Juul Labs, Inc. Consumer Health Data Privacy Notice

Last Updated Date: March 5, 2026

This Consumer Health Data Privacy Notice (“Notice”) supplements our Global Privacy Notice and Notice at Collection and US State Privacy Notice regarding our processing of health-related data as defined by some State Privacy Laws.

If you, or anyone else contacts us to report a potential issue, concern, or complaint related to an adverse experience potentially experienced when using our products (an “Adverse Experience”), you may provide us with certain health-related data, for example data related to your health-related conditions, symptoms, status, diagnoses, testing, treatments, and procedures (“consumer health data”).

Several of the categories of personal data we collect may be considered consumer health data depending on the context and extent of information you provide to us. To view the full list of categories of personal data we may collect, please see the “Information We Collect” section of our Global Privacy Notice. For personal data we collect to be considered consumer health data it must alone or with other data, identify the consumer and allow an inference about the consumer’s health.

If you contact us to report an Adverse Experience, we will process your consumer health data to investigate and respond to your complaint, to comply with our regulatory obligations, or to establish, exercise, defend a legal claim and for any other purpose required or allowed under applicable law. We may share your health data with the agencies that regulate our products (including the Food and Drug Administration, the “FDA”), in conjunction with our obligations to report Adverse Experiences to the FDA.

Categories of Sources from Which We Collect Consumer Health Data

We receive consumer health data directly from you. In some cases, we may receive consumer health data about you from other sources as described in the “How We Collect Information” section of our Global Privacy Notice.

Disclosure of Consumer Health Data

We do not sell consumer health data. We also do not share consumer health data with any third parties or affiliates. We disclose consumer health data to the FDA and other regulators of our products in the context described above. We may also disclose consumer health data with our data processors, service providers and contractors who assist us in providing goods and services to you. These parties may only use consumer health data as permitted by our contracts with them and consistent with the terms of our Global Privacy Notice. We may also disclose consumer health data as permitted by law, such as with your consent, if needed to protect your vital interests, such as in the event of a medical emergency or natural disaster, to an acquiring organization if we are involved in a sale or a transfer of our business, as needed to prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, as needed to preserve the integrity or security of our systems, or to investigate, report, or prosecute those responsible for any action that is illegal under applicable law.

Your Privacy Rights

If you are a consumer in a state with laws specifically offering you privacy rights over your health data, subject to certain exceptions, you may have certain rights related to your health data, including rights to confirm processing and access, delete, or withdraw consent relating to such health data.

You may request to exercise these rights by:

• Making an online request via our consumer privacy portal
• Emailing us at: dataprivacy@juul.com
• Calling us at: 1-855-509-5885

Writing to us at:

Juul Labs, Inc.
Attn: Chief Compliance Officer
1000 F Street NW
Washington, DC 20004

In some cases, we may be unable to fulfill your request. If your rights request is denied, applicable law may give you the right to lodge an appeal with us. The response to your rights request will inform you of any appeal rights you may have and tell you how you can exercise them.

We may revise this Notice from time to time. If we make material changes to this Notice, we will notify you as required by applicable law. By continuing to use our Services after a new Notice takes effect you will be deemed to have accepted its updated terms.