The policy enumerates California residents' rights under CCPA/CPRA including rights to access, delete, correct, opt out of sale or sharing, limit sensitive data use, and non-discrimination, and establishes that these rights can be exercised through mechanisms provided by the company.
This analysis describes what Hims & Hers's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision operationalizes CPRA rights for California residents and establishes the company's stated commitment to honoring those rights without discriminating against users who exercise them. The practical availability and functionality of the opt-out and limitation mechanisms are the key compliance dependencies.
This provision establishes that California residents can request access to, deletion of, or correction of their personal information, and can opt out of sale or sharing of personal information and limit use of sensitive personal information. The policy states these rights will be honored without discriminatory consequence.
Cross-platform context
See how other platforms handle California Consumer Privacy Rights and similar clauses.
Compare across platforms →Monitoring
Hims & Hers has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you are a California resident, you have the right to: know what personal information we collect, use, disclose, and sell; request deletion of your personal information; request correction of inaccurate personal information; opt out of the sale or sharing of your personal information; limit the use and disclosure of sensitive personal information; and not be discriminated against for exercising your privacy rights.— Excerpt from Hims & Hers's Hims & Hers Privacy Policy
1) REGULATORY LANDSCAPE: These rights are codified under CCPA as amended by CPRA, enforced by the California Privacy Protection Agency and California AG. The non-discrimination right is a statutory requirement under CCPA. Failure to honor rights requests within regulatory timeframes is an enforcement priority. 2) GOVERNANCE EXPOSURE: Medium. The disclosure of rights is explicit and consistent with CPRA requirements. The primary governance exposure is operational: whether rights requests are processed within the required 45-day (extendable to 90-day) timeframe and whether opt-out mechanisms are technically functional across all data flows. 3) JURISDICTION FLAGS: California is the primary jurisdiction. Virginia, Colorado, Connecticut, Texas, and other states with consumer privacy laws provide similar but not identical rights that may require separate compliance processes. 4) CONTRACT AND VENDOR IMPLICATIONS: Rights deletion requests must be propagated to service providers and contractors that have received the user's personal information. Compliance teams should verify that vendor contracts include deletion propagation obligations. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should audit the rights request submission and fulfillment workflow, confirm response timelines meet CPRA requirements, and verify that opt-out signals including Global Privacy Control are honored across all platform integrations.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 3 platforms + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision operationalizes CPRA rights for California residents and establishes the company's stated commitment to honoring those rights without discriminating against users who exercise them. The practical availability and functionality of the opt-out and limitation mechanisms are the key compliance dependencies.
This provision establishes that California residents can request access to, deletion of, or correction of their personal information, and can opt out of sale or sharing of personal information and limit use of sensitive personal information. The policy states these rights will be honored without discriminatory consequence.
ConductAtlas has identified this type of provision across 18 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Hims & Hers.