NIQ Consumer Health Data Privacy Notice

June 12, 2025

This Consumer Health Data Privacy Notice (“CHD Notice“) supplements the Nielsen Consumer LLC (“NIQ”, “we,” “us,” or “our”) Privacy Notice (“Privacy Notice”) or any other privacy notice provided to you and applies to “consumer health data” (“CHD”), as defined by the Washington State My Health My Data Act (“WMHMDA”), Nevada’s Consumer Health Data Privacy Law, and other similar U.S. health data privacy laws (collectively, “health data privacy laws”). Where there are differences between this CHD Notice and our Privacy Notice, this CHD Notice governs.

As described in our Privacy Notice , the data we collect varies and depends, among other things, on the context of your interactions with us and applicable law. Some of the categories of data we collect could be considered CHD under the health data privacy laws.

Below are examples of the categories of data we collect that could be deemed CHD:

Information about your health-related conditions, symptoms, status, diagnoses, procedures, testing, medications, or treatments. For example, we may collect such information when it might be associated with a product or service you purchase and for which you voluntarily identify in your survey or panel responses.

Information that could be related to reproductive or sexual health, such as information about your purchasing history and preferences, based on your use of our email management services.

Information that could identify your attempt to seek health care services or information, including services that allow you to assess, measure, improve, or learn about your or another person’s health based on your voluntarily provided purchase receipts.

Information that could associate you with a category of CHD that is derived or extrapolated from information such as when our data models (the framework in how we organize data) use the information detailed above to infer, examine, and make predictions that may reflect an individual’s preferences, characteristics, trends, behaviors, and actions. For example, if your transactions indicate you reside in a general geographic area, our systems might associate you with certain health-related conditions prevalent in that area based on census or demographic data, such as skin cancers in regions closer to the equator.

Sources of Consumer Health Data

We collect CHD directly from you, such as through your voluntary survey and panel responses or from the information you authorize us to access as part of the delivery of our mobile apps and services.

Why We Collect and Use Consumer Health Data

We collect and use CHD for the purposes described in our Privacy Notice . More specifically, we collect and use information that could be considered CHD for the following purposes:

To perform the functions of the services you request or authorize, such as providing you with survey materials; authenticating you as part of our security processes; developing and offering new services; and tailoring content as part of our services.

As reasonably necessary to provide the services and operate our business. This may include providing access to our websites; developing, delivering, and operating our surveys; responding to your communications; better understanding our survey respondents and their interests and preferences; ensuring the secure and reliable operation of the systems that support our services; troubleshooting and improving the services; and other essential business operations that support the provision of the services.

For any purpose for which you consent, authorize, or direct us to collect or use it.

We may use CHD for other purposes for which we will give you choices and/or obtain your consent as required by law. See the “Privacy Rights and Choices” section below and within our Privacy Notice for more details on the rights and choices you may have.

Note: We do not use your name, address, or any identifiable information you provide to us for direct marketing or sales purposes to you. We never share this identifiable information with telemarketers, nor do we permit our business clients to use it for direct marketing or sales to you.

Consumer Health Data We Share

We may share each of the categories of CHD described above for the following purposes:

For enhancing our and our affiliates’ modeling and measurement capabilities by combining the information that we collect with other information available to them.

To the extent necessary to perform the functions of the services you request or authorize, and as reasonably necessary to operate our business.

If we are involved in a merger, asset sale, financing, corporate divesture, reorganization, or acquisition of all or some portion of our business to another company or if we undergo liquidation or bankruptcy proceedings, we may disclose your information in connection with such transaction or proceeding before and/or after the transaction closes or the proceedings are completed.

For any purpose for which you consent, authorize, or direct us to disclose it.

We may disclose data when we believe that doing so is necessary to comply with applicable law or respond to valid legal process, or when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss in connection with an investigation of suspected or actual illegal activity, or if necessary to protect the vital interests of another individual.

We do not exchange information that could be considered your CHD with third parties for monetary or other valuable consideration. Rest assured that we do not use your name, address, or any identifiable information you provide to us for direct marketing or sales purposes to you. We never share this identifiable information with telemarketers, nor do we permit our business clients to use it for direct marketing or sales to you.

Third Parties with Whom We Share Consumer Health Data

As necessary for the purposes described in the section “Consumer Health Data We Share,” we disclose information that could be considered CHD with the following categories of third parties:

Affiliates. We enable access to data across our subsidiaries, affiliates, and related companies, for example, where we utilize common data systems or where access helps us to provide our services and operate our business. A full list of our affiliates is available here.

Government, regulatory, and public authorities. As described in our Privacy Notice, we disclose data to law enforcement or other government agencies when we believe doing so is necessary to comply with applicable law or respond to valid legal process.

Parties to a corporate transaction. We may disclose information that might be considered CHD as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.

Other third parties. In certain circumstances, it may be necessary to provide data to other third parties, for example, to comply with the law or to protect our rights or those of our business clients. To the extent we share your CHD with other third parties, we will do so in accordance with health data privacy laws.

Privacy Rights and Choices

If you are a consumer under the health data privacy laws and we collect, use, or share CHD, you may have the following rights with respect to your CHD, subject to applicable exceptions.

Right to access. You have the right to confirm whether we are processing your CHD and to access such CHD.

Right to delete. You have the right to ask us to delete certain CHD we have collected about you.

Right to withdraw consent. If you consent to any collection or sharing of CHD, you have the right to withdraw your consent at any time.

You can request to exercise such rights using the methods described in the “Privacy Rights and Choices” section of our Privacy Notice, including through Your Privacy Choices, also located in the footer of our website, or by contacting us using the contact information in the “Contact Us” section of the Privacy Notice. A full list of our affiliates is available here.

If your request to exercise a right under the health data privacy laws is denied, you may appeal that decision by contacting our privacy support team at connect.privacy@nielseniq.com. If your appeal is unsuccessful, you can raise a concern or file a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.