Please click here for a printable PDF version of this notice.
Last Updated: February 20, 2023
the types of information we collect through our Services;
how we use and protect that information;
the types of information we may share with others and under what circumstances;
the choices you have regarding our collection, use, and sharing practices; and
details regarding our use of third-party cookies and other tracking technologies.
We also include special disclosures for residents of California and Nevada.
The Services are intended to be used by you to monitor and manage your symptoms and medication dosages relating to your hormone replacement therapy and between you and your health care provider for facilitating communications regarding hormone replacement therapy. The Services do not provide or constitute any health care services itself. The Services cannot and are not intended to replace the relationship between you and your health care provider. The Services are intended as a convenient digital tool for monitoring and managing your symptoms and medication dosages relating to your hormone replacement therapy and for facilitating communication between you and your health care provider.
Information We Collect
Information you give us
Our Services may permit you to enter contact information and other information about you. We collect and store any information you enter on our Services. This includes:
Contact and demographic information.
If you are a health care provider, information about your professional qualifications and licensure.
Information you provide when you complete a survey or participate in promotions or marketing campaigns.
Information you submit to inquire about or apply for a job with us.
If you contact us, we may keep a record of that correspondence, any information relating to health information about you, account data provided to us within the correspondence and any contact information provided.
Medical or health information that you provide in the course of using our Services, such as diagnosis, treatment and dosing information, provider notes and instructions, health symptoms, appointment and treatment reminders, and other hormone replacement therapy information.
When you engage in a transaction using a credit or debit card through our Services, we use a third-party payment processor to process your payment and admit taxes based on your location; Elixir does not store payment card information.
Information We Collect From Other Sources
We also may receive information about you from other parties:
If you are a health care provider, contact information from your patients[WB1] .
Contact information, demographic information, and information about your interests and purchases, from consumer data providers.
Information about your interests, activities, and employment history from social networks and other places where you choose to share information publicly.
Information about your interaction with ads that we place on third party websites, from online advertising companies.
If you provide information about your health care provider on the Services, then we will collect your and the provider’s names, email addresses, and/or phone numbers to send an email and follow up with the provider. You agree that you will obtain any other person’s consent before giving us contact information about the other person. You also agree that you will not send us the contact information of a minor. We may inform any other person you mention that you gave us the information about the person.
Information We Collect Automatically
When you interact with the Services, we collect certain information about your use of our Services automatically. This includes:
Analytics about your interaction with our Services, including traffic data, location data, weblogs and other communication data, the resources that you access, and how you reached our Services.
Details regarding the device you use to access our Services, including, but not limited to, your IP address, operating system, and browser type.
Diagnostics information to help us improve the Services, including, but not limited to, your account activity within the App, such as page views, button clicks, as well as Error reporting relating to password recovery, billing, registration, e-mails, and general App functions.
Information about how you interact with our ads and newsletters, including whether you open or click links in any correspondence.
Information that you make available to us on a social media platform (such as by clicking on a social media icon linked from our Services), including your account ID or username and other information included in your posts.
Cookies and Other Tracking Technologies
The types of cookies and tracking technologies used by other companies can be categorized as:
Analytics: These technologies help us to understand how visitors interact with our Services by collecting and reporting information about how you and your device interact with the Services.
Personalized Advertising: These technologies allow us to serve relevant advertising to you on other websites or apps.
Social Media: These technologies allow us to provide a user experience that is integrated with various social media platforms.
Below is a list of these other companies with links to more information about their use of information about you and any options they may make available regarding tracking.
Combination of Information
We may combine information from the Services together and with other information we obtain from our business records.
How We Use Information about You
We may use the information we collect about you for the following purposes:
To provide you with our products and services, including to take steps to enter into a contract for services, process payments, fulfill orders, resolve technical issues and troubleshooting, send service communications, enable additional features on our Services, facilitate communications between patients and health care providers, and conduct general business operations such as accounting, recordkeeping, and audits.
To provide you with excellent service and improve and grow our business, including to understand how our Services are being used, understand our customer base and purchasing trends, understand the effectiveness of our marketing, and develop new products and services.
To protect and secure our Services, assets, network, and business operations, and to detect, investigate, and prevent activities that may violate our policies or be fraudulent or illegal.
To comply with legal process, such as warrants, subpoenas, court orders, and lawful regulatory or law enforcement requests and to comply with legal requirements regarding the provision of products and services.
How We Secure the Information We Collect From or About You
We use a combination of physical, technical, and administrative safeguards to protect the information we collect through the Services. While we use these precautions to safeguard information about you, we cannot guarantee the security of the networks, systems, servers, devices, and databases we operate or that are operated on our behalf.
How We Share Information about You
We share information as follows:
Service Providers: We engage vendors to perform functions on our behalf, and they may receive information about you. These vendors are obligated by contract to use information that we share only[WB1] for the purpose of providing these services. The business functions our vendors support include: billing and collection; auditing and accounting; professional services; analytics services; security; IT; and marketing emails.
Online Advertising Companies: We work with companies that assist us in advertising about our Services to others who may be interested in the Services. These companies may use tracking technologies on our website to collect or receive information from the Services and elsewhere on the internet and then use that information to measure and target ads.
Other Uses and Disclosures: We share data with other companies who may sell services of interest to you. For example, we may use and disclose information for certain research purposes; however, we will inform you and, if required, obtain your consent for using or disclosing information for these purposes.
Government Entities: We also may share data when we believe in good faith that we are lawfully authorized or required to do so to respond to lawful subpoenas, warrants, court orders, or other regulatory or law enforcement requests, or where necessary to protect our property or rights or the safety of our employees, our clients, or other individuals.
Potential Purchasers of Our Business: We may change our ownership or corporate organization while providing the Services. We may transfer to another entity or its affiliates or service providers some or all information about you in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction. We cannot promise that an acquiring party or the merged entity will have the same privacy practices or treat information about you the same as described in this Policy.
Aggregated Information. We may use and share at our discretion data that has been aggregated (information that has been compiled into summaries) or de-identified (information that has been stripped of unique identifiers so that it is unlikely to be linked to a particular individual).
Our Practices Regarding Information Relating to Children
The Services are intended for users age eighteen years and older (18+). Elixir does not knowingly collect information from children. If we discover that we have inadvertently collected information from anyone younger than the age of 13, then we will delete that information.
Sharing of Medical or Health Information
To the extent that we receive health information about you, that information is subject to electronic disclosure to the extent permitted by applicable law. Elixir is not a covered by the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations, as amended (“HIPAA”), and we are not a Covered Entity or Business Associate under HIPAA. You freely are sharing health information about you with us. We are using and disclosing information based on your consent, this Policy, and the Terms of Service. Your health care provider is able to share health information about you based on your consent and your direction that the provider communicates with you through the Services. Information submitted to the Services by patients or health care providers, and Elixir’s use of that information, is not subject to HIPAA; however, health care providers may be covered by HIPAA and state confidentiality laws.
Your Options and Rights Regarding Your Information
Your Account: Please visit the Settings page to update your account information.
Email Unsubscribe: If at any time you would like to unsubscribe from receiving future emails, then you can click the unsubscribe link at the bottom of any email newsletter, or email us at firstname.lastname@example.org and we will promptly remove you from marketing and notification correspondence. Emails of critical importance, such as billing, customer support, and account statements, may continue to be sent to promote core functionality and the bringing of important notices to your attention in a timely manner. If you wish to end your service and end all email correspondence, then you can do so by closing your account in the Settings page, which also will delete your account data permanently.
Ad Choices: You can learn more about ad serving companies and the options available to limit their collection and use of information about you by visiting the websites for the Network Advertising Initiative and the Digital Advertising Alliance. Similarly, you can learn about your options to opt out of mobile app tracking by certain advertising networks through your device settings and by resetting the advertiser ID on your Apple or Android device.
Please note that opting out of advertising networks services does not mean that you will not receive advertising while using our Services or on other websites, nor will it prevent the receipt of interest-based advertising from other companies that do not participate in these programs. It, however, will exclude you from interest-based advertising conducted through participating networks, as provided by their policies and choice mechanisms. If you delete your cookies, then you also may delete your opt-out preferences.
Most web browsers automatically accept cookies but, if you prefer, you usually can modify your browser setting to disable or reject cookies. If you delete your cookies or if you set your browser to decline cookies, some features of the Services may not be available, work, or work as designed. You also may be able to opt out of or block tracking by interacting directly with the other companies who conduct tracking through our Services.
Your California Privacy Rights
California Consumer Privacy Act
The California Consumer Privacy Act (“CCPA”) provides California residents with rights to receive certain disclosures regarding the collection, use, and sharing of information about them, as well as rights to know/access, delete, and limit sharing of personal information. You have the right to be free from discrimination based on your exercise of your CCPA rights.
To the extent that we collect personal information that is subject to the CCPA, that information, our practices, and your rights are described below.
Notice at Collection Regarding the Categories of Personal Information Collected
You have the right to receive notice of the categories of personal information we collect, and the purposes for which we use personal information. You also have the right to know about the sources of the personal information and to whom it is disclosed or sold. The categories we use below to describe personal information are those enumerated in the CCPA.
Entities to whom we disclose information for business purposes are service providers, which are companies that we engage to conduct activities on our behalf. Service providers are restricted from using personal information for any purpose that is not related to our engagement.
Entities to whom we “sell” information are third parties. Under the CCPA, a business “sells” personal information when it discloses it to a company for monetary or other benefit. A company may be considered a third party either because the purpose for its sharing of personal information is not for an enumerated business purpose under California law, or because its contract does not restrict it from using personal information for other purposes.
We collect this personal information from the sources described in the Information We Collect section above for the purposes described in the How We Use Your Information section above.
We do not collect audio, electronic, visual, thermal, olfactory, or similar information.
Personal information may be disclosed in additional, more limited circumstances, as described in How We Share Your Information above.
Right to Opt Out of Sale of Personal Information to Third Parties
You have the right to opt out of any sale of personal information about you by Elixir to third parties. To exercise your right to opt out of the sale of your personal information, please visit our “Do Not Sell My Personal Information” webpage [or call us at toll free number].
Please note that your right to opt out does not apply to our sharing of personal information with service providers.
Right to Know and Request Access to and Deletion of Personal Information
You have the right to request access to personal information collected about you and information regarding the source of that personal information, the purposes for which we collect it, and the third parties and service providers with whom we share it. You also have the right to request in certain circumstances that we delete personal information that we have collected directly from you. We may have a reason under the law why we do not have to comply with your request, or why we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.
How to Submit an Access or Deletion Request
You may submit a request to exercise your rights to know/access or delete your personal information through the following means:
By calling us at 1 (206) 334-3768
By emailing us at email@example.com
You may authorize another individual or a business registered with the California Secretary of State, called an authorized agent, to make requests on your behalf through these means. To designate an individual to be your authorized agent, you must submit a statement in writing to Elixir from the same e-mail that is associated with your account via the firstname.lastname@example.org email
To process your request to know/access or delete personal information we collect, disclose, or sell, we must verify your request. You may make a request either by contacting us with the same e-mail associated with your account in the App or by directly authenticating into the App and visiting the Settings page. If your request is submitted through e-mail, we may take extra verification steps such as confirming personal identifiers that match those collected from your account.
We will not use personal information we collect in connection with verifying or responding to your request for any purpose other than responding to your request.
Special Information for Job Applicants
When you apply for a job with Elixir, we collect certain information about you as outlined in this Policy. Information may be collected about you in multiple ways: you may provide it to us in connection with your application; we may make observations in the application process or collect information from public information sources; or you may authorize us to collect information from other sources, such as a former employer or reference.
The following table describes our practices with regard to information submitted in the job application process. If you use our website in the job application process, additional information may be automatically collected, as described above.
In certain circumstances, you may submit your application for employment through a third-party service that displays our job posting. We do not control the privacy practices of these third-party services. Please review their privacy policies carefully prior to submitting your application materials.
Special Information for Nevada Residents
Residents of the State of Nevada have the right to opt out of the sale of certain pieces of their information to other companies who will sell or license their information to others. If you are a Nevada resident and would like to make such a request, please email email@example.com.
Changes to This Policy
For questions about our privacy practices, contact us at: