Consumer Health Data Privacy Notice

1Scope of This Notice

Nefense Professional Corporation is an e-commerce retailer. Certain state privacy laws use broad definitions of consumer health data that can include information from an ordinary retail interaction if the information identifies, reveals, or permits an inference about a consumer's health interests or status. This notice applies only to information that qualifies as consumer health data under an applicable law. This notice is separate from our general Privacy Policy because some state laws impose additional rules for consumer health data. It does not change the ordinary retail nature of our business.

2Consumer Health Data We May Collect

Depending on the circumstances, the following information may qualify as consumer health data when it is linked or reasonably linkable to a consumer:

• Products or product categories a consumer views, purchases, returns, or asks about, if applicable law treats that activity as revealing or supporting an inference about health.
• Information a consumer voluntarily includes in a product question, review, support message, return request, or safety report that relates to the consumer's health, symptoms, or bodily condition.
• Account, order, device, and contact information when it is linked to information that itself qualifies as consumer health data. We collect this information from the consumer, the consumer's browser or device, and service providers that perform a transaction or support function for us.

3Why We Collect and Use It

We may collect and use consumer health data only as reasonably necessary to provide products and services requested by the consumer, complete and deliver an order, maintain an account, provide customer support, process a return or warranty request, investigate a product safety concern, prevent fraud or security incidents, comply with law, or for another purpose for which the consumer has provided any consent required by law.

4Sharing

We may disclose consumer health data to service providers or processors that need it to perform a specific function for us, such as payment processing, order fulfillment, shipping, customer support, security, or legal compliance. We require service providers to process information only for authorized purposes and subject to appropriate contractual restrictions. We may also disclose information when required by law, legal process, or a valid governmental request, or when reasonably necessary to protect rights, safety, or security as permitted by law.

5What We Do Not Do

Nefense does not sell consumer health data. We do not use consumer health data to build advertising audiences, target advertising based on health information or health-related inferences, or disclose consumer health data to advertising platforms for those purposes. We do not use geofencing around health care facilities to identify, track, or target consumers.

6Consent

Where applicable law requires affirmative consent before collecting or sharing consumer health data for a particular purpose, Nefense will request that consent separately and describe the relevant purpose before the collection or sharing occurs. Where a separate authorization is required for a sale of consumer health data, Nefense will not rely on general consent as a substitute for that authorization.

7Consumer Rights

Depending on applicable law, a consumer may have the right to confirm whether we collect, share, or sell consumer health data; access that data; receive information about sources and recipients; withdraw consent; and request deletion. A consumer may also have a right to appeal a denial of a request. To exercise a right, email support@nefense.com with the subject line 'Consumer Health Data Request' and identify the request and the email address associated with the account or order. We may take reasonable steps to verify the request. We will not discriminate against a consumer for exercising a privacy right.

8Retention and Security

We retain consumer health data only for as long as reasonably necessary for the purpose for which it was collected, including transaction records, legal obligations, fraud prevention, warranty administration, and product safety. We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the information.

9Changes and Contact

We may update this notice to reflect changes in law or our practices. A revised notice will identify its effective date. Questions or requests may be sent to support@nefense.com or to Nefense Professional Corporation, 350 W 6th #151, Dubuque, IA 52004.