Last Updated:

Privacy Policy

This Privacy Policy describes how HerEstrogen — the website and membership platform operated by VH Ventures LLC dba HerEstrogen — collects, uses, and protects your information.

Your clinical care and your medical records

HerEstrogen is a technology and membership platform. It is not a medical practice or a pharmacy, and it does not provide medical care.

Clinical services are provided by Beluga Health, P.A. through the Bask Health Inc. platform. Your medical record and the Protected Health Information in it are held by that clinical provider, which is the HIPAA covered entity for your care. Their privacy practices, and your HIPAA rights in your medical record, are governed by the clinical provider’s own privacy notice and by the Asynchronous Telemedicine Informed Consent you agree to before treatment.

To access your medical record, ask for a correction, or withdraw consent and delete your patient profile, email the clinical provider directly at admin@belugahealth.com. For anything about this website, membership, or billing, email us at support@herestrogen.com.

Prescriptions, if issued, are filled by independent licensed pharmacies.

HerEstrogen Website Privacy Practices

The sections above are the Notice of Privacy Practices for the affiliated clinical entities that provide your care. The sections below describe the privacy practices of the HerEstrogen website and membership platform, operated by VH Ventures LLC dba HerEstrogen.

How HerEstrogen Works: Platform, Clinicians, and Pharmacies

HerEstrogen (VH Ventures LLC dba HerEstrogen) is a technology and membership platform. It is not a medical practice or a pharmacy, and it does not provide medical care.

• Clinical services are provided by Beluga Health, P.A. and its licensed practitioners, through the Bask Health Inc. platform. They make all clinical decisions.
• Protected Health Information (PHI) is maintained within a HIPAA-compliant clinical platform under a Business Associate Agreement.
• Prescriptions, if issued, are filled by independent licensed pharmacies.
• HerEstrogen’s own marketing systems (email and SMS) are used for pre-conversion marketing communications and do not receive Protected Health Information. Care-related messages from your care team are sent from the HIPAA-compliant clinical platform described above, not from our marketing systems. Text messages are not encrypted; see the text message section below.

Cookies, Analytics, and Advertising Technologies

We describe here what our website actually does today. If this changes, we will update this section before the change takes effect.

• We ask before we measure. Analytics and advertising storage are switched off by default on every page. Where your state or country requires prior consent — Washington, Nevada and the other states with consumer health data or sensitive-data consent laws, and every visitor outside the United States — we show a consent banner and measure nothing until you choose “Accept”. If you decline, or never answer, no analytics cookies are set and no analytics data is sent. Elsewhere analytics are enabled without a banner, and you can switch them off at any time with the “Do Not Sell or Share My Personal Information” link in the footer.
• Global Privacy Control. If your browser sends a Global Privacy Control (GPC) or Do Not Track signal, we treat it as a standing opt-out and do not enable analytics.
• What we use, once you accept. Google Analytics 4 (measurement ID G-CTPN8D3JZN), loaded directly, and a Google Tag Manager container (GTM-M79MKQNH). Google Analytics and Google Tag Manager are not requested until you accept analytics, and neither loads on pages that name a specific medication. We also use Hyros, an advertising-attribution service that tells us which ad a visit came from. Hyros is different: it loads on every page, including pages that name a specific medication, and it loads before you answer the consent banner. It receives the address of the page you are viewing, including its query string. If you would rather it did not, do not browse medication pages before declining, and contact us at support@herestrogen.com to request deletion of data associated with you. We also use Trybe, an attribution service that tells us which creator or partner referred a visit, so that creators are paid correctly. Trybe loads only after you accept, and never on a health-context page.
• Cookies set once you accept. _ga and _ga_CTPN8D3JZN (Google Analytics, a pseudonymous client identifier used to distinguish visits), _gcl_au (Google’s conversion linker), _fbp and _fbc (Meta, a pseudonymous browser identifier and, if you arrived from a Meta ad, that ad click), and ugc_vid_… (Trybe, a pseudonymous visitor identifier used only for creator attribution). These are persistent, browser-level identifiers — not anonymous aggregate counters.
• Cookies we set regardless. One first-party functional cookie that limits how often a promotional message appears (24 hours); one that remembers your consent choice (180 days); and, if you arrived through a creator’s referral link, one that records that referral code for 30 days (he_ref). None of these is used for advertising or profiling, none is shared with an advertising platform, and none contains health information.
• Meta Pixel and Conversions API. Once you accept, and only on pages that do not name a specific medication or treatment, we use the Meta Pixel to measure our Facebook and Instagram ads. It records that a page was viewed, that a landing or comparison page was viewed (by page type only, never a condition, symptom or medication), that you signed up through a marketing form, and that you began checkout (the price only). For page views only, we also send a copy of the event to Meta from our own server through Meta’s Conversions API, so Meta can count each one once. That copy contains the address of the page without its query string, your IP address and browser type, and Meta’s own cookie identifiers. It never contains your email address, your answers to any health question, and nothing is sent from pages that name a medication or from the intake questionnaire.
• Health-context pages. The intake questionnaire and any page where you enter health information are hosted by our clinical provider on a separate, HIPAA-aligned system. The health information you enter there is never transmitted to Google or any advertising platform. Separately, on this website, every page whose address names a specific medication or treatment — every page under /products/ — loads no analytics or attribution technology at all. Those tags are not merely switched off pending your consent on those pages; they are never requested, so no record of which treatment page you viewed is sent to any third party, whatever your consent choice.
• Withdrawing consent. Use the Do Not Sell or Share My Personal Information link in the footer of any page. That immediately turns analytics off and deletes the Google, Meta and Trybe cookies listed above from your browser. You can also block or delete cookies in your browser settings.

TEXT MESSAGE (SMS) PROGRAM

If you opt in to receive text messages from HerEstrogen, the following terms apply.

Program description. HerEstrogen sends account and order notifications, appointment and refill reminders, messages from your care team, and — if you separately opt in — promotional messages.

Message frequency. Message frequency varies based on your account activity and the programs you have joined.

Cost. Message and data rates may apply. HerEstrogen does not charge for text messages, but your mobile carrier may.

How to opt out. Reply STOP to any message to unsubscribe from HerEstrogen text messages. STOP unsubscribes you from all HerEstrogen text programs, not just the one you replied to. You will receive one final message confirming that you have been unsubscribed.

How to get help. Reply HELP to any message, or contact us at support@herestrogen.com or 804-715-0329.

Carriers. Carriers are not liable for delayed or undelivered messages.

Consent is not a condition of purchase. You are not required to agree to receive marketing or promotional text messages in order to use our services or purchase anything from us.

Security. Text messages are not encrypted. If you choose to send or receive health information by text message, you do so at your own risk.

Supported carriers may change without notice.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We maintain timestamped records of every opt-in. We obtain prior express written consent before sending automated promotional text messages, consistent with the Telephone Consumer Protection Act (TCPA). You must be 18 or older to participate.

Consumer Health Data (Washington My Health My Data Act)

If you are a Washington resident, or your consumer health data is otherwise covered by the Washington My Health My Data Act, please see our separate Consumer Health Data Privacy Policy, which describes the categories of consumer health data we collect, how we use and share it, and your rights under the Act.

Contact for HerEstrogen Website Privacy

For questions about the HerEstrogen website and membership platform’s privacy practices, contact VH Ventures LLC dba HerEstrogen at support@herestrogen.com. For questions about your Protected Health Information or your medical record, contact the clinical provider directly at admin@belugahealth.com.