Last updated: March 26, 2023

Introduction

Joylocks Enterprises LLC . and its affiliates ("Jolocks," "we," or "us") own and operate the websites (the "Websites") located at www.joylocks.com, and may own and/or operate a Hims and/or Hers mobile application now or in the future (collectively, the "Platform"). Your access and use of the Platform, any part thereof, or anything associated therewith, including its content ("Content"), any products or services provided through the Platform or otherwise by Joylocks, and any affiliated website, software, or application owned or operated by Joylocks (collectively, including the Platform and the Content, the "Service") are subject to this Privacy Policy unless stated otherwise. Capitalized terms not otherwise defined in this Privacy Policy have the same meaning as set forth in the Joylocks Terms and Conditions ("Terms and Conditions").

We are committed to respecting the privacy of users of the Service. We created this Privacy Policy ("Privacy Policy") to inform you how Joylocks collects, uses, and discloses information to provide you with the Service.

As with our Terms and Conditions, by creating, registering, or logging into an account through the Service or otherwise accessing or using the Service, you automatically accept and acknowledge the most recent version of this Privacy Policy. If we make any changes to our Privacy Policy, we will post the revised Privacy Policy and update the "Last updated" date of the Privacy Policy.

If you use the Service on behalf of an individual other than yourself, you represent that you are authorized by such individual to act on such individual's behalf, and such individual acknowledges the practices and policies outlined in this Privacy Policy.

Limitations on Use by Minors

Our Service is generally intended for use by individuals who are at least 18 years old or such older age as may be required by applicable state laws in the jurisdiction in which an individual uses the Service. Individuals between the ages of 13 and 18 (or such older age of majority) may use the Service for the sole purpose of obtaining a medical consultation for acne treatment using topical skincare products (to the extent made available) if a parent or legal guardian provides consent to such use in accordance with the requirements set forth in our Terms and Conditions and the Service. The Service is not intended to attract or directed at children under 13 years old. If we obtain actual knowledge that we have collected personal information through the Platform from a person under 13 years old, we will use reasonable efforts to refrain from further using such personal information or maintaining it in retrievable form.

Moreover, if you are under 16 years old, then you (or your parent or legal guardian if you are under age 13) may request that we remove content or information about you that is posted on the Platform at any time. Please submit any such request ("Request 

By email: support@joylocks.com, with a subject line of "Removal of Minor Information."

For each Request for Removal of Minor Information, please state "Removal of Minor Information" in the email or letter subject line and clearly state the following in the body of the request:

The nature of your request

The identity of the content or information to be

Protected Health Information 

When you create an account with Joylocks, you establish a direct relationship with the company that allows you to use the various features of the Platform and the Service. To use these features, you provide Joylocks with information like your name, email address, shipping address, phone number, and certain transactional data. This information is not considered "medical information" or "protected health information."

However, if you use certain components of the Service, you may also provide health or medical information that is protected under applicable laws. Joylocks is not a "covered entity" under HIPAA, but one or more of the Labs, Pharmacies, or Medical Groups (as defined in our Terms and Conditions) may be a "covered entity" or "business associate" under HIPAA, and Joylocks may be a "business associate" of a Pharmacy or Medical Group. In some cases, HIPAA may not apply to your transactions or communications with Joylocks, the Medical Groups, the Providers, the Labs, or the Pharmacies.

If Joylocks is deemed a "business associate," it may be subject to certain provisions of HIPAA with respect to "protected health information," as defined under HIPAA, that you provide to Joylocks, the Medical Group, or the Providers (" PHI"). Any medical or health information that you provide that is subject to specific protections under applicable state laws (collectively, with PHI, "Protected Information" ), will be used and disclosed only in accordance with such applicable laws. However, any information that does not constitute Protected Information under applicable laws may be used or disclosed in any manner permitted under this Privacy Policy. Protected Information does not include information that has been de-identified in accordance with applicable laws.

The Medical Groups and Providers have adopted a Notice of Privacy Practices that describes how they use and disclose Protected Information. By accessing or using any part of the Service, you acknowledge receipt of the Notice of Privacy Practices from your Medical Group and Provider(s).

We collect information from you when you use the Service, including Personally Identifiable Information such as your name and contact information, your login and password, demographic data, computer and mobile device information, third-party website, network, platform, server and/or application information, usage activity, billing and shipping information, electronic signature, photographic or video images submitted for identification or non-diagnosis or treatment purposes, information about third parties that you refer to us, statements or content, and any other information you provide when you contact or communicate with us.

If you use your mobile device to visit, access or use the Service, then additional categories of information that we collect may include your name associated with your mobile device, your telephone number associated with your mobile device, your geolocation, your mobile device ID information, and, with your express consent, your contacts and/or contact information, and information about third-party software applications on your mobile device.

We also collect certain medical information on behalf of the Medical Groups and your Providers, which may include health and medical data you submit for diagnosis or treatment.

Your Rights

Access to Your PHI You can access and inspect paper or electronic copies of certain PHI that we maintain about you. You may readily access much of your health information without charge by emailing us at support@joylocks.com. In line with set fees under federal and state law, we may charge you for a copy of your medical records.

Amendments to Your PHI You can request amendments, or changes, to certain PHI that we maintain about you that you think may be incorrect or incomplete. All requests for changes must be in writing, signed by you or your representative, and state the reasons for the request. If we decide to make an amendment, we may also notify others who have copies of the information about the change.

Accounting for Disclosures of Your PHI In accordance with applicable law, you can ask for an accounting of certain disclosures made by us of your PHI. This request must be in writing and signed by you or your representative. This does not include disclosures made for purposes of treatment, payment, or health care operations or for certain other limited exceptions. An accounting will include disclosures made in the six years prior to the date of a request.

Restrictions on Use and Disclosure of Your PHI You can request restrictions on certain of our uses and disclosures of your PHI for treatment, payment, or health care operations. We are not required to agree but will attempt to accommodate reasonable requests when appropriate.

Restrictions on Disclosures to Health Plans You can request a restriction on certain disclosures of your PHI to your health plan. We are only required to honor such requests when services subject to the request are paid in full. Such requests must be made in writing and identify the services to which the restriction will apply.

Confidential Communications You can request that we communicate with you through alternative means or at alternative locations, and we will accommodate reasonable requests. You must request such confidential communication in writing to each department you would like to accommodate the request.

Breach Notification We are required to notify you in writing of any breach of your unsecured PHI without unreasonable delay and no later than 60 days after we discover the breach.

Additional Information

Complaints If you believe your privacy rights have been violated, you can file a complaint with the JoyLocks privacy officer (Mike Kent) by contacting support@joylocks.com or calling 310-299-9195. You can also file a complaint with the Secretary of the U.S. Department of Health and Human Services in Washington D.C.

A complaint must be made in writing and will not in any way affect the quality of care we provide you.

Utilization of Information

Our affiliates and service providers, along with us, may use your information for various purposes within the limits set forth in the Protected Health Information Section, including but not limited to:

Verifying your identity;

Validating your location;

Managing your account;

Meeting your requests;

Processing your payments;

Helping you navigate through the Service;

Assisting your use of the Service and/or products or services provided through the Service;

Communicating with you by mail, email, text, telephone or other forms of communication, which includes on behalf of your Provider(s) to facilitate telehealth Services;

Providing you with details about Joylocks, the Labs, the Pharmacies, the Medical Groups, the Providers and/or their businesses, goods and services by mail, email, text, telephone or other forms of communication;

Giving you customer service;

Providing you with information about third-party businesses, goods, and services by mail, email, text, telephone or other forms of communication;

Developing, testing, or improving the Service and content, features and/or products or services provided via the Service;

Recognizing or creating new goods, services, marketing, and/or promotions for Joylocks or the Service;

Promoting and marketing Joylocks, the Service, and the products and/or services offered through the Service;

Enhancing user experiences with the Service;

Analyzing traffic to and through the Service;

Analyzing user behavior and activity on or through the Service;

Conducting research and measurement activities for the purpose of product and service research and development, advertising claim substantiation, market research, and other activities related to Joylocks, the Service or products and services offered via the Service;

Observing the actions of you and others on or through the Service;

Placing and following orders for products or services on your behalf;

Defending or enforcing Joylocks' rights and properties;

Defending or enforcing the rights and properties of others (which may include you);

When required by applicable law, court order or other governmental authority (including, without limitation and by way of example only, in response to a subpoena or other legal process); or

Joylocks believes in good faith that such use is otherwise necessary or advisable (including, without limitation and by way of example only, to investigate, prevent, or take legal action against someone who may be causing injury to, interfering with, or threatening the rights, obligations, or properties of Joylocks, a user of the Service, which may include you, or anyone else who may be harmed by such activities or to further Joylocks' legitimate business interests).

We may de-identify your information and use, create and sell such de-identified information, or any business or other purpose not prohibited by applicable law.

Disclosure of Information

Within the limits described in the Protected Health Information section, we may provide your information to third parties in relation to the provision of our Service or as allowed or required by law. For instance, we may disclose your information to:

Our vendors that provide services to enable us to provide the Service, such as the hosting of the Service, data analysis, IT services and infrastructure, customer service, e-mail delivery, and other similar services;

Our vendors that provide services to enable us to run our business and administrative operations, such as legal and financial advisory services, auditing services, analytics and similar services;

Our vendors that provide services to enable us to promote and advertise the Service and the products and/or services offered through the Service, such as ad platforms or ad-retargeting services, as well as comply with contact removal requests or requirements, such as mailing list removal services, do not call registries, and similar services;

The Labs, Pharmacies, Medical Group or its Providers to enable them to provide services

California Residents

California residents have the right to know what personal information we collect, use, disclose or sell about them under the CCPA. They also have the right to access and delete their personal information. To exercise these privacy rights and choices, they can email us at privacy@joylocks.com with the subject heading "California Privacy Rights,". We will verify their identity and produce an Access Report detailing the personal information we have collected, disclosed, and/or sold about them. If they request that we delete the personal information we have collected and/or maintained about them, we will do so, except where we are legally required to retain certain information. We will not discriminate against them for exercising their CCPA rights. We do not sell the personal information of minors under 16 years of age without affirmative authorization.

We use reasonable physical, technical and administrative measures to protect information under our control. However, users must keep their account password secure and confidential, and they are responsible for any and all use of their account. They may choose not to provide us with certain information, but this may limit the features they are able to use or may prevent them from using the service altogether. They may also choose to opt out of receiving certain communications by emailing us their preference. We do not currently respond to web browser "do not track" signals or other mechanisms that provide a method to opt out of the collection of information across the networks of websites and online services in which we participate.