Privacy Notice

Effective Date: June 1, 2024

WHO WE ARE

Prestige Consumer Healthcare Inc. and each of its affiliates and subsidiary entities (collectively, “Prestige,” “we,” “our,” or “us”) are committed to protecting your personal data. We are headquartered in Tarrytown, NY and we market, sell, manufacture, and distribute consumer healthcare products to retail outlets in the US, Canada, Australia, and certain other international markets. Unless stated otherwise, this Privacy Notice applies to and explains the types of personal data we collect, how we use your personal data, how we may share your personal data, and the security we employ to protect your personal data in connection with our collection of it. For persons residing in the European Economic Area (“EEA”), UK or Switzerland, please click here for the applicable supplement to this Privacy Notice.

In this Privacy Notice, “you” means anyone who uses our Website (as defined in our Terms of Use), our products or services, or otherwise communicates with us. Personal data means information that identifies, describes, or is reasonably capable of being associated with or linked to, directly or indirectly, an individual or household. We also have Terms of Use, which applies to your use and access of our Website, and which you may access by clicking on the hyperlink.

TABLE OF CONTENTS

Contact Us

You may contact us at Prestige Consumer Healthcare Inc., ATTN: Privacy, 660 White Plains Rd., #250, Tarrytown, NY 10591. You also may reach us by email at privacy@PrestigeBrands.com, or at the Prestige Privacy toll-free number, 1-877-297-0721.

MODIFICATION

We reserve the right to modify this Privacy Notice at any time. If we make material changes to this Privacy Notice, we will provide an appropriate notice under applicable law. The date at the top tells you when we last updated this Privacy Notice. Changes to this Privacy Notice are effective when posted. By clicking on the accept box following any changes, you affirmatively acknowledge and confirm that you have read and understand our data collection practices and acknowledge the changes reflected in the updated Privacy Notice. If you do not agree, you may not use our Website or submit information to us.

PERSONAL DATA WE COLLECT

We may collect personal data about you from you directly, through technology that automatically collects information from your browser or device, and/or from third party sources. We provide examples below. These examples are not exhaustive and we may collect personal data that is not specifically listed below which we use consistent with this Privacy Notice. We also may provide supplemental information about our data collection or privacy practices in disclosures about specific products, services, or in other circumstances, or in some cases, at the time we collect personal information from you. Any personal data that we collect will be used and processed in a manner consistent with this Privacy Notice.

Personal Data You Provide To Us. Personal data we may collect from you includes information you choose to submit to us in connection with your access to and use of our Website, when you sign up for email alerts, participate in contests, promotions, or surveys we may have, or when you otherwise communicate with us. Such information may include:

  • Contact information like your first and last name, mailing address, email address, telephone number, gender, age/date of birth, and other similar information.
  • If you seek employment from us, we will seek employer-related information, such as background, work experience, and education, for hiring purposes.
  • If you reach out to our call center to make a complaint or provide feedback regarding a product, including your location, how you believe you may have been harmed, and the sound of your voice.
  • If you send us pictures relating to a product, we may collect your image.

Personal Data We Collect Automatically. We collect personal data from you automatically when you interact with us or engage with our Website, including:

  • Your device and browser (such as browser type and version) data, and geolocation, through the use of cookies, web-beacons, or pixels for identity and security purposes, and also to improve user experience (for more information about cookies and advertising, please see our Advertising and Cookie Policy (hereinafter, “Cookie Policy”).
  • This Website uses pixel tags, also known as web beacons or pixel gifs, to collect information about your visit, such as the pages you view, the links you click, and other actions you take on our Website. We use this information to track website activities to analyze and improve the performance of our Website, personalize your experience, measure the effectiveness of our marketing campaigns, and for advertising. We may share this information for targeted advertising.
  • Your online activity like the dates, times, and duration you visited or accessed our Website, the browser you used, URLs you come from and go to. For example, online activity data may include how and when you navigated within our Website, and which links or features you clicked on. This data may be anonymized or pseudonymized.
  • Network and connection information, such as the Internet protocol (IP) address used to connect your computer or other device to the Internet and information about your Internet service provider (we may also derive your approximate location from your IP address), and geolocation data; and
  • Metrics, such as Website usage, occurrences of technical errors, diagnostic reports, backup information, API calls, and other logs.

Personal Data We Collect From Third Parties. We may receive information from third parties, including reports regarding adverse reactions to our products, or from third-party providers for analytic purposes, such as Google Analytics. If you seek employment with us, we may obtain information about you from employment agencies or websites, referrals, or from your former employers (as referrals), regarding your employment history.

HOW WE MAY USE YOUR PERSONAL DATA

We use the personal data we collect about you to render our services for you and your company, namely to operate and improve our products and services, our Website and its related technologies and infrastructure; to improve your experiences with our products and services, and Website; to coordinate with others in connection with our products and services; to contact and communicate with you; to protect our rights; to protect the rights of others; to enforce our Terms of Use; and/or to prevent fraud and abuse in connection with our products and services or our Website, or our other systems or networks. If you seek employment with us, we will use your information for employment hiring purposes.

By accessing and using our Website, and by clicking the “ACCEPT” box, or by agreeing to these privacy terms that may be provided to you by other means, you expressly confirm that you have read, understand, and consent to the practices set forth in our Privacy Notice and that you have given us your consent to use or share your information:

  • to contact you, identify/verify who you are, or to address customer service-related aspects, like how to improve our Website, our products and services, to respond to your inquiries, to provide personalized responses and services, and/or to otherwise share your information as described in this Privacy Notice.
  • to improve our Website, products, and services, including to conduct analytics and generate internal reports about its use, and to assist with security and fraud prevention, including to detect, investigate and prevent activities that may violate our Terms of Use, be harmful to others or be illegal, and to make suggestions and draw inferences about you.
  • for our own marketing purposes, whether through the use of pixels, web beacons, or other technologies. We may use your information to improve the quality and/or your personal experience with our Website, products, and services. At times, we may collaborate with others to provide products and services, including informational experiences.
  • to offer you the opportunity to participate in (and to track your participation in) surveys, contests, and promotions. Some of these surveys, contests, or promotions include additional information about how we will use and disclose your personal data. Please read this additional information before choosing to participate.
  • to personalize content, features, advertisements, or other marketing messages presented by us and third parties, both on the Website and elsewhere online.
  • to enforce our rights or to comply with applicable law; or to detect or prevent fraud (financial or otherwise), intellectual property infringement, potential misuse of our Website or breach of our Terms of Use. We may use your information to manage third-party risks or other risks to our business, and to protect the reputation of our business.
  • to satisfy our pharmacovigilance-related obligations. For example, reports of adverse events related to a Prestige product will be reviewed and shared in order to comply with Prestige's pharmacovigilance-related obligations including reporting to relevant health authorities. In these circumstances, only details about the incident are reported and only limited Personal Data is shared (e.g., age, gender, and initials of a patient or initials, profession, and contact information of a reporting physician or pharmacist).

We may anonymize, aggregate, or combine information we collect online or elsewhere for the above purposes or other purposes, to improve our Website to develop new products or services, and/or to analyze statistics on usage and trends. Please note that aggregated or de-identified data may not constitute personal data or information under applicable law.

HOW WE MAY SHARE YOUR PERSONAL DATA

We may share the personal data we collect about you from our Website through the use of pixels, web beacons, or other technologies, or information you provide to us directly by other means, for the purpose of providing and advertising our products and services, rendering our business operations, including the sharing of information with third-party service providers, vendors, or other organizations we may collaborate with.

Third-Party Service Providers. We may share your personal data with our service providers, which are third parties who help us operate our Website, help us offer other products or services, and/or help us with our business operations. Examples can include email delivery and other technology service providers such as cloud-infrastructure companies who provide services and assist us with the operation of our Website and information systems. The information we share includes identifiers like your name, address, online identifier, a unique account number, or IP address, or other information like Internet or other electronic network activity information, inquiry and browsing history, and/or your interaction with us and our Website, products, or services.

These service providers may have access to personal data needed to perform their functions, but may not use it for other purposes. Further, they must process that information in accordance with this Privacy Notice, any associated data processing agreement, and as permitted under applicable data protection law.

Third-Party Collaborators Sometimes, we team up and collaborate with other organizations in connection with our products and services. Any such third-party collaborator, to the extent we share your information with them, must process that information we provide in accordance with this Privacy Notice, any associated agreement, and as permitted under applicable data protection law.

Social media. If you access our Website from a social media account, like Google or Facebook, you give us permission to collect and share pixel information with such social media provider.

Business Transfers. We might sell or buy businesses or services. In such transactions, personal data generally is one of the transferred business assets but remains subject to the promises made in any pre-existing Privacy Notice (unless, of course, the individual consents otherwise). Also, in the event that Prestige or substantially all of its assets are acquired, your personal data will of course be one of the transferred assets.

Direct Marketing. We may share your personal information with third parties for direct marketing purposes. This includes sending promotional emails, targeted advertisements, or other marketing communications related to our products, services, or events. We share personal data with third parties for direct marketing of our products and services, including through the use of pixels and website activities.

If you wish to opt out of such marketing communications, please click on the unsubscribe link in your email, manage your Privacy Preferences by clicking on this Opt-Out button, or you may contact privacy@PrestigeBrands.com. Please note that even if you opt out of direct marketing, you may still receive non-promotional communications related to account management, service updates, or transactional notifications.

Protection of Us and Others We may share your information when we believe its release is appropriate to comply with the law, enforce or apply our accompanying Terms of Use, comply with our agreements as a data processor or service provider, or to protect the rights, property, or security of others. This includes exchanging information with other companies and organizations for fraud prevention and detection, and risk reduction.

HOW WE PROTECT YOUR PERSONAL DATA

We employ reasonable physical, technical, and administrative safeguards designed to protect the security of personal data that we collect in connection with our Website and information systems. Safeguards we employ include building security, firewall barriers, encryption techniques, multi-factor authentication procedures, antivirus/anti-malware solutions, and access controls to help protect personal data against loss, theft, misuse, and unauthorized access, disclosure, alteration, or destruction. These safeguards vary depending upon a variety of factors including the sensitivity of the information.

Despite all reasonable practices, no security method is infallible. We cannot guarantee the security of the networks, systems, servers, devices, and databases we operate, that are operated on our behalf, or which you employ to access our Website and information systems. Nor can we guarantee the security of third-party networks, including any cellular networks and storage servers, used in connection with our Website and information systems.

RETENTION OF PERSONAL DATA

We retain your personal information no longer than is reasonably necessary for the purposes for which it was collected and processed and in accordance with Prestige's data retention policy, except as required by applicable law, contract, or otherwise to comply with our legal obligations, resolve disputes, and/or to enforce our agreements.

COOKIES

Cookies are small files commonly employed by numerous websites and online services, including our Website, to store user information on their devices or computers, and are utilized by the Website. These cookies can include HTTP and HTML5 cookies, along with various forms of local storage, enabling us to offer valuable features to our users. For more details on cookies in general, you can visit https://www.allaboutcookies.org.

To explore cookies we use on our Website and how you can control or disable cookies on your computer, please see our Cookie Policy, which you may access by clinking on the hyperlink.

"Do Not Track" Signals

Your browser settings might enable the automatic transmission of a "Do Not Track" signal to the websites and online services you visit. Currently, there is no universally agreed-upon interpretation of the "do not track" signal within the industry. Similar to numerous other websites, our Website is not set up to acknowledge or respond to "Do Not Track" signals initiated by browsers.

CHILDREN'S PRIVACY

Our Website is not designed to attract children 13 years or younger. In fact, you must be eighteen (18) years old or older to use it. As a general matter, if we learn we have collected or received personal data from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13 without parental consent, please contact us via the contact methods above.

LINKED SITES (Third-Party Sites)

Our Website may contain links to other websites (“Linked Sites”) for your convenience and information. If it does, these Linked Sites may be operated by organizations that are not affiliated with us. Linked Sites may have their own privacy policies or notices, and we strongly encourage you review them if you visit any Linked Site. We are not responsible for the content of any Linked Site not affiliated with us, any use of those Linked Sites, or the privacy practices or processing or personal data of them.

INTERNATIONAL DATA TRANSFERS

We operate internationally. Depending on where you live, your personal data may be transferred to jurisdictions other than your home country, including the United States, and those other jurisdictions may have different or less protective data protection laws than the jurisdiction where you live. In addition, the rights of authorities to access your personal data in other jurisdictions may not be the same as in your home jurisdiction. We typically transfer personal data to the United States, which is where we are headquartered and where many of our business operations are located, including our Website.

By continuing to use our Website, or otherwise communicating with us, you understand and consent to the transfer and processing of your personal data outside your home country, which may have data protection rules that are different or less protective from those of your home country, including the United States. We will only transfer personal data as permitted by law, and we will only process personal data in accordance with this Privacy Notice. We will take steps designed to ensure appropriate protection of your personal data. If you have questions about international transfers of personal data, please contact us using the information above. For residents of Europe or countries with aligned data protection laws, additional information is provided in the jurisdiction-specific privacy notices below that are required under European data protection laws.

DATA SUBJECT RIGHTS

Sometimes we are a controller when processing your information. At times, we may be a processor. In the United States, the following states recognize data subject rights over your personal data: California, Connecticut, Colorado, Utah, and Virginia. If you live in one of those states, you may make the requests listed below, subject to certain conditions or exceptions as set forth under applicable law. We may be required or permitted by law to decline your request. Please note that if you reside in a state without specific privacy legislation, we may consider and address your request at our sole discretion. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.

  • You may request to confirm whether or not we have or are processing your personal data, and to access and obtain a copy of your personal data (rights to know, access, and portability).
  • You may request to have inaccuracies in your personal data corrected (right of correction).
  • You may request to have your personal data deleted (right of deletion).
  • You may opt-out of the sale of your personal data, AI, and profiling. Currently we do not sell personal data.

No Discrimination We will not discriminate against any consumer for exercising their data subject rights over their personal data under applicable law.

You may submit a US Data Subject Request via an online form here.

In the event that we are unable to fulfill your request, we will provide a clear explanation for the denial. This may include instances where legal obligations prevent compliance or if we do not have the corresponding record on file. Transparency and communication regarding the reasons for any limitations in fulfilling requests are integral to our commitment to safeguarding your privacy and ensuring a thorough understanding of the process.

Verifiable Requests

To ensure the secure and accurate verification of data subject requests, we employ a robust authentication process that involves validating data points through our service provider, Ketch. We will verify your request using only the necessary information required to validate your identity. We aim to enhance the reliability of our verification process, safeguard against unauthorized access and maintain the privacy and security of our users' information.

Right to appeal

If we decline to take action in any request that you submit in connection with the rights described above, you may ask that we reconsider our response by sending an email to privacy@PrestigeBrands.com. You must ask us to reconsider our decision within 45 days after we send you our decision. We will respond to your appeal in accordance with the timeline set forth under applicable law.

If we are acting as a data processor or service provider, we will forward your request to the applicable data controller, and reasonably assist the controller in honoring your request. We do not discriminate against any individual for exercising his or her data rights.

Jurisdiction-Specific Privacy Notices

Provided below are links to additional privacy notices that supplement our main Privacy Notice, depending upon whether you live in one of the jurisdictions.

California

Nevada

European Economic Area (EEA)