Consumer Health Data Privacy Notice

TD Health Consumer Health Data Privacy Notice

This Consumer Health Data Privacy Notice (“Notice”) supplements the TD Health (“TD Health,” “we,” “us,” or “our”) Privacy Notice (“Privacy Notice”) and applies to personal data defined as “consumer health data” subject to the Washington State My Health My Data Act (MHMDA).

Consumer Health Data We Collect

As described in the Information We Collect About You and How We Collect It section of the Privacy Notice, the data we collect depends on the context of your interactions with us and the choices you make, the information you provide to us, and applicable law.

Examples of consumer health data may include:

  • Information about health products you purchase from us.
  • Information about the health products, FAQs, and blogs you view on our website.
  • Any health information you provide through webforms, emails, chat, or otherwise.
  • Prescription information that you upload through our RX form.

Sources of Consumer Health Data

We collect consumer health data directly from you and through tracking technologies.

Why We Collect and Use Consumer Health Data

We collect and use consumer health data for the purposes described in the Information We Collect About You and How We Collect It section and Use of Information section of the Privacy Policy. Primarily, we collect and use consumer health data to offer our services, fulfill your purchases, respond to your requests and inquiries, and provide customer support as reasonably necessary to provide you with the products and services you have requested. We may also use your health data to better understand how our customers interact with our website and provide you with more relevant advertisements.

We will not use consumer health data for other purposes.

Our Sharing of Consumer Health Data

We may share each of the categories of consumer health data described above for the purposes described in the Disclosure of Your Information section of the Privacy Policy. In particular, we may share personal data, including consumer health data, with your consent or as reasonably necessary to provide any products or service you have requested or authorized, as described above.

For example, we share your content with third parties when you tell us to do so. If you purchase custom products, we will share information about the transaction with our service providers to craft the customized products. We may disclose data when we believe that doing so is necessary to comply with applicable law or respond to valid legal process.

Third Parties with Which We Share Consumer Health Data

As necessary for the purposes described above, we share consumer health data with the following categories of third parties:

  • Service providers. Vendors or agents (“processors”) working on our behalf may access consumer health data for the purposes described above. For example, companies we’ve hired to provide customer service support or fulfil orders may need access to data to provide those functions.
  • Parties to a corporate transaction. We may disclose consumer health data as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.
  • Affiliates. We enable access to data across our subsidiaries, affiliates, and related companies, for example, where we share common data systems or where access helps us to provide our services and operate our business. A full list of specific affiliates and locations is available here.
  • Government agencies. As described in our Privacy Policy, we disclose data to law enforcement or other government agencies when we believe doing so is necessary to comply with applicable law or respond to valid legal process.
  • Other third parties. In certain circumstances, it may be necessary to provide data to other third parties, for example, to comply with the law or to protect our rights or those of our customers, or when you consent or direct us to.

How to Exercise Your Rights

If you are covered by the MHMDA, then you may have certain rights with respect to consumer health data, including rights to access, delete, or withdraw consent relating to such data, subject to certain exceptions. You can request to exercise such rights using the information provided in the Your State Privacy Rights section of the Privacy Policy.

If your request to exercise a right is denied, you may appeal that decision by using the Right to Appeal information in the Choices About How We Use and Disclose Your Information section of the Privacy Policy. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint or other regulatory authority as applicable.

Changes To This Notice

We may change our Notice and privacy practices. New notices will be published on our website. If changes are material, the Notice that was in place when you submitted personal data to us will generally govern that data unless you consent to the new Notice.

Our Notice shows “effective” and “last updated” dates below. The effective date is the date the current version took effect. The last updated date is the date the current version was last substantively changed.

Effective Date: September 1, 2026

Last Update: September 1, 2026