Consumer Health Data Privacy Policy

Effective date: November 1, 2026

This Consumer Health Data Privacy Policy ("Policy") explains how CareNatal PBC ("CareNatal", "we", "us") collects, uses and shares consumer health data, and the rights you have over it. It supplements our Privacy Policy and applies to residents of Washington, Nevada and Connecticut under those states' consumer health data laws, and to any other state whose law gives you similar rights, including Virginia residents' rights over reproductive and sexual health information. Where this Policy and our Privacy Policy differ for consumer health data, this Policy controls.

CareNatal is not a healthcare provider and is not covered by HIPAA. We sell dietary supplements and offer educational coaching sessions through independent coaches.

What Consumer Health Data Means

"Consumer health data" is personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status. For CareNatal, that most often means reproductive health information: whether you are planning a pregnancy, pregnant, breastfeeding or postpartum, your trimester or due date, and inferences about those things drawn from what you buy, answer or tell us.

Consumer Health Data We Collect

Reproductive and life-stage information you give us, such as whether you are trying to conceive, pregnant or postpartum, your due date or trimester, and your answers to any quiz, survey or form that asks about your stage.
Purchase-based inferences. Buying a prenatal, preconception or postpartum product, or subscribing to one, may indicate pregnancy or fertility status.
Customer support and coaching program information, such as health-related details you choose to share when you email us, your choice of coach in our coaching program, and whether a coaching session took place.
Product experience reports, including any reaction, side effect or health complaint you report to us about a CareNatal product.

We do not collect biometric data, precise geolocation for health purposes, or gender-affirming care information, and we do not use geofencing around healthcare facilities.

Where It Comes From

Directly from you, through orders, your account, quizzes and surveys, customer support messages and coaching session bookings.
From your activity with us, such as the products you buy or subscribe to.
From the independent coaches in our coaching program, limited to product reaction reports and a notice that a safety protocol was used, never the content of your session.

Why We Use It

To fulfill and support your orders and subscriptions.
To run the coaching program: matching you with the coach you choose, scheduling, and following up on your experience.
To respond to your questions and support requests.
To meet legal obligations, including reporting serious adverse events to the U.S. Food and Drug Administration.
With your separate consent, to send you communications tailored to your stage.

We collect consumer health data only with your consent or to the extent necessary to provide a product or service you have requested. We do not use consumer health data for advertising, and we do not share it with advertising platforms.

Who We Share It With

Service providers that act on our instructions and are contractually bound to protect it: order fulfillment and shipping, payment processing, email and SMS delivery, customer support, scheduling, and website hosting (including Shopify).
Your chosen coach in our coaching program, who receives your name, email and booking details so they can host your session. Coaches are independent businesses and handle what you share during a session under their own privacy practices.
Regulators when the law requires it, such as adverse event reports to the FDA.
Affiliates: None. CareNatal has no affiliated companies that receive consumer health data.

We do not sell consumer health data, and we will not sell it in the future without your separate written authorization. We obtain your separate consent before sharing consumer health data for any purpose other than those listed above.

Your Rights

You may:

Confirm whether we collect, share or sell consumer health data about you, access it, and get a list of the third parties with whom we have shared it.
Withdraw your consent to our collection or sharing of your consumer health data.
Ask us to delete your consumer health data. We will also instruct our service providers to delete it.

To exercise these rights, email hello@carenatal.com with the subject line "Consumer Health Data Request," or write to us at the address below. We will verify your identity using information already on file, such as your order email, and respond within 45 days. If we deny your request, we will explain why and how to appeal. To appeal, reply to our response with the word "Appeal." We will respond to an appeal within 45 days. If your appeal is denied, you may contact your state attorney general: Washington at atg.wa.gov, Nevada at ag.nv.gov, Connecticut at portal.ct.gov/ag, or Virginia at oag.state.va.us.

We will not discriminate against you for exercising any of these rights.

Retention

We keep consumer health data only as long as needed for the purposes above. Adverse event records are kept for six years as required by federal law. Coaching session booking records are kept for three years. Other consumer health data is deleted when it is no longer needed for your orders or your requests.

Changes to This Policy

If we change the categories of consumer health data we collect, the purposes we use it for, or the parties we share it with, we will update this Policy, change the effective date above, and obtain any new consent the law requires before applying the change to you.

Contact

CareNatal PBC
7918 Jones Branch Dr #402, McLean, VA 22102
hello@carenatal.com
833-330-0370