Privacy Policy

Effective Date: October 17, 2026

FOREVERHER, INC ("ForeverHer," "we," "us," or "our") is committed to protecting your privacy and the confidentiality of your personal information, including Protected Health Information ("PHI"). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at shopforeverher.com, use our telehealth platform, or otherwise interact with our services.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use our services.

1. Information We Collect

We collect several categories of information to provide and improve our services:

1.1 Personal Information

• Full name, date of birth, and gender
• Email address, phone number, and mailing address
• Government-issued identification (when required for identity verification)
• Payment and billing information (credit card number, billing address)
• Account credentials (username and encrypted password)

1.2 Health Information

• Medical history and current health conditions
• Medications, allergies, and prior treatments
• Health questionnaire and intake form responses
• Telehealth consultation notes and recordings (if applicable)
• Prescription information and treatment protocols
• Lab results or diagnostic information you provide

1.3 Technical and Usage Information

• IP address, browser type, operating system, and device identifiers
• Pages visited, time spent on pages, and navigation paths
• Referring website addresses and search terms
• Cookies, pixel tags, and similar tracking technologies

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing Healthcare Services: To facilitate telehealth consultations, process prescriptions, and deliver personalized treatment protocols through our licensed provider network.
• Account Management: To create and manage your account, process payments, fulfill orders, and communicate regarding your account status.
• Treatment Coordination: To coordinate with compounding pharmacies, shipping providers, and healthcare professionals involved in your care.
• Communication: To send appointment reminders, treatment updates, shipping notifications, and respond to your inquiries.
• Quality and Safety: To monitor treatment outcomes, conduct quality assurance, and ensure patient safety across our platform.
• Legal Compliance: To comply with applicable healthcare regulations, including HIPAA, state telehealth laws, and pharmacy licensing requirements.
• Service Improvement: To analyze usage patterns, improve our platform, and develop new features and services.
• Marketing: With your consent, to send promotional materials about our products and services. You may opt out at any time.

3. Protected Health Information (PHI)

ForeverHer is committed to compliance with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and the HITECH Act. Your PHI receives the highest level of protection under our policies.

3.1 HIPAA Compliance

As a provider of telehealth services, we are required to:

• Maintain the privacy and security of your PHI
• Provide you with notice of our legal duties and privacy practices
• Follow the terms of this Privacy Policy currently in effect
• Notify you in the event of a breach of your unsecured PHI

3.2 Permitted Uses and Disclosures of PHI

We may use or disclose your PHI without your authorization for:

• Treatment: Sharing information with healthcare providers involved in your care, including prescribing physicians and pharmacies.
• Payment: Processing claims, billing, and collection activities related to your treatment.
• Healthcare Operations: Quality assessment, compliance activities, auditing, and business planning.
• As Required by Law: Disclosures mandated by federal, state, or local law, including public health reporting, abuse or neglect reporting, and law enforcement purposes.
• Health and Safety: To prevent or lessen a serious and imminent threat to a person or the public.

3.3 Uses Requiring Your Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes not described above, including marketing communications using PHI, sale of PHI, and psychotherapy notes (if applicable). You may revoke your authorization in writing at any time.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website:

• Essential Cookies: Required for core site functionality, including authentication, security, and session management.
• Analytics Cookies: Help us understand how visitors interact with our website, including pages visited and navigation patterns. We use services such as Google Analytics.
• Functional Cookies: Remember your preferences and settings to provide a personalized experience.
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness. These are only set with your consent.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect site functionality. Note that we do not use tracking technologies to collect PHI.

5. Third-Party Sharing

We do not sell your personal information. We may share your information with the following categories of third parties:

• Healthcare Providers: Licensed physicians and nurse practitioners who provide telehealth consultations and prescribe treatments.
• Compounding Pharmacies: FDA-compliant pharmacies that prepare and dispense your prescribed treatments.
• Payment Processors: Secure third-party processors that handle payment transactions. We do not store full credit card numbers on our servers.
• Shipping Partners: Carriers that deliver your orders in discreet, temperature-controlled packaging.
• Technology Service Providers: Cloud hosting, data storage, and communication platform providers who support our infrastructure, bound by strict data processing agreements.
• Legal and Regulatory Authorities: When required by law, subpoena, court order, or to protect our legal rights.

All third-party service providers are required to maintain the confidentiality and security of your information and are prohibited from using it for any purpose other than providing services to ForeverHer.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes described in this Privacy Policy, subject to the following guidelines:

• Medical Records: Retained for a minimum of seven (7) years from the date of last treatment, or longer as required by applicable state law.
• Account Information: Retained for the duration of your account and for a reasonable period thereafter for legal and business purposes.
• Payment Records: Retained for a minimum of seven (7) years as required by financial regulations.
• Marketing Preferences: Retained until you opt out or request deletion.
• Technical Data: Aggregated and anonymized data may be retained indefinitely for analytics purposes.

When information is no longer required, we securely delete or anonymize it in accordance with our data disposal procedures.

7. Your Rights

You have the following rights regarding your personal information and PHI:

• Right to Access: You may request a copy of your personal information and medical records. We will respond within thirty (30) days of receiving your request.
• Right to Amend: You may request corrections to your PHI if you believe it is inaccurate or incomplete.
• Right to Restrict: You may request restrictions on certain uses or disclosures of your PHI, although we are not always required to agree to such requests.
• Right to an Accounting of Disclosures: You may request a list of certain disclosures of your PHI that we have made.
• Right to Request Confidential Communications: You may request that we communicate with you by alternative means or at alternative locations.
• Right to Opt Out of Marketing: You may unsubscribe from marketing emails at any time by clicking the "unsubscribe" link or contacting us.
• Right to Data Portability: Where technically feasible, you may request your personal data in a structured, machine-readable format.
• Right to Delete: You may request deletion of your personal information, subject to legal retention requirements and exceptions under applicable law.
• Right to File a Complaint: You may file a complaint with us or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated. We will not retaliate against you for filing a complaint.

To exercise any of these rights, please contact us through our website.

8. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. ForeverHer's telehealth services require patients to be at least 18 years of age.

If we become aware that we have collected personal information from a child under 18, we will take steps to promptly delete such information. If you believe a child has provided us with personal information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Effective Date" and "Last Updated" dates at the top of this page
• Post the revised policy on our website
• Notify you by email or through a prominent notice on our platform for significant changes

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our services after any changes indicates your acceptance of the updated policy.

10. SMS Consent and Mobile Information

ForeverHer sends non-promotional SMS to people who separately opt in, including submission acknowledgments, requested-call coordination, appointment confirmations and reminders, scheduling changes, and related replies from care coordinators. We collect your mobile number and record your optional SMS choice, the consent wording version, and the submission time. We use SMS consent only for the message purposes disclosed when you opt in. The SMS choice is not required to submit an inquiry or purchase.

We do not sell, rent, or share mobile information, SMS opt-in data, or SMS consent with third parties or affiliates for marketing or promotional purposes. We may provide this information to service providers acting on our behalf solely to operate our messaging and customer-support services, not for their own marketing. This restriction applies notwithstanding other sharing provisions in this policy.

Reply STOP to opt out of SMS messages or HELP for help. You can also contact support@shopforeverher.com or (645) 202-1789. Message frequency varies, and message and data rates may apply. SMS program terms are available at https://shopforeverher.com/legal/terms.

11. Data Security

We use administrative, technical, and physical safeguards designed to protect your personal information, including your mobile number and your SMS consent records, from unauthorized access, use, alteration, or disclosure. These safeguards include:

• Encryption in transit: our website, member account, and systems exchange information over encrypted HTTPS (TLS) connections.
• Restricted staff access: only authorized ForeverHer staff can view customer records, and only to the extent their role requires (for example, care coordinators see the customers they support). Staff sign in with individual accounts, and sensitive staff actions are logged.
• Account protection: passwords are never stored in readable form (we store only a one-way Argon2id hash), one-time sign-in and password-reset links are stored only in hashed form and expire, sign-in attempts are rate-limited, and session cookies are protected from access by page scripts.
• Payment data: card payments are processed by our PCI-DSS compliant payment processor, Stripe. We do not store full card numbers on our systems.
• Mobile numbers and SMS consent records: your mobile number, your SMS choice, the consent wording version, the time of consent, and any opt-out are kept with your account data under the same access restrictions, are used only to send the messages you agreed to and to honor opt-outs, and are shared only with the service providers that operate our messaging on our behalf.
• Service providers: vendors that handle personal information for us (such as payment, messaging, and clinical partners) may use it only to provide their services to ForeverHer and must protect it.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security incident affecting your personal information, we will notify you and the appropriate authorities as required by applicable law. Please keep your password confidential and contact us right away if you believe your account has been accessed without your permission.

12. Contact Us

FOREVERHER INC., 8 The Green STE R, Dover, DE 19901. For privacy questions, email support@shopforeverher.com or call (645) 202-1789.