Prestige Consumer Healthcare Privacy Notice (“Privacy Notice”)

Effective Date: June 1, 2024

WHO WE ARE

Prestige Consumer Healthcare Inc. and each of its affiliates and subsidiary entities (collectively, “Prestige,” “we,” “our,” or “us”) are committed to protecting your personal data. We are headquartered in Tarrytown, NY and we market, sell, manufacture, and distribute consumer healthcare products to retail outlets in the US, Canada, Australia, and certain other international markets. Unless stated otherwise, this Privacy Notice applies to and explains the types of personal data we collect, how we use your personal data, how we may share your personal data, and the security we employ to protect your personal data in connection with our collection of it. For persons residing in the European Economic Area (“EEA”), UK or Switzerland, please click here for the applicable supplement to this Privacy Notice.

In this Privacy Notice, “you” means anyone who uses our Website (as defined in our Terms of Use), our products or services, or otherwise communicates with us. Personal data means information that identifies, describes, or is reasonably capable of being associated with or linked to, directly or indirectly, an individual or household. We also have Terms of Use, which applies to your use and access of our Website, and which you may access by clicking on the hyperlink.

By clicking the “ACCEPT” box, you expressly acknowledge and agree that you have read, understand, and consent to our data collection, processing, and use disclosed in our Privacy Notice.

TABLE OF CONTENTS

Contact Us

Modification

Personal Data We Collect

How We Use Your Personal Data

How We May Share Your Personal Data

How We Protect Your Personal Data

Retention of Data

Cookies

Children’s Privacy

Linked Sites

International Transfers of Data

Data Subject Rights

Jurisdiction-Specific Privacy Notices

CONTACT US

You may contact us at Prestige Consumer Healthcare Inc., ATTN: Privacy, 660 White Plains Rd., #250, Tarrytown, NY 10591. You also may reach us by email at privacy@PrestigeBrands.com, or at the Prestige Privacy toll-free number, 1-877-297-0721.

MODIFICATION

We reserve the right to modify this Privacy Notice at any time. If we make material changes to this Privacy Notice, we will provide an appropriate notice under applicable law. The date at the top tells you when we last updated this Privacy Notice. Changes to this Privacy Notice are effective when posted. By clicking on the accept box following any changes, you affirmatively acknowledge and confirm that you have read and understand our data collection practices and acknowledge the changes reflected in the updated Privacy Notice. If you do not agree, you may not use our Website or submit information to us.

PERSONAL DATA WE COLLECT

We may collect personal data about you from you directly, through technology that automatically collects information from your browser or device, and/or from third party sources. We provide examples below. These examples are not exhaustive and we may collect personal data that is not specifically listed below which we use consistent with this Privacy Notice. We also may provide supplemental information about our data collection or privacy practices in disclosures about specific products, services, or in other circumstances, or in some cases, at the time we collect personal information from you. Any personal data that we collect will be used and processed in a manner consistent with this Privacy Notice.

Personal Data You Provide To Us. Personal data we may collect from you includes information you choose to submit to us in connection with your access to and use of our Website, when you sign up for email alerts, participate in contests, promotions, or surveys we may have, or when you otherwise communicate with us. Such information may include:

Personal Data We Collect Automatically. We collect personal data from you automatically when you interact with us or engage with our Website, including:

Personal Data We Collect From Third Parties. We may receive information from third parties, including reports regarding adverse reactions to our products, or from third-party providers for analytic purposes, such as Google Analytics. If you seek employment with us, we may obtain information about you from employment agencies or websites, referrals, or from your former employers (as referrals), regarding your employment history.

HOW WE MAY USE YOUR PERSONAL DATA

We use the personal data we collect about you to render our services for you and your company, namely to operate and improve our products and services, our Website and its related technologies and infrastructure; to improve your experiences with our products and services, and Website; to coordinate with others in connection with our products and services; to contact and communicate with you; to protect our rights; to protect the rights of others; to enforce our Terms of Use; and/or to prevent fraud and abuse in connection with our products and services or our Website, or our other systems or networks. If you seek employment with us, we will use your information for employment hiring purposes.

By accessing and using our Website, and by clicking the “ACCEPT” box, or by agreeing to these privacy terms that may be provided to you by other means, you expressly confirm that you have read, understand, and consent to the practices set forth in our Privacy Notice and that you have given us your consent to use or share your information:

We may anonymize, aggregate, or combine information we collect online or elsewhere for the above purposes or other purposes, to improve our Website to develop new products or services, and/or to analyze statistics on usage and trends. Please note that aggregated or de-identified data may not constitute personal data or information under applicable law.

HOW WE MAY SHARE YOUR PERSONAL DATA

We may share the personal data we collect about you from our Website through the use of pixels, web beacons, or other technologies, or information you provide to us directly by other means, for the purpose of providing and advertising our products and services, rendering our business operations, including the sharing of information with third-party service providers, vendors, or other organizations we may collaborate with.

Third-Party Service Providers. We may share your personal data with our service providers, which are third parties who help us operate our Website, help us offer other products or services, and/or help us with our business operations. Examples can include email delivery and other technology service providers such as cloud-infrastructure companies who provide services and assist us with the operation of our Website and information systems. The information we share includes identifiers like your name, address, online identifier, a unique account number, or IP address, or other information like Internet or other electronic network activity information, inquiry and browsing history, and/or your interaction with us and our Website, products, or services.

These service providers may have access to personal data needed to perform their functions, but may not use it for other purposes. Further, they must process that information in accordance with this Privacy Notice, any associated data processing agreement, and as permitted under applicable data protection law.

Third-Party Collaborators. Sometimes, we team up and collaborate with other organizations in connection with our products and services. Any such third-party collaborator, to the extent we share your information with them, must process that information we provide in accordance with this Privacy Notice, any associated agreement, and as permitted under applicable data protection law.

Social media. If you access our Website from a social media account, like Google or Facebook, you give us permission to collect and share pixel information with such social media provider.

Business Transfers. We might sell or buy businesses or services. In such transactions, personal data generally is one of the transferred business assets but remains subject to the promises made in any pre-existing Privacy Notice (unless, of course, the individual consents otherwise). Also, in the event that Prestige or substantially all of its assets are acquired, your personal data will of course be one of the transferred assets.

Direct Marketing. We may share your personal information with third parties for direct marketing purposes. This includes sending promotional emails, targeted advertisements, or other marketing communications related to our products, services, or events. We share personal data with third parties for direct marketing of our products and services, including through the use of pixels and website activities.

If you wish to opt out of such marketing communications, please click on the unsubscribe link in your email, manage your Privacy Preferences by clicking on this Opt-Out button, or you may contact privacy@PrestigeBrands.com. Please note that even if you opt out of direct marketing, you may still receive non-promotional communications related to account management, service updates, or transactional notifications.

Protection of Us and Others. We may share your information when we believe its release is appropriate to comply with the law, enforce or apply our accompanying Terms of Use, comply with our agreements as a data processor or service provider, or to protect the rights, property, or security of others. This includes exchanging information with other companies and organizations for fraud prevention and detection, and risk reduction.

HOW WE PROTECT YOUR PERSONAL DATA

We employ reasonable physical, technical, and administrative safeguards designed to protect the security of personal data that we collect in connection with our Website and information systems. Safeguards we employ include building security, firewall barriers, encryption techniques, multi-factor authentication procedures, antivirus/anti-malware solutions, and access controls to help protect personal data against loss, theft, misuse, and unauthorized access, disclosure, alteration, or destruction. These safeguards vary depending upon a variety of factors including the sensitivity of the information.

Despite all reasonable practices, no security method is infallible. We cannot guarantee the security of the networks, systems, servers, devices, and databases we operate, that are operated on our behalf, or which you employ to access our Website and information systems. Nor can we guarantee the security of third-party networks, including any cellular networks and storage servers, used in connection with our Website and information systems.

RETENTION OF PERSONAL DATA

We retain your personal information no longer than is reasonably necessary for the purposes for which it was collected and processed and in accordance with Prestige's data retention policy, except as required by applicable law, contract, or otherwise to comply with our legal obligations, resolve disputes, and/or to enforce our agreements.

COOKIES

Cookies are small files commonly employed by numerous websites and online services, including our Website, to store user information on their devices or computers, and are utilized by the Website. These cookies can include HTTP and HTML5 cookies, along with various forms of local storage, enabling us to offer valuable features to our users. For more details on cookies in general, you can visit https://www.allaboutcookies.org.

To explore cookies we use on our Website and how you can control or disable cookies on your computer, please see our Cookie Policy, which you may access by clinking on the hyperlink.

“Do Not Track” Signals

Your browser settings might enable the automatic transmission of a "Do Not Track" signal to the websites and online services you visit. Currently, there is no universally agreed-upon interpretation of the "do not track" signal within the industry. Similar to numerous other websites, our Website is not set up to acknowledge or respond to "Do Not Track" signals initiated by browsers.

CHILDREN’S PRIVACY

Our Website is not designed to attract children 13 years or younger. In fact, you must be eighteen (18) years old or older to use it. As a general matter, if we learn we have collected or received personal data from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13 without parental consent, please contact us via the contact methods above.

LINKED SITES (Third-Party Sites)

Our Website may contain links to other websites (“Linked Sites”) for your convenience and information. If it does, these Linked Sites may be operated by organizations that are not affiliated with us. Linked Sites may have their own privacy policies or notices, and we strongly encourage you review them if you visit any Linked Site. We are not responsible for the content of any Linked Site not affiliated with us, any use of those Linked Sites, or the privacy practices or processing or personal data of them.

INTERNATIONAL DATA TRANSFERS

We operate internationally. Depending on where you live, your personal data may be transferred to jurisdictions other than your home country, including the United States, and those other jurisdictions may have different or less protective data protection laws than the jurisdiction where you live. In addition, the rights of authorities to access your personal data in other jurisdictions may not be the same as in your home jurisdiction. We typically transfer personal data to the United States, which is where we are headquartered and where many of our business operations are located, including our Website.

By continuing to use our Website, or otherwise communicating with us, you understand and consent to the transfer and processing of your personal data outside your home country, which may have data protection rules that are different or less protective from those of your home country, including the United States. We will only transfer personal data as permitted by law, and we will only process personal data in accordance with this Privacy Notice. We will take steps designed to ensure appropriate protection of your personal data. If you have questions about international transfers of personal data, please contact us using the information above. For residents of Europe or countries with aligned data protection laws, additional information is provided in the jurisdiction-specific privacy notices below that are required under European data protection laws.

DATA SUBJECT RIGHTS

Sometimes we are a controller when processing your information. At times, we may be a processor. In the United States, the following states recognize data subject rights over your personal data: California, Connecticut, Colorado, Utah, and Virginia. If you live in one of those states, you may make the requests listed below, subject to certain conditions or exceptions as set forth under applicable law. We may be required or permitted by law to decline your request. Please note that if you reside in a state without specific privacy legislation, we may consider and address your request at our sole discretion. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.

No Discrimination. We will not discriminate against any consumer for exercising their data subject rights over their personal data under applicable law.

You may submit a US Data Subject Request via an online form here.

In the event that we are unable to fulfil your request, we will provide a clear explanation for the denial. This may include instances where legal obligations prevent compliance or if we do not have the corresponding record on file. Transparency and communication regarding the reasons for any limitations in fulfilling requests are integral to our commitment to safeguarding your privacy and ensuring a thorough understanding of the process.

Verifiable Requests

To ensure the secure and accurate verification of data subject requests, we employ a robust authentication process that involves validating data points through our service provider, Ketch. We will verify your request using only the necessary information required to validate your identity. We aim to enhance the reliability of our verification process, safeguard against unauthorized access and maintain the privacy and security of our users' information.

Right to appeal

If we decline to take action in any request that you submit in connection with the rights described above, you may ask that we reconsider our response by sending an email to privacy@PrestigeBrands.com. You must ask us to reconsider our decision within 45 days after we send you our decision. We will respond to your appeal in accordance with the timeline set forth under applicable law.

If we are acting as a data processor or service provider, we will forward your request to the applicable data controller, and reasonably assist the controller in honoring your request. We do not discriminate against any individual for exercising his or her data rights.

JURISIDICTION-SPECIFIC PRIVACY NOTICES

Provided below are links to additional privacy notices that supplement our main Privacy Notice, depending upon whether you live in one of the jurisdictions.

California

Nevada

European Economic Area (EEA)

©2024 Prestige Consumer Healthcare, Inc. All rights reserved.
Phone: 1-800-579-8327

Home | Privacy Policy | Cookie Policy | Do Not Sell My Personal Information | Manage My Privacy Preferences | Terms of Use