Effective August 26, 2026
This Consumer Health Data Privacy Policy applies to consumer health data as defined by the Washington My Health My Data Act and by comparable Nevada law. It is a standalone policy and applies in addition to our Privacy Policy.
What we mean by consumer health data
Consumer health data means personal information that is linked or reasonably linkable to a consumer and that identifies that consumer's past, present, or future physical or mental health status. Veil sells a filtered showerhead. We do not ask for, and do not want, information about your health. However, because information a customer volunteers to us could in some circumstances be treated as consumer health data, we publish this policy so that our practices are clear.
Categories of consumer health data we collect
- Information you choose to volunteer to us in an email, a product review, a customer service message, or a returns or refund request — for example, if you tell us about your skin or hair when explaining why you are contacting us.
- Information that could be inferred from the products you buy, browse, or add to a cart on our store.
We do not collect precise location data, biometric data, genetic data, or health records. We do not ask health questions at checkout, and we do not use quizzes or assessments that collect health information.
Sources
- Directly from you, when you contact us, place an order, or subscribe to our email list.
- Automatically, from your activity on our website and on our advertising landing pages.
Why we collect it
- To respond to your questions and to process orders, returns, and refunds.
- To operate, secure, and improve our website.
- To measure and improve our advertising.
We do not use consumer health data to make decisions about your eligibility for any product, service, price, or benefit.
Who we share it with
We do not sell consumer health data. We share data with the following categories of third parties, and with the following specific processors, only as needed to run our business:
- E-commerce and hosting platform: Shopify Inc.
- Email and marketing automation: Klaviyo, Inc.
- Website analytics: Microsoft Corporation (Microsoft Clarity).
- Advertising platforms: Meta Platforms, Inc.
- Payment processing: Shopify Payments and the card networks and banks it uses.
- Shipping and fulfillment: our fulfillment partner and the carriers that deliver your order.
- Legal and safety: law enforcement or regulators where we are legally required to respond.
Veil has no affiliates or subsidiaries with whom consumer health data is shared.
Your rights
If you are a Washington or Nevada consumer, you have the right to:
- Confirm whether we are collecting, sharing, or selling your consumer health data, and access that data.
- Obtain a list of the third parties with whom we have shared or to whom we have sold your consumer health data.
- Withdraw consent to our collection and sharing of your consumer health data.
- Delete your consumer health data.
To exercise any of these rights, email support@veilshower.com with the subject line "Consumer Health Data Request." We will respond within 45 days. If we need more time, we will tell you within that period and may extend once by a further 45 days.
When you ask us to delete your consumer health data, we will delete it from our own records and will direct the processors listed above to delete it from theirs.
If we deny your request
You may appeal by replying to our decision or emailing support@veilshower.com with the subject line "Consumer Health Data Appeal." We will respond in writing within 45 days, explaining the reasons for our decision. If we deny your appeal, you may submit a complaint to the Washington State Attorney General at atg.wa.gov/file-complaint.
Changes to this policy
If we make material changes to this policy, we will post the updated policy on this page with a new effective date and will not apply the changes retroactively to consumer health data we already hold without your consent.
Contact
Questions about this policy: support@veilshower.com