Washington Consumer Health Data Privacy Policy

Effective date: September 1, 2024

This Washington Consumer Health Data Privacy Policy (“Health Privacy Policy”) is provided pursuant to the Washington My Health My Data Act and supplements the Lemme Privacy Policy and applies to the Consumer Health Data (defined below) if you are a Washington resident or if we collect Consumer Health Data about you while you are in Washington. This Health Privacy Policy incorporates the disclosures and terms of the Lemme Privacy Policy and any capitalized but not defined terms in this Health Privacy Policy will have the definitions set forth in the Lemme Privacy Policy.

Collection of Consumer Health Data
“Consumer Health Data” means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status which may include information about your relationship with us, given the nature of our product offerings. Consumer Health Data does not include information that is publicly available, de-identified, or aggregated. What Consumer Health Data we collect may differ depending on how you interact with us.

Categories of Consumer Health Data We Collect
The Consumer Health Data we collect may include data related to a health or wellness condition we may infer based on your interest and purchase history of Lemme products.

Categories of Sources of Consumer Health Data
As described in the Categories of Sources of Personal Data section of Lemme’s Privacy Policy, we may collect Personal Data, including Consumer Health Data, directly from you, from when you use our products and services, and third parties such as our vendors.

Our Purposes for Collecting and Using Consumer Health Data
We collect, use, disclose, or otherwise process your Consumer Health Data as reasonably necessary for various purposes as described in the Our Commercial and Business Purposes for Collecting Personal Data and Other Permitted Purposes for Processing Persona Data but primarily to provide you with products and services as you have requested or authorized.
We may also collect, use, disclose, or otherwise process your Consumer Health Data to offer and provide supplements and similar wellness products to you.
We do not engage in geofencing around our stores that provides in-person health care services in Washington to either: (1) identify or track you when seeking health care services; (2) collect your Consumer Health Data; or (3) send notifications, messages, or advertisements to you related to your Consumer Health Data or health care services.

We may create aggregated, de-identified or anonymized data Consumer Health Data we collect, including by removing information that makes the data personally identifiable to a particular user. We may use such aggregated, de-identified or anonymized data and disclose it with third parties for our lawful business purposes, including to analyze, build and improve the Services and promote our business, provided that we will not disclose such data in a manner that could identify you.

We do not “sell” your Consumer Health Data as defined by the Washington My Health My Data Act.

How We Disclose Your Consumer Health Data
We disclose your Consumer Health Data as reasonably necessary to Third Parties and Affiliates, which may include:
• Vendors. We may disclose your Consumer Health Data to service providers, contractors, analytics partners, business partners, and vendors to provide and improve our Services to you.
• Other Parties. We may disclose your Consumer Health Data to other parties that your explicitly gave us consent to do so.

We may also disclose your Consumer Health Data in the following ways:
• We may disclose your Consumer Health Data to government, including law enforcement, or other parties to meet certain legal requirements and enforcing legal terms including: fulfilling our legal obligations under applicable law, regulation, court order or other legal process, such as preventing, detecting and investigating security incidents and potentially illegal or prohibited activities; protecting the rights, property or safety of you Lemme or another party; enforcing any agreements with you; responding to claims that any posting or other content violates third-party rights; and resolving disputes.
• All of your Personal Data that we collect may be transferred to a third party if we undergo a merger, acquisition, bankruptcy or other transaction in which that third party assumes control of our business (in whole or in part).

Washington Consumer Health Data Rights
If you are a Washington resident or we have collected your Consumer Health Data in Washington, you have rights set forth in this section subject to certain exceptions.

• Access: You have the right to request confirmation of or access to the Consumer Health Data that we process about you, including a list of all third parties and affiliates with whom we have disclosed or sold your Consumer Health Data and their contact information.
• Deletion: You have the right to request that we delete the Consumer Health Data that we have collected about you.
• Withdraw Consent: You have the right to withdraw consent from us collecting and disclosing your Consumer Health Data. Due to the nature of our Services, this may require a deletion of your Personal Data or account with us.
• Appeal: If we refuse to take action on your request within a reasonable period of time after receiving your request in accordance, you may appeal our decision. If we deny your appeal, you have the right to contact the Washington Attorney General at www.atg.wa.gov/file-complaint.
To exercise your rights, you must send us a request that (1) provides sufficient information to allow us to verify that you are the person about whom we have collected Personal Data and your relationship with us (such as your name and email address), and (2) describes your request in sufficient detail to allow us to understand, evaluate and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria.

You may submit a Valid Request by using the following methods:
• Email us at: support@lemmelive.com
• Call us at: 888-457-1505
If you have any questions about this section or whether any of the following rights apply to you, please contact us at support@lemmelive.com. We will not discriminate against you for exercising your rights under applicable law.