HIMS & HERS UK PRIVACY POLICY NOTICE FOR CUSTOMERS
Last Updated: 06/05/2021
This Privacy and Cookie Policy (the “Policy”) (together with our Terms & Conditions and any other documents referred to in it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
1.2. Please read the Privacy Policy carefully to understand our views and practices regarding your personal data and how we will treat it. By using our online properties including our site located at https://hair.forhims.co.uk and purchasing our products and services you agree to the use we make in accordance with this Policy of all personal data you provide to us or we collect from you. If you do not agree with any term in this Policy, please do not use our online properties.
The Company
https://hair.forhims.co.uk is a website and service operated by Hims & Hers UK Limited (“Hims”, “we”, “our”, or “us”). We are registered in England and Wales under company number 11602781. Our registered office is located at 107 Kirkgate, Leeds, United Kingdom, LS1 6DP.
2.1. For the purpose of the Data Protection Act 2018 (the “Act”), the data controller is Hims & Hers UK Limited.
This Policy explains:
3.1. What information we may collect from you.
3.2. The types of cookies we use and how you can reject these cookies.
3.3. Where we store your personal data.
3.4. The ways with which we keep your information secure.
3.5. What we do with the data we collect.
3.6. Uses we make of your data.
3.7. Your rights.
Information we may collect from you
4.1. In this Policy your “data” means information or pieces of information relating to you or that could allow you to be directly or indirectly identified.
Information you voluntarily provide
5.1. All the information you provide by filling out our online consultation questionnaires. This also includes information you include when you sign up to our services.
5.2. If you contact us via email or phone, we may keep a record of that correspondence.
5.3. We sometimes ask you to complete surveys that we use for research purposes. These are however not mandatory
5.4. Details of transactions you carry out through our online properties and of the fulfilment of your orders.
5.5. The information we collect from the device you are using to access our services.
5.6. We, and other third-party service providers, may also use various different technologies to automatically collect information about how you use and access our services. These may include, but are not limited to:
Device information
6.1. the type of device you use;
6.2. a unique device identifier (for example, your device’s IMEI number or the MAC address of the device’s wireless network interface);
6.3. network information;
6.4. your operating system;
6.5. your IP address;
6.6. your login information;
6.7. the browser you are using and what version it is;
6.8. your time zone setting.
Other information
7.1. The full Uniform Resource Locators (URL) clickstream to, through and from our online properties (including date and time);
7.2. The different types of services/products you viewed or searched for;
7.3. page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page;
7.4. any phone number used to call our customer service number.
Information we may receive from third-parties
8.1. Our business relies on the collaboration with third-parties (such as our dispensing pharmacy, payment and delivery services, analytics providers, search information providers, identity verification providers).
8.2. We may therefore receive information about you from them.
Cookies, pixels and other similar technologies
9.1. Cookies are small pieces of data that are stored on your computer, mobile phone or other device. Pixels are small blocks of code on web pages that do things like allow another server to measure viewing of a webpage and often are used in connection with cookies.
9.2. We use the following cookies:
9.2.1. Operationally necessary cookies. These are cookies that are required for the operation of our online services. For instance, cookies to enable you to log in to access our services, or cookies that are needed to take advantage of our e-billing services.
9.2.1. Performance cookies. These cookies allow us to track how our users use our service, the number of visits on each page, and behaviour on each page. This helps us optimise our platform so you can find the things you are looking for and have the best experience possible.
9.2.1. Functionality cookies. These cookies allows us to recognise you by name and create a more personalised experience for you.
9.2.1. Targeting cookies. These cookies record your visit to our platform, the pages you have visited and the links you may have clicked. We will use this information to curate services and content based on your needs. This information may also be shared with third-party providers.
9.2.1. Advertising cookies. We use cookies to help us show adverts to you on other websites across the internet. An example of this being: based on your actions on our website. If you have viewed a page about erectile dysfunction on our website, we may advertise our prescribing services to you on other websites. If you would like more information on behavioural advertising/retargeting, including how to opt out of it, please visit www.youronlinechoices.com.
9.3. Cookies are essential to the improvement of our services and platform.
9.4. They enable us:
9.4.1. To estimate the size of our audience and their behaviours.
9.4.2. To customise our site according to your individual interests.
9.4.3. To speed up your searches.
9.4.4. To recognise you when you return to our site.
9.5. You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. However, if you select this setting you may be unable to access certain parts of our online properties. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to our online properties.
9.6. For more information about cookies or if you would like to learn how to remove cookies set on your device, visit: http://www.aboutcookies.org.
Where we store your personal data
10.1. The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”), including to countries that do not offer the same level of protection with respect to personal data as required in the EEA.
10.2. It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers.
10.3. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of services.
10.4. By submitting your personal data, you acknowledge and consent to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
Information security
11.1. We take appropriate security measures to protect against unauthorised access to or unauthorised alteration, disclosure or destruction of data.
11.2. These include internal reviews of our data collection, storage and processing practices and security measures, including appropriate encryption and physical security measures to guard against unauthorised access to systems where we store personal data.
11.3. All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology.
11.4. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our online properties, you are responsible for keeping this password confidential. You should not share this password with anyone.
11.5. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
11.6. You can find more information on protecting your information and staying safe online here.
Uses made of your data
We use information held about you in the following ways:
12.1.1. To ensure that our content is presented to you in the most effective manner.
12.1.2. To provide you with information, products or services that you request from us or which we feel may interest you. We will contact you for such purposes if you have explicitly given us your consent to do so.
12.1.3. To carry out our obligations arising from any contracts entered into between you and us. You understand that in order to provide our services to you we need to share your personal data (including sensitive medical data) with doctors and non-medical staff working at or with Hims & Hers UK Limited as well as with pharmacies (including but not limited to our partner pharmacy Specialist Pharmacy). We ensure that any personal data we disclose in accordance with our Policy is kept to the minimum required to allow the safe and effective delivery of services to you, and will never share with non GDPR compliant third parties.
12.1.4. To facilitate the delivery of your order to you. You also understand and agree, that we will use third party delivery companies, such as Royal Mail and other delivery service companies (“Delivery Providers”), to deliver medicines to you.
12.1.5. To evaluate the performance of our business at a granular level. You understand that in order to evaluate the performance of our service we may occasionally send data to validated third parties for the purposes of evaluating ongoing performance. We ensure that any personal data we disclose in accordance with our Policy is kept to the minimum required to allow the safe and effective delivery of services to you, and will never share with non GDPR compliant third parties.
12.1.6. To notify you about changes to our services.
12.2. We will never sell your data. You understand that third party services that Hims & Hers UK uses change and may not always be reflected concurrently in this Privacy and Cookie Policy. We may also occasionally use your data, or permit selected third parties to use your data, to receive feedback about our services or to provide you with information about our goods and services which may be of interest to you.
12.3. If you do not wish to receive non-order related information from us, then you can untick the ‘Newsletter’ box in the ‘Settings’ box when you sign up, any time in your account account, or on the unsubscribe link on any marketing emails you would have received. You’ll also be able to click the unsubscribe link that you will find at the bottom of every email we send to you.
Disclosure of your information
13.1. If you order a product or service from us, we may share your personal data with our suppliers (including partner pharmacies) and other third parties to allow delivery of the products and services you have ordered. Any such suppliers or third parties are not authorised by us to use your personal data in any other way and will be required by us to implement measures to protect your personal data.
13.2. We may disclose your personal information to third parties:
13.3.1. In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
13.3.2. If Hims & Hers UK or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
13.3.3. If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms & Conditions and other agreements; or to protect the rights, property, or safety of Hims & Hers UK Limited, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
13.3.4. In order to detect, prevent or otherwise address fraud, security or technical issues.
Your rights
14.1. You have the right to opt out of our using your data for marketing purposes. You can exercise your right to prevent this use of data by ticking the box in your Account page or by checking the relevant boxes during your signup process. You can also exercise the right at any time by contacting us via email at contact@forhims.co.uk. Likewise you can contact us if you wish to report any violations of the privacy Policy.
14.2. When you use our services, we make good faith efforts to provide you with access to your personal information and either to correct this data if it is inaccurate or to delete such data at your request, if it is not otherwise required to be retained by law or for legitimate business purposes. You can ask us to suspend the account you created by contacting us at contact@forhims.co.uk.
14.3. If you would like to stop using Hims please email as at contact@forhims.co.uk. Your account will become inactive with immediate effect and you will not be able to access it, or your patient records (consultations and prescriptions). This action cannot be undone. You acknowledge and agree that Hims is required by law to archive electronic patient records including your personal information, communication and treatments for a minimum of 10 years.
Access to information
15.1. The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. We will require you to prove your identity with supporting approved identification documents in order to process your request. You can exercise the right at any time by contacting us at contact@forhims.co.uk.
Changes to our Policy
16.1. Any changes we may make to our Policy in the future will be posted on this page and, where appropriate, notified to you by email.
Contact
17.1. Questions, comments and requests regarding this Policy are welcomed and should be addressed to Hims & Hers UK Limited, 107 Kirkgate, Leeds, LS1 6DP or via email at contact@forhims.co.uk.