CONSUMER HEALTH DATA PRIVACY POLICY

This policy governs the websites (each a “Site”), apps (each an “App”), offline locations or services (collectively, the “Services”) owned and operated by Tatcha, LLC (referred to herein as “Tatcha,” “we,” “us,” or “our” as applicable) that display, reference, or link to this Health Data Notice. This policy supplements the Tatcha Privacy Notice and applies to “consumer health data” under US state privacy laws, including Washington’s My Health My Data Act and Nevada’s consumer health privacy law.

Consumer Health Data We Collect

We collect the following categories of consumer health data, as defined by MHMDA.

Sources of Consumer Health Data

As described further in the “Sources of Personal Information” section of the Privacy Notice, we collect consumer health data directly from you, from your interactions with our Services, and from third parties.

Why We Collect and Use Consumer Health Data

We may use the categories of consumer health data described above for the following purposes: