Privacy Policy
Last updated: 9/13/2025
thare health LLC and its affiliates (“thare health,” “we,” “us,” or “our”) make certain information available regarding remote hair-loss treatment programs and facilitate access to telemedicine and expert medical services provided by independent professional entities (the “Professional Entities”) set forth in the thare health Terms of Service. This Privacy Policy describes how we collect, use, disclose, and process information that may identify you (“Personal Information”) and that is collected or derived from your interactions with our website at thare.health or any thare health mobile application (collectively, the “Site”), and our services accessible through the Site (the “Services”).
By accessing or using the Services, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your Personal Information as described in this Privacy Policy. We may change this Policy at any time; material changes will be conspicuously posted on the Site or otherwise communicated to you. All changes are effective immediately upon posting.
This Privacy Policy does not apply to users outside the United States or to third-party websites/services that may be linked within our Services. Our website is hosted in the United States. If you visit from outside the U.S., by providing Personal Information you acknowledge its transfer, storage, and processing in the U.S.
Any information you provide to third-party websites is controlled by those parties under their privacy policies. We encourage you to read them carefully before sharing information.
Minors Under the Age of 18
The Site and Services are not intended for minors under 18. We do not knowingly collect Personal Information from minors under 18. If we learn we collected Personal Information from a child under 16 without verified parental consent, we will delete it. If you believe we might have any information from or about a minor under 18 or a child under 16, contact help@thare.co.
Supplemental State Privacy Notices
- California residents: see California Privacy Rights Notice below.
- Residents of CO, CT, DE, IA, MT, NE, NH, NJ, NV, OR, TX, VA, UT: see State Supplemental Privacy Notice below.
- In states with consumer health data laws (e.g., WA, NV), our practices for such data also follow state-specific requirements.
Information We Collect About You
We may collect Personal Information directly from you via the Site and Services (including dynamic intake forms), from third parties, and automatically through your use of the Site and Services. Categories include:
Account, Demographic & Contact Information. Name, date of birth, address, email, phone, and transactional information. The email you provide will be used for account correspondence and, where applicable, medical information and prescriptions. If others can access that inbox, disclosures could occur; secure your email account.
Using the Service. Preferences, scheduling information, and payment-related details.
Webforms & Requests. Feedback, information requests, and support messages submitted through forms.
Websites/Log Information. Username/password for gated areas; unique identifiers; browser/ISP; referring/exit pages; files viewed; OS; timestamps; clickstream; and similar usage data. We may also create usage statistics and monitor traffic.
IP Addresses. We collect IP addresses for system administration and, if you opt into certain cookies, for interest-based advertising; you can adjust cookie settings in your browser.
Location Information. Derived from IP, device settings, your selections, or other location-based components.
Financial & Payment Information. If you pay by card, we may collect card type, number, and expiration date as needed to process transactions (typically via our payment processor).
Social Media. If you interact with our pages on third-party networks, we may collect information you publish or submit there (subject to those platforms’ policies).
Video/Photos. If you use features involving video or photography (e.g., scalp photos for hair-loss assessment), we collect that content to provide Services.
Customer Support, Research & Feedback. Information you share when seeking support, completing surveys, or participating in user testing.
From Third Parties. We may receive Personal Information from providers, pharmacies, analytics vendors, lead sources, or other partners as permitted by law.
User-Specific Information.
- Online Services Users: last login, content viewed, features used, browser/device type, error reports, exit links.
- Patients: a medical profile and health-related information you communicate to us for transmission to a licensed healthcare provider in your jurisdiction (each a “Provider”) via real-time chat/phone, live two-way video/audio, and/or secure messaging (including email and text). We may use “store-and-forward” (asynchronous) technology to transmit your information to Providers. thare health is not responsible for a Provider’s use of your Personal Information; see the Provider’s Notice of Privacy Practices.
- Providers & Clinical Staff: professional credentials, affiliations, and information needed to administer the Services and treat patients.
- Prescription & Pharmacies: If a Provider authorizes a prescription, the Services facilitate placement and delivery via a pharmacy partnered with the Provider (a “Pharmacy”), which may include ChemistryRX, 950 Henderson Blvd., Folcroft, PA 19032. thare health is not responsible for a Pharmacy’s use of your Personal Information.
HIPAA. Information provided through the Services—whether or not shared with a Provider or Pharmacy—may not be “protected health information” (PHI) under HIPAA when handled by thare health. HIPAA does not automatically apply merely because health information is involved. However, medical or health information subject to specific federal/state protections will be used and disclosed in accordance with such laws. (Providers and Pharmacies may handle your PHI under HIPAA; their notices govern that PHI.)
Sensitive Information. We do not intend to collect data revealing racial/ethnic origin, political opinions, religious beliefs, union membership, genetic data, or sexual orientation. Due to our Services, some information may be considered “Sensitive Personal Information” (e.g., health data) under certain state laws; additional rights may apply (see State notices below).
Cookies and Tracking Technologies
We and our service providers use cookies and similar technologies to operate features, personalize experiences, and understand which content users find most useful. Manage preferences via your browser/device settings; rejecting cookies may limit functionality. We do not respond to Do Not Track (DNT) signals at this time.
Analytics. We use analytics tools (which may set/read cookies) to receive reports about Site traffic and usage (e.g., referring URL, pages viewed, timestamps). We use this data to improve Site structure and content.
How We May Use Your Information
Depending on the Services you use and how you interact with us, we may use Personal Information to: administer Services; manage transactions; respond to inquiries; send permitted marketing/advertising (as allowed by law); improve the Services and user experience; support a merger/acquisition or asset transfer; maintain account records; communicate about new features; resolve disputes; conduct analytics/quality/security activities; aggregate/analyze outcomes; measure satisfaction; process payments; prevent/detect/prosecute fraud; comply with legal obligations (e.g., retention, reporting, lawful requests); and, when permitted, enhance/combine information with third-party data for the same purposes.
How We May Share Your Information
We may share Personal Information with:
- Health Care Providers treating you.
- Affiliates & Employees to deliver Services.
- Service Providers operating our Site, sending communications, running promotions, or supporting operations.
- Business Partners (e.g., co-sponsored offerings).
- Legal/Safety purposes (comply with law, enforce terms, address fraud/security, support audits, protect rights/safety).
- Business Transfers (merger, acquisition, sale, bankruptcy).
- Links to/From Third-Party Sites (information you submit there is governed by those sites’ policies).
- Aggregated/De-identified data, which we may disclose without restriction as allowed by law (we are the exclusive owner of such de-identified/aggregated data).
How We Protect Personal Information
We use commercially reasonable safeguards to protect the confidentiality and security of Personal Information. However, no transmission or storage method is 100% secure.
What You Should Do
Choose a strong password; keep it private; sign off shared computers; protect your devices; change your password if compromised; and contact us immediately if you suspect unauthorized access. Emails we send may include treatment or account information; secure your designated inbox.
Your Health Information Rights
When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities to help you.
•Get an electronic or paper copy of your medical record: You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. We will provide a copy or a summary of your health information, usually within 30 days of your request. We may charge a reasonable, cost-based fee.
•Ask us to correct your medical record: You can ask us to correct health information about you that you think is incorrect or incomplete. We may say “no” to your request, but we’ll tell you why in writing within 60 days.
•Request confidential communications: You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address. We will say “yes” to all reasonable requests.
•Ask us to limit what we use or share: You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree to your request, and we may say “no” if it would affect your care. If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer. We will say “yes” unless a law requires us to share that information.
•Get a list of those with whom we’ve shared information: You can ask for a list (accounting) of the times we’ve shared your health information for six years prior to the date you ask, who we shared it with, and why. We will include all the disclosures except for those about treatment, payment, and health care operations, and certain other disclosures (such as any you asked us to make). We’ll provide one accounting a year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.
•Get a copy of this privacy notice: You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. We will provide you with a paper copy promptly.
•Choose someone to act for you: If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will make sure the person has this authority and can act for you before we take any action.
•File a complaint if you feel your rights are violated: You can complain if you feel we have violated your rights by contacting us. You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/. We will not retaliate against you for filing a complaint.
Your Health Information Choices
For certain health information, you can tell us your choices about what we share. If you have a clear preference for how we share your information in the situations described below, talk to us. Tell us what you want us to do, and we will follow your instructions.
You have both the right and choice to tell us to:
•Share information with your family, close friends, or others involved in your care
•Share information in a disaster relief situation
•Include your information in a hospital directory
If you are not able to tell us your preference, for example if you are unconscious, we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.
We will never share your information unless you give us written permission:
•Marketing purposes
•Sale of your information
•Psychotherapy notes
Fundraising: We may contact you for fundraising efforts, but you can tell us not to contact you again.
If you cannot tell us your preference (for example, if you are unconscious), we may share information in your best interest or when necessary to lessen a serious and imminent threat to health or safety.
Our Uses and Disclosures
How do we typically use or share your health information?
We typically use or share your health information in the following ways:
Treat you: We can use your health information and share it with other professionals who are treating you. For example, a doctor treating you for an injury may ask another doctor about your overall health condition.
Run our organization: We can use and share your health information to run our practice, improve your care, and contact you when necessary. For example, we use health information about you to manage your treatment and services.
Bill for your services: We can use and share your health information to bill and get payment from health plans or other entities. For example, we give information about you to your health insurance plan so it will pay for your services.
How else can we use or share your health information?
We are allowed or required to share your information in other ways – usually in ways that contribute to the public good, such as public health and research. We have to meet many conditions in the law before we can share your information for these purposes.
Help with public health and safety issues: We can share health information about you for certain situations such as:
•Preventing disease
•Helping with product recalls
•Reporting adverse reactions to medications
•Reporting suspected abuse, neglect, or domestic violence
•Preventing or reducing a serious threat to anyone's health or safety
Do research: We can use or share your information for health research.
Comply with the law: We will share information about you if state or federal laws require it, including with the Department of Health and Human Services if it wants to see that we're complying with federal privacy law.
Respond to organ and tissue donation requests: We can share health information about you with organ procurement organizations.
Work with a medical examiner or funeral director: We can share health information with a coroner, medical examiner, or funeral director when an individual dies.
Address workers' compensation, law enforcement, and other government requests: We can use or share health information about you:
•For workers' compensation claims
•For law enforcement purposes or with a law enforcement official
•With health oversight agencies for activities authorized by law
•For special government functions such as military, national security, and presidential protective services
Respond to lawsuits and legal actions: We can share health information about you in response to a court or administrative order, or in response to a subpoena.
Our Responsibilities
We are required by law to maintain the privacy and security of your protected health information.
We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
We must follow the duties and privacy practices described in this notice and give you a copy of it.
We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.
Changes to the Terms of This Notice
We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request, in our office, and on our web site.
Report Violations
Report suspected Privacy Policy violations to help@thare.co.
Retention of Personal Information
We retain Personal Information as long as necessary to fulfill the purposes described in this Policy or longer as required by law.
Children’s Privacy
We do not knowingly collect personal information from children under 13. If a parent/guardian believes a child under 13 has provided information, contact help@thare.co and we will delete it where required by law.
Marketing Communications
To opt out of marketing emails, email help@thare.co or use the unsubscribe link in our messages. We may still send transactional or administrative communications. If you withdraw consent or object to processing, we may be unable to provide some or all Services.
How to Contact Us
Questions about this Privacy Policy or how we handle your information: help@thare.co.
“Shine the Light” Disclosure (CA Civil Code §1798.83)
California residents with an existing business relationship may request information about our disclosure of certain Personal Information to third parties for their direct marketing purposes (if any). Not all sharing is covered by this law. You may make one request per calendar year by contacting help@thare.co.
California Privacy Rights Notice (CCPA/CPRA)
Scope. This section applies only to California residents and controls where it conflicts with the main Policy. Capitalized terms follow the CCPA/CPRA.
Personal Information Collected in the Last 12 Months. We collect the categories described above (identifiers; customer records; protected classification characteristics; commercial info; internet/network activity; general geolocation; visual info; Sensitive Personal Information like medical info or payment data). Purposes, Sources, Retention, and Categories of Recipients are as outlined in the main Policy sections (“Information We Collect,” “How We Use…,” “How We Share…,” “Retention”).
Sale/Sharing. We do not sell Personal Information for money. Certain analytics/advertising disclosures may be deemed a “sale” or “sharing” under California law; categories potentially involved include identifiers, internet activity, and inferences. We do not have actual knowledge of selling/sharing Personal Information of consumers under 16. You may opt out of such sale/sharing via the “Privacy Choices” link in our Site footer or by emailing help@thare.co. We do not use PHI for targeted advertising.
Sensitive Personal Information. We limit the use/disclosure of Sensitive Personal Information to what is necessary to provide requested Services (e.g., hair-loss care coordination) and do not use it to infer characteristics about you. Where state law treats certain ad-tech data as “sensitive,” you can limit/opt out via Privacy Choices.
Your Rights. California residents may request to know/access, delete, correct, opt-out of sale/sharing, and limit use of Sensitive Personal Information, without discrimination for exercising rights. To submit a request, email help@thare.co with your name, email, address associated with your account, and the right(s) you wish to exercise. We will verify and respond per law; authorized agent requests require proof of authorization and identity verification. Appeals may be submitted by replying to our decision or emailing help@thare.co.
Additional State Supplemental Privacy Notice (CO, CT, DE, IA, MT, NE, NH, NJ, NV, OR, TX, VA, UT)
Depending on your state, you may have rights to access, data portability, know, correct, delete, and opt out of targeted advertising or sale (we do not sell for money and do not profile in decisions producing legal/similarly significant effects). Exercise rights by emailing help@thare.co with verification info. You may opt-out of targeted advertising via the Privacy Choices footer link. You may consent/withdraw consent for certain uses where required by state law. Appeals may be submitted by replying to our decision or emailing help@thare.co.
De-identified Data Commitment
We will not attempt to re-identify de-identified data that we maintain and use.
.svg)
