Consumer Health Data Privacy Policy

Effective date: September 29, 2026

This page explains how IYP LLC (In Your Pleasure, "we", "us") handles consumer health data. It follows Washington's My Health My Data Act, Nevada's consumer health data law (SB 370), Connecticut's data privacy law, and similar laws. It adds to our Privacy Policy.

What "consumer health data" means. It is information that identifies you, or could, and says something about your physical health, past, present or future. Our product is a vaginal moisturizer for dryness, so everyday information can count. Examples are the fact that you bought it, asked us about it, or looked at it on our site.

The short version

• We collect it to give you what you asked for, to keep our site working, safe and easy to use, and to keep the records the law requires.
• We share it only with the services that help us do that, and they act for us.
• We never sell it.
• We don't send it to advertising platforms such as Meta, Google or TikTok, and we don't use it to target ads. Shopify, which runs our store, and Microsoft, through Clarity, may use site data for their own purposes, including ad targeting (section 3).
• We never use geofencing around places that provide health care.
• You can see it, have it deleted, and withdraw your consent at any time.

1. What we collect, why, and where it comes from

Orders

• What: your name, contact details, address, and what you bought.
• Why: to fill and ship your order, take payment, handle returns and keep tax records.
• From: you, when you check out on our site. For orders placed on Amazon, Amazon shares limited order details with us so we can handle that order.

Questions and messages

• What: what you tell us in chat, by email or on our contact form, such as questions about dryness, menopause or how to use our product.
• Why: to answer you.
• From: you.

Reaction reports

• What: what you tell us about a reaction to our product.
• Why: to look into it. The law requires us to report serious reactions to the U.S. Food and Drug Administration (FDA).
• From: you, or a public review you wrote.

Newsletter

• What: your email address and the fact that you signed up for The Pleasure Press.
• Why: to send you the newsletter you asked for.
• From: you.

Site visits

• What: the pages you view (including our product pages), your device and browser, the site that sent you, and your approximate location from your IP address.
• Why: to run the site and keep it secure. To improve the site, we use Shopify's totals, such as how many visits a page had, and Clarity recordings that show us what's hard to use.
• From: your device, through Shopify and Microsoft Clarity (clicks, scrolling and recordings of your visit, with what you type into forms hidden).

Ambassador applications

• What: whether you've tried our product, and anything you choose to add.
• Why: to review your application and run the program.
• From: you.

We don't collect precise location, genetic data or biometric data.

2. Consent: when we ask

We don't need to ask before we use your data for something you requested, such as filling an order or answering a message. For anything else, we ask first, clearly and separately:

• Collecting it for another purpose: we ask for your consent first. Running, protecting and improving our site (including Microsoft Clarity's recordings of visits) is part of our service, not another purpose.
• Sharing it for another purpose: we ask for your consent first, separately. The one exception we know of is Shopify's own use of store data described in section 3, which comes with using Shopify to run our store.
• Selling it: we don't. The law would require your signed permission, and we don't ask for it.

You can withdraw your consent at any time by emailing info@inyourpleasure.com. Withdrawing doesn't undo what happened before, but we stop from then on.

3. Who we share it with

Only these kinds of service providers, who act on our instructions:

• Online store, checkout, payments, email, chat and site statistics: Shopify (including Shopify Payments, Shopify Messaging and Shopify Inbox with its automated chat assistant).
• Shipping: Amazon Multi-Channel Fulfillment ships orders placed on our site, in a plain box.
• Email: Google Workspace.
• Spam protection on our forms: hCaptcha.
• Site analytics: Microsoft Clarity (visit recordings, heatmaps and store events).
• Office help: Anthropic (Claude), an AI assistant that helps us answer messages and keep records.

What they receive: order details (Shopify, Amazon), messages (Shopify, Google Workspace), site-visit data such as the pages you view (Shopify; and Microsoft Clarity, recordings of your visit and store events), device and browser details when you send a form (hCaptcha), and, when the AI assistant helps us, the order details, messages and applications it needs (Anthropic).

And only when the law requires it:

• The FDA, for a serious reaction report. We use your initials, never your name.
• Courts, regulators or law enforcement with a valid legal demand.

We have no affiliate companies that receive consumer health data. If you ask, we'll give you a list of every company we shared your data with and how to contact each one.

Other companies on our site. Shopify, hCaptcha and Microsoft (through Clarity) can collect information from your device when you use our site, for the purposes above. They may also recognize you over time on other websites that use their services (for example, Shop Pay at other Shopify stores), as their own privacy policies explain. Shopify also combines some store data with data from other Shopify stores to improve its products and for personalization and ad targeting (Shopify calls this Network Intelligence). It does this as its own business, under its privacy policy. Microsoft may use Clarity data, and a cookie it shares with its Bing service, for its own purposes, including advertising.

4. Your rights

If you live in Washington, Nevada or Connecticut, the law gives you these rights. We give them to all our customers, wherever they live. You can:

• ask whether we collect, share or sell your consumer health data (we never sell it);
• see it, and get a list of every company we shared it with, with a way to contact each one;
• have it deleted. We'll also tell the services we shared it with to delete it. We delete it from our records within the answer time below (45 days from your request, or 90 if we tell you we need more time), and from any backups within 6 months;
• withdraw your consent, and ask us to stop collecting or sharing it.

How to ask. Email info@inyourpleasure.com with "Health data request" in the subject line, from the email address you used with us. You can also write to our mailing address below. We may ask for an order number or another detail to confirm it's you. Someone you authorize can ask for you if they have your signed permission.

When we answer. Within 45 days. If we need more time, we'll tell you why within those 45 days and take up to 45 more days. Two requests a year are free.

What we may have to keep. The law makes us keep some records even after a deletion request, such as tax records and FDA reaction reports (kept for 6 years). If that happens, we'll tell you what we kept and why.

Appeals. If we say no to your request, you can appeal. Reply to our answer with "Appeal" in the subject line. We'll answer in writing within 45 days and explain our decision. If we still say no, you can file a complaint with your state attorney general:

• Washington: atg.wa.gov/file-complaint
• Nevada: ag.nv.gov, Complaints
• Connecticut: portal.ct.gov/ag, complaint form

We won't treat you differently or charge you more for using these rights.

5. How we protect it

Only our founder, and anyone working for us who has agreed in writing to keep it confidential, can see consumer health data. Our service providers must follow our instructions. We use well-known services with strong security. No system is perfectly secure. If a breach affects your data, we'll tell you as the law requires.

6. How long we keep it

Only as long as we need it for the reason you gave it to us, or as long as the law requires. Reaction reports are kept for 6 years, as federal law requires. Order records are kept for 7 years, for tax. Messages, and applications we didn't accept, are kept up to 2 years.

7. Changes to this page

We'll post any change here with a new effective date. Before we use or share consumer health data in a new way, we'll tell you and ask for your consent.

8. Contact us

IYP LLC (In Your Pleasure)
407 Lincoln Rd, Suite 6H PMB 1285
Miami Beach, FL 33139
info@inyourpleasure.com