We respect your privacy and want you to understand exactly how we handle your information. This Privacy Policy explains what we collect, why we collect it, who we share it with, and what rights you have. We’ve written it in plain language because we think you deserve to actually understand it.

This Policy applies to femologist.com, our products, and all related services. By using our Site, you agree to the practices described here. If you have questions at any point, you can reach us at: privacy@femologist.com

When you interact with Femologist, you provide us with information in a few different ways:

Account and Contact Information. When you create an account, we collect your name, email address, phone number (optional), and password. When you make a purchase, we collect your billing and shipping addresses and payment details, which are processed securely by our third-party payment processors.

Order and Subscription Information. We collect details about the products you order, your order history, and, if you subscribe for recurring deliveries through Recharge, your subscription preferences, product selections, and delivery schedule.

Health and Wellness Information. If you choose to share health-related information through our quizzes, forms, or questionnaires to help us recommend products suited to your needs, we collect that information with your consent. Providing this information is always voluntary. We use health information solely to give you better product recommendations and we do not share it with third parties for advertising or profiling purposes.

Reviews and User Content. When you submit a product review through Judge.me, we collect your name or username, email address, review content, and any photos or videos you include. Your email is used to verify your purchase and send any review-related communications; it is not publicly displayed.

Loyalty Program Information. When you participate in our Femologist Rewards program through Smile.io, we collect information about your points balance, rewards activity, and redemption history.

Form Submissions. We use Customer Fields (including Helium) to collect additional information through customized forms. What we collect depends on the specific form, but may include preferences, demographic details, or other information you choose to provide.

Customer Service Communications. When you contact us, we collect the contents of your inquiry, your contact information, and any supporting information you provide.

When you visit our Site, we automatically collect certain technical and behavioral information:

Device and Browser Information. We collect your IP address, browser type and version, operating system, device type, and device identifiers. This helps us deliver a consistent experience across different devices and browsers.

Usage and Shopping Behavior. We collect information about how you interact with our Site: pages you visit, products you view, items you add to your cart, searches you conduct, and purchases you complete. We also collect information about how long you spend on pages and how you navigate between them.

Approximate Location. We derive your general geographic location (city, state, and country) from your IP address. We do not collect precise GPS-level location data.

Referring Sources. We collect information about how you arrived at our Site, including the referring website or platform and any search terms used.

We may receive information about you from the following third-party sources, which we may combine with information we collect directly:

Advertising and Analytics Partners. Meta (Facebook), Google, and Microsoft (Bing) may provide us with analytics and audience data based on your interactions with our advertisements and their own platforms.

Fraud Prevention Services. Blockify provides us with risk and fraud signals based on transaction and device data to help us detect and prevent unauthorized activity.

Payment Processors. Our payment processors share confirmation and verification data necessary to complete your transactions. They do not share your full payment card details with us.

Health Care Provider Referrals. If you are referred to Femologist by a health care provider through our Supplement Dispensary Portal, a provider-specific discount code, or a referral link, we collect information that identifies you as a patient of that provider. This may include the referring provider's name, the referral source (discount code, link, or portal tag), and any provider-specific product recommendations associated with your account. We use this information to fulfil provider-directed supplement recommendations, apply provider-specific pricing, and, where you have been registered as a patient through our Supplement Dispensary Portal, to share purchase information with your referring provider to support your care. We do not share your purchase information with any provider other than the one who referred you, and only to the extent necessary to support the recommendation they made.

The primary reason we collect your information is to provide you with the products and services you’ve requested. This includes processing and fulfilling orders, sending order confirmations and shipping updates, managing your account, processing subscription payments through Recharge, administering your loyalty rewards through Smile.io, and responding to your customer service inquiries.

We use information about your preferences, purchase history, and browsing behavior to recommend products we think you’ll like, personalize content on our Site, and improve how our Site works. We also analyze usage patterns to understand what’s working well and what we can improve, and to develop new products that meet your needs.

We use your contact information to send you promotional emails about new products, offers, and wellness content we think you’ll find valuable. You can unsubscribe from marketing emails at any time using the link in any email, or by updating your preferences in your account settings. We’ll still send you transactional messages like order confirmations and shipping updates regardless of your marketing preferences.

We also use information collected through cookies and advertising technologies to show you relevant advertisements on platforms such as Facebook, Instagram, Google, and Bing. This includes retargeting ads for products you’ve viewed on our Site.

We use your information to detect and prevent fraudulent transactions and unauthorized account access, to enforce our Terms of Service, to comply with applicable laws and regulations, and to respond to legal requests. We also maintain transaction records as required for accounting and tax purposes.

We do not sell your personal information to third parties for money. We share information only with the categories of recipients described below, all of whom are bound by contractual obligations to protect your data and use it only for the purposes we specify.

We share your information with third-party companies that help us operate our business. Each provider receives only the information necessary to perform their specific function.

Shopify. Our e-commerce platform. Shopify hosts our Site, powers our checkout, and processes payments. Shopify is responsible for the security and infrastructure of the platform we operate on, and maintains its own robust security and compliance program. shopify.com/legal/privacy

Recharge. Our subscription management platform. Recharge receives customer information, payment details, and subscription preferences to manage recurring orders and billing. rechargepayments.com/privacy

Klaviyo. Our email marketing platform. Klaviyo receives your email address, name, purchase history, and browsing behavior on our Site to enable personalized email communications. klaviyo.com/legal/privacy-notice

Smile.io. Our loyalty rewards platform. Smile.io receives information about your account activity and purchases to manage your points and rewards balance. smile.io/privacy

Judge.me. Our product review platform. Judge.me receives your name, email, and review content to collect, verify, and display product reviews. judge.me/privacy-policy

Customer Fields (Fillout). Our custom form tool. Receives information you submit through our on-site forms. fillout.com/privacy

Blockify. Our fraud prevention service. Receives transaction and device information to help us identify and block fraudulent activity.

Shipping Carriers. USPS, FedEx, UPS, and other carriers receive your name and shipping address to deliver your orders.

Payment Processors. Shopify Payments, Stripe, PayPal, and other processors receive payment information to complete transactions. These processors are PCI-DSS compliant and do not share your full payment details with us.

We share certain information with advertising and analytics platforms to measure the performance of our marketing and to show you relevant advertisements. These partners may combine information from our Site with data from other sources to serve targeted ads and provide analytics.

Google LLC. We use Google Analytics to understand Site traffic and user behavior, and Google Ads to display advertisements across Google’s network. You can opt out of Google Analytics at: tools.google.com/dlpage/gaoptout

Meta Platforms, Inc. We use the Meta Pixel to measure advertising effectiveness and display personalized ads on Facebook and Instagram. You can manage your ad preferences at: facebook.com/ads/preferences

Microsoft Advertising. We use Bing Ads to display advertisements across Microsoft’s advertising network.

If you were referred to Femologist through our Supplement Dispensary Portal or a provider referral, we may share your purchase history data with your referring provider. This sharing is limited to the products recommended by that specific provider and is intended to support their clinical guidance. We do not share your purchase information with any provider other than the one who referred you. If you do not want your purchase information shared with your provider, contact us at privacy@femologist.com and we will disable this sharing. Your ability to purchase products will not be affected.

We may disclose your information to government authorities, law enforcement, or other parties when required by law, court order, or legal process; when we believe disclosure is necessary to protect the rights, property, or safety of Femologist, our users, or others; or when necessary to detect, prevent, or address fraud or security issues.

If Femologist is involved in a merger, acquisition, financing, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a materially different privacy policy.

We and our service providers use cookies, pixels, and similar technologies to operate our Site and deliver personalized advertising. For complete details about the cookies we use and how to manage them, please see our separate Cookie Policy. Below is a summary.

Strictly Necessary Cookies. These cookies are essential for the Site to function: they power your shopping cart, secure login, and checkout. They cannot be turned off.

Analytics Cookies. These cookies (including Google Analytics and Shopify Analytics) help us understand how visitors use our Site so we can improve it.

Marketing and Advertising Cookies. These cookies (including the Meta Pixel, Google Ads, and Bing Ads tags, as well as Klaviyo’s tracking) allow us to measure advertising effectiveness and serve you relevant ads on other platforms.

Functionality Cookies. These cookies remember your preferences and support features like your loyalty rewards status and saved settings.

You can request to have your data removed from cookies by using our Cookie Opt Out form. Where required, you may be able to directly manage your cookie preferences through the provided cookies banner. You can also use your browser settings to block or delete cookies, though disabling certain cookies may affect Site functionality such as your shopping cart and saved login.

To opt out of targeted advertising specifically, you can use the Digital Advertising Alliance opt-out tool at optout.aboutads.info, the Network Advertising Initiative tool at optout.networkadvertising.org, or adjust your preferences directly in your Google, Facebook, and Microsoft accounts. We also honor Global Privacy Control (GPC) browser signals as an automatic opt-out of the sale or sharing of your personal information.

Regardless of where you live, you may access and update your account information through your account settings at any time. You may opt out of marketing emails using the unsubscribe link in any email we send. You may request a copy of your personal information or ask us to delete your account by contacting us at privacy@femologist.com.

If you are a California resident, the California Privacy Rights Act gives you the following rights with respect to your personal information:

You have the right to know what personal information we have collected about you, the sources it came from, the purposes for which it was collected, and the categories of third parties it has been shared with. You have the right to request that we delete your personal information, subject to certain exceptions. You have the right to correct inaccurate personal information. You have the right to opt out of the sale or sharing of your personal information. You have the right to limit our use of sensitive personal information (such as health data) to the purpose for which you provided it. You have the right not to be discriminated against for exercising any of these rights.

Categories of Personal Information (Last 12 Months)

How to Exercise Your California Rights

To submit a request to know, delete, or correct your personal information, email us at privacy@femologist.com, call us at 1-888-835-6520, or submit a request through your account settings. We will verify your identity before processing your request and will respond within 45 days.

To opt out of the sale or sharing of your personal information, click the “Do Not Sell or Share My Personal Information” link in our website footer or enable Global Privacy Control in your browser.

You may designate an authorized agent to make requests on your behalf by providing written authorization and verifying your own identity with us directly.

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws have rights similar to those described above, including the right to access, correct, delete, and obtain a portable copy of your personal information, and the right to opt out of targeted advertising and profiling. To exercise these rights, contact us at privacy@femologist.com. If we decline your request, you may appeal that decision by emailing us with “Privacy Rights Appeal” in the subject line.

If you are located in the European Economic Area or United Kingdom, you have rights under GDPR, including the right to access, rectify, erase, restrict, and port your personal information, the right to object to processing based on legitimate interests or for direct marketing, and the right to lodge a complaint with your local supervisory authority. We process EEA/UK personal information under the legal bases of contract performance, legitimate interests, legal obligation, and consent as applicable. To exercise your rights or for more information, contact us at privacy@femologist.com. For international data transfers from the EEA or UK, we rely on Standard Contractual Clauses approved by the European Commission.

The security of your personal information is important to us. Our Site operates on Shopify’s infrastructure, which maintains industry-leading security practices, including SSL/TLS encryption for all data in transit, PCI-DSS compliance for payment data, regular security audits, and comprehensive network protections. Shopify’s security program is described at: shopify.com/security

On our end, we restrict access to personal information to employees and contractors who need it to do their jobs, require all service providers to maintain appropriate security measures through written data processing agreements, and maintain procedures for detecting and responding to security incidents.

We do not store complete payment card numbers on our systems. All payment processing is handled by PCI-DSS certified third-party processors.

No system can be guaranteed completely secure. If you believe your account has been compromised, please contact us immediately at support@femologist.com. In the event of a data breach that poses a risk to your rights, we will notify you and any required authorities as required by applicable law.

We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, comply with our legal obligations, and resolve any disputes.

Account information is retained for as long as your account is active. If you close your account, we will delete your personal data from active systems within 90 days, retaining only what is legally required thereafter.

Transaction records are retained for seven years to comply with federal and state tax and accounting requirements.

Subscription information is retained by Recharge for the duration of your subscription and for up to 90 days following cancellation, after which Recharge’s standard data lifecycle applies. Financial records related to subscriptions are retained for seven years.

Email marketing data is retained in Klaviyo for as long as you remain subscribed. If you unsubscribe, your behavioral data is retained in suppressed status indefinitely to prevent us from accidentally re-emailing you, though it is not used for marketing. You may request deletion of your Klaviyo profile by contacting us.

Analytics data in Google Analytics is retained for 14 months under our account configuration, after which it is automatically deleted. Aggregated, anonymized analytics data may be retained indefinitely.

Product reviews submitted through Judge.me are retained indefinitely unless you request removal, as they represent published content on our Site.

Loyalty program data in Smile.io is retained for as long as your account is active and for 12 months following account closure.

Customer service records are retained for three years for quality assurance and continuity of support.

Fraud prevention data is retained by Blockify according to their standard retention policies, typically up to 12 months for transaction-level data.

Our Site and services are not directed to children under the age of 13, and we do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@femologist.com and we will promptly delete it.

Our Site may contain links to third-party websites, social media platforms, and services that are not operated by us. This Privacy Policy does not apply to those third parties. We are not responsible for their privacy practices and encourage you to review their privacy policies before providing them with any information.

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top. If we make material changes to how we collect, use, or share your personal information, we will notify you by posting a notice on our Site homepage and, where required by law or where practical, by sending an email to the address associated with your account at least 30 days before the changes take effect. Your continued use of our Site after changes are posted constitutes your acceptance of the updated Policy.

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us:

Privacy Inquiries: privacy@femologist.com

General Customer Service: support@femologist.com

Phone: 1-888-835-6520

Mail: Privacy Officer, Femologist Inc., 16870 W Bernardo Drive, Suite 400, San Diego, CA 92127

Do Not Sell or Share My Personal Information

We will respond to privacy requests within 45 days. For requests that require additional time, we will notify you before that deadline.