Our Policies

Consumer Health Data Policy

Effective: April 1, 2026

This Consumer Health Data policy ("Policy") describes our practices regarding the collection, use, and disclosure of Consumer Health Data, as defined by applicable laws in Washington, Nevada, and Connecticut, collected by Ritual, through or in connection with the website and any other services that post a valid link to this Policy (collectively, the "Service(s)"). This Policy applies to Washington, Nevada, and Connecticut residents. By accessing, using, or otherwise interacting with any part of the Service, you consent to this Policy and any additional applicable policies and terms you may agree to which govern your use of the Service. This Policy supplements the website privacy policy. This Policy will govern in case of any conflicts of how Consumer Health Data may be handled between this Policy and our privacy policy. Please be sure to read this entire Policy before using or submitting consumer health data to this site.

Categories of Consumer Health Data We Collect and Purpose for Collection

Ritual only collects, uses, and discloses Consumer Health Data as needed to provide you with the products or services that you request, with your consent, or as otherwise permitted by applicable law.

Ritual collects the following categories of Consumer Health Data:

Type of Data	Why We Collect It
Diagnoses, Treatment and Non-Prescription Medication Example: information that you suffer from or are treating conditions with over the counter products	We may collect this information when you purchase products or register with us, including to provide you with customer support, to provide you with product information, and so that we understand what products or services you may be interested in, and other purposes disclosed below– including when you make a purchase, complete a survey, contact our customer service team, or otherwise disclose this data to us.
Pregnancy-Related Health Information Example: information about trying to conceive, pregnancy, including stages and due date, and postpartum	We may collect this information in order to provide you with product recommendations, and to ensure that we understand what products are best for you, including when you register with us, contact our customer service team, or otherwise disclose this data to us.
Accommodations and Accessibility Data Example: information about your use of screen readers or other accessibility services when you access our websites.	We may collect health information from you if you need assistance accessing our products or websites.
Health and Safety Data Example: information collected if you have an adverse reaction to our products or services.	We may collect health information in connection with accidents or health emergencies concerning our products. We may collect other health and safety information as required by law.
Other Data Example: contact information (such as your email, phone number), identifiers (name, IP address), and other inferences drawn from the information you provide may be tied to your health data.	We may collect this information to provide you with customer service, to interact with you about the services you request, and for other purposes as disclosed at the time of collection.

We may also collect Consumer Health Data in order to provide you with customer service, troubleshoot our services, improve the services, and to conduct other essential business operations that support the provision of the products (such as analyzing our performance, meeting our legal and compliance obligations, and conducting research and development). Except as expressly prohibited by law, we may also use Consumer Health Data for other purposes for which we give you choices and/or obtain your authorization as required by law – for example, for third party advertising or marketing purposes.

Note that we separately provide privacy disclosures relating to the personal information we hold about you, please visit our privacy policy to learn more.

Sources of Collection of Consumer Health Data

We collect Consumer Health Data from the following sources:

• From you, when you request health-related products, complete your registration with us, sign up for our email list and interact with our emails, or otherwise volunteer or share the information with Ritual.
• From your interactions with us, such as when you use our Contact Us form or choose to provide information to our chat bot.
• From social media platforms and other sites, if you make your Consumer Health Data publicly available or if you interact with health-related content we post.
• We may also infer or derive Consumer Health Data by analyzing other data, such as purchase records.

Disclosures of Consumer Health Data

We may disclose Consumer Health Data with our data processors, service providers and contractors who assist us in providing goods and services to you. These companies may only use the data only as permitted by our contracts with them.

We may also disclose Consumer Health Data: (i) with your consent, (ii) in connection with a merger, acquisition, bankruptcy, or similar transition of assets to a third party, (iii) as needed to prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or (iv) to investigate, report, or prosecute those responsible for any action that is illegal under applicable law.

Note that we do not sell any Consumer Health Data without valid authorization from you.

Your Privacy Rights

Subject to certain exceptions, you may have the right to exercise the following rights:

• Right to Access – including to know whether we collect, use, or disclose your Consumer Health Data and to access that data
• Rights to Withdraw Consent
• Right to Delete
• Right to Appeal a denial of the above rights

You may submit requests to exercise these rights online using our privacy request form, or by emailing us at privacy-requests@ritual.com. Note that we may deny your request if we are not able to authenticate your identity or locate your Consumer Health Data in our systems. We may request additional information from you if necessary to authenticate your request.

Changes to this Policy

We reserve the right to change this Policy at any time and any changes will become effective immediately upon posting on the Services, unless otherwise stated. We may also provide notice to you in other ways, such as through contact information you have provided. Your continued use of the Services on or after the posted effective date will constitute acceptance of, and agreement to be bound by, those changes to the extent allowed by applicable law. However, we will provide notice and obtain your consent if required. Note that you may need to consent to our new policies in order to continue to use the Services.

Contact Us

If you have any questions or comments about our practices regarding Consumer Health Data or about this Policy, please contact us at:

Email: my@ritual.com