Consumer Health Data Privacy Policy

Gleefull Supplements, Inc. (collectively, “Gleefull Supplements” “our,” “we,” or “us”) values and respects the privacy of its customers and visitors. While operating our business and interacting with you, we may collect, use and share “Consumer Health Data” as defined by U.S. state consumer health data privacy laws, such as the Washington My Health, My Data Act and Nevada SB370 (collectively, “Consumer Health Data Privacy Laws”). Consumer Health Data Privacy Laws apply only to consumers residing in certain states whose consumer health data is collected by Gleefull Supplements (“Consumers”, “you”, or “your”). This Consumer Health Data Privacy Policy (“Consumer Health Data Privacy Policy”) supplements the Privacy Policy (“Privacy Policy”) and applies solely to such Consumers.

This Consumer Health Data Privacy Policy provides you with detailed information about how Gleefull Supplements and its subsidiaries, divisions, affiliates, brands and other companies that link to this Consumer Health Data Privacy Policy collect, use, and share your Consumer Health Data, and describes your choices and rights. We encourage you to read this Consumer Health Data Privacy Policy carefully and if you have any questions, please contact us using the methods listed below.

We reserve the right to make changes to this Consumer Health Data Privacy Policy at any time and for any reason. Any changes will be reflected in a revised Consumer Health Data Privacy Policy posted on our website (the “Website”) and we will alert you that there has been a change by updating the “Last Updated” date displayed on the Consumer Health Data Privacy Policy. If we determine that such changes materially affect your privacy rights, we will provide additional notice to you at the email address specified in your account. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our Website and this Consumer Health Data Privacy Policy to check for any changes.

Definitions

“Consumer Health Data” is defined for purposes of this Consumer Health Data Privacy Policy and the Consumer Health Data Privacy Laws as personal information that is linked or reasonably linkable to a Consumer and that identifies the Consumer’s past, present, or future physical or mental health status.

Consumer Health Data does not include: (a) publicly available information, such as information from government records, information we reasonably believe you made available to the general public, or unrestricted information you have disclosed or made available; (b) deidentified or aggregated consumer information we maintain in deidentified form and do not attempt to re identify except as required or permitted by law; (c) health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”); or (d) personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (“FRCA”) and the Gramm-Leach-Bliley Act (“GLBA”).

Categories of Consumer Health Data Collected, Purposes for Collection, Use, and Sharing

We may collect your Consumer Health Data in a variety of ways, including when you provide information directly to us through our customer support agents, survey responses, or otherwise through our Website.

Categories of Consumer Health Data we may collect, use, and share include health conditions, treatments, diseases, diagnosis, medical conditions, health history, history of diagnosis, symptoms, medical recommendations, and other health or medical information.

We collect, use, and share the above-described Consumer Health Data to offer our products and services to you, as directed by you. We may share Consumer Health Data with our trusted service providers, such as website hosting vendors and technology support providers, to provide our services to you.

Your Rights

Subject to certain legal limitations and exceptions, Consumer Health Data Privacy Laws provide you with certain rights you may exercise:

• The Right to Confirm. You may request that we confirm whether we collect, share, or sell your Consumer Health Data.
• The Right to Access and Request Copies. You may request to access or request a copy of your Consumer Health Data, including a list of all third parties and affiliates with whom we shared or sold the Consumer Health Data.
• The Right to Correct. You may request that we correct your Consumer Health Data.
• The Right to Withdraw Consent. You may request to withdraw your consent from our collection and sharing of your Consumer Health Data.
• The Right to Delete. You may request that we delete your Consumer Health Data.

In order to exercise any of the rights detailed in this Consumer Health Data Privacy Policy, please contact us at info.gleefull@gmail.com. Exercising your rights under this Consumer Health Data Privacy Policy will not result in any discrimination by us. We will treat you the same as any other user.

We may require additional information from you to help us verify your identity and state or country of residence, and to process your request. The verification steps may vary depending on the sensitivity of the information and whether you have an account with us. If we are unable to verify your identity, we may deny your requests. You can designate an authorized agent to submit requests on your behalf. However, we will require written proof of the agent’s permission to do so and verify your identity directly.

If you make a request to exercise any of the applicable rights and we are unable to comply with your request, or if you disagree with or dispute our decision, you may request to appeal our decision. To appeal any data rights decision, please contact us at info.gleefull@gmail.com with the subject line “Data Rights Request Appeal.”