Consumer Health Data Privacy Policy

Last Updated: July 1, 2024

This Consumer Health Data Privacy Policy (“Consumer Health Data Privacy Policy”) governs the Platforms and Stores owned and operated by Exdup that display, reference, or link to this Consumer Health Data Privacy Policy. This Consumer Health Data Privacy Policy supplements the Exdup Privacy Policy and applies to “consumer health data” as defined in applicable privacy law. Capitalized terms used and not defined in this Consumer Health Data Privacy Policy shall have the meaning assigned in Exdup Privacy Policy.

TYPES OF CONSUMER HEALTH DATA COLLECTED

When you engage with our Platforms, you may provide us with some personal information that may be considered consumer health data. By creating a baby registry and providing an expected arrival date, the baby registry may reveal your pregnancy or maternity status that may be considered consumer health data.

HOW WE COLLECT CONSUMER HEALTH DATA

Exdup collects personal information as further described in our "How We Collect Your Personal Information" section of the Exdup Privacy Policy. We may collect consumer health data when you create a baby registry and associate the baby registry and the consumer health data with your Exdup online account.

WHY WE COLLECT AND USE CONSUMER HEALTH DATA

Exdup uses the personal information that we collect as further described in our “How We Use Your Personal Information” section of the Exdup Privacy Policy. We use your baby registry information, some of which may be considered consumer health data, in order to offer the baby registry service to you. With your consent, we may also send you marketing emails and messages about promotions or offers associated with the baby registry.

WITH WHOM DO WE DISCLOSE CONSUMER HEALTH DATA

We disclose personal information as further described in the "How we disclose your personal information" section of the Exdup Privacy Policy. We may share your baby registry information, some of which may be considered consumer health data, with the categories of third parties listed below in order to provide the baby registry service. We will obtain your consent before sharing such information with third parties for other purposes except where permitted by law.

  • Internally. We may disclose your information within the Exdup family of companies. This includes our parent company, Exdup Corporation, and our subsidiaries and affiliates including Exdup Value Services, Inc.; Exdup Cares, LLC; KIN, Inc.; Exdup Indiana, Inc.; KWAL, LLC; Exdup Holding Company, LLC; Exdup Michigan, L.P.; and Exdup Indiana, L.P.

  • With Our Service Providers. We may disclose your information with third parties who perform services on our behalf. For example, this may include merchandise vendors and payment processors. It may also include companies that send emails on our behalf.

  • To Comply With the Law or To Protect Ourselves. For example, this could include responding to a court order or subpoena. It could also include sharing information if a government agency or investigatory body requests such information. We may disclose information when we are investigating a potential fraud. This could include, but is not limited to, fraud we think has occurred during a sweepstakes or promotion. We may also disclose information if you are the winner of a sweepstakes or other contest with anyone who requests a winner’s list.

  • For Other Reasons We May Describe to You. We may also disclose your information for other purposes as disclosed at the time you provide your information or otherwise with your consent.

HOW TO EXERCISE YOUR RIGHTS

Applicable privacy law provides covered individuals with certain rights to access, delete, or withdraw consent relating to their consumer health data, subject to certain exceptions.

If you would like to exercise the rights outlined above, please follow the prompts here or by calling 855-564-5705. We may take steps to verify your identity before responding to your request by asking you a series of questions about your previous interactions with us.

If your request to exercise a right under applicable privacy law is denied, you may appeal that decision by contacting us by telephone at 855-564-5705. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington State Attorney General at http://www.atg.wa.gov/file-complaint or the Nevada Attorney General at http://ag.nv.gov/Complaints/File_Complaint/.

REVISIONS TO THIS CONSUMER HEALTH DATA PRIVACY POLICY

We reserve the right, at our sole discretion, to change, modify, add, remove, or otherwise revise portions of this Consumer Health Data Privacy Policy at any time. We will notify you of any material changes to our Consumer Health Data Privacy Policy as required by law, such as via notice on our website or to your email address on file. We will also post an updated copy on our Platforms. Please check our Platforms periodically for updates. Your continued use of the Platforms and shopping in our Stores following the posting of changes to these terms means you accept these changes.

HOW TO CONTACT US

If you have any questions or concerns about this Consumer Health Data Privacy Policy or the practices described herein, you may call us at 855-564-5705. You may also write to us at the following address:

Exdup, Inc. P.O. Box 3043 Milwaukee, Wisconsin 53201