Consumer Health Data Privacy Notice

Version 1.0 | Last Updated November 1, 2026

Separate sensitive-data notice

This notice applies when information submitted to Nudori identifies or can reasonably be linked to a person and concerns skin reactions, symptoms, physical condition, treatment, or other health-related status. It is intended to be published separately from the general Privacy Policy where required by applicable consumer-health-data law.

CHD-1. Scope

This Consumer Health Data Privacy Notice applies to consumer health data processed by Nudori Inc. outside of a HIPAA-covered healthcare relationship, including information voluntarily submitted in connection with a product-safety or skin-reaction report.

Ordinary purchase of a nipple cover, bra, tape, or other product does not by itself mean that Nudori treats the purchase as consumer health data. Purchase or browsing information becomes consumer health data only where applicable law treats it as identifying or associated with a person's past, present, or future physical or mental health status or Nudori processes it to draw such an inference.

CHD-2. Categories of consumer health data

Skin-reaction, irritation, allergy, blistering, pain, burning, redness, swelling, peeling, or other symptom information voluntarily reported.
Body-area or skin-reaction photographs voluntarily submitted through an approved support route.
Information about product application, wear duration, removal, and the physical response associated with a reported safety concern.
Information about medical attention or treatment that a customer voluntarily provides in connection with a complaint.
Pregnancy, breastfeeding, surgery, skin condition, medication, or other health-related information voluntarily disclosed when seeking product-safety guidance or support.
Inferences about health status that Nudori intentionally creates from the information above, if any.

CHD-3. Sources

Directly from the consumer through secure support, return, safety, or privacy channels.
From an authorized agent acting for the consumer.
From a marketplace or retailer only where the consumer submitted a safety report and the channel lawfully provides the information to Nudori.
From an approved service provider that hosts the support, secure-upload, quality, or safety workflow on Nudori's behalf.

CHD-4. Purposes for collecting and using consumer health data

Respond to the consumer's support or safety request.
Assess a potential product reaction, defect, quality issue, or misuse concern.
Determine an appropriate refund, replacement, alternative, stop-use instruction, or other remedy.
Investigate product lots, recurring patterns, and corrective actions.
Meet product-safety, insurance, legal, claims, recall, and regulatory obligations.
Protect customers, Nudori, and others from safety, fraud, or legal risk.
Create deidentified or aggregated safety information that cannot reasonably identify the consumer.

Nudori collects consumer health data only with the consumer's consent for a specified purpose or to the extent reasonably necessary to provide a product or service the consumer requested, as permitted by applicable law.

Where separate consent is legally required for sharing, Nudori will obtain that consent before sharing unless the disclosure is necessary to provide the requested service or another legal exception applies.

Nudori does not require a body-area image when product, packaging, lot-code, written symptom, or other evidence is sufficient. A reasonable alternative will be offered where possible.

CHD-6. Categories of consumer health data shared

Nudori shares consumer health data only when necessary for the purposes described in this Notice. The categories shared may include the reported symptoms, relevant product-use information, order or lot information, and an image only when the image is necessary for the recipient's role.

Nudori does not share consumer health data with advertising partners, data brokers, or public AI tools.

CHD-7. Third parties and affiliates

Consumer health data may be shared with the following categories of third parties when necessary: approved secure-support and cloud providers; product-quality, safety, laboratory, insurer, or claims providers; legal and professional advisers; regulators, courts, law enforcement, or government authorities; and service providers supporting a corrective action or recall.

Nudori Inc. does not currently share consumer health data with an affiliate for the affiliate's independent marketing or commercial purposes. If that changes, this Notice will identify the specific affiliate and purpose before the new collection or sharing occurs where required.

CHD-8. No sale or targeted advertising

Nudori does not sell consumer health data.

Nudori does not use consumer health data for targeted advertising, cross-context behavioral advertising, audience enrichment, or ordinary marketing personalization.

Nudori does not use a consumer's private safety report or intimate image in advertising without separate express permission that is distinct from the support or safety process.

CHD-9. Your consumer health data rights

Confirm whether Nudori collects, shares, or sells consumer health data about you.
Access the consumer health data Nudori maintains about you.
Receive a list of third parties and affiliates with whom Nudori shared or sold your consumer health data, where required.
Withdraw consent from future collection or sharing where processing is based on consent.
Delete consumer health data, subject to applicable legal requirements and exceptions.
Appeal a refusal to act on a request where applicable.
Exercise rights without unlawful discrimination.

CHD-10. Submitting and verifying a request

Submit a request through the privacy request form linked under “Your Privacy Choices” or email [email protected] with the subject line “Consumer Health Data Request.”

Nudori uses secure and reliable methods to authenticate requests. You do not need to create a new account. Nudori may request limited additional information if it cannot reasonably authenticate the request.

Where applicable, Nudori responds within 45 days and may extend once where legally permitted after providing notice. An appeal may be submitted through the same channel with the subject line “Consumer Health Data Appeal.”

CHD-11. Deletion, service providers, and backups

When Nudori receives a valid deletion request, it deletes the consumer health data from active systems and notifies applicable affiliates, processors, contractors, and third parties that received the data so they can honor the request, subject to applicable law.

If the information is stored in an archived or backup system, deletion may be delayed until the system is restored or the data is overwritten, but Nudori will observe applicable legal deadlines. Where Washington law applies, deletion from archived or backup systems will not be delayed longer than permitted by that law.

Nudori may retain only information that applicable law permits or requires, such as minimum records needed for legal claims, product safety, recalls, fraud, or proof of a request, and will document the basis for retention.

CHD-12. Security and access

Access to consumer health data is restricted to authorized employees, contractors, and processors for whom access is necessary to provide the requested service or perform an approved safety, quality, security, or legal function.

Nudori uses reasonable administrative, technical, and physical safeguards appropriate to the sensitivity and volume of the data. Consumer health data is kept out of routine advertising systems, general analytics audiences, and public AI tools.

CHD-13. Geofencing

Nudori does not use geofencing around a healthcare facility to identify, track, collect data from, or send messages or advertisements to consumers concerning consumer health data.

CHD-14. Changes and contact

Nudori will not collect, use, or share additional categories of consumer health data, or use existing consumer health data for materially different purposes, without updating this Notice and obtaining any consent required by law before the new activity begins.

Questions and requests may be directed to [email protected] or the privacy request form linked from the Website.

End of Privacy Policy and Consumer Health Data Privacy Notice