Privacy Policy

This Privacy Policy explains how HerTide Health ("HerTide Health," "we," "our," or "us") collects, uses, and shares information when you use our website and telehealth platform. HerTide Health operates a technology platform that connects patients with independent, licensed physicians at HerTide Health PLLC PLLC and with BoomRx, a licensed pharmacy. Health information you share as part of care is also handled under the separate Notice of Privacy Practices that applies to the physician practice.

Information we collect

Account and contact details you provide, such as your name, email, and shipping address. Health information you enter in the assessment and intake, such as symptoms, history, and medications, which may be protected health information. Payment information, which is processed by our payment provider, Stripe, and is not stored on our servers. And basic technical and usage data, such as device and analytics information, collected when you use the site.

How we use your information

To provide the service, route your assessment to a licensed physician for review, support prescribing and pharmacy fulfilment, communicate with you about your care and orders, take payment, and operate, secure, and improve the platform. We do not sell your personal or health information.

How we share your information

With the licensed physicians at HerTide Health PLLC who review your assessment and provide care. With BoomRx, the licensed pharmacy that compounds and ships any prescription. With service providers that help us run the platform, such as hosting, communications, and analytics, under agreements that restrict their use of your information, including Business Associate Agreements where the vendor handles protected health information. And where required by law or to protect safety.

Protected health information and de-identification

Where information is protected health information, we handle it in line with HIPAA standards. We are also building a de-identification capability with our partner Krava, designed to strip patient identifiers before data is shared with AI systems or third-party processors, so that less identifiable health information leaves our environment.

How we protect your information

We encrypt sensitive data at rest and in transit, restrict access on a need-to-know basis with authentication and audit logging, and keep each clinic's data separated from every other clinic's. No system is perfectly secure, but we work to protect your information and to close gaps as we grow.

Your choices and rights

You can request access to, correction of, or deletion of your information, and you can opt out of marketing messages at any time. Depending on where you live, you may have additional rights under laws such as the CCPA. To make a request, contact us using the details below. Requests involving your medical records may be handled through the physician practice that holds them.

Data retention

We keep records for as long as needed to provide care and to meet legal and medical record-retention requirements, and we securely dispose of information when it is no longer needed.

Children

The Services are intended for adults 18 and over. We do not knowingly collect information from anyone under 18.

Contact us

Email privacy@hertide.expand.health with any privacy question or request.

Changes to this policy

We may update this policy from time to time. When we make material changes we will update the effective date above and, where required, notify you.