Consumer Health Data Privacy Notice
Effective October 16, 2026
Bottoms Up Movement ("BUM," "we") sells personal care products. This notice explains how we handle consumer health data: information that is linked or reasonably linkable to you and identifies your past, present or future physical health status. It applies to residents of Washington and to any other state with a similar law.
What we collect
When you fill in a BUM check-in form, we collect what you choose to tell us:
- Why you bought from BUM
- Symptoms or conditions you report, how long they've lasted, and how much they affect your comfort, confidence, plans or sex life
- What you tried before BUM, and whether you've seen a clinician and why or why not
- Whether things improved after a few weeks, and whether you're still using the product
- Whether you've recently had certain warning signs, such as bleeding or severe pain
- If you choose: your age range and sexual orientation
- If you ask us to follow up: your email address
- Your order number, so we can match your answers across check-ins
Every question except the consent box is optional.
Where it comes from
- From you, through the check-in forms and any emails you send us about them.
- From your BUM order, which we match to your answers using your order number.
Why we collect it and how we use it
- To understand why customers buy BUM products and whether they help
- To improve our products and develop new services, including services that help people find the right care
- To follow up with you personally, only if you ask us to
- To show you our guide to finding care if you report a warning sign
We don't use your answers for advertising. We keep them out of our marketing email system and never send them to ad platforms.
Who we share it with
- We don't sell consumer health data.
- We don't share it with third parties for their own purposes.
- Service providers: Google stores and processes the forms and responses for us, under contract, and only to provide that service.
- Affiliates: BUM has none.
- Combined statistics: we may share totals that can't identify anyone, such as the share of respondents who said things improved, for example with investors or in our marketing. These totals only use answers from people who consented, and never include names, emails or order numbers.
Your rights
You have the right to:
- Confirm and access: find out whether we collect, share or sell your consumer health data, and get a copy of it.
- See who received it: get a list of every third party and affiliate we've shared it with or sold it to, and how to contact them. Today that list is empty.
- Withdraw consent: stop us collecting or sharing your consumer health data.
- Delete it: have us delete it, including from archives and backups, and tell anyone we shared it with to delete it too.
You can make up to two requests a year for free.
How to make a request
Email privacy@bottomsupmovement.com with the email address or order number you used, and tell us what you'd like. We may ask you to confirm it's you before we act.
We'll respond within 45 days. If we need more time, we'll tell you why within those 45 days and take up to 45 more.
Appeals
If we decline your request, reply with "Appeal" and we'll review it and answer in writing within 45 days. If we deny your appeal, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint.
How long we keep it
We automatically delete check-in answers 12 months after you submit them, or sooner if you ask.
Contact
Bottoms Up Movement
170 Commerce Way, Suite 200 -#1196
Portsmouth, NH 03801
privacy@bottomsupmovement.com
