Consumer Health Data Privacy Policy

HotPause Health, Inc.

Last Updated: October 2, 2026

This Consumer Health Data Privacy Policy (“Health Data Policy”) is provided by HotPause Health, Inc. (“HotPause Health,” “we,” “us,” or “our”) in compliance with the Washington My Health My Data Act (RCW 19.373), the Nevada Consumer Health Data Privacy Law (NRS 603A.400-550), and other applicable state consumer health data privacy laws.

This Health Data Policy applies to consumer health data that we collect, use, or share when you interact with our website (hotpausehealth.com), mobile application, and related services (collectively, the “Services”). This Health Data Policy supplements, and should be read together with, our general Privacy Policy.

Please read this Health Data Policy carefully to understand our policies and practices regarding your consumer health data and how we will treat it. If you do not agree with our policies and practices, you should not use the sites, products, applications, platforms, or other services linking to this Health Data Policy.

1. Categories of Consumer Health Data We Collect

Consumer health data, as used in this Health Data Policy, means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer’s past, present, or future physical or mental health status that we collect or control the collection of (“consumer health data”).

We may collect the following categories of consumer health data from and about you:

Information about any of the following:
- individual health conditions, treatment, diseases, or diagnoses;
- diagnostic testing, treatment, or medication;
- social, psychological, behavioral, or medical interventions;
- health-related surgeries and procedures;
- use or purchase of prescribed medication; or
- bodily functions, vital signs, symptoms, or measurements of physical or mental health status.
Reproductive or sexual health information, which is personal information related to seeking or obtaining past, present, or future reproductive or sexual health services, including:
- individual health conditions, status, diseases, or diagnoses;
- social, psychological, behavioral, and medical interventions;
- health-related surgeries or procedures, including abortions;
- use or purchase of medication, including abortion medications;
- bodily functions, vital signs, symptoms, or measurements of the information described in this subsection;
- diagnoses or diagnostic testing, treatment, or medication; or
- medical or nonmedical services related to and provided in conjunction with an abortion, such as associated diagnostics, counseling, supplies, and follow-up services.
Data identifying a consumer seeking health care services. Health care services mean any service provided to a person to assess, measure, improve, or learn about a person's mental or physical health, including but not limited to:
- individual health conditions, status, diseases, or diagnoses;
- social, psychological, behavioral, and medical interventions;
- health-related surgeries or procedures;
- use or purchase of medication;
- diagnoses or diagnostic testing, treatment, or medication; or
- reproductive health care services.
Information about your interest in or purchases of health and wellness products, including supplements, topical treatments, and wellness devices, to the extent such purchase or browsing activity reveals information about your health status.
Any other health information you provide through interactive health tools, including through quizzes, surveys, symptom trackers, or other health-related assessments that you voluntarily complete.
Any inferences of the above categories derived, extrapolated, or inferred from non-health information.

2. Purposes for Collecting Consumer Health Data

We collect consumer health data for the following purposes:

To fulfill the purposes for which you provided the data or that were described when it was collected.
To perform the Services or provide the goods that you request from us and respond to your questions or requests for information.
To provide personalized product recommendations based on your self-reported symptoms, wellness goals, or health concerns.
To facilitate services and operations performance, security, and integrity, including:

undertaking activities to prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted consumer health data or that otherwise threaten to compromise the performance, security, or integrity of our business; and
performance analytics, identity verification and authorization, site and application optimization, and quality control.

To deliver content, educational materials, and resources relevant to your menopause or perimenopause stage and symptoms.
To improve the Services, including developing and refining health quizzes, assessments, and interactive tools.
To communicate with you about products and services that may be relevant to your health and wellness needs, subject to your consent.
To communicate with you about changes to the Services, our sites, products, or other services.
To fulfill your orders and provide customer support related to health and wellness products you have purchased.
To conduct internal research and analytics to better understand our customers’ needs and improve our product offerings.
Recordkeeping and auditing.
To comply with our legal obligations and risk management, audit, investigations and reporting, and other legal and compliance reasons.

We will not collect, use, or share consumer health data for any purpose without first obtaining any consent required by applicable law.

3. Sources of Consumer Health Data

We may collect consumer health data from the following sources:

Directly from you: When you voluntarily provide information through health quizzes, symptom assessments, surveys, account registration, product reviews, customer support inquiries, or other interactions with our Services.
From your use of the Services: Through your browsing activity, product searches, and purchase history on the Services, to the extent such activity reveals information about your health status.
From our e-commerce platform: From Shopify, which hosts our online store and processes transactions on our behalf.

We process consumer health data through collection, storage, organization, analysis, use, sharing, and deletion using manual and automated systems in order to carry out the purposes described in this Health Data Policy.

4. Sharing Consumer Health Data

We do not sell consumer health data.

We will not share consumer health data for any purpose without first obtaining any consent required by applicable law.

We may disclose any of the consumer health data categories listed above to processors, service providers, and contractors that help us provide products and services to you as well as to other third parties, including the following:

Shopify, Inc., our e-commerce platform provider, which hosts our online store and processes transaction data on our behalf.
Independent product suppliers that fulfill and ship products purchased through our Services. Suppliers receive only information necessary to fulfill an order, such as name, shipping address, and applicable order details. Suppliers do not receive symptom data, quiz responses, or health assessment information.
Service providers, such as our email marketing platform, that process customer, purchase, preference, and other information on our behalf to deliver communications, manage customer preferences, host or support quizzes, assessments, or similar features, and, where permitted by applicable law and subject to applicable consent requirements, personalize communications based on products or topics that may be relevant to you. These service providers process information on our behalf pursuant to applicable contractual requirements and are not authorized to use consumer health data for their own advertising, targeting, or profiling purposes.

We do not disclose consumer health data to advertising networks, data brokers, or social media platforms for advertising, targeting, profiling, or advertising optimization.

We do not collect or use consumer health data for the purpose of training large language models.

We require processors that receive consumer health data to process that information only for authorized purposes and subject to applicable contractual, confidentiality, and security requirements.

We may also disclose consumer health data as permitted by applicable law, including:

With your consent.

To prevent, detect, protect from, or respond to security incidents, identity theft, fraud, harassment, or malicious or deceptive activities.
To a third party acquiring our assets if we sell our business or otherwise if we are a party to a merger, acquisition, bankruptcy, or other transaction involving a third party taking control of our assets or business.
To investigate, report, or take legal action to protect our rights, property, and safety and the rights, property, and safety of others.
To protect your or others' vital interests, including health and safety.

Third parties may collect consumer health data over time and across different websites or online services when you use any of our websites or online services.

5. Your Rights Regarding Consumer Health Data

Under applicable law, you may have specific rights with respect to your consumer health data, which may include:

Request confirmation that we collect, share, or sell your consumer health data.
Request access to your consumer health data that we have collected or control, including:
- a list of all third parties and affiliates that we have shared or sold your consumer health data to; and
- the email addresses or other online method to contact those third parties and affiliates.
Withdraw your consent for our collection and sharing of your consumer health data.
Direct us to cease collecting, sharing, or selling your consumer health data.
Appeal a refusal to act on a request concerning your consumer health data.
Request that we delete your consumer health data.

To exercise any of your rights set forth above, please contact us at the email address provided below in Section 8.

We will respond to your request without undue delay and within forty-five (45) days of receiving your verified request, unless mandated otherwise by applicable law. If we require additional time, we will notify you and may extend the response period by an additional forty-five (45) days as permitted by applicable law. For the avoidance of doubt, within fifteen (15) days of your exercise of any applicable right to withdraw your consent, we will cease to process your consumer health data, if required by applicable law. We will not discriminate against you for exercising any of your rights under, or for taking any action to enforce applicable law.

We may require you to verify your identity before processing your request. We will not require you to create an account to exercise your rights.

If we refuse to take action on your request, we will notify you of our decision and the reasons for it. Residents of the State of Washington and Nevada have the right to appeal that decision within a reasonable period of time by contacting us at the email address provided in Section 8 below with the subject line “Consumer Health Data Appeal.” The appeal process is available on the same basis as, and is similar to, the process for submitting your initial request. Within forty-five (45) days of receiving your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, together with a written explanation of the reasons for our decision. If we deny your appeal, we will also provide you with a method to contact the applicable Office of the Attorney General to submit a complaint.

6. Geofencing Restriction

We do not implement geofences around any entity that provides in-person health care services for the purpose of identifying or tracking consumers seeking health care services, collecting consumer health data from such consumers, or sending notifications, messages, or advertisements to consumers related to their consumer health data or health care services.

7. Changes to This Health Data Policy

We may update this Health Data Policy from time to time. If we make material changes, including collecting new categories of consumer health data or using consumer health data for new purposes, we will provide notice on our website and obtain your affirmative consent before such changes take effect. The “Last Updated” date at the top of this page indicates when this Health Data Policy was last revised.

8. Contact Information

If you have any questions about this Health Data Policy or wish to exercise your rights, please contact us:

HotPause Health, Inc.

Email address: hello@hotpausehealth.com

Subject line: “Consumer Health Data Request”