Privacy Policy

1. Introduction

Open Hormones (“we,” “us,” or “our”) operates the website openhormones.com and provides telehealth services related to women’s hormone replacement therapy and related clinical care. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our website, use our services, or otherwise interact with us.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our website or services.

2. Information We Collect

2.1 Information You Provide

Waitlist and contact information: When you sign up for early access or our waitlist, we collect your email address.

Account and intake information: When you register for our services, we collect your name, date of birth, mailing address, phone number, email address, and payment information.

Health and medical information: To provide telehealth services, we collect health questionnaire responses, medical history, menstrual and menopausal history, symptoms, lab results, prescriptions, provider visit notes, and other clinical data necessary for your care. This information may constitute Protected Health Information (“PHI”) under the Health Insurance Portability and Accountability Act (“HIPAA”).

2.2 Information Collected Automatically

Usage data: We may collect information about how you access and use our website, including your IP address, browser type, operating system, referring URLs, pages viewed, and timestamps.

Cookies and similar technologies: We may use cookies, pixels, and similar tracking technologies to improve your experience and analyze website traffic. You can control cookies through your browser settings.

2.3 Information from Third Parties

We may receive lab results from Quest Diagnostics or other laboratory partners, and prescription fulfillment information from our licensed pharmacy partners, on your behalf and as part of your care.

3. How We Use Your Information

• To provide, maintain, and improve our telehealth services and clinical care.
• To process your membership, prescriptions, lab orders, and payments.
• To communicate with you about your care, account, and service updates.
• To send you waitlist updates, launch announcements, and marketing communications (with your consent, and with the ability to opt out at any time).
• To comply with legal obligations, including state and federal telehealth regulations and pharmacy laws.
• To detect, prevent, and address fraud, abuse, or security issues.
• To analyze website usage and improve our platform.

4. How We Share Your Information

We do not sell your personal information. We may share your information with the following categories of recipients:

Healthcare providers: Board-certified clinicians who provide your telehealth consultations and clinical care.

Pharmacies: Licensed U.S. pharmacies that dispense your prescribed medications.

Laboratories: Quest Diagnostics and other laboratory partners that process your lab orders.

Service providers: Third-party vendors who assist us with payment processing, email delivery, website hosting, and analytics. These providers are contractually obligated to protect your information and use it only for the purposes we specify.

Legal and regulatory: We may disclose your information when required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Protected Health Information and HIPAA

To the extent that we create, receive, maintain, or transmit Protected Health Information (“PHI”) as defined under HIPAA, we will handle such information in accordance with applicable HIPAA requirements, including the HIPAA Privacy Rule and Security Rule.

Your rights regarding your PHI may include the right to access, amend, and receive an accounting of disclosures of your health information. A separate Notice of Privacy Practices may be provided to you when you enroll in our clinical services, which will describe your HIPAA rights in detail.

6. Data Security

We implement administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security assessments.

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations (including medical record retention requirements under applicable state law), resolve disputes, and enforce our agreements. Waitlist email addresses are retained until you unsubscribe or we delete them after the waitlist period ends.

8. Your Rights and Choices

Marketing communications: You may opt out of marketing emails at any time by clicking the unsubscribe link in any email or by contacting us at [email protected].

Access and correction: You may request access to, correction of, or deletion of your personal information by contacting us. Certain information may be retained as required by law.

Cookies: You can manage cookie preferences through your browser settings. Disabling cookies may affect website functionality.

8.1 California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at [email protected].

8.2 Other State Privacy Laws

Residents of other states with consumer privacy laws (including Virginia, Colorado, Connecticut, Utah, and others) may have similar rights. To exercise any applicable rights, contact us at [email protected].

9. Third-Party Links

Our website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective Date” at the top of this page and, where appropriate, notify you by email or through our website. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: