Consumer Health Data Privacy Policy

Last updated: 6/15/2026

Hope Innovations Inc., a Delaware corporation, operates under the brand name Wandah. References to "Hope Innovations," "Wandah," "we," "us," and "our" mean Hope Innovations Inc.

This Consumer Health Data Privacy Policy describes how we collect, use, share, and protect "Consumer Health Data" as defined under applicable state law. This policy supplements our general Privacy Policy.

What Is Consumer Health Data?

"Consumer Health Data" means personal information that is reasonably linkable to you and that relates to your past, present, or future physical or mental health, including:

  • Health conditions, symptoms, diagnoses, or medical history.
  • Use of our products for health-related purposes.
  • Information that could be used to infer health status.
  • Information provided by a healthcare provider or other third party in connection with your order or support request.

Consumer Health Data We Collect

We collect Consumer Health Data only when you voluntarily provide it. Categories of Consumer Health Data we may collect include:

  • Information about health conditions, symptoms, medications, medical history, or product experiences that you choose to share with us.
  • Information you provide in customer support communications, surveys, feedback forms, warranty or replacement claims, or other communications relating to your health or use of our products.
  • Information provided by a healthcare provider or other third party who purchases a producton your behalf or provides information needed to fulfill an order.

We collect Consumer Health Data directly from you or, in limited circumstances, from a healthcare provider or other third party acting on your behalf. We do not collect Consumer Health Data automatically, through tracking technologies such as cookies or pixels, or without your knowledge.

We do not use geofencing technology around health care facilities or other locations where health care services are provided to identify, track, or collect Consumer Health Data from individuals, or to send health-related communications to individuals based on their presence
at such locations Inferences drawn from your product purchases or use of our products may themselves constitute Consumer Health Data under applicable law. We do not use such inferences for advertising or marketing without your express consent.

How We Use Consumer Health Data

We use Consumer Health Data only for
the following purposes:

  • Responding to your inquiries and customer support requests.
  • Processing warranty or replacement claims and fulfilling requests you make.
  • Improving product safety, quality, and customer support.
  • Complying with applicable law and responding to legal obligations.

We do not use Consumer Health Data for
advertising or marketing purposes without your separate, express consent.

How We Share Consumer Health Data

We share Consumer Health Data only in
the following limited circumstances:

  • Service providers and contractors: We may share Consumer Health Data with service providers and contractors to perform services on our behalf. These recipients are contractually prohibited from using Consumer Health Data for their own
    independent purposes.
  • Legal authorities: We may share Consumer Health Data with legal authorities to comply with law or legal process, but only as required.
  • Other parties: We may share Consumer Health Data with other parties only with your separate, express consent or at your direction.

Where consent is required to collect Consumer Health Data, we will request consent for the specified purpose of collection. Consent to collect Consumer Health Data is a separate act from consent to share Consumer Health Data. Any consent we request to share Consumer Health Data will be requested separately from, and will not be bundled with, any consent we request to collect Consumer Health Data.

We do not sell Consumer Health Data.

We do not share Consumer Health Data with data brokers.

We do not share Consumer Health Data with advertising or analytics partners.

When you use our Services, we do not permit third parties to collect Consumer Health Data through our Services over time and across different websites or online services.

Your Rights

Depending on your state of residence, you may have some or all of the following rights with respect to your Consumer Health Data. Washington residents may exercise these rights under Washington's My Health My Data Act, and Nevada residents may exercise these rights to the extent provided under Nevada's consumer health data privacy law:

  • Confirm: Request confirmation of whether we process your Consumer Health Data.
  • Access: Request a copy of the Consumer Health Data we hold about you, including a list of all third parties and affiliates with whom we have shared or sold your Consumer Health Data and an active email address or other online mechanism you may use to contact each such third party or affiliate.
  • Withdraw Consent: Withdraw consent to our processing of your Consumer Health Data where processing is based on consent.
  • Delete: Request deletion of your Consumer Health Data, subject to applicable legal retention requirements and other permitted exceptions.
  • Appeal: Appeal our decision if we decline to act on your request.

How to Submit a Request

To exercise any of the rights above,
contact us at:

We will respond to verifiable requests within 45 days, unless a shorter timeframe is required by applicable law. For complex requests, we may extend the response period by up to an additional 45 days where permitted by applicable law. We may need to verify your identity before processing your request. Information provided for verification will be used only to verify and respond to the request.

You may authorize another person to submit a request on your behalf where permitted by applicable law. We may require proof of authorization and may require you to verify your identity directly with us.

Appeals

If we decline to take action on your request, you have the right to appeal that decision. To appeal, contact us at hello@wandah.co with the subject line "Consumer Health Data Appeal" and a description of the request we declined and the reason you believe we should reconsider. We will respond in writing within 45 days of receiving your appeal with an explanation of our decision.

If your appeal is denied, you may have the right to contact your state attorney general to submit a complaint.

Material Changes to This Policy

We will notify you of material changes to this policy in a manner consistent with applicable law, which may include posting a prominent notice on our website or contacting you using information we have on file. The "Last updated" date at the top of this policy reflects the date of the most recent revision. We encourage you to review this policy periodically.

Retention

We retain Consumer Health Data only for as long as necessary to fulfill the purposes described in this policy or as required by law. Upon request, we will delete Consumer Health Data subject to applicable legal retention requirements and other permitted exceptions.

Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect Consumer Health Data from unauthorized access, use, disclosure, alteration, or destruction. In the event of a security breach affecting your Consumer Health Data, we will notify you as required by applicable law, including the FTC's Health Breach Notification Rule to the extent applicable and applicable state
breach notification statutes.

Contact

Hope Innovations Inc. d/b/a Wandah

222 Broadway Street, Suite 2

Audubon, IA 50025

hello@wandah.co