HEALTH DATA NOTICE FOR WASHINGTON & NEVADA RESIDENTS

Last Updated: 11 August 2025

This Health Data Notice ("Health Data Notice") governs the website www.ancientandbrave.com (the "Site"), mobile applications (each an "App"), offline locations, and services (collectively, the "Services") owned and operated by Made by Brave, Inc. ("Ancient + Brave," "we," "us," or "our"). This Health Data Notice supplements our Privacy Policy and applies to "Consumer Health Data" subject to Washington and Nevada privacy laws (collectively, "health data privacy laws").

CONSUMER HEALTH DATA WE COLLECT

We collect the following categories of Consumer Health Data:

Health-Related Information:

• Information about your health-related conditions, concerns, or goals

• Information about your wellness objectives and lifestyle preferences

• Data related to your use of dietary supplements and nutritional products

Dietary and Nutritional Information:

• Information related to your nutrition, dietary supplement intake, and dietary preferences

• Data about your supplement usage patterns and preferences

• Information about your nutritional goals and dietary restrictions

Wellness and Lifestyle Information:

• Information about your bodily functions, fitness-related goals and activities

• Data about your exercise habits, wellness routines, and lifestyle choices

• Information about your sleep patterns, stress levels, or other wellness indicators

Health Service Seeking Information:

• Information that could identify your attempt to seek health-related services

• Data about your consultations or interactions regarding wellness and supplement guidance

• Information about your participation in wellness assessments or consultations

Inferred Health Information:

• Other information that may be used to infer or derive data related to the above categories

• Analytics and insights derived from your interactions with our products and services

• Personalization data based on your health and wellness preferences

SOURCES OF CONSUMER HEALTH DATA

As described in the "Information We Collect" section of our Privacy Policy, we collect Consumer Health Data from the following sources:

Directly From You:

• Information you provide when creating an account or making purchases

• Data you submit through wellness assessments, surveys, or consultations

• Information you provide when contacting customer service or participating in promotions

From Your Interactions with Our Services:

• Your browsing behavior and product preferences on our Site

• Information collected through cookies and similar tracking technologies

• Data from your use of our mobile applications or digital services

From Third Parties:

• Information from our affiliate companies and business partners

• Data from social media platforms and advertising networks

• Information from publicly available sources

From Service Providers:

• Data from payment processors, shipping companies, and customer service platforms

• Information from analytics providers and marketing service companies

WHY WE COLLECT AND USE CONSUMER HEALTH DATA

We may use the categories of Consumer Health Data described above for the following purposes:

Communicating with You: We use Consumer Health Data to respond to your questions, provide customer support, and communicate with you about our products and services when you contact us through our Services.

Processing Your Transactions: When you purchase dietary supplements or other products from us, we use your Consumer Health Data to process your purchase, confirm your order, arrange shipping, and provide post-purchase support.

Administering the Services: We use Consumer Health Data to operate and maintain our Services, manage your account, and carry out our business operations and administrative functions.

Subscription Services: We use Consumer Health Data to manage your subscription services, process recurring orders, send shipping notifications, and provide subscription-related customer support.

Abandoned Cart Recovery: We use technologies to track items in your shopping cart and may use this information to send cart reminder messages via email or SMS to help you complete your purchase.

Providing Personalized Recommendations: If you complete wellness assessments or provide health-related information, we use this data to provide personalized product recommendations, dosage suggestions, and wellness content tailored to your needs.

Product Development and Research: We use Consumer Health Data to improve our products, develop new dietary supplements, and conduct research to better serve our customers' wellness needs.

Performing Business Analytics: We analyze Consumer Health Data to understand customer preferences, improve our Services, optimize our website performance, and enhance the customer experience.

Fraud Prevention and Security: We use Consumer Health Data to detect, prevent, and investigate fraudulent activities, security breaches, and other harmful activities that could affect our Services or customers.

Managing IT Systems: We use Consumer Health Data for troubleshooting, testing, maintaining, and protecting our IT infrastructure, including our website, databases, and security systems.

Legal and Regulatory Compliance: We use Consumer Health Data to comply with applicable laws and regulations, including FDA requirements for dietary supplement companies, and to protect our legal rights and interests.

Marketing and Promotions: With your -consent, we use Consumer Health Data to send you promotional materials, newsletters, and information about new products that may interest you based on your wellness goals.

Surveys and Feedback: We may use Consumer Health Data to invite you to participate in surveys, polls, or feedback requests to help us improve our products and services.

Creating Aggregate or De-identified Information: We may aggregate or de-identify Consumer Health Data to create statistical information for business analysis, research, and reporting purposes.

As Otherwise Permitted by Law: We may use Consumer Health Data for other purposes as disclosed when you provide the information or as otherwise permitted by applicable law with your consent.

WITH WHOM DO WE SHARE CONSUMER HEALTH DATA

As defined by health data privacy laws, we share Consumer Health Data with the categories of third parties listed below. We will obtain your consent before sharing your Consumer Health Data.

Affiliate Companies: We are part of a corporate family that includes Made By Brave Limited (our parent company) and related entities. We may share Consumer Health Data with our affiliates for business operations, customer service, and marketing purposes where you have consented to such sharing.

Service Providers: We share Consumer Health Data with third-party service providers who help us operate our business, including:

• E-commerce platform providers (such as Shopify)

• Payment processors and financial service providers

• Shipping and logistics companies

• Email marketing and customer communication services (such as Klaviyo)

• Analytics and website optimization services

• Customer service and support platforms

Business Partners: We may share Consumer Health Data with companies we partner with to offer joint products, services, promotions, or educational content related to health and wellness.

Healthcare Professionals: With your explicit consent, we may share relevant Consumer Health Data with healthcare professionals, nutritionists, or wellness coaches who provide services through our platform.

Legal and Regulatory Authorities: We may share Consumer Health Data with government agencies, law enforcement, or regulatory bodies when required by law or when we believe disclosure is necessary to:

• Comply with legal process (subpoenas, court orders, etc.)

• Protect public health and safety

• Investigate potential violations of law

• Enforce our Terms of Service or other agreements

Third Parties in Business Transactions: In the event of a merger, acquisition, sale, or other business transaction, we may share Consumer Health Data with the relevant parties, subject to appropriate confidentiality protections.

Other Third Parties with Your Consent: We may share Consumer Health Data with other third parties when we have your explicit consent to do so or as otherwise permitted by applicable health data privacy laws.

YOUR RIGHTS UNDER HEALTH DATA PRIVACY LAWS

Washington and Nevada health data privacy laws provide you with specific rights regarding your Consumer Health Data:

Right to Access: You have the right to request confirmation of whether we are processing your Consumer Health Data and to obtain a copy of such data.

Right to Delete: You have the right to request that we delete Consumer Health Data that we have collected about you, subject to certain legal exceptions.

Right to Withdraw Consent: You have the right to withdraw your consent for the processing of your Consumer Health Data at any time, which will affect future processing but not the lawfulness of processing before withdrawal.

Right to Data Portability: You may have the right to receive your Consumer Health Data in a portable format and to transmit it to another entity.

Right to Non-Discrimination: We will not discriminate against you for exercising any of your rights under health data privacy laws.

HOW TO EXERCISE YOUR RIGHTS

To exercise any of the rights described above, you may:

Email: Send a request to hello@ancientandbrave.com with the subject line "Washington Consumer Health Data Request" or "Nevada Consumer Health Data Request" and specify which rights you wish to exercise.

Phone: Call us at (312) 931-8102.

Mail: Send a written request to: Made by Brave, Inc. Attn: Privacy/Health Data Requests, 70 W Madison St, Ste. 5750, Chicago, IL 60602.

Verification Process: We may take steps to verify your identity before responding to your request by asking you to provide information about your previous interactions with us or other verification methods.

Response Time: We will respond to your request within the timeframes required by applicable law, typically within 45 days of receipt.

Appeals Process: If your request is denied, you may appeal the decision by contacting us at hello@ancientandbrave.com. If your appeal is unsuccessful, you may file a complaint with the appropriate state attorney general:

• Nevada: https://ag.nv.gov/Complaints/File_Complaint/

• Washington: https://www.atg.wa.gov/file-complaint

DATA SECURITY AND RETENTION

Security Measures: We implement appropriate technical, administrative, and physical safeguards to protect your Consumer Health Data against unauthorized access, use, disclosure, alteration, or destruction.

Retention Period: We retain Consumer Health Data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

Data Minimization: We collect and process only the minimum amount of Consumer Health Data necessary to achieve the stated purposes.

INTERNATIONAL DATA TRANSFERS

Your Consumer Health Data may be transferred to and processed in countries outside the United States, including the United Kingdom where our parent company is located. We ensure appropriate safeguards are in place for such transfers in accordance with applicable law.

CHILDREN'S HEALTH DATA

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect Consumer Health Data from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

REVISIONS TO THIS HEALTH DATA NOTICE

We reserve the right to modify this Health Data Notice at any time. When we make changes:

Notice of Changes: We will post the updated notice on our Services and update the "Last Updated" date at the top of this notice.

Material Changes: If we make material changes that significantly affect your rights or how we use your Consumer Health Data, we will provide additional notice through email or prominent notice on our Services.

Continued Use: Your continued use of our Services after the posting of changes constitutes your acceptance of the updated Health Data Notice.

HOW TO CONTACT US

If you have questions, concerns, or complaints about this Health Data Notice or our Consumer Health Data practices, please contact us:

Email: hello@ancientandbrave.com

Phone: (312) 931-8102 

Mail: Made by Brave, Inc. Attn: Privacy Officer 70 W Madison St, Ste. 5750, Chicago, IL 60602

For specific inquiries related to Washington or Nevada health data privacy laws, please include your state of residence in your communication.