PRIVACY POLICY
Last updated: December 4, 2025
Table of Contents
- Introduction
- Collection and Use of Personal Information
- Cookies, Mobile IDs, and Similar Technologies
- Disclosure of Personal Information
- Your Consent
- Personal Information about Minors
- Your Privacy Rights
- Retention of Personal Information
- Protection of Personal Information
- Updates to this Privacy Policy
- Contacting Us
Introduction
Hims & Hers Canada, Inc. and its subsidiaries ("Hims & Hers" "we," or "us") owns and operates websites located at www.hims.ca and www.forhers.ca and may have previously, now or in the future own and/or operate a Hims and/or Hers mobile application (collectively, the "Platform").
This Privacy Policy details how Hims & Hers collects, uses, and discloses personal information about you when you interact with us, including when you use the Platform and any related content, products, or services provided through the Platform or otherwise by Hims & Hers (collective, the "Service").
Hims & Hers engages healthcare providers, such as nurse practitioners ("Healthcare Providers"), to provide or assist with healthcare as part of the Service. In most Canadian provinces or territories in which we operate, Hims & Hers is directly accountable for protecting the privacy of your health information, including information about your health history, treatment, payments or eligibility for healthcare, and any other information that is collected in the course of providing you with healthcare.
However, if you receive healthcare from a Healthcare Provider in Alberta, Northwest Territories, or Yukon, your Healthcare Provider is directly accountable for protecting the privacy of your health information. In such cases, Hims & Hers may collect, use and disclose your health information on behalf of the Healthcare Provider, as described in this Privacy Policy, to assist them in providing the Service to you.
Collection and Use of Personal Information
The personal information we collect depends on how you interact with us, the parts of the Service you use, and the choices you make.
We collect personal information about you from different sources and in various ways when you use the Service, including information you provide directly, information collected automatically, information from third-party data sources, and data we infer or generate from other data.
We use the personal information we collect for purposes described below or as otherwise disclosed to you at the time of collection.
Information you provide directly
Name and identity information
(e.g., name, email address, phone number, billing and physical addresses, and government-issued identifiers such as driver's license, passport number, and social insurance numbers)
How we use this information:
- To provide and deliver the Service, including by placing and tracking orders for products and services.
- To verify your identity.
- To deliver prescribed medications or health-related products to your physical address.
- To process billing and issue invoices for services rendered.
- To contact you for follow-ups or additional consultations.
- To provide customer support, fulfill your requests, and respond to your questions.
- To communicate with you about new services, offers, promotions, rewards, contests, upcoming events, and other information about our services and those of our selected partners.
- To send you information about Hims & Hers, including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages.
- To communicate with you by letter, email, text, telephone, or other forms of communication, including on behalf of your Healthcare Provider(s).
Health information
(e.g., information about your physical and mental health, current and previous healthcare providers, diagnoses, treatments, medications, referral notes, substitute decision-makers, and health card number)
How we use this information:
- To provide you with health care treatment and related services, including coordinating and managing your health care and informing you of treatment alternatives and other health related benefits that may be of interest to you
- To operate and manage our practice and to promote quality care
- To review the credentials, qualifications and actions of our Healthcare Providers.
- To bill and collect payment from you, an insurance company, or a third party for the healthcare services we provide.
Demographic data
(e.g., gender, date of birth, ethnic origin, sex life or sexual orientation)
How we use this information:
- To provide you with health care treatment and related services.
- To personalize your care and provide tailored advice or treatment to you.
Payment information
(e.g., credit card number, financial account information, other payment details)
How we use this information:
- For billing, processing your payments, and accounting.
Content and files
(e.g., photographs, videos, documents and other files you upload to the Service, including email messages and other communications you send to us)
How we use this information:
- To allow you to upload medical documents, test results, or photos for Healthcare Provider review.
- To store secure communications between you and your Healthcare Provider for continuity of care.
- To facilitate communication between you and your Healthcare Provider.
- To track and respond to patient inquiries regarding medical consultations, prescriptions, or health advice.
Account access information
(e.g., username, password, security code, or other credential that allows access to an account)
How we use this information:
- To provide secure access to your account and health records.
- To protect your information from unauthorized access.
- To detect fraudulent activity and secure our systems.
Biometric information
(e.g. photographs you upload)
How we use this information:
- To authenticate your identity before accessing the Service.
Information we collect automatically
Identifiers and device information
(e.g., IP address and information about your device, including device identifiers (such as MAC address), device type, operating system, browser, and other software including type, version, language, settings, and configuration)
How we use this information:
- To provide and deliver the Service, including troubleshooting, facilitating your movement through the Service, confirming your location, and improving and personalizing those services.
- To maintain the security of your sessions and prevent unauthorized access.
- To optimize the Platform's performance on your device.
- To analyze technical issues and improve Platform reliability.
Geolocation data
(e.g., location based on device/app settings)
How we use this information:
- To connect you with Healthcare Providers licensed in your region.
- To suggest pharmacies or healthcare facilities near your location for prescription pickups or follow-up care.
Usage data
(e.g., the URL of the website from which you came to our sites, pages you viewed, how long you spent on a page, access times, and other details about your use of and actions on our website. Depending on your activity, this may include information related to you visiting health-related pages on the Service.)
How we use this information:
- To understand you and your preferences to enhance your experience and enjoyment using our services.
- To analyze user engagement with our services and improve service delivery.
- To promote and market Hims & Hers and the products and/or services offered via the Service, as well as to measure our advertising and marketing efforts.
- To provide insights into patient behaviour for future Platform enhancements.
- To develop, test, or improve the Service and content, features and/or products or services offered via the Service.
- For more information, refer to the "Cookies, Mobile IDs, and Similar Technologies".
Information we create or generate
We infer new information from other data we collect, including using automated means to generate information about your likely preferences or other characteristics ("inferences"). For example, we infer your general geographic location (such as city, province, and country) based on your IP address.
How we use this information:
- To recommend Healthcare Providers, treatments, or services based on inferred preferences or location.
- To identify patterns in patient needs and to improve the delivery of the Service.
Information we obtain from third-party sources. We also obtain the types of personal information described above from third parties. These third-party sources include, for example:
- Third-party partners. Third-party applications and services, including social networks you choose to connect with or interact with through our services.
- Co-branding/marketing partners. Partners with which we offer co-branded services or engage in joint marketing activities.
- Service providers. Third parties that collect or provide data in connection with work they do on our behalf, for example companies that determine your device's location based on its IP address.
- Publicly available sources. Public sources of information such as open government databases.
We may de-identify your personal information and use, create, and sell such de-identified information for any business or other purpose not prohibited by applicable law. In cases where our use or sharing of data does not require an ability to identify individuals from the data, we may de-identify that data as a way of protecting privacy and security. Where the process is designed to permanently de-identify the data, we will maintain and use the data only in a de-identified form and will not to attempt to re-identify it (except for the limited purpose of testing or evaluating the efficacy of the de-identification process or as otherwise permitted by law).
Cookies, Mobile IDs, and Similar Technologies
We use cookies, web beacons, mobile analytics and advertising IDs, and similar technologies to operate our websites and online services and to help collect data, including usage data, identifiers, and device information.
What are cookies and similar technologies?
Cookies are small text files placed by a website and stored by your browser on your device. A cookie can later be read when your browser connects to a web server in the same domain that placed the cookie. The text in a cookie contains a string of numbers and letters that may uniquely identify your device and can contain other information as well. This allows the web server to recognize your browser over time, each time it connects to that web server.
Web beacons are electronic images (also called single-pixel or clear GIFs) that are contained within a website or email. When your browser opens a webpage or email that contains a web beacon, it automatically connects to the web server that hosts the image (typically operated by a third party). This allows that web server to log information about your device and to set and read its own cookies. In the same way, third-party content on our websites (such as embedded videos, plug-ins, or ads) results in your browser connecting to the third-party web server that hosts that content. We also include web beacons in our email messages or newsletters to tell us if you open and act on them.
Mobile analytics and advertising IDs are generated by operating systems for mobile devices (iOS and Android) and can be accessed and used by apps in much the same way that websites access and use cookies. Our apps contain software that enables us and our third-party analytics and advertising partners to access these mobile IDs.
How do we and our partners use cookies and similar technologies?
We, and our analytics and advertising partners, use these technologies in our websites, apps, and online services to collect personal information (such as the pages you visit, the links you click on, and similar usage information, identifiers, and device information) when you use our services, including personal information about your online activities over time and across different websites or online services. This data is used to store your preferences and settings, enable you to sign-in, analyze how our websites and apps perform, track your interaction with the site or app, develop inferences, deliver and tailor interest-based advertising, combat fraud, and fulfill other legitimate purposes. We and/or our partners also share the data we collect or infer with third parties for these purposes. For more information about the third-party analytics and advertising partners that collect personal information on our services, please see the "Disclosure of Personal Information" section of this Privacy Policy.
Additionally, we may use information about your browsing and other activity on the Service to promote and market Hims & Hers, the Service, and the products and/or services offered via the Service, as well as to measure our advertising and marketing efforts. Depending on your activity on the Service, this may include information related to you visiting health-related pages on the Service.
In some circumstances, we may be required to obtain your consent prior to using information that constitutes sensitive personal information, such as your health information, for these purposes. While we may use information about your browsing activity on health-related pages, we do not use sensitive personal information for advertising or marketing. Where sensitive personal information is subject to additional limitations, we adjust our use of that information to comply with applicable law.
What controls are available?
There are a range of cookie and related controls available through browsers, mobile operating systems, and elsewhere, including the following:
- Global Privacy Control. Some browsers and browser extensions support the "Global Privacy Control" (GPC) or similar controls that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales and/or targeted advertising, as specified by applicable law. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting or similar control that is recognized by regulation or otherwise widely acknowledged as a valid opt-out preference signal.
- Mobile advertising ID controls. iOS and Android operating systems provide options to limit tracking and/or reset the advertising IDs.
- Email web beacons. Most email clients have settings that allow you to prevent the automatic downloading of images, including web beacons, which prevents the automatic connection to the web servers that host those images.
In addition, there are certain browser and platform controls that may be available to you in order to opt-out from or otherwise control targeted advertising as described below. You can use the opt-out controls offered by the organizations our advertising partners may participate in, which you can access at:
These choices are specific to the device or browser you are using. If you access our Platform from other devices or browsers, you will need to take these actions from those systems to ensure your choices apply to the data collected when you use those systems.
Disclosure of Personal Information
We may disclose personal information as described below to complete your transactions or provide the services you have requested or authorized, with your consent as required by applicable law. We may disclose each of the categories of personal information described above, to the types of third parties described below, in connection with the provision of the Service or as otherwise permitted or required by law. For example, we may disclose information about you to:
- Marketing/Ad Partners. We may provide personal information to marketing and advertising partners. For example, depending on your cookie preferences, we may disclose identifying information to an advertising partner to deliver personalized advertising to you or for the purpose of delivering advertisements to other people with similar interests to you. This may include sensitive personal information such as health information or information about your sex life. For example, if you view a webpage about balding or erectile dysfunction treatments, we may provide that information to an advertising partner who will then deliver advertisements to you on different websites based on your viewing activity.
- Financial services & payment processing. When you provide payment data, for example to make a purchase, we will disclose payment and transactional data to banks and other entities as necessary for payment processing, fraud prevention, credit risk reduction, analytics, or other related financial services.
- Affiliates. We enable access to personal information across our subsidiaries, affiliates, and related companies, for example, where we share common data systems or where access helps us to provide our services and operate our business.
- Labs and pharmacies. We facilitate information disclosure between you and pharmacies and labs, as applicable, to enable them to provide services to you via the Service and to collect payment on their behalf.
- Corporate transactions. We may disclose personal information as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.
- Legal and law enforcement. We will disclose personal information when we believe that doing so is necessary to comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies.
- Security, safety, and protecting rights. We will disclose personal information if we believe it is necessary to:
- protect our customers and others, for example to prevent spam or attempts to commit fraud, or to help prevent the loss of life or serious injury of anyone;
- operate and maintain the security of our services, including to prevent or stop an attack on our computer systems or networks; or
- protect the rights or property of ourselves or others, including enforcing our agreements, terms, and policies.
Our use of service providers
We may also transfer your personal information to service providers, agents or affiliates working on our behalf for the purposes described in this Privacy Policy. They provide a variety of services to us, including billing, sales, marketing, advertising, analytics, research, customer service, shipping and fulfillment, data storage, IT and security, fraud prevention, payment processing, and auditing and legal services. Our service providers may also include health care organizations, pharmacies, and other third parties we use to support our business or in connection with the administration and support of the Services.
We may transfer your personal information outside of your province or territory of residence, including outside of Canada, to fulfill the purpose for which we collected it. While your personal information is outside of your province or territory of residence, it may be subject to different data protection laws. Those laws may require disclosure of your personal information to local authorities. For more information about our policies and practices regarding service providers outside of Canada, contact us using the contact information in the "Contacting Us" section below.
Third party analytics
Third party analytics and advertising companies also collect personal information through our website and apps including identifiers and device information (such as cookie IDs, device IDs, and IP address), geolocation data, usage data, and inferences based on and associated with that data, as described in the "Cookies" section of this Privacy Policy. These third-party vendors may combine this data across multiple sites to improve analytics for their own purpose and others. For example, depending on your preferences, we use Google Analytics on our website to help us understand how users interact with our website; you can learn how Google collects and uses information at www.google.com/policies/privacy/partners.
Other third-party analytics and advertising providers we use on our websites include, for example:
Google (DoubleClick)
Purpose: Advertising, analytics
Privacy Notice: Google Ads Privacy Notice
Manage Settings: Manage Google Ads Settings
X (formerly Twitter) Advertising
Purpose: Advertising
Privacy Notice: X Privacy Policy
Manage Settings: Manage X Settings
Facebook Audiences
Purpose: Advertising
Privacy Notice: Facebook Privacy Policy
Manage Settings: Manage Facebook Settings
Google Analytics
Purpose: Analytics
Privacy Notice: Google Analytics Privacy Notice
Manage Settings: Manage Google Analytics Settings
Please note that some of our services also include integrations, references, or links to services provided by third parties not acting on our behalf whose privacy practices differ from ours. If you provide personal information to any of those third parties, or allow us to share personal information with them, that information is governed by their privacy statements.
Your Consent
We may collect, use, and disclose your personal information with your consent. How we obtain your consent, including whether it is express or implied, will depend on the circumstances and the sensitivity of the personal information in question. Generally, we will seek your consent at the time we collect your personal information, either orally, electronically, or in writing.
In certain circumstances, we may collect, use, and disclose your personal information without your consent to the extent permitted or required by law.
If you provide personal information about another individual to us, you are responsible for obtaining their consent to enable us to collect, use and disclose their information as described in this Privacy Policy.
If you wish to withdraw your consent to our collection, use or disclosure of your personal information, please refer to "Your Privacy Rights" below.
Personal Information about Minors
We may provide the Service to minors. In cases where a minor is capable of consenting to the collection, use, or disclosure of their personal information, we may obtain consent from the minor or through their parent or legal guardian. In cases where a minor is not capable of consenting, we obtain consent from their parent or legal guardian.
The Service is not designed or intended to attract, and is not directed to, children under 14 years of age. If we obtain actual knowledge that we have collected personal information through the Platform from a person under 14 years of age, we will use reasonable efforts to refrain from further using such personal information or maintaining it in retrievable form.
Your Privacy Rights
We provide a variety of ways for you to control the personal information we hold about you, including choices about how we use that data. Depending on where you are located in Canada, you may have the following rights with respect to your personal information.
-
Right to Access. You may make a request to review any personal information about you that we have collected, used, or disclosed, and information about those uses and disclosures, and we will provide you with any such personal information to the extent required by applicable laws.
-
Rights to Request Correction or Deletion. You may also challenge the accuracy or completeness of your personal information in our records. If you demonstrate that your personal information in our records is inaccurate, incomplete or equivocal, we will amend or delete your personal information as required. We may transmit the amended information to third parties to whom we have disclosed your personal information.
-
Right to Withdraw or Place Conditions on Consent. You may withdraw consent to our continued collection, use or disclosure of your personal information, and you may place conditions on your consent. We will accommodate your request to withdraw or place conditions on consent, subject to legal or contractual restrictions. Withdrawal of your consent may mean that we will no longer be able to provide you with certain products or parts of the Service.
-
Communications preferences. You can choose whether to receive promotional communications from us by email or SMS. If you receive promotional email or SMS messages from us and would like to stop, you can do so by following the directions in that message or by contacting us as described in the "Contacting Us" section below. These choices do not apply to certain informational communications including surveys and mandatory service communications.
To make a request to access, correct or delete your personal information, or to withdraw or place conditions on your consent, email us at support@hims.ca
We may require that you provide sufficient identification to fulfill your request. We will not charge you any fees to access your personal information in our records without first providing you with an estimate of the approximate fees, if any.
Retention of Personal Information
We retain personal information for as long as necessary to provide the Service and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and for other legitimate and lawful business purposes.
Because these needs can vary for different types of personal information in the context of different services, actual retention periods can vary significantly based on criteria such as user expectations or consent, the sensitivity of the information, the availability of automated controls that enable users to delete data, and our legal or contractual obligations.
Protection of Personal Information
We strive to use reasonable physical, technical, and administrative measures in an effort to protect personal information from unauthorized access, use, disclosure, alteration, and destruction.
Despite these measures, we cannot guarantee that our safeguards will always be effective. A breach of security safeguards can result in risks such as phishing and identity theft. We will address such breaches as required by law.
We may also require that you assist us in safeguarding your personal information. For example, you must keep your account password secure and your account confidential, and you are responsible for any and all use of your account. To help us protect personal information, we request that you use a strong password and never share your password with anyone or use the same password with other sites or accounts.
If you have reason to believe that the security of your account or any other personal information has been compromised, please notify us immediately in accordance with the "Contacting Us" section below.
Updates to this Privacy Policy
Hims & Hers may update this Privacy Policy at any time. Changes to this Policy will be posted on this or a similar page of the Service, and shall be effective as of the "Last Updated" date. You are responsible for carefully reviewing this Privacy Policy each time you visit, access, or use the Service.
Contacting Us
If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us by email at support@hims.ca or support@forhers.ca or by regular mail at:
Hims & Hers Canada, Inc.
Attn: Privacy Officer
50 Rue de Bresoles
Montreal, QC, H4C 1V5
If you have concerns about our privacy practices, you may also contact the applicable privacy commissioner in your province or territory of residence. To contact the applicable privacy commissioner, please visit:
- Alberta: www.oipc.ab.ca
- British Columbia: www.oipc.bc.ca
- Manitoba: www.ombudsman.mb.ca
- New Brunswick: https://oic-bci.ca
- Newfoundland and Labrador: www.oipc.nl.ca
- Northwest Territories: https://atipp-nt.ca
- Nova Scotia: https://oipc.novascotia.ca
- Nunavut: https://atipp-nu.ca
- Ontario: www.ipc.on.ca
- Prince Edward Island: https://www.assembly.pe.ca
- Québec: www.cai.gouv.qc.ca
- Saskatchewan: https://oipc.sk.ca
- Yukon: https://www.ombudsman.yk.ca
- Federal: www.priv.gc.ca