Consumer Health Data Privacy Notice

Last Updated: September 27, 2026

This Consumer Health Data Privacy Notice supplements the general Privacy Policy of She-Rise Collections, LLC (“She-Rise Collections,” “we,” “us,” or “our”). This Notice explains our practices concerning information that may qualify as consumer health data under applicable consumer privacy laws.

The SRC Lupus Wellness Tracker™ is a personal wellness organization and tracking tool. Members may voluntarily enter information about their wellness, symptoms, lifestyle, appointments, and related personal observations.

1. What We Mean by Consumer Health Data

For purposes of this Notice, “consumer health data” means information that applicable law treats as consumer health information, including information that identifies or may indicate a consumer’s physical or mental health status, condition, symptoms, treatment, medication use, or health-related activities.

Consumer health data may also include information derived or inferred from other information where applicable law treats that information as health data.

2. Consumer Health Data Used in the SRC Lupus Wellness Tracker™

Depending on which tracker features a member chooses to use, information entered into or generated within the tracker may include:

• energy, pain, and fatigue ratings
• symptoms and symptom notes
• potential triggers
• sleep information
• water intake
• medication and supplement notes
• pain details
• morning stiffness information
• daily factors and observations
• mood information
• personal wellness notes
• nutrition and food entries
• calories entered by the member
• caffeine intake
• movement and activity information
• rest and recovery information
• weight entries and weight trends
• appointment information
• reminders
• appointment preparation notes
• visit notes
• Provider Visit Summary information
• trends, summaries, or scores generated from information entered by the member

Members decide what information they wish to enter. Tracker fields are intended for voluntary personal wellness organization.

3. How Tracker Information Is Stored

The current SRC Lupus Wellness Tracker™ is designed so that member-entered tracker information may be stored locally in the member’s browser or device.

She-Rise Collections does not intentionally maintain a central database containing all of the wellness entries a member records inside the tracker.

Information that exists only in a member’s local browser storage may not be directly accessible to She-Rise Collections and may not be recoverable by us.

Local tracker information may be lost or become unavailable if a member:

• clears cookies, cache, browser history, or website data
• uses private or incognito browsing
• changes browsers
• changes devices
• resets or replaces a device
• disables browser storage
• deletes locally stored website information

Members should maintain their own copies of information they consider important.

4. Categories of Consumer Health Data We May Receive

Although individual tracker entries are designed to remain locally stored as described above, She-Rise Collections or our service providers may receive certain information associated with membership administration.

This may include:

• purchase of or enrollment in the SRC Lupus Wellness Tracker™ Membership
• Monthly or Annual membership selection
• membership status
• subscription or renewal status
• membership-access customer tags
• communications a member voluntarily sends to us about symptoms, wellness information, tracker entries, or support questions
• information a member voluntarily provides when requesting technical or customer support

Because purchasing or using a health-related product may itself reveal or suggest an interest in a particular health topic, certain membership information may be treated as consumer health data under some laws.

5. Sources of Consumer Health Data

Consumer health data may come from the member directly, the tracker itself when it locally creates trends or summaries from member-entered information, and Shopify or Appstle to the extent membership, order, customer-account, or subscription information is provided to us in connection with administering the membership.

We do not currently design the SRC Lupus Wellness Tracker™ to import consumer health data directly from electronic medical records, healthcare providers, Apple Health, wearable devices, insurance records, pharmacies, or laboratory systems.

6. Why Consumer Health Data Is Used

Consumer health data may be processed or used for purposes such as:

• providing requested tracker functionality
• displaying information the member entered
• generating local trends, summaries, and organizational views
• allowing the member to prepare a Provider Visit Summary
• providing requested membership access
• administering Monthly and Annual memberships
• authenticating customer access
• providing customer or technical support
• troubleshooting tracker problems
• preventing fraud, abuse, or unauthorized membership access
• complying with legal obligations

We do not use member-entered tracker information to diagnose, treat, or provide medical advice.

7. Consumer Health Data We Share

The current tracker is not designed to automatically send a member’s individual wellness entries to She-Rise Collections, Facebook, healthcare professionals, advertisers, or other members.

Consumer health data may nevertheless be shared in limited circumstances where necessary to provide a service requested by the consumer or where required by law.

Examples may include membership-related information processed through Shopify, Appstle Memberships, payment processors, website or technical service providers, and support systems where reasonably necessary to operate the requested service.

8. Third Parties and Affiliates

Categories of third parties that may process information connected with membership administration include ecommerce service providers, membership and subscription providers, payment processors, hosting or technical service providers, email and customer-communication providers, and security and fraud-prevention providers.

Our primary ecommerce and membership providers currently include Shopify and Appstle Memberships.

She-Rise Collections currently does not have corporate affiliates with which we intentionally share member-entered tracker data for independent marketing purposes.

9. Facebook and the SRC Lupus Community™

The tracker may provide a link to the SRC Lupus Community™ hosted through Facebook.

Opening or using the Community link does not automatically transmit the member’s tracker entries to Facebook.

A member may independently choose to post information in the Facebook group. Information the member voluntarily posts on Facebook is subject to Facebook’s privacy policies, settings, and platform practices.

10. Provider Visit Summaries

Members may choose to create a Provider Visit Summary based on information they entered into the tracker.

She-Rise Collections does not automatically send Provider Visit Summaries to doctors, clinics, hospitals, or other healthcare professionals. The member decides whether and with whom to share a Provider Visit Summary.

11. Advertising and Consumer Health Data

She-Rise Collections does not intentionally use member-entered tracker entries for targeted advertising and does not intentionally disclose the contents of tracker fields to advertising platforms for their independent advertising purposes.

General website analytics or advertising technologies may operate elsewhere on the She-Rise Collections website. We intend to keep member-entered tracker information separate from those advertising uses.

12. Cross-Site Collection

We do not intentionally permit third parties to collect the contents of member-entered tracker fields over time across unrelated websites for targeted advertising or profiling.

13. Sale of Consumer Health Data

She-Rise Collections does not sell consumer health data.

We do not exchange member-entered tracker information for money or other consideration for another party’s independent use.

14. Geofencing

She-Rise Collections does not use geofencing technology around healthcare facilities to identify, track, collect data from, or send health-related messages to consumers based on visits to those facilities.

15. Consumer Choice and Consent

Members choose whether to use the SRC Lupus Wellness Tracker™ and what information to enter.

Where applicable law requires affirmative consent before collecting or sharing consumer health data for a particular purpose, we will seek that consent before engaging in the covered activity.

A general acceptance of this Notice is not intended to substitute for separate consent when applicable law requires separate affirmative consent.

16. Consumer Health Data Rights

Depending on applicable law and the consumer’s location, a consumer may have rights to:

• confirm whether we collect, share, or sell consumer health data concerning them
• access consumer health data maintained by us
• obtain information about third parties or affiliates with whom applicable consumer health data has been shared
• withdraw consent to certain collection or sharing
• request deletion of consumer health data maintained by us
• request that certain collection or sharing stop
• appeal a refusal to act on an eligible privacy request

These rights may be subject to verification requirements, exemptions, and other limitations provided by law.

17. Local Tracker Data and Deletion Requests

A significant distinction applies to tracker information stored only in the member’s browser or device.

If She-Rise Collections does not possess or have access to that locally stored information, we may not be able to remotely view or delete it.

Members may remove locally stored tracker information through tracker controls where available or by removing applicable browser or site storage.

A privacy request submitted to She-Rise Collections will apply to consumer health data that we or applicable service providers actually maintain and control, subject to applicable law.

18. How to Submit a Consumer Health Data Request

Consumers may submit a consumer health data privacy request through the Contact options available on the She-Rise Collections website.

When submitting a request, please identify it as Consumer Health Data Privacy Request and describe the right you wish to exercise.

We may request information reasonably necessary to verify the identity of the person making the request and protect information from unauthorized disclosure.

A consumer will not be required to create a new account solely to submit a privacy request, although an existing account may be used for verification where appropriate.

We will respond within the time required by applicable law.

19. Appeals

If She-Rise Collections declines to take action on an eligible consumer health data request and applicable law provides an appeal right, the consumer may submit an appeal through the same website Contact method.

Please identify the request as Consumer Health Data Privacy Appeal and include sufficient information to identify the original privacy request.

20. Correction and Review

Where applicable law provides a right to review or correct consumer health data maintained by us, a consumer may submit the request using the procedure described above.

Member-entered information stored only on the member’s device should generally be reviewed or edited directly through the tracker where that functionality is available.

21. Security

We use reasonable administrative and technical safeguards appropriate to the information and services we operate.

Access to consumer health data maintained by She-Rise Collections or its service providers should be limited to persons or providers that reasonably need access for the applicable purpose.

No browser, device, website, internet transmission, or electronic storage method can be guaranteed to be completely secure.

22. Health Data Security Incidents

If She-Rise Collections becomes aware of a security incident involving consumer health information that we maintain, we will evaluate the incident and provide notices required by applicable law.

Members are encouraged to contact us promptly if they believe their membership account or information has been accessed without authorization.

23. Material Changes to This Notice

We may update this Consumer Health Data Privacy Notice as our tracker, membership services, technology, data practices, or legal obligations change.

When required by law, we will provide appropriate notice before materially expanding categories of consumer health data collected, purposes for collecting or using consumer health data, categories of consumer health data shared, or categories of third parties receiving consumer health data.

Where affirmative consent is legally required for a new practice, that consent will be requested before the covered activity occurs.

24. Relationship to Our General Privacy Policy

This Consumer Health Data Privacy Notice supplements the She-Rise Collections Privacy Policy.

If this Notice provides more specific information concerning consumer health data, this Notice applies to that consumer health data to the extent required by applicable law.

25. Contact

Questions about this Notice, consumer health data practices, privacy requests, or appeals may be submitted through the Contact options available on the She-Rise Collections website.