Effective date: October 28, 2026
1. Introduction and scope
Foundation Consumer Healthcare, LLC and its affiliates (“Foundation,” “we,” “us,” or “our”) respect your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit planbonestep.com and other Foundation websites that link to this policy (the “Sites”), and the choices and rights you have.
This policy applies to information we collect through the Sites. It does not apply to information collected offline, or on third-party websites we do not control. Because our products relate to health, some of the information we handle may be considered consumer health data, which is addressed specifically in Section 3.
Plain-language summary: we collect limited information to run the Sites and understand how they are used. We do not require you to create an account to learn about Plan B One-Step. We do not sell your personal information for money, and we do not share personal information with advertising platforms for cross-context behavioral advertising without your consent. Where the law gives you rights over your information, we honor them, and we honor browser-based opt-out signals such as Global Privacy Control.
2. Information we collect
Information you provide
You can use most of the Sites without giving us any personal information. If you contact us, sign up for updates, or use an interactive feature, you may provide information such as your name, email address, postal code, or the contents of your message. We collect only what is needed for the purpose you are engaging in.
Information collected automatically
When you use the Sites, we and our providers may automatically collect technical and usage information, including your IP address, device and browser type, pages viewed, referring pages, approximate location derived from IP address, and interactions with the Sites. Some of this is collected through cookies and similar technologies described in Section 4.
Tracking technologies and the parties involved
The Sites may use first-party and third-party cookies, pixels, tags, and software development kits. These can include web analytics (for example Google Analytics) and advertising technologies (for example the Meta, TikTok, and Snapchat pixels). Section 4 explains how these are governed by consent, and Section 3 explains the additional limits that apply on our health-related pages.
3. Consumer health data (Washington, Nevada, Connecticut, and similar laws)
This section reflects Washington's My Health My Data Act and comparable consumer-health-data laws in Nevada, Connecticut, and other states. These laws apply broadly, beyond HIPAA-covered entities, and they define consumer health data expansively.
What consumer health data means here: personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. On our Sites, this can include the fact that you viewed pages about emergency contraception, searched for a nearby retailer of an emergency-contraceptive product, or used a related interactive tool.
Our commitments on consumer health data
Separate consent to collect. We obtain your separate, opt-in consent before collecting consumer health data beyond what is strictly necessary to provide a feature you have requested. That consent is specific, informed, and unambiguous, and you can decline.
Separate authorization to share. We obtain a separate, distinct authorization before sharing consumer health data, and we do not sell consumer health data. Any sharing beyond our service providers requires your valid authorization identifying the data, the recipient, and the purpose.
No advertising use without consent. We do not disclose consumer health data to third-party advertising platforms, and we do not use it to build advertising audiences, without your separate consent. On health-related pages, non-essential advertising and analytics technologies do not load until you consent.
No geofencing. We do not use geofencing to identify or track you, or to send you messages or advertising, based on your proximity to any health care facility.
Your rights. You may withdraw consent, request access to the consumer health data we hold about you, and request its deletion. We describe how to exercise these rights in Section 8, and we will confirm and honor a deletion request as the law requires.
Separate policy required. Washington law requires a distinct Consumer Health Data Privacy Policy, linked separately, that details the categories collected, the sources, the purposes, and the categories of recipients. See our Consumer Health Data Privacy Policy.
4. Cookies, tracking technologies, and consent
We use a consent tool to control non-essential technologies. Cookies and similar technologies that are strictly necessary to operate the Sites and deliver features you request will function so the Sites work. All other cookies and tracking technologies, including analytics and advertising pixels, remain off until you provide consent, and you can change or withdraw your choices at any time through the consent tool.
We honor browser opt-out signals. Where required, we treat a recognized opt-out preference signal, such as Global Privacy Control, as a valid request to opt out of the sale or sharing of personal information and to limit the use of sensitive personal information for the browser or device that sends it.
Your device controls. Most browsers let you refuse or delete cookies. If you disable cookies, some features of the Sites may not function as intended.
5. How we use personal information
We use personal information to operate, maintain, and improve the Sites; to respond to your inquiries; to provide features you request, such as locating a nearby retailer; to understand and analyze how the Sites are used, subject to your consent choices; to protect the security and integrity of the Sites; and to comply with legal obligations. We do not use consumer health data for advertising without your separate consent, as described in Section 3.
6. How we disclose personal information
Service providers. We share personal information with vendors that perform services for us, such as hosting, analytics, and communications, under contracts that limit their use of the information to those services.
Legal and safety. We may disclose information to comply with law, respond to lawful requests, or protect the rights, safety, and property of Foundation and others.
Business transfers. Information may be transferred as part of a merger, acquisition, or sale of assets, subject to this policy and applicable law.
With your direction or consent. We share information as you direct or as you have consented, including any sharing of consumer health data under Section 3.
We do not sell your personal information for money, and we do not share personal information with third parties for cross-context behavioral advertising without your consent. We do not sell or share sensitive personal information, including consumer health data, for these purposes.
7. Your privacy rights
Depending on where you live, you may have the following rights, subject to legal exceptions:
Know and access the personal information we have collected about you and how we use and disclose it.
Correct inaccurate personal information.
Delete personal information we hold about you.
Portability, to receive a copy of certain information in a usable format.
Opt out of the sale or sharing of personal information, and opt out of targeted or cross-context behavioral advertising.
Limit the use of sensitive personal information to what is necessary to provide the services you request.
Withdraw consent to the collection or sharing of consumer health data.
Non-discrimination for exercising any of these rights, and the right to appeal a decision on your request where the law provides one.
8. How to exercise your rights
You can submit a request by email at FCHProd@epowercenterdirect.com, by calling 1-800-330-1271 (Monday–Friday, 9 AM – 5 PM ET), or through the request form on our Your Privacy Choices page. You may also use an authorized agent where the law permits, with proof of authorization. We will verify your request as required and respond within the timeframes set by applicable law. To opt out of sale or sharing, you can use the Do Not Sell or Share My Personal Information and Limit the Use of My Sensitive Personal Information links on the Sites, or send a recognized opt-out preference signal such as Global Privacy Control.
9. Data retention
We keep personal information only as long as needed for the purposes described in this policy, to comply with legal obligations, resolve disputes, and enforce our agreements. Unless a longer period is required by law, we keep personal information for no more than seven (7) years. We delete or de-identify information when it is no longer needed.
10. How we protect information
We maintain administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Children’s and teens’ privacy
The Sites are intended for a general audience. We do not ask visitors for their age, and we do not knowingly collect personal information from children under 13. We do not knowingly sell or share personal information of consumers under 16 (or under 18 where state law requires), or use it for targeted advertising. If we learn that we have collected personal information from a child under 13, we will delete it. If someone tells us they are a minor, for example in a contact form or privacy request, we will use that information only to respond to them.
12. Third-party links, United States scope, and changes
Third-party links. The Sites may link to sites we do not control. This policy does not apply to those sites, and we encourage you to review their policies.
United States. The Sites are intended for users in the United States, and information is processed in the United States.
Changes. If we change this policy, we will post the revised version with a new effective date, and we will provide additional notice where the law requires it.
13. How to contact us
Foundation Consumer Healthcare, LLC, 106 Isabella Street, Suite 602, Pittsburgh, PA 15212. Email: FCHProd@epowercenterdirect.com. For consumer health data questions, contact FCHProd@epowercenterdirect.com and see the separate Consumer Health Data Privacy Policy.
