ABRI’S PRIVACY POLICY

Effective date: March 10, 2025

[Download PDF]

NOTICE AT COLLECTION

At ABRI, your privacy is important to us. This summary provides a brief overview of how we collect, use, share, and protect your personal information when you use any of our products and services.

What We Collect: We gather details such as your name, contact information, information on your interactions with our websites, and your preferences to enhance your experience. Click here to view the full details on the personal information we collect.

How We Use It: We utilize your information to deliver products and services to you, market to you, improve our services, provide updates, and for other related purposes. Click here to view the full details on how we use your personal information.

Who We Disclose Information To: We may share your information with trusted partners and service providers to deliver products and services to you and enhance your experience. We may also disclose your information when required by law. For more information, Click here.

Your Right to Opt Out from Sale/Sharing Your Data: Some of our information practices may be considered "sale" or "sharing" under applicable laws. Specifically, we use cookies and other technologies for targeted advertising and analytics to deliver personalized, interest-based advertising to you. You can opt out at any time. Click here to begin the opt-out process.

1. Your Choices: You have control over your information. Depending on your location, the laws may grant you certain privacy rights, including the ability to access, delete, or opt out of certain uses of your personal information. To exercise your rights, please email us at support@relaxium.com.

For more details, please review our full Privacy Policy below or email us at support@relaxium.com with any questions.

TABLE OF CONTENTS

PRIVACY POLICY

At American Behavioral Research Institute, LLC ("ABRI", “we”, “us”) we recognize the importance of privacy to our consumers ("consumer," "you," or "your"). This Privacy Policy ("Policy") outlines the types of personal information we collect, how and why we collect, use, and process such personal information, and to whom and under what circumstances we disclose it. Please read this Policy carefully to understand your rights regarding your personal information and how and why we collect, use, process, and disclose your personal information.

This Privacy Policy applies both to our offline and online information practices, including information collected via our websites. The term "personal information" mentioned in this Privacy Policy refers to any information that can be used to identify you or that identifies you directly.

1. PERSONAL INFORMATION WE COLLECT

We gather information about you in various ways from multiple sources. This may include collecting information through the websites, phone, mail, email, fax, our service providers, or business partners. The specific information collected may vary based on the particular products or services you are requesting or obtaining from us.

Some of the information we collect may include data that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you, your device, or your household ("personal information"). Personal information does not include (and is therefore not covered by this Policy): (i) publicly available information or lawfully obtained, truthful information that is a matter of public concern, or (ii) de-identified, anonymized, or aggregated consumer information.

We and our service providers may have collected and processed the following categories of your personal information in the past 12 months for the business purposes described in this Policy. We expect to collect and process in the future the following categories of your personal information for the business purposes described in this Policy.

Category of Personal Information	Examples of Data Points
A. Identifiers	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code ¤ 1798.80(e))	A name, signature, address, telephone number (including mobile phone number), insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.
C. Protected classification characteristics under California or federal law	Age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
D. Commercial information	Purchasing or consuming histories or tendencies.
E. Biometric information	Not collected.
F. Internet or other similar network activity.	Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.
G. Geolocation data.	Approximate device location.
H. Audio, electronic, visual, thermal, olfactory, or similar information.	Call recordings, such as calls to our customer care team
K. Inferences drawn from other Personal Information.	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
L. Sensitive Personal Information	Personal Information that reveals: i. Racial or ethnic origin, religious; philosophical beliefs; or ii. Personal Information collected and analyzed concerning a consumer’s health.

2. SOURCES OF INFORMATION

We obtain the categories of personal information listed above from the following categories of sources:

1. Directly from you: We collect information directly from you, such as through forms you complete or products you purchase. You have the option not to provide us with your personal information. If you choose not to provide this information, you may still access and use parts of the websites. However, certain features, such as the checkout page, may not be available to you without providing personal information.

2. Indirectly from you: We also collect information indirectly from you, such as through the services we provide and by observing your actions on the websites.

3. Automatically from you: As you navigate through the Site, we automatically collect information, which may include usage details, IP addresses, and data gathered through cookies, web beacons, and other tracking technologies.

4. Our service providers and business partners.We have previously collected and may continue to collect personal information from outside sources, including, internet service providers, data analytics providers, government entities, operating systems and platforms, online marketplaces and social networks.  We have relationships with these service providers and business partners who may collect or receive information and use this to assist in analyzing our business and customers.

3. PURPOSES FOR COLLECTION

We collect personal information to:

• Provide the information, products and/or services you request;

• Operate, troubleshoot, and improve our offering of products or services;

• Respond to your inquiries;

• Understand how people use our services, including by generating and analyzing statistics;

• Operate and improve online services;

• Personalize online and offline content;

• Market, advertiseand assess the effectiveness of our events, promotional campaigns, publications, and services;

• Send you newsletters, updates, marketing communications, and other information or materials that may interest you;

• Maintain safety in our offices and combat illegal activities;

• For internal administration, data analysis, billing, and detecting, preventing, and responding to actual or potential fraud, illegal activities, or intellectual property infringement;

• Comply with legal obligations and to enforce our rights;

• To host, store and otherwise process information needed for business continuity and disaster recovery; and

• To evaluate or conduct a merger, reorganization, dissolution, or other sale or transfer of some or all of our assets, or similar corporate transaction or proceeding, in which personal information held by us is among the assets transferred.

4. DISCLOSURE OF PERSONAL INFORMATION TO OUR SERVICE PROVIDERS

In order to fulfill the purposes identified in Section C above, we may partner with service providers. For example, we may partner with electronic communication partners to communicate with you and to provide our online services to you. We may disclose your personal information to a service provider for a disclosed business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the service provider to both keep that personal information confidential and not use it for any purpose except performing the contract. Our agreements with our service providers shall impose similar terms with respect to information practices as set forth in this Policy, and will be not less protective than those imposed on ABRI.

5. SALE AND SHARING OF PERSONAL INFORMATION

While under most circumstances ABRI’s information practices do not involve sale or sharing of consumer personal information, some consumer privacy laws broadly define these and similar terms. According to California consumer privacy law, a “sale” includes disclosing, making available or communicating personal information to a third party (except our service providers or contractors) in exchange for monetary or other valuable consideration. “Sharing” includes disclosing, making available or communicating personal information to a third party for cross-context behavioral advertising, whether or not for any monetary or valuable consideration.

Under no circumstances does ABRI sell or share personal information we collect from our customers, potential customers, business contacts, independent contractors, website and application users (other than as disclosed under Cookies below), or others who interact with us. ABRI does not sell or share the personal information of known minors under 18 years of age.

Certain of our services to our customers and perspective customers may be deemed a “sale” or “sharing” under applicable law. For example, we utilize web analytics services to track the performance of our websites and applications and to understand our target audiences better. This data helps us identify areas for improvement and make informed decisions to enhance our products and services, to analyze traffic sources and measure the effectiveness of marketing channels, allowing us to allocate resources effectively. Furthermore, we can assess the performance of our content, identify popular pages, and create more valuable content for our audience.

In the preceding 12 months, we have sold or shared to third parties the following categories of personal information:

Categories of Personal Information Sold or Shared	Categories Of Third Parties To Whom The Information Was Sold Or Shared
Internet or other electronic network activity information	web analytics providers

Consumers have the right to opt out of the sale and sharing of personal information. To exercise this right, please follow following the instructions on our Your Privacy Choices link.

6. INFORMATION ON CONSUMERS UNDER THE AGE OF SIXTEEN (16)

We do not knowingly collect any personal information from visitors or users of our websites who are under the age of 16. If you are under 16, please do not give us any personal information. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce our Policy by instructing their children to never provide personal information through the Internet without their permission. If you have reason to believe that a child under the age of 16 has provided personal information to us, please contact us, and we will endeavor to delete that information from our databases.

7. OUR USE OF CONSUMERS’ SENSITIVE PERSONAL INFORMATION

While the definition of “sensitive personal information” may differ from state to state, it may include information that reveals a consumer’s social security, driver’s license, state identification card, or passport number; certain financial account details allowing access to such account; precise geolocation; racial or ethnic origin, religious or philosophical beliefs, or union membership; consumer health data; genetic data; as well as certain processing of biometric information, health information, and sexual life/orientation information.

We may collect and process sensitive personal information when we sell supplement products to our consumers. We do not disclose sensitive personal information to third parties without your express consent.

We generally use and disclose sensitive personal information for purposes outlined in the California Consumer Privacy Act ("CCPA") regulations. These purposes include providing goods and services reasonably expected by consumers who request them, preventing security incidents and illegal actions, protecting the physical safety of individuals, short-term transient use including non-personalized advertising, performing services on behalf of our business, verifying and maintaining the quality and safety of our products and services, and collecting and processing sensitive personal information where such collection and processing is not for the purpose of inferring characteristics about a consumer.

However, as the definition of consumer health data may be broadly construed under certain state laws specific to consumer health data privacy (see Consumer Health Data Privacy Policy), we may use and disclose consumer health data as defined under such laws for the purposes listed in the "Purposes for Collection" section above. To the extent such information may also be considered sensitive personal information, you have the right to request that we limit our use and disclosure of sensitive personal information we collect about you to the purposes listed in the CCPA regulations. To exercise your right to limit, to the extent applicable, you (or your authorized representative) may submit a request to us via the methods listed below.

8. COOKIES AND SIMILAR TECHNOLOGIES

Cookies are small text files placed on your device to store data that can be recalled by a web server in the domain that placed the cookie. We use cookies and similar technologies for storing and honoring your preferences and settings when accessing and interacting with our websites, combating fraud, analyzing how our websites and applications perform, customizing advertisements, and fulfilling other legitimate purposes. We also may use “web beacons” to help deliver cookies and gather usage and performance data. Our websites may include web beacons, cookies, or similar technologies from third-party service providers.

You have a variety of tools to control the data collected by cookies, web beacons, and similar technologies. For example, you can use controls in your internet browser to limit how the websites you visit are able to use cookies and to withdraw your consent by clearing or blocking cookies.

We may allow certain third parties, such as data analytics or online advertising service providers, to collect your browsing activity on our websites and applications in a manner that may be deemed to involve a sale of personal information under applicable law.

Through our use of these third party tools, we may have sold to such third parties the following categories of personal information of our website and application users within the last twelve (12) months:

• Internet or other electronic network activity information

Depending on your state of residence, you may have the right to opt out of the sale and sharing of personal information. To exercise this right, please follow the instructions on our Your Privacy Choices link.

9. HOW LONG YOUR PERSONAL INFORMATION WILL BE KEPT

We will keep your personal information while you have an account with us or while we are providing services to you. Thereafter, we will keep your personal information for as long as is necessary:

• To respond to any questions, complaints or claims made by you or on your behalf

• To provide services as contracted for by you

• To comply with legal obligations and to enforce our rights

• To show that we treated you fairly

• To keep records required by law

We will not retain your personal information for longer than necessary for the purposes set out in this Policy. Different retention periods apply for different types of personal information. When it is no longer necessary to retain your personal information, we will delete or anonymize it.

10. YOUR PRIVACY RIGHTS

Depending on your state of residence, you have certain rights with respect to your personal information that we collect and use. These may include:

Right to Know - theright to know what personal information the business has collected about the consumer, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom the business discloses personal information, and the specific pieces of personal information the business has collected about the consumer.

You may also have the right to request that we transfer information about you to a third party. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.

• The categories of sources for the personal information we collected about you.

• Our business or commercial purpose for collecting or selling that personal information.

• The categories of third parties with whom we share that personal information.

• The specific pieces of personal information we collected about you (also called a data portability request).

• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:

  • sales, identifying the personal information categories that each category of recipient purchased; and

  • disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

• If requested by you, we will provide you with a copy of the personal information you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party.

Right to Delete - the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

1. Complete the transaction for which we collected the personal information, provide a good or service that you employer requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.

2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.

3. Debug products to identify and repair errors that impair existing intended functionality.

4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.

5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).

6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.

7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your or your employer’s relationship with us.

8. Comply with a legal obligation.

9. Make other internal and lawful uses of that information that are compatible with the context in which you or your employer provided it.

Right to Correct - the right to request that we update any information about you that is inaccurate or incomplete. Once we receive and confirm your verifiable consumer request, we will update (and direct our service providers to update) your personal information in our records. You also have the right to require us to restrict processing of your personal information in certain circumstances, e.g. if you contest the accuracy of the personal information.

Right to Opt-Out of the Sale or Sharing of Personal Information - the right to opt-out of the sale or sharing of their personal information by us. Once we receive and confirm your verifiable consumer request, we will no longer sell or share your personal information.

Right to Limit the Use or Disclosure of Sensitive Personal Information - the right to request that we limit our use of your sensitive personal information to that which is necessary to perform the services or provide the goods that you reasonably expect of us, with some narrowly tailored exceptions.

Right to Non-Discrimination

We will not discriminate or retaliate against you for exercising any of your privacy rights. In that regard, we will not take the following actions in response to your exercising of your privacy rights, unless permitted by the applicable laws:

• Deny you services.

• Charge you different prices or rates for services, including through granting discounts or other benefits, or imposing penalties.

• Provide you a different level or quality of services.

• Suggest that you may receive a different price or rate for services or a different level or quality of services.

Exercising Your Rights

To exercise the rights described above, please submit a verifiable consumer request to us by either:

Email: support@relaxium.com

Postal Address:American Behavioral Research Institute LLC

2255 Glades Rd

Suite 324A

Boca Raton, FL 33431

You may be limited in the number of verifiable consumer requests for access or data portability in any given 12-month period (for example, twice per 12-month period for California residents). The verifiable consumer request must:

5. Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or a legally authorized representative.

6. Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

7. Before responding to your privacy rights request, we must verify your identity. We will do so by matching at least two reliable data points from your request to the information that we maintain about you. For certain more sensitive personal information, we may require further verification, including obtaining the consumer’s signed declaration under penalty of perjury to further confirm that the requestor is the consumer. Once you contact us to exercise your rights, we will further guide you as to our verification process.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Authorized Agents

Only you or a person that you or your employer authorize to act on your behalf may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.You may use an authorized agent to submit a privacy rights request on your behalf if you provide the authorized agent a written permission signed by you. We may also require you to do either of the following:

(1) Verify your own identity directly with us.

(2) Directly confirm with us that you provided the authorized agent permission to submit the request.

We may deny a request from an authorized agent if the agent cannot does not provide to us your signed permission demonstrating that they have been authorized by the consumer to act on your behalf or if you do not confirm to us that you provided the authorized agent permission to submit the request.

The requirement to obtain and provide written permission from the consumer does not apply to requests made by an opt-out preference signal.

Response Timing and Format

We will acknowledge your request no later than ten (10) business days after receiving your request to delete, request to correct, or request to know and provide information about how we will process the request. The information provided shall describe in general our verification process and when you should expect a response, except in instances where we have already granted or denied the request.

We shall respond to a verifiable consumer request within 45 calendar days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. For example, in cases where requests from a consumer are distinctly unsubstantiated or excessive, in particular because of their repetitive character, we may either charge a reasonable fee, in our discretion, taking into account the administrative costs of providing the information or communication or taking the action requested; or refuse to act on the request altogether.

GLOBAL OPT OUT PREFERENCE SIGNAL

Global Opt-Out Preference Signal or Global Privacy Control (GPC) is a feature available in some web browsers that allows users to communicate their preference for not being tracked across websites. Currently, only certain internet browsers (DuckDuckGo, Brave, Mozilla Firefox) or a separately installed plug-in enable universal opt-out signals.While the Global Privacy Control and universal opt-out signals are still developing, we are monitoring the status of implementation and are consistently configuring our websites to honor consumer’s opt-out signals.

Processing this signal typically involves several steps, including:

Receipt and verification of the signal: When we first receive the opt-out preference signal from the consumer, we will verify that it is authentic and valid. This may involve confirming the identity of the consumer, ensuring that the signal was sent from a valid email or other contact address, or using other methods to ensure that the signal is legitimate.

Updating data systems: Once the opt-out preference signal has been verified, we will update our data systems to reflect the consumer's preferences. This may involve adding your name and contact information to a "do not contact" list or other database, or marking your existing record in a customer relationship management (CRM) system as opted-out.

Communicating changes to relevant parties: If your opt-out preference signal affects other parties who have access to your personal information, such as third-party service providers or partners, we will communicate the changes to those parties and ensure that they also update their data systems accordingly.

Compliance monitoring: We will monitor our data systems and processes to ensure ongoing compliance with your opt-out preference signal. This may involve periodically reviewing our data systems to ensure that your preferences are being respected, and taking corrective action if necessary.

If you want to turn on Global Privacy Control on your browser, you can follow these steps:

1. Open your web browser and go to the settings or preferences menu. The location of this menu may vary depending on the browser you are using.

2. Look for the "Privacy" or "Security" section in the settings or preferences menu.

3. Scroll down to find the option for "Global Privacy Control" or "Do Not Track."

4. Toggle the switch to turn on Global Privacy Control. In some browsers, you may need to check a box or select a radio button to enable this feature.

5. Once Global Privacy Control is turned on, your browser will send a signal to websites that you do not want to be tracked. However, it's important to note that not all websites may honor this signal, and some may continue to track your activity.

6. To verify that Global Privacy Control is working, you can visit the website https://globalprivacycontrol.org/ and check if it displays a message indicating that your browser is sending the "Do Not Track" signal.

By turning on Global Privacy Control on your browser, you can have greater control over your online privacy and limit the amount of information that websites and advertisers can collect about you.

11. KEEPING YOUR PERSONAL INFORMATION SECURE

ABRI has reasonable technical, physical and administrative security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorized way. These measures offer appropriate reasonable security level, taking into account the state of the technology, the implementation costs and also the nature, the scale, the context and the processing purposes. We limit access to your personal information to those who have a genuine business need to access it. Those processing your information will do so only in an authorized manner and are subject to a duty of confidentiality. The measures are also intended to prevent unnecessary collection and further processing of personal information. The personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

12. DISCLAIMER/LIMITATION OF LIABILITY FOR DATA INPUT ERRORS

ABRI is not responsible for any errors that are made by you in inputting data, nor for data entered by someone using your credentials. PLEASE SECURE YOUR CREDENTIALS AND DO NOT DISCLOSE THEM TO ANYONE ELSE. If your credentials are compromised, please notify us at support@relaxium.com.

Under no circumstances shall ABRI be liable to you, including but not limited to any liability for the system not being available for use, for lost or corrupted data, for errors in the documentation provided to you, if any, or for the failure of data archiving. Please keep track of your own time in case of a system malfunction. Except as expressly agreed with our client, ABRI will not be liable for any consequential, special, indirect, or punitive damages, even if advised of the possibility of such damages, or for any claim by any third party.

13. CHANGES TO OUR PRIVACY POLICY

We reserve the right to amend this Policy at our discretion and at any time. When we make changes to this Policy, we will notify you by email or through a notice on our websites’ homepages and/or through our applications login screen. You will also be able to determine the date that our current Policy has become effective, by viewing the Effective Date at the top of this document.

14. CONTACT INFORMATION

Our privacy program is managed by us in-house. If you have any questions or comments about this Policy, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under this Policy, please do not hesitate to contact us at:

Email: support@relaxium.com

Postal Address:American Behavioral Research Institute LLC

2255 Glades Rd

Suite 324A

Boca Raton, FL 33431

CONSUMER HEALTH DATA PRIVACY POLICY

Effective Date: March 10, 2025

This Consumer Health Data Privacy Policy (the "CHD Policy") supplements ABRI's Privacy Policy and applies to personal information defined as "consumer health data" ("consumer health data") subject to applicable consumer health data laws. The types of consumer health data we collect, how and why we collect and use such consumer health data, and to whom and under what circumstances we disclose it may differ depending on the circumstances of our interaction with you and the types of products and services that you request from us.

1. Consumer Health Data We Collect

We collect different kinds of personal information (as explained in our Privacy Policy) about consumers. The personal information we collect about you depends on how you interact with ABRI, the options you choose (including your privacy settings), the products and features you use and/or purchase, where you reside, and applicable law. Since consumer health data is defined very broadly under consumer health data laws, some of the personal information we collect about you could be considered consumer health data. Examples of the categories of consumer health data we may collect include:

• Information about your health-related conditions or status, treatments (including surgeries and procedures), diseases or diagnoses; diagnostic testing, health measurements, symptoms, medications, and reproductive or sexual health.

• Information that may be used to infer or derive data related to the above or other health information.

2. Sources of Consumer Health Data

As described further in the Sources of Information section of our Privacy Policy, we collect personal information (which may include consumer health data) directly and indirectly from you, automatically from you via your interactions with our websites using cookies and other tracking technologies, and from service providers and third parties. We may infer certain information about you based on information provided from any of the sources listed above.

3. Why We Collect and How We Use Consumer Health Data

We collect, use, and process personal information (which may include consumer health data) to conduct our business and to provide you with quality products, services, and experiences. Here are ways we use your personal information (which may include consumer health data):

• To provide you access to the websites, including to service your account and maintain its security;

• To provide you products and services, including providing information, content, products, or services, and fulfilling your requests or purchases, such as order fulfillment;

• To personalize your experiences with us, including to remember your interests and preferences, personalize our websites and the content, products, and services we make available to you through the websites, facilitate interactions with us, track and categorize your activity and interests on the websites, including identifying and linking the different devices you use, and to enrich your experience on the websites;

• To provide information, including information about the websites or required notices;

• For analytics, including understanding how you use our websites, products, and services;

• To improve and develop, such as improving and further developing our products, services, and our website content, features, performance, and support;

• To provide customer support;

• To manage your account with us, including setting up, registering, and maintaining your account with us;

• To communicate with you, including when you place an order; to obtain information about you; to respond to your inquiries, concerns, and requests; contacting you about your transactions or account; to provide updates on any orders; to let you know an item is back in stock; or to provide other legal or service-related notices about our websites;

• For marketing and advertising, such as delivering marketing communications, promotional materials, or advertisements about the ABRI brands, or third-party products or services that may be of interest to you, including to display targeted ads to you elsewhere online (see your options related to marketing and advertising in the Your Rights section below);

• For business purposes, including to operate and improve our business and business activities; to administer the websites; for research; to maintain our programs, accounts, and records; to understand your satisfaction with our products and services including the websites; to authenticate the information you provide us; to protect the security and integrity of our website and information technology infrastructure; to detect, prevent and respond to fraud, misuse of our services, intellectual property infringement, violations of our Terms of Use, violations of law, or other misuse of the websites or our products and services; and for any other business purpose permitted by law;

• For legal and safety purposes, including to defend or protect us, you, or customers, or third parties, from harm or in legal proceedings; to protect our rights or the rights, property, and safety of others; to comply with legal obligations; to maintain the security of our customers, employees, and property; to pursue remedies available to us and limit our damages; to respond to court orders, lawsuits, subpoenas, and government requests; to comply with judicial proceedings, court orders, legal processes or lawful requests from government authorities; to address legal and regulatory compliance; and to notify you of product recalls or safety issues.

We may combine or aggregate any information we collect for any of these purposes. We may also de-identify and/or anonymize your personal information in such a way that you may not reasonably be re-identified by us or any other organization and may use such de-identified or anonymized information for any purpose. For certain purposes, we give you choices and/or obtain your consent as required by applicable law – for example, to use your consumer health data for advertising or marketing purposes.

4. Our Sharing of Consumer Health Data

We may share Consumer Health Data with third parties as reasonably necessary to complete any transaction or provide any product or service you have requested or authorized. For example, if you make a purchase, we will share information about the transaction as necessary to process the payment, including to protect against fraud. We may share each of the categories of consumer health data described above for the purposes described in this CHD Policy to our service providers for business purposes with your consent to the extent required.

These business purposes include the following:

• to maintain or service accounts;

• to provide customer service;

• to process payments;

• to fulfill orders;

• to communicate with you;

• to provide advertising or marketing services;

• to provide analytic services;

• to support internal research;

• to verify service quality;

• to address online fraud and security;

• to support our business; and/or

• to provide similar services on our behalf.

If we disclose your personal information to a service provider, we do so pursuant to a written contract that prohibits the service provider from selling, sharing, retaining, using, or disclosing the personal information for any purpose other than for the specific purpose of performing the services specified in the contract, or as otherwise permitted by applicable law.

We are required to describe certain disclosures of consumer health data as "sales" where we receive valuable consideration. No money is paid in exchange for your consumer health data. Where applicable, we may share consumer health data with the following categories of third parties with your consent to the extent required by law:

• With business partners. who may deliver marketing communications, promotional materials, or advertisements that may be of interest to you. These business partners may engage in cross-contextual behavioral advertising on our behalf; and

• With third parties when you engage in or interact with co-branded or co-sponsored content or activities.

For example, we share your consumer health data with third party marketing and advertising companies if we have obtained the necessary consents from you to do so. Additionally, we may disclose in the future each of the above-listed categories of Consumer Health Data to third parties:

• Upon your request or approval, though we may not be able to accommodate all requests;

• As reasonably necessary to facilitate a merger, acquisition, sale, joint venture or collaboration, reorganization, divestiture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings), or other types of strategic business transactions;

• To law enforcement, government entities, including regulatory agencies and courts, as reasonably necessary for our business operational purposes, to assert and defend legal claims, and otherwise as permitted or required by law.

Please note that some third parties may collect consumer health data about you over time and across different websites or online services you may visit.

5. Consumer Health Data Rights

We offer certain privacy rights regarding your consumer health data as stated below, subject to certain limitations at law.

Right to Confirm Processing of Consumer Health Data

The right to confirm if we are collecting, sharing, or processing your consumer health data.

Right to Access Consumer Health Data

The right to access your consumer health data, including the categories of consumer health data we have collected, the categories of sources from which the consumer health data is collected, the business or commercial purpose for collecting or sharing the consumer health data, and the categories of third parties with whom we have shared or sold the consumer health data. We will provide a mechanism that you may use to contact these third parties.

Right to Withdraw Consent

The right to withdraw consent from our collection, use, or sharing of consumer health data concerning you.

Right to Delete Consumer Health Data

The right to request deletion of the consumer health data we have collected about you.

6. How to Exercise Your Privacy Rights

You can exercise the right to Withdraw Consent to collection by selecting the link titled "Your Privacy Choices" found at the bottom of each web page and toggling off all the switches. You can exercise your other rights by contacting us at support@relaxium.com.

Any withdrawal of consent does not affect the use of your consumer health data to the extent necessary to provide a product or service that you have requested from us, including related transactional emails.

We may need to authenticate your identity and request before processing it, which may require us to obtain additional personal information from you, and we may use a service provider to authenticate your identity. If you do not provide this information, we may not be able to verify or complete your request in all circumstances.

7. Right to Appeal

In certain circumstances, we may decline a request to exercise the rights described above. If your request is denied, we will provide an explanation for the denial and instructions on how you may appeal a denied request. You may appeal a denied request by contacting us at support@relaxium.com. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the relevant state Attorney General.

8. Changes in CHD Policy

We may make changes to this CHD Policy from time to time, and we will notify you of such changes by posting an updated version of this CHD Policy on the Sites and notifying you in the manner in which we normally communicate with you (for example, by email).