The Vitamin Shoppe: U.S. State Privacy Supplement

Last Updated: 10/1/2025

The Vitamin Shoppe, LLC and its affiliates (collectively, “The Vitamin Shoppe”) respect your concerns about privacy. This U.S. State Privacy Supplement applies to residents of certain U.S. states with currently effective consumer privacy laws and supplements our Privacy Policy. This Supplement uses certain terms that have the meaning given to them under applicable U.S. state privacy laws. This Statement does not apply to The Vitamin Shoppe personnel or job applicants.

Collection, Use, Disclosure and Sale of Personal Information

We may collect, use, disclose and sell (and may have collected, used, disclosed, and sold during the 12-month period preceding the Last Updated date of this Supplement) personal information about U.S. consumers as described below.

Categories of Personal Information	Processing Purposes (see full list below)*	Categories of Third Parties to Whom Personal Information is Disclosed for a Business Purpose**	Categories of Third Parties to Whom Personal Information is Sold/Shared for Targeted Advertising***
Identifiers: such as name, address, telephone number, email address, account information such as username and password for our websites, online identifiers, IP address	Transactions Managing Accounts Authentication Customer Service Communicating and Marketing Promotions and Opportunities Administering Healthy Awards Providing Nutrition Coaching Product Safety and Recalls Safety, Security and Fraud/Criminal Activity Prevention Operating and Improving our Business	Our affiliates Vendors who provide services on our behalf Professional services organizations, such as auditors and law firms Our joint marketing partners Online advertising services Government entities Our business partners Internet service providers Data analytics providers Operating systems and platforms Social networks Consumer data resellers	Advertising Networks Marketing Companies Social Media Companies
Payment Information: such as billing address and payment card details, including card number, expiration date and security code	Transactions Authentication Safety, Security and Fraud/Criminal Activity Prevention Operating and Improving our Business Compliance	Our affiliates Vendors who provide services on our behalf Professional services organizations, such as auditors and law firms Our joint marketing partners Online advertising services Government entities Our business partners Internet service providers Data analytics providers Operating systems and platforms Social networks Consumer data resellers	Not sold/shared for targeted advertising
Protected Classifications: such as age, date of birth, and gender	Authentication Communicating and Marketing Promotions and Opportunities Administering Healthy Awards Providing Nutrition Coaching Safety, Security and Fraud/Criminal Activity Prevention Operating and Improving our Business Compliance	Our affiliates Vendors who provide services on our behalf Professional services organizations, such as auditors and law firms Our joint marketing partners Online advertising services Government entities Our business partners Internet service providers Data analytics providers Operating systems and platforms Social networks Consumer data resellers	Not sold/shared for targeted advertising
Commercial information: such as products or services purchased, obtained or considered, other purchasing or consuming histories or tendencies, payment information, loyalty program participation information	Transactions Authentication Customer Service Communicating and Marketing Promotions and Opportunities Administering Healthy Awards Providing Nutrition Coaching Product Safety and Recalls Safety, Security and Fraud/Criminal Activity Prevention Operating and Improving our Business Compliance	Our affiliates Vendors who provide services on our behalf Professional services organizations, such as auditors and law firms Our joint marketing partners Online advertising services Government entities Our business partners Internet service providers Data analytics providers Operating systems and platforms Social networks Consumer data resellers	Advertising Networks Marketing Companies Social Media Companies
Internet or other electronic network activity information: such as data collected by cookies and similar technologies, such as information about your online activities, devices, browsing actions, and usage patterns across the Services and third-party websites that we obtain through the use of cookies, web beacons, and similar technologies (for more information, see the How Is Information Obtained By Automated Means section of our Privacy Policy)	Managing Accounts Authentication Communicating and Marketing Promotions and Opportunities Administering Healthy Awards Safety, Security and Fraud/Criminal Activity Prevention Operating and Improving our Business Compliance	Our affiliates Vendors who provide services on our behalf Professional services organizations, such as auditors and law firms Our joint marketing partners Online advertising services Government entities Our business partners Internet service providers Data analytics providers Operating systems and platforms Social networks Consumer data resellers	Advertising Networks Marketing Companies Social Media Companies
Audio, visual, or similar information: such as photographs you share, in-store security video, customer service audio recordings	Authentication Customer Service Providing Nutrition Coaching Communicating and Marketing Safety, Security and Fraud/Criminal Activity Prevention Operating and Improving our Business Compliance	Our affiliates Vendors who provide services on our behalf Professional services organizations, such as auditors and law firms Government entities Our business partners Internet service providers	Not sold/shared for targeted advertising
Sensitive Data: such as location data and precise location data such as physical location information through the use of our services on your mobile phone or device by, for example using satellite, cell phone tower, WiFi signal, beacons, Bluetooth and near field communication protocols, when you are in or near a Vitamin Shoppe store; and information about mental or physical health diagnosis	Transactions Authentication Customer Service Communicating and Marketing Promotions and Opportunities Administering Healthy Awards Providing Nutrition Coaching Safety, Security and Fraud/Criminal Activity Prevention Operating and Improving our Business Compliance We do not process sensitive data to infer characteristics about individuals.	Our affiliates Vendors who provide services on our behalf Professional services organizations, such as auditors and law firms Our joint marketing partners Online advertising services Government entities Our business partners Internet service providers Data analytics providers Operating systems and platforms Social networks Consumer data resellers	Not sold/shared for targeted advertising
Inferences drawn from the above categories of Personal Information: such as consumer preferences, characteristics, predispositions, and behavior	Communicating and Marketing Promotions and Opportunities Administering Healthy Awards Product Safety and Recalls Safety, Security and Fraud/Criminal Activity Prevention Operating and Improving our Business Compliance We do not process sensitive data to infer characteristics about individuals.	Our affiliates Vendors who provide services on our behalf Professional services organizations, such as auditors and law firms Our joint marketing partners Online advertising services Government entities Our business partners Internet service providers Data analytics providers Operating systems and platforms Social networks Consumer data resellers	Advertising Networks Marketing Companies Social Media Companies

^*Processing Purposes:

• Managing Accounts: establish and manage your account;




• Authentication: identify and authenticate you so you may order our products;




• Customer Service: provide customer and technical support and respond to inquiries;




• Communicating and Marketing: communicate with you regarding news updates, notices, special promotional offers, advertisements and marketing materials, our products and services, or other information that may be of interest to you;




• Promotions and Opportunities: communicate about, and administer participation in, special events, programs, promotions, offers, surveys, focus groups and market research;




• Administering Healthy Awards: administer the Healthy Awards loyalty program, including to manage your account, track your Healthy Awards/loyalty points and Cash Back Awards, and provide you with tailored offers and promotions; communicate with you about the Healthy Awards loyalty program, including updates about awards status and special offers; analyze customer behavior to improve the Healthy Awards loyalty program experience;




• Providing Nutrition Coaching: provide you with nutrition coaching if you sign up for a nutrition coaching session;




• Product Safety and Recalls: : notify you about product safety and recall information, such as reporting an adverse event or communicating a product recall;




• Safety, Security and Fraud/Criminal Activity Prevention: : increase and maintain the safety and security of our products, stores, and the Services and prevent misuse; protect against, identify and prevent fraud and other criminal activity, claims and other liabilities;




• Operating and Improving our Business: operate, administer, evaluate, develop, manage and improve our business (including operating, administering, analyzing and improving our products and services; developing new products and services; performing analytics (including market research, trend analysis, financial analysis, and anonymization and aggregation of personal information); managing and evaluating the effectiveness of our communications; performing accounting, auditing, billing reconciliation and collection activities and other internal functions);




• Compliance: : comply with and enforce applicable legal requirements and relevant industry standards and policies, such as this Privacy Policy and our Terms of Use.

^**We also may share the personal information described above with third parties in connection with corporate transactions, such as mergers, acquisitions or divestitures. We also may disclose information about you (1) if we are required to do so by law or legal process (such as a court order or subpoena); (2) in response to requests by government agencies, such as law enforcement authorities; (3) to establish, exercise or defend our legal rights; (4) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; (5) in connection with an investigation of suspected or actual illegal activity; or (6) otherwise with your consent.

^***We do not sell personal information in exchange for monetary consideration. We may share personal information by allowing certain third parties to collect personal information via automated technologies on our Services for cross-context behavioral advertising or targeted advertising purposes. This kind of sharing may be considered a “sale” or sharing for cross-context behavioral advertising/targeted advertising purposes under certain U.S. state privacy laws when the personal information is exchanged for non-monetary consideration. We do not have actual knowledge that we sell or share or share for targeted advertising purposes personal information of minors under 16 years of age.

We do not knowingly process personal information about children under the age of 13 . We also do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers. To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law .

Retention of Personal Information
We retain personal information for the time period reasonably necessary to achieve the purposes described in this Supplement, or any other notice provided at the time of collection, unless a longer retention period is required or permitted by applicable law, taking into account relevant statutes of limitations and our records retention requirements and policies.

Sources of Personal Information
During the 12-month period prior to the Last Updated date of this Supplement, we may have obtained personal information about you from the following categories of sources:

• Directly from you, for example, in stores or at events
• From your devices, such as through your use of the Services
• Your friends, through their use of the Services, such as by providing product information to you or completing a purchase sent directly to you
• Our affiliates
• Vendors who provide services on our behalf
• Third-party marketplaces
• Our joint marketing partners
• Social networks
• Online advertising services
• Government entities
• Consumer data resellers

Privacy Rights
Depending on your state of residence, if you interact with us in an individual or household capacity (and not in a commercial or employment context), you may have certain rights regarding your personal information, as described below.

• Access: You have the right to request (1) confirmation of whether we process your personal information and (2) access to the personal information we maintain about you, including a copy provided in a portable format. Depending on your state of residence, you also may have the right to request information about (1) the categories of personal information we have collected, used, disclosed and sold or shared about you, (2) the categories of sources from which the personal information is collected, (3) the business or commercial purpose for collecting, selling or sharing personal information, and (4) the third parties or categories of third parties to whom we disclose personal information.


• Correction: You have the right to request that we correct the personal information we maintain about you, if that information is inaccurate.


• Deletion: You have the right to request that we delete certain personal information we have collected from you.


• Shine the Light Request: If you are a California resident, you also may have the right to request that we provide you with (a) a list of certain categories of personal information we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year and (b) the identity of those third parties.


• Opt-Out of Sale or Sharing for Cross-Context Behavioral Advertising/Targeted Advertising: You have the right to opt-out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising purposes.

How to Submit an Access, Correction, Deletion or Shine the Light Request. You can exercise your access, correction, deletion, and Shine the Light rights by emailing us at customercare@vitaminshoppe.com with the subject line “Privacy Rights Request” or calling us at 866-293-3367.

To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your request. If you have an account with us, we may verify your identity by requiring you to sign in to your account or requiring you to respond to an email from the email address associated with your account. Whether or not you have an account with us, we also may ask you to provide details regarding your most recent transaction with us or other information necessary to verify your identity.

How to Submit an Opt-Out of Sale/Targeted Advertising Request. You can exercise your opt-out rights by emailing us at customercare@vitaminshoppe.com with the subject line “Opt-Out Request” or calling us at 866-293-3367.

Authorized Agents. To submit a request as an authorized agent where permitted by applicable law, please email us at customercare@vitaminshoppe.com with the subject line “Authorized Agent Request.”

Appeals. To submit a request as an authorized agent where permitted by applicable law, please email us at customercare@vitaminshoppe.com with the subject line “Authorized Agent Request.”

Additional Information. If you choose to exercise any of your privacy rights under applicable law, you have the right to not receive discriminatory treatment by us. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request. For questions or concerns about our privacy policies and practices, please contact us as at customercare@vitaminshoppe.com

Healthy Awards Financial Incentive and Loyalty Program Notice
By enrolling in Healthy Awards® (the “Program”), you agree to provide certain personal information for use by The Vitamin Shoppe, LLC (“The Vitamin Shoppe”) to earn points, including on qualifying purchases made in stores or online and in connection with other digital activities, and access exclusive offers, promotions and other perks. For additional details about the material terms of the Program, please visit the Healthy Awards Page and see our FAQs

You can opt in to the Program by creating a Healthy Awards Account online or by signing up in stores . When you enroll in the program, you may provide certain personal information such as your first and last name, phone number, email address, zip code , and additional information you may choose to provide, such as date of birth, gender, dietary preferences, and allergies . We also collect your purchase history and any rewards or points you earn. We may share your Healthy Awards loyalty program data with vendors that provide services on our behalf.

You have the right to opt out of the Program at any time and can do so by deleting your Healthy Awards account or contacting our customer care team at customercare@vitaminshoppe.com. Depending on your state of residence, you also may have the right to request that we delete personal information about you. In order to provide you with Program benefits, we need to maintain your personal information. If you choose to delete your personal information, we may no longer be able to provide you with offers and promotions through the Program.

The incentives we offer to you in connection with the Program are reasonably related to the value provided to us by your personal information. We estimate that the value to The Vitamin Shoppe of the personal information you provide in connection with the Program is equivalent to the benefits you receive through the Program. For information regarding our privacy practices, please see The Vitamin Shoppe Privacy Policy.

California Residents: Marketing Offer Notice of Financial Incentive
By submitting the marketing sign-up form and accepting the offer, you agree to provide certain personal information for use by The Vitamin Shoppe, such as your email address and phone number. You can opt into this offer by completing the sign-up form. You have the right to opt out at any time. You can opt out of receiving marketing emails by clicking the “Unsubscribe” link in our emails. You can unsubscribe from our text messages by replying STOP. We estimate that the value to The Vitamin Shoppe of the personal information you provide in connection with this offer is equivalent to the discount provided by the offer. For information regarding our privacy practices, please see The Vitamin Shoppe Privacy Policy.

Updates to This Supplement
This Supplement may be updated periodically and without prior notice to you to reflect changes in our personal information practices. We will post a notice on our websites and mobile apps to notify you of significant changes to this Supplement and indicate at the top of the notice when it was most recently updated.