Consumer Health Data Privacy

1. Scope and key commitment

Under applicable Utah law, sensitive data may include personal data revealing medical history, a mental or physical health condition, or medical treatment or diagnosis by a healthcare professional. Depending on context, information a customer voluntarily provides about allergies, sensitivities, reactions, or personal-care needs may receive heightened protection. Product browsing or purchases alone do not necessarily establish a medical condition.

BRIXEN does not sell consumer health data. BRIXEN does not use consumer health data for targeted advertising or profiling that produces legal or similarly significant effects. We collect or share qualifying health-related information only with required consent or as reasonably necessary to provide a product or service you request, comply with law, or protect safety and security.

Utah law is the primary framework for BRIXEN. If BRIXEN serves a consumer whose state provides additional nonwaivable consumer-health-data rights and that law applies to BRIXEN’s activity, BRIXEN will honor those rights as required.

2. Categories of consumer health data we may collect

• Product interests, browsing activity, search or cart activity that may reveal or permit an inference about skin, lip, allergy, sensitivity, or personal-care concerns.
• Product purchases, returns, reviews, support requests, and communications that may reveal such concerns.
• Information you voluntarily provide about allergies, ingredients, sensitivities, skin or lip condition, product use, pregnancy or nursing questions, or an adverse reaction.
• General location derived from IP address or shipping information where its combination with other information could create a health-related inference. BRIXEN does not intend to collect precise location for health-related purposes.
• Other health-related information collected with your affirmative, voluntary consent.

Please do not send medical records, government identification, genetic information, biometric identifiers, or detailed medical histories through general website or customer-service channels.

3. Sources

We may collect consumer health data directly from you; from your interactions with our website, products, email, or messages; from ecommerce, customer-support, analytics, and communication providers acting for us; or from another person you authorize. Third parties may collect information over time and across websites through cookies or similar technologies only as described in our Privacy Policy and subject to applicable choices and consent.

4. Why and how we process it

• Respond to product questions, ingredient inquiries, allergy or sensitivity concerns, and reported reactions.
• Provide, fulfill, support, personalize, or improve a product or service you request.
• Process purchases, delivery, returns, refunds, recalls, safety notices, and customer support.
• Maintain product quality and safety, investigate complaints, prevent fraud, and protect consumers.
• Comply with legal obligations and establish, exercise, or defend legal claims.
• Carry out another purpose disclosed to you with legally required consent.

Access is limited to personnel and processors who reasonably need the information for an authorized purpose. We use safeguards appropriate to the nature and volume of the data.

5. Categories shared and recipients

Depending on your request, we may share the categories above with:

• Website, ecommerce, payment, analytics, email/SMS, customer-support, fulfillment, shipping, fraud-prevention, data-security, and cloud-service providers processing information for BRIXEN under contract.
• Product manufacturers, laboratories, insurers, safety consultants, or professional advisers when necessary to investigate a product complaint, adverse event, quality issue, or legal matter.
• Government authorities, regulators, courts, or other parties when required or permitted by law or reasonably necessary to protect rights, safety, and security.
• A successor in a merger, acquisition, financing, bankruptcy, or asset transfer, subject to applicable law and continuing obligations.
• Other parties at your direction or with separate affirmative consent.

BRIXEN does not currently share consumer health data with affiliates because BRIXEN has no operating affiliates for this website. We do not authorize third parties to collect consumer health data across unrelated websites for their own advertising purposes.

6. Your consumer health data rights

Subject to applicable law, you may request that BRIXEN:

• Confirm whether we collect, use, share, or sell your consumer health data.
• Provide access to the data and a list of third parties or affiliates with whom it was shared or sold.
• Correct inaccurate consumer health data.
• Delete consumer health data, including notice to applicable processors or third parties.
• Withdraw consent and stop further collection, use, sharing, or sale.
• Review or appeal a refusal to act on a request.

BRIXEN does not sell consumer health data, so there is no sale authorization to revoke. To exercise a right, email info@brixenx.com with “Consumer Health Data Request” in the subject or mail the address below. State your request, name, email used with BRIXEN, and state of residence. Do not include sensitive medical details. We will use commercially reasonable methods to authenticate you and may request limited additional information.

We will respond within the period required by applicable law. If we deny a request, you may appeal by emailing the same address with “Consumer Health Data Appeal” in the subject and explaining the decision you want reviewed. We will not discriminate against you for exercising a right.

7. Changes

We will post material changes conspicuously and obtain affirmative consent before collecting, using, or sharing consumer health data in a materially different way where required. The effective date appears above.

8. Contact

BRIXEN LLC
Attn: Consumer Health Data Privacy
info@brixenx.com