Hims & Hers Privacy Policy

This document is the privacy policy of Hims & Hers Health, Inc., governing collection, use, and disclosure of personal information across its telehealth platform, e-commerce services, and affiliated brands, with stated legal bases including consent, contractual necessity, and legitimate interests depending on jurisdiction. The policy states the company collects identifiers (name, email, phone, address), financial information (payment card data), health and medical information submitted through intake forms and provider consultations, device and usage data, precise geolocation, inferences drawn from user behavior, and sensitive personal information including sexual orientation and health conditions. The policy discloses sharing of personal data with advertising and analytics partners, including through pixel technologies and cookies that may constitute a 'sale' or 'sharing' of personal information under California law, and separately asserts that health information submitted through clinical workflows may be governed by HIPAA where applicable, though the boundary between HIPAA-covered and non-HIPAA-covered data flows is not uniformly specified throughout the document. The policy engages HIPAA, CCPA/CPRA, and state consumer health data statutes such as Washington's My Health MY Data Act, and acknowledges California residents' rights to know, delete, correct, and opt out of sale or sharing; compliance exposure is heightened by the dual nature of Hims & Hers as both a consumer brand and a telehealth entity, creating intersecting federal health privacy obligations and state consumer privacy obligations. The document provides opt-out mechanisms for targeted advertising and data sale, offers California-specific rights request procedures, and references a Notice of Privacy Practices for HIPAA-covered information.