Health Data Privacy Statement

Health Data Privacy Statement

Health Data Privacy Statement for Nevada and Washington ConsumersLast Updated: 12 Feb 2026

Pursuant to the Washington My Health My Data Act and the Nevada Consumer Health Privacy Law, Vitaco Health Australia Pty Limited and Vitaco Health (NZ) Limited (“we,” “us,” or “our”) are providing the following details regarding the categories of consumer health data that we collect, use, and share about Washington and Nevada consumers. This Health Data Privacy Statement (the “Privacy Statement”) supplements our Privacy Policy.

Sources & Categories of Consumer Health Data

For purposes of this Privacy Statement, “consumer health data” means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status.

We may collect consumer health data that you choose to provide to us, including when you communicate with our Naturopaths, Nutritionists, or Customer Service representative; submit information through our websites; participate in surveys, promotions, or competitions; request product or nutrition advice; or otherwise engage with us. The types of consumer health data we collect will depend on the information you voluntarily provide and the nature of your interaction with us. The categories of consumer health data we may collect include:

  • Health conditions, treatment, diseases, or diagnosis: such as information you provide about a medical condition, dietary restriction, or symptoms when asking for product guidance.
  • Social, psychological, behavioral, and medical interventions: such as information you provide about lifestyle changes, wellness goals, or behavioral health practices.
  • Health-related surgeries or procedures: such as information you provide about past or planned surgeries when asking for product guidance.
  • Use or purchase of prescribed medication: such as information you provide about medications or supplements you are currently using when seeking advice on product suitability.
  • Bodily functions, vital signs, symptoms, or measurements: such as weight, height, or other measurements you provide to assist with product or nutrition advice.
  • Diagnoses or diagnostic testing, treatment, or medication: such as information you provide about past diagnostic tests, medical assessments, or treatment plans.
  • Gender-affirming care information: such as information you provide when seeking advice or asking questions about product suitability.
  • Reproductive and sexual health information: such as information you provide relating to fertility, pregnancy, or related health concerns.
  • Information that could identify your attempt to seek health care services: such as communications with our Naturopaths, Nutritionists, or Customer Service representative that indicate you are seeking health-related information.
  • Any inferences of the above categories of health data derived or extrapolated from non-health information: such as insights we may derive from the information you provide when recommending products or offering nutrition or health advice.

How We Use and Share Consumer Health Data

We collect, use, and share consumer health data to operate, manage, and maintain our business, to provide our products and services, and to accomplish our business purposes and objectives, including, for example, to:

  • Develop, improve, and maintain our products and services;
  • Personalize, advertise, and market our products and services;
  • Conduct research, analytics, and data analysis;
  • Undertake quality and safety assurance measures;
  • Conduct risk and security monitoring;
  • Detect and prevent fraud;
  • Perform identity verification;
  • Perform accounting, auditing, and other internal functions, such as internal investigations;
  • Comply with legal obligations and internal policies;
  • Maintain records; and
  • Exercise and defend legal claims.

We may also use consumer health data and share it with a third party in the context of any reorganization, financing transaction, merger, sale, joint venture, partnership, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

We may share each of the categories of consumer health data listed above with the following categories of third parties:

  • Our affiliates (Vitaco Health Australia Pty Limited and Vitaco Health (NZ) Limited);
  • Our service providers;
  • Public and governmental authorities; and
  • Other third parties.

In certain circumstances, it may be necessary to provide consumer health data to other third parties, for example, to comply with applicable law or to protect the rights, safety or property of us, you, and others.

We do not “sell” consumer health data, as defined in the Washington My Health My Data Act and the Nevada Consumer Health Privacy Law.

Individual Rights

If you are a Washington or Nevada consumer, you may make the following requests regarding your consumer health data, subject to applicable law and certain exceptions:

  • (1) Request to Know: You may request that we disclose:
    • Whether we are collecting, sharing, or selling your consumer health data; and
    • The third parties to whom we have shared or sold your consumer health data.
  • (2) Request to Opt-out: You may request to opt-out of the collection or sharing of your consumer health data.
  • (3) Request to Delete: You may request that we delete your consumer health data.
  • (4) Request to Access: If you are a Washington consumer, you may request that we provide you with:
    • The email address or other online mechanism you can use to contact the third parties with whom your consumer health data is shared or sold; and
    • A copy of your consumer health data.
  • (5) Request to Amend: If you are a Nevada consumer, you may request that we make changes to your consumer health data.

To make a rights request, please contact us at privacy@vitaco.com.au. We will verify and respond to your request consistent with applicable law. We may need to request additional information from you in order to verify your identity and protect against fraudulent requests. If you maintain a password-protected account with us, we may verify your identity through our existing authentication practices for your account and require you to re-authenticate yourself before disclosing or deleting your consumer health data. If you make a Request to Delete, we may ask you to confirm your request before we delete your consumer health data.

If we refuse to take action on your request, you may appeal this refusal by contacting us at privacy@vitaco.com.au.

Changes to This Privacy Statement

We may change or update this Privacy Statement from time to time. When we do, we will post the revised Privacy Statement on this page with a new “Last Updated” date.