Rowan, Inc. Health Privacy Policy

Collection of Consumer Health Data

“Consumer Health Data” is broadly defined as personal information that is linked or reasonably linkable to a consumer and that identifies, or that Rowan uses to identify, the consumer's past, present, or future physical or mental health status. Consumer Health Data does not include information that is publicly available, de-identified, or aggregated. What Consumer Health Data we collect may differ depending on how you interact with us.

Categories of Consumer Health Data We Collect

Rowan only collects Consumer Health Data as needed to provide you with the products and services that you have requested or with your consent. We may collect the following Consumer Health Data:

• Individual health conditions, treatment, diseases, diagnosis, and medications you are taking that we are required to collect and assess before the performance of body art via the Safe Body Art Act.

Categories of Sources of Consumer Health Data

As described in the Categories of Sources of Personal Data section of our Privacy Policy, we may collect Personal Data, including Consumer Health Data, directly from you or someone authorized to provide your Consumer Health Data to us (such as your parent or guardian).

Our Purposes for Collecting and Using Consumer Health Data

We may collect, use, disclose, or otherwise process your Consumer Health Data as reasonably necessary for various purposes as described in the Our Commercial and Business Purposes for Collecting Personal Data and Other Permitted Purposes for Processing Persona Data but primarily to provide you with products and services as you have requested or authorized, including health care services and products as defined under Consumer Health Privacy Laws.

We do not engage in geofencing around our stores that provides in-person health care services to: (1) identify or track you when seeking health care services; (2) collect your Consumer Health Data; or (3) send notifications, messages, or advertisements to you related to your Consumer Health Data or health care services.

How We Disclose Your Consumer Health Data

We may disclose your Consumer Health Data to certain Third Parties and Affiliates, which may include:

• Vendors. We may disclose your Consumer Health Data to contractors, analytics partners, business partners, and vendors to provide and improve our Services to you.
• Government Agencies. We may be required to disclose your Consumer Health Data to comply with applicable laws or respond to valid legal processes.
• Other Parties. We may disclose your Consumer Health Data to other parties that you explicitly gave us consent to do so.

Consumer Health Data Rights

If you are a Connecticut, Nevada, or Washington resident, you may have rights with respect to your Consumer Health Data as described below. Your rights may be subject to certain conditions and exceptions under Consumer Health Privacy Laws.

• Access and Portability. You have the right to request confirmation of whether or not we are processing your Consumer Health Data and to access your Consumer Health Data and request a copy of your Consumer Health Data in a machine-readable format, to the extent technically feasible. If you are a Nevada or Washington resident, you may also request a list of all Third Parties and Affiliates with whom we have disclosed or sold your Consumer Health Data and their contact information.
• Correction. You have the right to correct inaccuracies in your Consumer Health Data, to the extent such correction is appropriate in consideration of the nature of such data and our purposes of processing your Consumer Health Data.
• Deletion. You have the right to request that we delete the Consumer Health Data that we have collected about you.
• Opt-Out of Sale, Targeted Advertising, and Profiling. You have the right to opt-out of sale and/or processing of your Consumer Health Data for targeted advertising and profiling purposes, however, we do not conduct such activities using your Consumer Health Data.
• Withdraw Consent. You have the right to withdraw consent from us collecting and disclosing your Consumer Health Data.
• Nondiscrimination. You have the right not to be discriminated against for exercising your rights as described above.
• Appeal. If we refuse to take action on your request within a reasonable period of time after receiving your request in accordance, you may appeal our decision. If we deny your appeal, you have the right to contact your state’s Attorney General (CT, NV and WA).

To exercise your rights, you must send us a request that (1) provides sufficient information to allow us to verify that you are the person about whom we have collected Personal Data, and (2) describes your request in sufficient detail to allow us to understand, evaluate and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria.

You may submit a Valid Request by using the following methods:

• Email us at support@heyrowan.com
• Call us at: (347) 835-4289
• Write to us at: 1946 Palmer Ave, Larchmont, NY 10538

If you have any questions about this section or whether any of the following rights apply to you, please contact us at support@heyrowan.com.