Effective Date: 07/01/2026

Online Privacy Policy Addendum

TWH Commerce, Inc. d/b/a Thrifty White Health Essentials

This Online Privacy Policy Addendum applies to the Thrifty White Health Essentials website, including shop.thriftywhite.com, and describes how TWH Commerce, Inc. d/b/a Thrifty White Health Essentials, together with Thrifty White Pharmacy where applicable, collects, uses, and shares information through our online website, ecommerce services, digital marketing tools, text messaging programs, and related online services.

This Online Privacy Policy Addendum is intended to supplement, not replace, Thrifty White’s Notice of Privacy Practices. The Notice of Privacy Practices addresses how Thrifty White may use and disclose protected health information under applicable healthcare privacy laws, including HIPAA. This Online Privacy Policy Addendum addresses online data practices related to the website, ecommerce activity, cookies, digital marketing, SMS communications, abandoned cart reminders, and location-based website services.

If there is a conflict between this Online Privacy Policy Addendum and Thrifty White’s Notice of Privacy Practices regarding protected health information, the Notice of Privacy Practices will control.

By using this website, creating an account, placing an order, signing up for marketing communications, or otherwise interacting with our online services, you agree to the practices described in this Online Privacy Policy Addendum.

If you have any questions about this Online Privacy Policy Addendum, the Notice of Privacy Practices, or how your information is collected and used, please contact us at:

Phone: 763-513-4300
Email: privacyofficer@thriftywhite.com
Mail:
Thrifty White Pharmacy
Attn: Privacy Officer
6701 Evenstad Drive, Suite 100
Maple Grove, MN 55369

Information We Collect Through the Website

When you interact with our website or online services, we may collect information that you provide directly to us, information generated through your website activity, and information collected through cookies, pixels, tags, and similar technologies.

This may include:

• Name;

• Email address;

• Billing address;

• Shipping address;

• Telephone number;

• Mobile phone number;

• Account login information;

• Order information;

• Payment-related information;

• Customer service communications;

• Marketing preferences;

• Products viewed;

• Items added to your shopping cart;

• Checkout activity;

• Purchase history;

• Browser information;

• Device information;

• IP address;

• Approximate location information;

• Referring website information;

• Website usage data; and

• Other information you choose to provide through the website.

We may collect this information when you make a purchase, create an account, contact customer service, sign up for emails or text messages, participate in promotions, browse products, add items to your shopping cart, abandon your cart, or otherwise use the website.

Cookies and Similar Technologies

Our website uses cookies, pixels, tags, and similar technologies to operate the website, maintain shopping cart functionality, remember user preferences, support account login features, analyze website performance, improve customer experience, and support marketing and advertising activities.

Cookies are small files placed on your browser or device that help websites recognize users and remember certain information. Similar technologies may be used to understand how visitors interact with the website, measure the effectiveness of marketing campaigns, and support personalized communications.

You may be able to manage or disable cookies through your browser settings. If you disable cookies, some website features may not function properly, including shopping cart, checkout, account, or personalization features.

How We Use Online Information

We may use information collected through the website and online services to:

• Process and fulfill online orders;

• Provide customer service;

• Send order confirmations, shipping updates, pickup updates, and other transaction-related communications;

• Maintain and improve the website;

• Manage customer accounts;

• Personalize website content and customer experience;

• Send marketing emails, promotional messages, and product information, where permitted;

• Send text messages, including marketing messages, cart reminders, and order updates, where permitted;

• Analyze website traffic, customer behavior, and marketing performance;

• Detect and prevent fraud, misuse, security incidents, or other unlawful activity;

• Maintain records of customer consent and communication preferences;

• Comply with legal, regulatory, or contractual obligations; and

• Carry out any other purpose described at the time information is collected.

SMS Text Messaging and Mobile Phone Numbers

If you provide your mobile phone number and opt in to receive text messages from us, we may use your mobile phone number to send SMS or MMS text messages, including marketing messages, promotional offers, product information, abandoned cart reminders, customer service messages, and order-related updates.

Our text messaging program is managed through Klaviyo and related service providers that help us operate, manage, and deliver SMS communications. Information related to SMS messaging may include your mobile phone number, SMS opt-in status, consent records, message interaction data, order information, cart activity, and related website activity.

We may share this information with Klaviyo, wireless carriers, messaging providers, and other service providers as necessary to operate, manage, deliver, and support our text messaging program. These providers assist with message delivery, consent management, customer segmentation, analytics, compliance, and related operational support.

Consent to receive marketing text messages is not required as a condition of purchasing any goods or services. Message and data rates may apply. Message frequency may vary.

You may opt out of marketing text messages at any time by replying STOP to any text message you receive from us, or by following the unsubscribe instructions included in the message. Where available, you may reply HELP for help.

Abandoned Cart Text Messages

Thrifty White Health Essentials’s website uses cookies, pixels, tags, and similar technologies to help keep track of items you place in your shopping cart, including when you have abandoned your cart.

This information may include products viewed, items added to your cart, checkout activity, browser or device information, and related website interaction data. If you have opted in to receive text messages from us, this information may be used to determine when to send cart reminder messages by text message.

Abandoned cart text messages may be sent through Klaviyo or other service providers that help us manage and deliver SMS communications.

Third-Party Sharing Related to Text Messaging

We do not sell your mobile phone number or SMS consent information.

The sharing practices described in this Online Privacy Policy Addendum exclude text messaging originator opt-in data and consent. SMS opt-in data and SMS consent status will not be shared with third parties for their own unrelated marketing purposes.

We may share SMS-related information with Klaviyo, wireless carriers, messaging providers, and other service providers only as necessary to operate, manage, deliver, and support our text messaging program, maintain consent records, comply with legal requirements, prevent fraud or abuse, and provide services you requested.

Other Third-Party Service Providers

We may share online information with third-party vendors and service providers that help us operate our website, process orders, deliver products, process payments, provide customer service, manage email and SMS communications, analyze website performance, prevent fraud, and support marketing activities.

These third parties may include ecommerce platforms, payment processors, shipping providers, marketing platforms, analytics providers, customer service providers, fraud prevention tools, and similar business service providers.

We may also disclose information if required or permitted by law, regulation, subpoena, court order, legal process, law enforcement request, or to protect the rights, safety, or property of Thrifty White, our customers, our employees, our vendors, or others.

Location Information and Location-Based Services

We may collect and use location-related information through the website and related online services. This may include approximate location information derived from your IP address, browser, device, or network information, as well as location information you provide directly, such as your billing address, shipping address, ZIP code, or selected pickup location.

We may use location-related information to:

• Support shipping, delivery, and pickup options;

• Help determine relevant store or fulfillment information;

• Support fraud prevention and website security;

• Analyze website usage and customer trends;

• Personalize website content or marketing communications;

• Support customer segmentation and marketing through Klaviyo or similar service providers; and

• Provide location-based services, offers, or information where permitted by law.

We do not use precise GPS-based location tracking through the website unless you enable or permit location services through your browser, device, or another website feature that requests your permission.

Location-related information may be processed by Klaviyo or other service providers that help us manage marketing communications, customer segmentation, analytics, and email or SMS communications.

You may be able to limit location collection through your browser, device, or privacy settings. If you disable location services, cookies, or similar technologies, some website features or location-based services may not function as intended.

Data Security

We use reasonable technical, administrative, and physical safeguards designed to help protect information collected through the website. However, no method of transmission over the internet or method of electronic storage is completely secure.

You are responsible for maintaining the confidentiality of your account login information and password and for restricting access to your computer, device, and account.

Third-Party Links

Our website may contain links to third-party websites, applications, or services. This Online Privacy Policy Addendum does not apply to those third-party websites or services. We are not responsible for the privacy practices, content, or security of third-party websites or services.

We encourage you to review the privacy policies of any third-party websites or services you visit.

Changes to This Online Privacy Policy Addendum

We may update this Online Privacy Policy Addendum from time to time. The Effective Date at the top of this document indicates when it was last revised. Any changes will become effective when the updated Online Privacy Policy Addendum is posted on the website.

Your continued use of the website after an updated Online Privacy Policy Addendum is posted means that you accept the updated terms.