Privacy Policy

The short version

• We use your information to provide care through our medical partners, fill your orders and support you.
• We do not sell your personal information or your health information.
• We never share your health answers, test results or what you ordered with advertising platforms. Analytics and advertising cookies run only with your permission (see Cookies).
• You can ask to see, correct or delete your information at any time.

Who provides your care

HuHealth is not a medical provider. Medical consultations and prescriptions are provided by independent, licensed clinicians through our telehealth partner, MD Integrations (“MDI”). Prescriptions are filled by licensed pharmacies, and lab tests are processed by licensed laboratories. When we handle health information on behalf of MDI, we do so as MDI’s business associate under HIPAA, and MDI’s Notice of Privacy Practices also applies to your care.

What we collect

Information you give us

• Contact details: name, email address, phone number, shipping and billing address.
• Identity details for your care and lab tests: date of birth and sex.
• Health information: your answers to our medical intake, photos, videos and files you upload, current medications, height and weight, the treatments and tests you order, and lab results.
• Payment information. Card payments are handled by Stripe; we never see or store your full card number.
• Messages you send us, and your email and text message preferences.

Information from our partners

• From MDI and its clinicians: whether a treatment was prescribed, and messages about your care.
• From pharmacies and labs: order, shipping and tracking status, and lab results.
• From Stripe: whether a payment succeeded.

Information collected automatically

• Device and usage information: pages you visit, links you click, the website or ad that brought you here, your IP address, browser and device type. Analytics runs only if you allow it (see Cookies); our servers also keep short-lived security and error logs.

How we use it

• To connect you with MDI’s clinicians and send them the information they need to treat you.
• To process payments, send prescriptions and lab orders, and ship your orders.
• To send you messages about your orders, care, refills and account.
• To send news and offers by email or text, only if you opted in. You can unsubscribe at any time with the link in any email or by replying STOP to a text.
• To understand how our website is used and improve it, if you allow analytics.
• To measure our advertising, if you allow advertising cookies, using marketing-page visits only.
• To prevent fraud, keep our services secure, and meet our legal obligations.

We do not use your health information for advertising or sell it to anyone.

Who we share it with

We share information only as needed to run our services, and with service providers bound by contract to protect it:

We may also share information when the law requires it, to protect the safety of you or others, with our professional advisers, or as part of a merger or sale of our business, where this policy would continue to apply.

Cookies and your choices

When you first visit, we ask which cookies you allow. You can change your choice at any time with “Cookie Preferences” at the bottom of every page.

• Essential (always on): keep the site working, such as your plan, page settings and security.
• Analytics (your choice): Ours Privacy counts visits and clicks so we can improve the site. If you live in Washington, Nevada or Connecticut, or we can’t tell where you are, analytics stays off until you turn it on.
• Advertising (off unless you turn it on): lets us tell Meta and Google that a visitor who clicked our ad reached our marketing website.

We honor Global Privacy Control. If your browser sends it, we treat it as a request not to share your information for advertising.

Some pages show content from other companies, such as Trustpilot reviews and the LegitScript certification seal, which load from their servers and may receive your IP address and browser details.

Your rights

Wherever you live, you can ask us to:

• tell you what information we have about you and give you a copy;
• correct information that is wrong;
• delete your information, except what we or our partners must keep by law, such as medical and pharmacy records;
• stop marketing emails or texts, and withdraw any consent you gave.

Use our privacy request form, or email support@huhealth.co with “Privacy request” in the subject. We will confirm who you are before acting, respond within 45 days, and tell you if we need up to 45 more. You can use an authorized agent. If we decline your request, you can appeal by replying to our answer, and we will respond to the appeal within 45 days. We will not treat you differently for using these rights.

Residents of Washington, Nevada and Connecticut have additional rights over consumer health data, described in our Consumer Health Data Privacy Policy.

How long we keep it

We keep information for as long as we need it to provide our services and meet legal, tax and medical record-keeping requirements, then delete or de-identify it. Clinical records are kept by MDI and pharmacy records by the pharmacy under the laws that apply to them.

Security

We protect information with encryption in transit, access controls and monitoring, and we require our partners to do the same. No system is perfectly secure; if a breach affects your information, we will notify you as the law requires.

Who our services are for

Our services are for adults 18 and older in the United States. We do not knowingly collect information from children, and our services are not directed to people outside the United States.

Changes to this policy

When we change this policy we will update the effective date above. If the change is significant, we will tell you on our website or by email, and ask for your cookie choices again.

Contact us

Hu Health LLC · support@huhealth.co