Hims & Hers Health, Inc.

Consumer Health Data Privacy Policy

Last updated: March 26, 2024

Introduction

Hims & Hers Health, Inc. and its subsidiaries (" Hims & Hers" " we," or " us") owns and operates websites (the " Websites") located at www.hims.com and www.forhers.com and any Hims and/or Hers mobile application (collectively, the " Platform"). Your access and use of the Platform, including its content (" Content"), products, or services provided through it, and any affiliated website, software or application owned or operated by Hims & Hers (collectively, the " Service"), are subject to our Privacy Policy unless specifically stated otherwise. This Consumer Health Data Privacy Policy applies to the extent required by applicable state law with respect to consumer health data (" Consumer Health Data") as defined by applicable law. For example, this Consumer Health Data Privacy Policy does not apply to protected health information subject to the Health Insurance Portability and Accountability Act of 1996. Please refer to our Notice of Privacy Practices, which governs such information. This Consumer Health Data Privacy Policy supplements our general Privacy Policy.

Collection of Consumer Health Data

The Consumer Health Data we collect depends on how you interact with us, the services you use, and the choices you make.

We collect Consumer Health Data about you from different sources and in various ways when you use our services, including:

Consumer Health Data you provide. We collect Consumer Health Data you may provide to us. For example:

• Name and contact information, such as your name, email address, phone number, and billing and physical addresses.
• Demographic information, such as your gender, racial or ethnic origin, date of birth, and zip code.
• Payment information, such as your credit card number, financial account information, and other payment details.
• Account profile information, such as a username or account number in combination with a password, security or access code, or other credential that allows access to an account.
• Marketing information, such as your preferences for receiving our marketing communications and details about your engagement with them.
• Content, such as photographs, videos, documents, and other files you upload to our Service.
  • Government-issued identifiers, such as driver’s license number, passport number, and social security number.
  • Biometric information, such as information that can identify you.
  • Health information, such as information concerning your physical and/or mental health status.
  • Sexual and reproductive health, such as information about your sex life, reproductive health, and/or sexual orientation.

Consumer Health Data we collect automatically. When you use our services, we collect some information through certain technical tracking technologies that may be considered Consumer Health Data. For example:

• Identifiers and device information. We log your Internet Protocol (IP) address and information about your device, including device identifiers (such as MAC address).
• Location data. We may collect general location data when you use our apps or online services.
• Usage data. We log your activity on our websites, apps, including the URL of the website from which you came to our sites, pages you viewed, how long you spent on a page, and other details about your use.

Consumer Health Data we create, infer, or generate. We may create, infer or generate Consumer Health Data from other data we collect.

Consumer Health Data we obtain from third-party sources. We also obtain Consumer Health Data from third parties, such as:

• Corporate affiliates. We may obtain your Consumer Health Data from our corporate affiliates.
• Third-party partners. Third-party applications and services, including social networks you choose to connect with or interact with through our services.
• Service providers. Third parties that collect or provide data in connection with work they do on our behalf.
• Publicly available sources. Public sources of Consumer Health Data such as open government databases.

Use of Consumer Health Data

We use Consumer Health Data for purposes described in this Consumer Health Data Privacy Policy or as otherwise disclosed to you. For example, we use Consumer Health Data for the following purposes:

Sharing Consumer Health Data

We may share Consumer Health Data with your consent or as determined necessary to complete your transactions or as otherwise permitted or required by law, such as:

• Affiliates. We enable access to Consumer Health Data across our subsidiaries, affiliates, and related companies.
• Legal and law enforcement. We will access, share, and preserve Consumer Health Data when necessary to comply with applicable law or respond to valid legal processes.

Your Consumer Health Data Rights

You may have certain rights to your Consumer Health Data under applicable state law. These rights may vary depending on your state of residence. For example:

• Withdraw consent. You have the right to withdraw your consent for our collection or sharing of your Consumer Health Data.
• Access and confirm. You have the right to request a copy of your Consumer Health Data.
• Correction. You have the right to ask us to correct inaccuracies in your Consumer Health Data.
• Deletion. You have the right to ask us to delete your Consumer Health Data.
• Appeal. You have the right to appeal any denial of your requests.

To exercise these rights, please visit privacy.hims.com. We may need to verify your identity in order to process your request.

Changes to this Consumer Health Data Privacy Policy

We reserve the right to modify this Consumer Health Data Privacy Policy at any time. If we make material changes, we will notify you by updating the date of this Consumer Health Data Privacy Policy. Your use of the Service after any modifications indicates your acknowledgment of the changes.

Contacting Us

If you have any questions about this Privacy Policy, please contact us by email at privacy@forhims.com.