CE Kitchen Inc (dba Clean Eatz Kitchen)

Last Updated: 8/28/26


This Consumer Health Data Privacy Policy explains how CE Kitchen Inc ("we," "us," or "our") collects, uses, shares, and protects consumer health data, and describes the rights available to you under Washington's My Health My Data Act, Nevada Revised Statutes Chapter 603A, and the Connecticut Data Privacy Act.

This Policy applies specifically to consumer health data. Our general Privacy Policy describes how we handle all other personal information. Where the two conflict with respect to consumer health data, this Policy controls.

We do not sell consumer health data, and we do not share consumer health data with advertising platforms.


1. WHAT CONSUMER HEALTH DATA IS

Consumer health data is personal information linked or reasonably linkable to you that identifies your past, present, or future physical or mental health status. Under the laws listed above, this includes information about health conditions, treatments, diagnoses, medical interventions, bodily functions, vital signs, use or purchase of medications, and information that identifies you as seeking health care services — as well as inferences about your health status drawn from other information, including your purchases.

Because we sell meals that customers select for dietary and health-related reasons, some of the information we collect qualifies as consumer health data even though we are not a health care provider.


2. CATEGORIES OF CONSUMER HEALTH DATA WE COLLECT

We collect the following categories of consumer health data:

a. Dietary restrictions, preferences, and allergies. Information you tell us about foods you avoid, allergies or intolerances you have, or dietary approaches you follow, whether provided through your account, a form or questionnaire, a customer service conversation, or an order note.

b. Health goals and nutritional objectives. Information you provide about goals such as weight management, athletic performance, blood sugar management, or general nutrition.

c. Meal plan and product selections that indicate a health status or objective. Your selection of meals or plans marketed for a particular nutritional or health-related purpose.

d. Inferences about health status. Conclusions we may draw from the products you browse, purchase, or repeatedly order — for example, inferring a dietary approach from a pattern of purchases.

e. Benefit program participation. For customers who receive our meals through a health plan or government benefit program, the fact of your enrollment, your eligibility period, and the meals authorized for you.

We do not collect or request diagnoses, medical records, prescriptions, lab results, genetic information, biometric data, or precise geolocation.


3. HOW WE COLLECT CONSUMER HEALTH DATA

Directly from you — through account creation, checkout, forms and questionnaires, order notes, product reviews, survey responses, and communications with our customer service team.

Automatically — through your interactions with our website and mobile application, including the products and pages you view, from which we may draw the inferences described in Section 2(d).

From health plans and benefit programs — where you receive our meals through such a program, we receive eligibility and authorization information from the plan or its administrator.


4. WHY WE COLLECT AND USE CONSUMER HEALTH DATA

We collect and use consumer health data only for the following purposes:

  • To fulfill your orders accurately, including honoring stated dietary restrictions where we are able to do so;
  • To respond to your questions about ingredients, allergens, and nutritional content;
  • To recommend products that match preferences or goals you have shared with us;
  • To administer benefit programs and confirm eligibility and authorized quantities with the sponsoring plan;
  • To provide customer service and resolve issues with your orders;
  • To improve our menu and product development, using aggregated or de-identified information; and
  • To comply with applicable law and food safety obligations.

We do not use consumer health data to target advertising to you, to build advertising audiences, or to create lookalike or similar-audience segments on any advertising platform.


5. HOW WE SHARE CONSUMER HEALTH DATA

5.1 Categories of Third Parties and Affiliates

We share consumer health data only with the following:

Service providers who process data on our behalf, under written contracts that prohibit them from using the data for their own purposes:

  • Shopify Inc. — e-commerce platform and order data storage
  • Klaviyo — email and SMS platform, for transactional and, where you have consented, promotional messaging
  • Vajro — mobile application platform
  • Customer service and reviews platforms — including Stamped.io and Okendo, where a review or support interaction contains such information

Health plans and benefit program administrators — for customers enrolled in such programs, to confirm eligibility, report fulfillment, and obtain payment.

Legal and safety recipients — where required by law, legal process, or a governmental request, or where necessary to investigate a food safety issue, respond to a recall, or protect against fraud or harm.

A successor entity — in connection with a merger, acquisition, bankruptcy, or sale of assets, subject to the successor honoring this Policy or providing notice and an opportunity to exercise your rights.

5.2 Who We Do Not Share With

We do not share consumer health data with advertising networks, advertising platforms, data brokers, or social media platforms, including Meta, TikTok, and Google. We do not use consumer health data to construct, seed, or exclude from any advertising audience.

This does not mean we send no information at all to advertising platforms. As described in our Privacy Policy, we share general information about site activity and purchases with advertising partners so that we can show you our advertisements on other sites and apps, and you may opt out of that sharing at any time. What we exclude from those transmissions is the consumer health data described in Section 2 — including the identity of health-related products you view or purchase, the web addresses of health-related pages you visit, and any information indicating your use of or interest in a medication or health-related regimen.

5.3 We Do Not Sell Consumer Health Data

We do not sell consumer health data, and we have not sold consumer health data. Under Washington law, selling consumer health data requires your valid, signed authorization on a form containing specific statutory disclosures. We do not seek such authorizations because we do not sell this data. If that ever changes, we will update this Policy and obtain a valid authorization before any sale.


6. CONSENT

We collect consumer health data only where it is necessary to provide a product or service you have requested, or where you have given us your consent.

Where consent is required, we request it separately and specifically. Consent to collection is requested separately from consent to sharing, and we do not condition your ability to purchase from us on giving consent beyond what is necessary to fulfill your order.

You may withdraw your consent at any time by emailing support@cleaneatzkitchen.com with the subject line "Withdraw Health Data Consent." Withdrawal takes effect going forward and does not affect processing that occurred before we received your request. Withdrawing consent may limit our ability to honor dietary preferences on future orders.


7. YOUR RIGHTS

If you are a resident of Washington, Nevada, or Connecticut, you have the following rights regarding consumer health data.

Right to confirm and access. You may confirm whether we collect, share, or sell your consumer health data, and access that data, including a list of all third parties and affiliates with whom we have shared it and, where available, contact information for those recipients.

Right to delete. You may request that we delete your consumer health data. Upon receiving a verified request, we will delete it from our records, including archived and backup systems, and will notify all service providers, affiliates, and third parties that received it to delete it as well.

Right to withdraw consent. You may withdraw consent to the collection and to the sharing of your consumer health data, as described in Section 6.

Right against discrimination. We will not deny you goods or services, charge you a different price, or provide a different level of quality because you exercised any of these rights.

7.1 How to Submit a Request

Email support@cleaneatzkitchen.com with the subject line "Consumer Health Data Request", and tell us which right you are exercising and the email address associated with your account. You may also write to us at the address in Section 11.

We will verify your identity before responding. Verification generally requires that you respond from the email address on your account, or provide order information sufficient for us to match you to a customer record.

We will respond within forty-five (45) days. Where reasonably necessary, we may extend this period by an additional forty-five (45) days and will notify you of the extension and the reason for it within the initial period.

7.2 Appeals

If we decline your request, you may appeal. Email support@cleaneatzkitchen.com with the subject line "Consumer Health Data Appeal", including your original request and why you believe our decision was incorrect. We will respond in writing within forty-five (45) days with our decision and the reasons for it.

If we deny your appeal, you may submit a complaint to:

  • Washington residents: Washington State Attorney General's Office — www.atg.wa.gov/file-complaint
  • Nevada residents: Nevada Attorney General's Bureau of Consumer Protection — ag.nv.gov
  • Connecticut residents: Connecticut Attorney General — portal.ct.gov/ag

7.3 Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We may require written authorization from you and verification of the agent's identity.


8. GEOFENCING

We do not use geofencing. We do not establish a virtual boundary around any health care facility, and we do not use location technology to identify or track consumers seeking health care services, to collect consumer health data, or to send notifications, messages, or advertisements related to consumer health data or health care services.


9. DATA SECURITY AND RETENTION

We restrict access to consumer health data to those employees, processors, and contractors for whom access is necessary to further the purposes described in Section 4, or as required by law.

We maintain administrative, technical, and physical safeguards appropriate to the volume and nature of the data, including access controls, encryption in transit, and periodic review of access rights.

We retain consumer health data only as long as necessary for the purposes described in Section 4, or as required by law, and delete or de-identify it when no longer needed.


10. STATE-SPECIFIC NOTICES

Washington. This Policy is our consumer health data privacy policy for purposes of the My Health My Data Act, RCW 19.373. A link to it appears on our homepage. We do not collect, use, or share consumer health data beyond what is disclosed here.

Nevada. This Policy also serves as our consumer health data privacy notice under Nevada Revised Statutes Chapter 603A. Nevada residents have the rights described in Section 7.

Connecticut. Consumer health data is treated as sensitive data under the Connecticut Data Privacy Act. We process it only with your consent, and you may exercise the rights described in Section 7 and in our general Privacy Policy.

Protected health information. Information that constitutes protected health information governed by the Health Insurance Portability and Accountability Act (HIPAA), and information governed by other federal or state health privacy laws, is excluded from the scope of the laws described in this Policy and is handled in accordance with those laws instead.


11. CHANGES AND CONTACT

We will update this Policy when our practices change, and will not collect, use, or share consumer health data in a way that is materially different from what was disclosed at the time of collection without first obtaining your consent.

CE Kitchen Inc (dba Clean Eatz Kitchen) Attn: Privacy 306 Old Dairy Rd Wilmington, NC 28405 support@cleaneatzkitchen.com