Consumer Health Data Privacy Notice

Consumer Health Data Privacy Notice

Last updated November 6, 2026

This notice is published by Tabs Labs LLC, which operates Tabs (tabs.co) and TabsRx (tabsrx.co). It applies to residents of Washington, Nevada and any other state whose consumer health data law gives you the rights below, and to anyone whose consumer health data is collected in those states. It supplements the Tabs privacy policy and the TabsRx privacy policy.

"Consumer health data" means personal information that identifies your past, present or future physical or mental health status, including information about seeking or receiving health care services or prescription medication, and the other categories your state's law names, such as reproductive or sexual health information.

1. Which brand collects it

Tabs sells chocolate supplements. It does not collect consumer health data and does not use your Tabs information to infer anything about your health.

TabsRx is an online health care service. The medical practices and pharmacies that provide your visit and fill your prescription (the clinical partners) hold your medical record, which is protected health information under HIPAA and outside this notice. TabsRx collects a small amount of consumer health data on its own behalf before and around your visit. That is what this notice covers.

2. Consumer health data TabsRx collects, and where it comes from

Because TabsRx is a health care service, even asking to hear from us can count as consumer health data under these laws. Collected from you, on tabsrx.co or in our emails or surveys:

• Your email address and, if you give it, your name, together with the fact that you asked to hear about TabsRx ("Keep me posted"), the wording you agreed to, and when and where you agreed.
• The fact that you opened or clicked an email about TabsRx.
• Survey answers that relate to your health or to your interest in prescription treatments, if you choose to answer them.
• The pages you view on tabsrx.co and the standard server log information that comes with a page request, which can show an interest in health care services.

Received from the clinical partners, as their HIPAA business associate: limited visit and order events (that a visit started or was submitted, that an order shipped, that a plan was canceled) linked to your email address. This information is protected health information, covered by HIPAA and the clinical partners' Notice of Privacy Practices rather than by this notice. We list it here so the picture is complete.

We do not buy consumer health data from anyone, and we do not create records that label you with a health condition from your shopping or from information obtained from data partners.

3. Why we collect it and how we use it

• To send you the emails you asked for about TabsRx.
• To choose which updates and offers to send you and when, based on how you respond to our emails and, only if you check the box "Use my answers to tailor what Tabs sends me" on a survey, on your survey answers.
• To stop sending you marketing when we should (for example after you unsubscribe, complain or cancel).
• To measure whether our emails and pages work, in aggregate.
• To run and secure the site.

We ask for your consent before collecting consumer health data for these purposes, and we do not collect, use or share it for any other purpose without first telling you and asking again.

4. Sharing

Categories of consumer health data shared: your email address and consent status, and visit-related events, with the categories of recipients below.

• The clinical partners and OpenLoop Health, which provide your visit, prescription, payment and support, receive your contact details and consent status so your care can be provided.
• Service providers that work for us under contract and may use the data only to provide their service: Amazon Web Services (hosting and email delivery), Mailgun (email delivery), Google (support email, and analytics on the full service), and Netlify (website hosting, which keeps standard server logs).
• Affiliates: Tabs Labs LLC has no affiliate that receives consumer health data. Tabs, our chocolate brand, is the same company. It uses your TabsRx information only if you opt in, to personalize the offers it shows and sends you on tabs.co and by email or text, and never your health details (your conditions, clinical answers or prescriptions).
• We do not share consumer health data with advertising platforms, data partners or data brokers, and we do not sell it. There is no advertising pixel or session recorder on tabsrx.co.
• We may disclose consumer health data to comply with the law or protect rights and safety, and it may transfer with the business if Tabs Labs LLC is sold or reorganized, under the same restrictions.

5. Washington and Nevada residents and personalization

If you live in Washington or Nevada, we do not use information from data partners or from your Tabs chocolate purchases to select you for TabsRx offers unless you have given consent on a TabsRx page.

6. Your rights

You have the right to:

• Confirm whether we collect, share or sell consumer health data about you, and get access to it.
• Receive a list of the third parties and affiliates with whom we have shared it, with a contact for each.
• Withdraw your consent to our collection or sharing of it.
• Have it deleted, including from our backups within the time the law allows, and have the deletion passed to anyone we shared it with.
• Not be discriminated against for exercising these rights.

To exercise a right, email privacy@tabsrx.co from the email address you used with us, or write to Tabs Labs LLC, 18117 Biscayne Blvd #3022, Miami, FL 33160. We verify a request by matching the details you provide with the information we hold and may ask for more. We respond within 45 days and tell you if we need up to 45 more. If we deny a request, you may appeal by replying to our response; we answer appeals within 45 days, and if the appeal is denied we give you a way to contact your state attorney general.

For your medical record, exercise your HIPAA rights with the clinical partners under their Notice of Privacy Practices. We route any such request we receive to them promptly.

7. Contact

privacy@tabsrx.co. Tabs Labs LLC, 18117 Biscayne Blvd #3022, Miami, FL 33160, United States.