ChromaDex, Inc. (collectively, “ChromaDex”) respect your concerns about privacy. This Consumer Health Data Privacy Statement (the “Health Data Privacy Statement”) supplements the Tru Niagen Privacy Policy and ChromaDex Privacy Policy. It applies only to Nevada and Washington consumers with respect to consumer health data collected in those states. This Health Data Privacy Statement uses certain terms that have the meaning given to them in the Nevada Consumer Health Data Privacy Law and the Washington My Health My Data Act, as applicable, and does not apply to protected health information subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).

Collection and Use of Consumer Health Data

We may collect the following categories of consumer health data:

• Health conditions, treatment, diseases or diagnoses;
• Health-related surgeries or procedures;
• Bodily functions, vital signs, symptoms or other similar measurements;
• Diagnoses or diagnostic testing, treatment, or medication; and
• Reproductive or sexual health information.

We may collect and use consumer health data to provide you with our Tru Niagen® products and other products and services you request from ChromaDex, and for the purposes described in the Tru Niagen Privacy Policy and ChromaDex Privacy Policy, such as to develop and test our products and services, advertise and market our products and services, conduct surveys and provide you with offers and other communications about our products and services. Where required by applicable law, we will obtain your consent to collect and use your consumer health data.

Sources of Consumer Health Data

We may collect consumer health data about you:

• Directly from you through our Tru Niagen® website and other websites or communications with us, such as through forms, surveys, registration pages and emails, and when you purchase a product;
• From our affiliates and subsidiaries; and
• From vendors who provide services on our behalf.

Sharing of Consumer Health Data

We may share the categories of consumer health data listed above with the parties described in the Tru Niagen Privacy Policy and ChromaDex Privacy Policy, such as our affiliates listed here and service providers who perform services on our behalf. Where required by applicable law, we will obtain your consent to share your consumer health data.

Consumer Rights

If you are a resident of Nevada or Washington, you may have certain rights and choices regarding our use and disclosure of your consumer health data, as described below.

• Confirm: You may have the right to request that we disclose to you information about whether we collect, share or sell your consumer health data, including the third parties with whom we have shared consumer health data.
• Access: You may have the right to request access to, and information about, the consumer health data we have collected, shared or sold about you.
• Delete: You may have the right to request that we delete your consumer health data.
• Withdraw: If, where required under applicable law, you have provided your consent to ChromaDex to collect, use and share your consumer health data, you may have the right to withdraw your consent.
• Cease: In addition, you may have the right to request that we cease the collection, sharing or sale of your consumer health data.

To submit a request to exercise the rights and choices set forth above, please contact us at privacy@chromadex.com.

You may appeal a decision regarding a request you have submitted by emailing us at privacy@chromadex.com.

Updates to Our Health Data Privacy Statement

We may update this Health Data Privacy Statement from time to time to reflect changes in our consumer health data privacy practices. We will indicate at the top of the statement when it was most recently updated. Where required by applicable law, we will notify you of any material changes by, for example, posting a notice of the update on our website or emailing you about the change.