Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy supplements our Privacy Policy and describes how SF Peptides(“we”) — a peptide and skincare brand powered by CompoundMD — collects, uses, and shares consumer health dataas defined by applicable laws, including the Washington My Health My Data Act and Nevada SB370. “Consumer health data” means personal information that identifies your past, present, or future physical or mental health status. It does not include information governed by HIPAA, which is handled separately by the licensed telehealth provider.

Consumer Health Data We Collect

Depending on how you use our site, this may include:

• Information you share in our product quiz or intake (for example, goals, areas of focus, and birth year);
• The products and conditions you express interest in, purchase, or join a waitlist for;
• Inferences we draw from your activity that indicate an interest in a health-related product or outcome.

We do not collect precise geolocation to identify health-related activity, and we do not knowingly collect consumer health data from anyone under 18.

How We Use Consumer Health Data

We use consumer health data to provide and improve our products and services — fulfilling orders, managing subscriptions, responding to your inquiries, and (with your consent where required) tailoring and measuring our communications and advertising. We use it only for the purposes described here or as you otherwise direct.

How We Share Consumer Health Data

We share consumer health data only with service providers who process it on our behalf and under contract — for example, our technology platform (CompoundMD / CompoundOS), payment processor (Stripe), communications providers, the fulfilling pharmacy, and analytics and advertising partners for measurement — and only as needed to provide our services. The categories of third parties with whom we may share are described in our Privacy Policy.

We Do Not Sell Your Health Data

We do not sell consumer health data. We will not sell it, or share it in a way that constitutes a “sale” under applicable law, without first obtaining your valid authorization.

Your Rights

Subject to applicable law, you have the right to:

• Confirm whether we collect, share, or sell your consumer health data, and access that data;
• Withdraw consent to our collection and sharing of your consumer health data;
• Request deletion of your consumer health data;
• Appeal a denial of any of the above.

How to Exercise Your Rights

Email hello@compoundrx.co with your request. We will verify your request, respond within the timeframe required by law, and will not discriminate against you for exercising these rights. If we deny a request, you may appeal by replying to our response; if your appeal is denied, you may contact your state attorney general.

Data Security & Retention

We use reasonable safeguards to protect consumer health data and retain it only as long as needed for the purposes described here or as required by law.

Contact

Questions about this policy? Email hello@compoundrx.co. SF Peptides, 3742 Jasmine Ave #104, Los Angeles, CA 90034.