Consumer Health Data Privacy Policy

Outlier Health, Inc. — Complement (lovecomplement.com)

Effective Date: July 15, 2026 | Last Updated: July 15, 2026

1. About This Policy

This Consumer Health Data Privacy Policy (“CHD Policy”) is a supplemental notice that applies specifically to “consumer health data.” It is provided by Outlier Health, Inc. (“Complement,” “we,” “us,” or “our”) and is required by laws including Washington’s My Health My Data Act (RCW 19.373), Nevada’s consumer health data law (NRS Chapter 603A), and the consumer-health-data provisions of other state privacy laws. It supplements, and should be read together with, our Privacy Policy. To the extent this CHD Policy and our Privacy Policy both address the handling of consumer health data, this CHD Policy controls.

2. What Is Consumer Health Data

“Consumer health data” means personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. Depending on the applicable law, this can include information about health conditions, treatments, diagnoses, and bodily functions, and — most relevant to our business — nutrition, dietary preferences and restrictions, wellness goals, and any data used to derive or infer such information. As applied to our business, we treat as consumer health data the responses you provide to our optional wellness quiz, and the inferences we draw from them, to the extent they identify or reveal a specific health condition. General product purchases and shopping activity, standing alone, are ordinary commercial information handled under our Privacy Policy, not consumer health data.

3. The Consumer Health Data We Collect

Because we sell nutritional supplements and offer an optional health-and-wellness quiz, we may collect the following categories of consumer health data:

Information you provide. Health goals, wellness objectives, dietary preferences or restrictions, and reasons for purchase that you share through our optional wellness quiz, your account, or customer-service communications.
Product and purchase information. We treat supplement and product selections and purchase history as ordinary commercial information, not consumer health data, unless they are combined with your quiz responses in a way that reveals a specific health condition.
Inferences. Conclusions we draw from the information above to recommend or personalize the products and information you request.

We collect this information only when you choose to provide it (for example, by taking the quiz) or when it is necessary to provide a product or service you have specifically requested.

4. Sources of Consumer Health Data

We collect consumer health data directly from you, and we derive inferences ourselves. We do not purchase consumer health data from data brokers.

5. How We Use Consumer Health Data

We use consumer health data only to provide, recommend, and personalize the products and information you request, including personalizing the first-party communications (such as email) you have opted into; to fulfill and support your orders and subscriptions; to respond to your inquiries; and to meet legal and product-safety obligations. We do not use consumer health data for advertising, and we do not use it to create, target, suppress, or build lookalike advertising audiences.

6. We Do Not Sell Consumer Health Data, and We Do Not Use It for Advertising

We do not sell consumer health data. We do not share consumer health data for targeted or cross-context behavioral advertising, and we do not transmit it to advertising or analytics pixels, tags, software development kits, or partners (such as Meta, Google, or TikTok). We do not use consumer health data to create, target, suppress, or build lookalike advertising audiences with any advertising partner.

7. How We Share Consumer Health Data

We share consumer health data only with service providers and processors that help us provide the products and services you request — such as our e-commerce platform, order-fulfillment providers, and the communications tools used to send the messages you asked for — and only under written contracts that limit them to providing those services and that prohibit them from selling or further sharing the data. We may also disclose consumer health data where required by law or to establish, exercise, or defend legal claims, or to protect rights and safety. The categories of recipients are our service providers and processors and, where applicable, our affiliates that support these functions. We do not share consumer health data with advertising partners.

8. Your Consent

We collect consumer health data only after obtaining your consent — a clear, affirmative, opt-in action, such as the consent checkbox presented when you take our wellness quiz, which we record with a timestamp — except for data that is strictly necessary to provide a product or service you have specifically requested. We obtain your separate consent before sharing consumer health data for any purpose beyond providing a requested product or service. We will not sell consumer health data; any sale would require your separate, written authorization, which we do not seek. You may withdraw your consent at any time as described below; withdrawal does not affect processing that already occurred.

9. Your Rights Regarding Consumer Health Data

Subject to applicable law, you have the right to: (a) confirm whether we are collecting, sharing, or selling your consumer health data and to access that data; (b) withdraw your consent to our collection and sharing of your consumer health data; and (c) have your consumer health data deleted, including by our directing the service providers and processors with whom we have shared it to delete it. We will respond to a verified request within 45 days (extendable where the law permits, with notice). We will not deny you goods or services, charge a different price, or provide a different level of quality because you exercised these rights. To submit a request, use the contact information in Section 13.

10. No Geofencing

We do not use a geofence around any health care facility or provider location to identify or track consumers seeking health care services, to collect consumer health data, or to send notifications, messages, or advertisements relating to consumer health data.

11. Data Security and Access

We maintain reasonable administrative, technical, and physical safeguards designed to protect consumer health data from loss, misuse, and unauthorized access, and we restrict access to consumer health data to the employees, contractors, and processors who need it to perform the functions described in this CHD Policy.

12. Children

Our Site and products are intended for adults. We do not knowingly collect consumer health data from anyone under 18, and we do not knowingly sell or share the personal information of consumers under 16. If you believe a minor has provided us consumer health data, contact us using Section 13.

13. How to Contact Us and Exercise Your Rights

To exercise your rights or ask questions about consumer health data, contact our Privacy Compliance Officer:

Outlier Health, Inc. — Attn: Privacy Compliance Officer

56 Edwards Village Blvd, Ste 124-320, Edwards, CO 81632

Email: team@lovecomplement.com | Phone: 844-752-6822

Washington residents: the My Health My Data Act is enforced under the Washington Consumer Protection Act, and you may also contact the Washington State Attorney General. Nevada residents may contact the Nevada Attorney General.

14. Relationship to Our Terms of Service

Any dispute, claim, or controversy relating to this CHD Policy or to the collection, use, sharing, or protection of your consumer health data is governed by Section 18 of our Terms of Service (Dispute Resolution; Binding Arbitration; Class Action and Representative Action Waiver), subject to your right to opt out as described in that Section. Nothing in this CHD Policy or in those provisions waives any right or remedy that cannot be waived under applicable law.

15. Changes to This Policy

We may update this CHD Policy from time to time. If we make a material change, we will post the updated policy here with a new “Last Updated” date and, where required by law, obtain your consent or provide additional notice.