What Counts as Consumer Health Data

Consumer health data is personal information that identifies, or that we could reasonably use to infer, your past, present, or future physical or mental health status. Under these laws, this can include information you'd expect — like a health condition you mention to us — but it can also include information you might not expect, such as:

• Data about your purchase or use of a product where a business draws an inference about your health status from that purchase.
• Precise location data that could indicate an attempt to obtain health-related products or services.
• Browsing or search activity related to specific health conditions or product categories.

Because our catalog is organized around research areas that map to physiological processes (for example, metabolic, regenerative, cognitive, or longevity research), your interactions with certain product pages or purchases could, in principle, be treated as consumer health data under this broad definition — even though we do not ourselves use that information to draw conclusions about your health. This Policy explains how we limit that risk.

What We Actually Collect and Why

We do not ask you for medical records, diagnoses, or clinical health information, and we ask that you not send us any. What we do collect that could fall under these laws:

• Order and browsing data: the products you view or purchase, collected to run the store, fulfill orders, and for basic site analytics — not to build a profile of your health status.
• Voluntary messages: if you choose to mention a health goal, condition, or intended research application in a support message or product inquiry, we retain that message solely to respond to you.

We do not use either category to infer, label, or categorize you by health condition, and we do not build advertising or marketing audiences based on inferred health status. See Section 4 for how this applies to advertising pixels specifically.

Our Commitments

• No sale. We do not sell consumer health data.
• No advertising use. We do not use consumer health data for advertising, retargeting, or profiling.
• No third-party marketing sharing. We do not share consumer health data with affiliates, service providers, or any other third party for their own marketing purposes.
• Purpose limitation. We collect and use consumer health data only as necessary to provide the product, service, or support you've requested, and only with your consent where required by law.
• Limited access. We limit employee and contractor access to consumer health data to those who need it to help you.
• No geofencing. We do not use geofencing technology to establish a virtual boundary around a mental health facility, reproductive or sexual health facility, or similar location in order to identify, track, collect data from, or send notifications to consumers.

Advertising Pixels and Tracking Technologies

As of the effective date of this Policy, this section applies whether or not we are currently running third-party advertising pixels (such as Meta or TikTok pixels), because we want this commitment in place before any such tool is added, not after.

• Any advertising or analytics pixel will be consent-gated — it will not fire until you affirmatively opt in through our cookie banner — and declining will not block checkout or core site functionality.
• We will not configure these tools to transmit product-, category-, or SKU-level detail that could reveal or allow a third party to infer a health condition.
• We will not use browsing history, cart contents, or purchase history to build retargeting or lookalike advertising audiences based on inferred health status.
• We will not use session-replay or chat-transcript tools that capture your interactions with health-related product pages without your prior, affirmative consent.

If our practices change in a way that affects this section, we will update this Policy and, where required by law, seek your consent before the change takes effect.

Consent

Where we need your consent to collect or share consumer health data, we will ask for it separately from acceptance of our general Terms of Service or Privacy Policy — for example, through a specific checkbox or prompt — rather than bundling it into a general “by using this site you agree…” statement. You may withdraw consent at any time using the contact details in Section 8; withdrawal will be at least as easy as giving consent.

Your Rights (Washington and Nevada Residents)

If you are a Washington or Nevada resident, you have the right to:

• Confirm whether we are collecting, sharing, or selling your consumer health data, and to access that data.
• Withdraw consent to our collection or sharing of your consumer health data at any time.
• Delete consumer health data we've collected about you, including data held by our service providers and processors.
• Appeal a denial of any of the above requests.

To exercise these rights, email us at the address in Section 8 with the subject line “Consumer Health Data Request.” We will verify your identity before acting on a request and will respond within the time required by applicable law. If we deny your request, you may appeal by replying to our denial; if your appeal is also denied, Washington residents may file a complaint with the Washington State Attorney General.

Relationship to HIPAA

We are not a HIPAA-covered entity, and this Policy is not a HIPAA privacy notice. The rights and protections described here come from Washington's My Health My Data Act, Nevada's consumer health data law, and our own policy commitments — not from HIPAA, which does not apply to our business.

Contact Us

To exercise your rights or ask questions about this Policy, contact:

Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated Policy here with a revised “Last Updated” date, and where a change materially affects your rights, we will seek any consent required by law before it takes effect.