nOfert

Consumer Health Data Privacy Policy

Last updated: February 14, 2026

This Consumer Health Data Privacy Policy supplements our general Privacy Policy and provides additional details about how nOfert ("we," "us," or "our") collects, uses, shares, and protects consumer health data. This policy is provided in compliance with applicable consumer health data privacy laws, including the Washington My Health My Data Act and similar state regulations.

1. What is Consumer Health Data?

Consumer health data refers to personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status. This may include, but is not limited to:

Health conditions, diseases, or diagnoses
Social, psychological, behavioral, and medical interventions
Health-related surgeries or procedures
Use or purchase of prescribed medication or health-related products
Bodily functions, vital signs, or biometric data
Reproductive or sexual health information
Gender-affirming care information
Information about attempts to obtain health services or supplies
Any information that we, or our service providers, process to associate or identify a consumer with the categories described above

2. Consumer Health Data We May Collect

As a marketplace platform, we may incidentally collect consumer health data in limited circumstances, including:

Purchase History: When you purchase health-related products through our Platform (such as wellness products, supplements, personal care items, or medical supplies), your transaction records may constitute consumer health data.
Search and Browsing History: Your searches for health-related products or browsing of health-related categories on our Platform.
Product Reviews: Information you voluntarily include in product reviews about health-related products.
Customer Support: Health-related information you voluntarily share when contacting our support team regarding health-related product orders.

We do not intentionally collect sensitive health data beyond what is incidentally gathered through normal marketplace operations.

3. Purposes for Collecting Consumer Health Data

We collect consumer health data solely for the following purposes:

Processing and fulfilling orders for health-related products
Providing customer support related to health product purchases
Facilitating returns and refunds for health-related products
Detecting and preventing fraud in transactions
Complying with legal and regulatory obligations
Improving our Platform and Services (using aggregated, de-identified data only)

4. How We Share Consumer Health Data

We may share consumer health data only in the following limited circumstances:

With Vendors: We share order details, including your name and shipping address, with Vendors who sell health-related products to fulfill your orders.
With Payment Processors: To process payments for health-related product purchases.
With Service Providers: With trusted service providers who assist us in operating our Platform, subject to contractual obligations to protect your data.
For Legal Compliance: When required by law, legal process, or governmental request.

We do not sell consumer health data. We do not share consumer health data for advertising or marketing purposes.

5. Data Security for Health Data

We apply enhanced security measures to protect consumer health data, including:

Encryption of health-related data in transit and at rest
Strict access controls limiting who can view health-related purchase data
Regular security audits of systems that process health data
Employee training on the handling of sensitive health information
Secure disposal of health data when it is no longer needed

6. Retention of Consumer Health Data

We retain consumer health data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Transaction data involving health products is retained for the same period as other transaction data (7 years for tax and legal purposes), after which it is securely deleted or de-identified.

7. Your Rights Regarding Consumer Health Data

You have the following rights with respect to your consumer health data:

Right to Know: You may request confirmation of whether we are collecting, sharing, or selling your consumer health data, and access to the specific categories and data collected.
Right to Deletion: You may request that we delete your consumer health data, subject to limited exceptions required by law.
Right to Withdraw Consent: You may withdraw your consent for the collection and sharing of your consumer health data at any time. Withdrawal of consent may affect our ability to process certain orders.
Right to Non-Discrimination: We will not discriminate against you for exercising your consumer health data privacy rights.

To exercise any of these rights, please contact our privacy team through our support channels. We will verify your identity before processing your request and respond within the timeframes required by applicable law.

8. Vendor Responsibilities

Vendors who sell health-related products on our Platform are required to handle consumer health data in compliance with all applicable laws. Vendors may only use consumer information shared with them for order fulfillment purposes and must implement appropriate security measures to protect such data.

9. Changes to This Policy

We may update this Consumer Health Data Privacy Policy from time to time. Material changes will be communicated through a notice on our Platform, and the "Last updated" date will be revised accordingly. We encourage you to review this policy periodically.

10. Contact Us

If you have questions or concerns about our consumer health data practices, or wish to exercise your rights, please contact our privacy team. We are committed to addressing your concerns promptly and transparently.