Consumer Health Data Privacy Policy

Last Updated: June 2026

This Consumer Health Data Privacy Policy explains how Headcovers Unlimited, Inc. ("Headcovers," "we," "us," or "our") collects, uses, shares, and protects consumer health data. It applies in addition to our general Privacy Policy.

We provide this separate policy because some of the information our customers choose to share with us relates to their health, and certain laws, including the Washington My Health My Data Act, treat that information as a special, protected category. This policy is intended to meet those requirements and to be clear with every customer about how we treat health-related information, regardless of where you live.

What We Mean by Consumer Health Data

"Consumer health data" means personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. For our customers, this may include information related to:

• Hair loss
• Cancer treatment and recovery
• Alopecia and other medical conditions
• Surgery and post-surgical recovery
• Mastectomy and breast reconstruction
• Cranial prosthesis needs
• Any health condition you describe to us in a consultation or customer service request

It may also include photographs, hair samples, physician letters, insurance documentation, and consultation notes when those items reveal health-related information.

We Collect This Information Only When You Choose to Share It

We do not require you to share health information in order to shop with us. We collect consumer health data only when:

• You voluntarily provide it to us, for example during a wig, topper, or color consultation, a customer service conversation, or an insurance or cranial prosthesis reimbursement request; or
• It is necessary to provide a product or service you have specifically requested from us.

We do not collect consumer health data from sources other than you, and we do not use it to build advertising profiles.

How We Use Consumer Health Data

We use consumer health data only to:

• Provide consultation services, color matching, and product recommendations you request
• Fulfill and support your orders
• Assist with insurance reimbursement and cranial prosthesis documentation
• Respond to your customer service questions
• Maintain records related to the products and services you requested

We do not use consumer health data for targeted advertising.

How We Share Consumer Health Data

We share only what is needed to get your order to you, and only with the companies and authorities that help us do that. We never share your health information for anyone else's use.

For orders shipped within the United States, we give shipping carriers your name and address. We do not tell domestic carriers what you ordered or anything about your health.

For orders shipped outside the United States, customs rules require us to describe the contents of the package and their value. We describe the contents in the way most likely to lower the customs fees you pay, for example as a hair-loss product, a prosthesis, or an item for a patient's medical use, since many countries reduce or waive fees on medical goods. This information is shared with the carrier and with the customs authorities of the destination country, as international shipping requires. If you would prefer we not describe your order this way, please tell us before you order and we will respect that, though it may affect any fee reductions.

Some items ship directly from the manufacturer. When that happens, the manufacturer receives your order details so they can fill and ship it, and they may use that information only to complete your order.

Payment processors handle your payment so we can complete your purchase.

The companies that help us fill your order may use your information only to perform those services for us. We share information with customs authorities only as international shipping requires, and we may otherwise disclose information when the law requires it or to protect our legal rights.

We do not sell consumer health data. We will not sell it to anyone, and we would not do so without first obtaining your separate, written authorization, as required by law.

Consent and Withdrawal

We collect and share consumer health data only with your consent or as necessary to provide a product or service you have requested. Where the law requires it, our consent to collect your health data is separate from our consent to share it.

You may withdraw your consent at any time by contacting us at [email protected]. Withdrawing consent will not affect processing that already took place, and it may affect our ability to provide certain consultation or reimbursement services going forward.

Who Can Access Consumer Health Data Within Our Company

Access to consumer health data inside Headcovers is limited to the employees and contractors who need it to provide the services you requested, such as consultation staff, customer service representatives, and order processing staff. We require the service providers and vendors described above to limit their access in the same way.

Your Rights

Depending on where you live, you have the right to:

• Confirm whether we are collecting, sharing, or selling your consumer health data
• Access the consumer health data we have about you
• Withdraw consent to our collection and sharing of your consumer health data
• Request deletion of your consumer health data

To exercise any of these rights, contact us at [email protected]. We will respond within the time required by law, which is generally 45 days, and we may extend that period where the law allows, with notice to you. We may take steps to verify your identity before responding.

Appeals. If we decline your request, you may appeal by emailing [email protected] with the subject line "Health Data Request Appeal." If your appeal is denied, you may contact your state attorney general.

Geofencing

We do not use geofencing technology around any healthcare facility to identify, track, collect data from, or send messages to consumers based on their proximity to that facility.

Not a HIPAA-Covered Entity

Headcovers is a retailer. We are not a healthcare provider, health plan, or healthcare clearinghouse, and the information you share with us is generally not protected by HIPAA. This policy describes how we protect your health-related information outside of HIPAA.

Changes to This Policy

We may update this Consumer Health Data Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

Contact Us

Headcovers Unlimited, Inc.
214 S Iowa Avenue
League City, Texas 77573

Phone: (281) 334-4287
Email: [email protected]