Consumer Health Data Privacy Notice

St.GABRIEL’s Pharmaceuticals, LLC

Effective Date: March 1, 2026

This Consumer Health Data Privacy Notice explains how St.GABRIEL’s Pharmaceuticals, LLC, a Delaware limited liability company (“St.GABRIEL’s,” “we,” “us,” or “our”), collects, uses, and discloses certain categories of consumer health-related data.

This notice applies to personal information that may qualify as consumer health data under applicable U.S. privacy laws, including laws such as the Washington My Health My Data Act and similar state privacy regulations.

This notice supplements our general Privacy Policy and focuses specifically on how we handle health-related information connected to our products, services, digital tools, and online interactions.

1. Scope of This Notice

This Consumer Health Data Privacy Notice applies to information that may reasonably be linked to an individual and that reveals or could be used to infer information about that person’s physical or health condition.

The notice covers consumer health data collected through:

our websites and digital platforms
mobile or web-based tools
consumer questionnaires and product finders
virtual consultations or support services
research programs or voluntary surveys
product purchases and customer interactions

It applies to interactions with St.GABRIEL’s whether online, through digital services, or through other consumer-facing channels.

2. What We Mean by Consumer Health Data

For purposes of this notice, consumer health data refers to personal information that identifies or can reasonably be linked to information about an individual’s health status or health-related characteristics.

Depending on the circumstances, this may include:

information about skin or dermatological conditions
symptoms or concerns related to physical health
information about treatments or health-related routines
biometric or facial analysis data derived from images or scans
indicators of physiological or biological characteristics
inferences about health conditions based on product usage or behavior
information that could suggest a consumer’s health interests or concerns

Under certain privacy laws, consumer health data may also include information that indirectly reveals health status, even if it is not medical data in the traditional sense.

3. Categories of Consumer Health Data We May Collect

Depending on the services used, St.GABRIEL’s may collect the following categories of consumer health-related information.

Information Provided Directly by Consumers

Consumers may voluntarily provide health-related information when interacting with our services. Examples include:

responses to product recommendation quizzes or questionnaires
participation in consumer research or product testing programs
communications with customer support representatives
submissions related to product reviews or feedback
information shared during voluntary consultations or advisory services

Such information may describe skin conditions, health concerns, treatment goals, or similar topics.

Image-Based or Biometric Information

Some of our digital tools may allow consumers to upload or capture photographs or images in order to receive product suggestions or educational information.

When these tools are used, automated systems may analyze visible features such as:

skin texture or tone
wrinkles or fine lines
pigmentation or discoloration
visible pores
surface irregularities
other dermatological indicators

These analyses may generate derived data or assessments used to help provide personalized product recommendations or educational insights.

Behavioral or Usage-Based Health Indicators

In certain circumstances, consumer health data may also include information inferred from consumer activity, such as:

browsing content related to specific health topics
engaging with educational materials concerning certain conditions
searching for products addressing particular symptoms
purchasing products intended for specific health concerns
using digital tools that evaluate or monitor physical characteristics

Information about device location or contextual usage may also be collected when interacting with our services, where permitted by applicable law.

4. How St.GABRIEL’s Uses Consumer Health Data

St.GABRIEL’s may use consumer health data for several purposes consistent with applicable privacy laws.

These uses may include:

Providing Requested Services

delivering digital tools or product recommendation systems
responding to consumer inquiries
enabling consultations or educational services
facilitating purchases and transactions

Personalization and Product Guidance

tailoring product suggestions to individual needs
improving relevance of digital tools and recommendations
providing customized content or experiences

Product Development and Research

analyzing trends related to product performance
conducting research and development activities
improving product formulations or services

Business Operations and Analytics

understanding how consumers interact with our platforms
evaluating effectiveness of services and tools
maintaining and improving system performance

Marketing and Communications

Where permitted by law, St.GABRIEL’s may use certain data to:

provide information about products or services
deliver relevant marketing content
personalize advertising or promotional communications

5. Sources of Consumer Health Data

St.GABRIEL’s may obtain consumer health data from several sources.

Directly From Consumers

Information provided voluntarily through:

forms and questionnaires
product reviews or feedback
customer service interactions
consultations or research participation

Automatically Through Technology

When consumers interact with our websites or digital tools, certain information may be collected automatically through technologies such as:

cookies and similar tracking technologies
analytics tools
usage logs and device identifiers

From Third Parties

We may also receive information from third parties, such as:

service providers assisting with our operations
marketing or analytics partners
publicly available sources where permitted by law

6. How We Share Consumer Health Data

St.GABRIEL’s may disclose consumer health data to certain categories of recipients as necessary to operate our services.

These may include:

Service Providers

Third-party companies that support our business operations, such as:

cloud hosting providers
technology platforms
customer service vendors
data analytics providers
payment processing services

These service providers are generally contractually obligated to use the data only for authorized purposes.

Corporate Affiliates

Consumer health data may be shared with affiliated entities within the St.GABRIEL’s corporate structure when necessary for operational, administrative, or research purposes.

Advertising and Marketing Partners

Where permitted by applicable law, certain information may be shared with advertising platforms or marketing partners to help deliver relevant content or advertisements.

This may include data used to:

measure marketing effectiveness
personalize advertising
deliver content across devices or platforms

Payment and Financial Institutions

When consumers purchase products or services, information necessary to complete transactions may be shared with:

banks
payment processors
financial service providers

Legal or Regulatory Authorities

St.GABRIEL’s may disclose information when required to do so by law or when reasonably necessary to:

comply with legal obligations
respond to lawful government requests
protect rights, safety, or property

7. Consumer Rights

Depending on the jurisdiction in which a consumer resides, individuals may have certain rights regarding their consumer health data.

These rights may include the ability to:

confirm whether we collect consumer health data about them
request access to such information
request deletion of consumer health data
withdraw consent for certain processing activities
obtain information about third parties with whom data has been shared

Consumers may exercise applicable rights by contacting St.GABRIEL’s using the methods described in our Privacy Policy.

8. Data Security

St.GABRIEL’s maintains reasonable administrative, technical, and physical safeguards designed to protect consumer health data from unauthorized access, disclosure, or misuse.

However, no method of transmission over the internet or method of electronic storage is completely secure, and absolute security cannot be guaranteed.

9. Changes to This Notice

St.GABRIEL’s may update this Consumer Health Data Privacy Notice periodically to reflect changes in our practices, legal requirements, or operational needs.

When updates are made, the revised notice will be posted with an updated effective date.

10. Contact Information

If you have questions about this Consumer Health Data Privacy Notice or our handling of consumer health data, you may contact: