recognize the opt-out preference signals that we are required to recognize for compliance with applicable law. Where required by U.S. Privacy Laws, we treat the opt-out preference signals we are required to comply with as a valid request to opt-out of sale and sharing for the browser or device through which the signal is sent and any consumer profile we have associated with that browser or device, including pseudonymous profiles. Further, if we know the identity of the consumer from the optout preference signal, we will also treat the opt-out preference signal as a valid request to opt out of sale and sharing for such consumer. Consumers may use opt-out preference signals by downloading or otherwise activating them for use on supported browsers and setting them to send opt-out preference signals to websites they visit.  

Appeal Process

Depending on your state of residence, if we decline to take action on your request, you may have the right to appeal our decision within a reasonable period after you have received notice of the refusal. You may file an appeal by using our privacy request portal or calling us at 888-317-5292. This section does not apply to California residents. 

Authorized Agents

If an agent would like to make a request on your behalf as permitted under applicable law, the agent may use the submission methods noted in the section entitled “Rights and Requests.” We will process the agent’s request consistent with applicable law. As part of our verification process, we may request that the agent provide, as applicable, proof concerning their status as an authorized agent. In addition, depending on the type of request submitted, we may require that you verify your identity as described in the section entitled “Rights and Requests” or confirm that you provided the agent permission to submit the request. 

Direct Marketing Disclosure for California Residents

California Civil Code § 1798.83 permits California residents to annually request certain information regarding our disclosure of personal information to other entities for their direct marketing purposes in the preceding calendar year. To make such a request, please use our privacy request portal. 

Disclosure for Nevada Residents

To the extent we collect personal information that identifies you through an online website or service, we do not sell that personal information for monetary consideration. 

How to Contact Us

If you would like to communicate with us regarding privacy issues or have questions, comments or complaints, please contact us via email at privacy@jci.com or via mail at:

Global Privacy Office
Johnson Controls
5757 North Green Bay Avenue
Milwaukee, Wisconsin 53209
USA.