Consumer Health Data Privacy Policy

Effective date: June 29, 2026

This Consumer Health Data Privacy Policy ("Health Data Policy") supplements the HNY+ Privacy Policy and applies to "consumer health data" as defined under Washington's My Health My Data Act, Nevada's SB 370, and similar state laws. It describes how HNY Plus, Inc. ("HNY+," "we," "us," or "our") collects, uses, shares, and protects consumer health data, and the rights you have with respect to that data. Where this Health Data Policy conflicts with our general Privacy Policy as to consumer health data, this Health Data Policy controls.

We are a direct-to-consumer brand that sells organic honey-based energy products. We are not a healthcare provider, and we do not provide medical advice, diagnosis, or treatment, nor do we knowingly collect medical records or clinical information.

1. What we mean by "consumer health data"

"Consumer health data" means personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. Because applicable laws define this term broadly, it can include information that, on its own or combined with other data, could be used to infer a health status, such as your purchases of, or interest in, our wellness and energy products.

2. Categories of consumer health data we may collect

Product and purchase information that may reflect health-related interests, such as the energy or wellness products you view, add to cart, purchase, or subscribe to (for example, caffeinated versus caffeine-free products).
Information you voluntarily provide in surveys, quizzes, reviews, customer-service messages, or sign-up forms, including stated fitness, dietary, or wellness goals or preferences.
Identifiers and contact information linked to the above, such as name, email address, phone number, and account or order details.
Online activity and device data, such as cookies, pixel data, advertising identifiers, and browsing or usage information that may be used to infer wellness-related interests.

We do not intentionally collect precise health condition data, biometric data, or medical records, and we ask that you not send us such information.

3. Sources of consumer health data

Directly from you (orders, account creation, subscriptions, surveys, reviews, newsletter or SMS sign-ups, and communications with us).
Automatically from your devices and browsers when you use our website (cookies, pixels, and analytics technologies).
From third parties such as our e-commerce, analytics, and advertising partners.

4. How and why we use consumer health data

To process and fulfill orders and manage subscriptions.
To provide customer support and respond to your requests.
To personalize your experience and recommend products.
To send marketing and promotional communications you have consented to receive.
To measure, analyze, and improve our website, products, and advertising.
To detect, prevent, and address fraud, security, and technical issues.
To comply with legal obligations and enforce our terms.

5. Categories of consumer health data we share, and with whom

We may share the categories of consumer health data described above with the following categories of recipients. We do not share consumer health data with third parties for their own independent purposes without the consent the law requires.

Service providers and processors that operate our business, including our e-commerce platform (Shopify), payment processors, order fulfillment and shipping providers, subscription management providers, and email and SMS providers (such as Klaviyo).
Analytics and advertising partners that help us understand and promote our products, including analytics providers and advertising platforms (such as Meta and Google), subject to your consent and privacy choices.
Our affiliates that support our operations under this Health Data Policy.
Legal, safety, and corporate-transaction recipients where required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets.

6. We do not "sell" your consumer health data without authorization

We do not sell your consumer health data. If this ever changes, we will first obtain your valid, written authorization that meets the requirements of applicable law, and you may revoke that authorization at any time.

7. Your rights

Subject to applicable law, you have the right to:

Confirm and access whether we are collecting, sharing, or selling your consumer health data, and access a copy of that data.
Obtain a list of all third parties and affiliates with whom we have shared or sold your consumer health data.
Correct inaccuracies in your consumer health data.
Withdraw consent to our collection and sharing of your consumer health data.
Delete your consumer health data.
Appeal a decision we make regarding your request (see Section 9).

We will not discriminate or retaliate against you for exercising any of these rights.

8. How to submit a request

You or an authorized agent may submit a request using either of these designated methods:

Email us at privacy@hnyplus.com; or
Submit a request through our Privacy Request page.

We will verify your request and respond within the timeframe required by applicable law (generally within 45 days, with one extension where permitted). We may need to verify your identity before fulfilling your request, and may ask you to confirm information we already have on file.

Some consumer health data is necessary for us to provide our products and services to you. If you ask us to delete required data, or withdraw your consent to its collection or sharing, we may be unable to provide some or all of our services or features to you.

9. Appeals

If we decline to act on your request, you may appeal by emailing privacy@hnyplus.com with the subject line "Health Data Appeal" within a reasonable time. We will respond in writing with our decision and the reasons for it within the period required by law. If your appeal is denied, you may contact the attorney general in your state of residence.

10. Data retention and security

We retain consumer health data only as long as necessary for the purposes described in this Health Data Policy or as required by law, after which we delete or de-identify it. We maintain reasonable administrative, technical, and physical safeguards designed to protect consumer health data.

11. Changes to this Health Data Policy

We may update this Health Data Policy from time to time. We will revise the "Effective date" above and, where required, provide additional notice.

12. Contact us

If you have questions about this Health Data Policy or our handling of consumer health data, contact us at privacy@hnyplus.com.