Privacy Policy

Last updated: August 15th 2025

Who We Are

(“Hormolize,” “we,” “us,” or “our”) are youth-led efforts focused on hormone health education, donation programs (including panty liner ovulation test donations), and community partnerships with schools, clinics, and NGOs.

Controller: Hormolize

Scope

This Privacy Policy explains how we collect, use, share, and protect personal information when you:

visit our websites, pages, or forms,
apply to volunteer or join a chapter,
donate money or goods, or request donated ovulation tests,
partner with us as a clinic/school/NGO,
participate in research or pilots,
communicate with us by email, social, or events.

Information We Collect

1) You provide directly

Identity & contact: name, email, phone, mailing address, country/region, organization/role.
Account & chapter info: login, profile, interests, availability, chapter affiliation.
Donation & fulfillment: shipping address, quantity requests, eligibility attestations; we NEVER store full payment card numbers—payments are processed by third-party processors (e.g., Stripe/PayPal) subject to their own policies.
Program & survey responses: feedback, testimonials, impact stories, preferences.
Research/health information (consented): if you choose to participate in a study, pilot, or device evaluation, we may collect cycle-related information (e.g., dates you test, whether a panty liner ovulation test line appears), demographics, and related survey data as described in the specific consent form.

2) Automatically collected

Device & usage: IP address, browser type, device identifiers, pages viewed, timestamps, referral URLs.
Cookies/SDKs: essential cookies for site operation; analytics to understand usage; and (only with consent, where required) marketing pixels. See “Cookies & Tracking” below.

3) From third parties

Payment processors (confirmation of payment, last 4 digits, tokenized IDs).
Partners (confirmation that a donation was received/distributed).
Social platforms (if you interact with our accounts or sign in via social login).

Sensitive Information

We may handle health-related information (e.g., self-reported cycle data) only with your explicit consent for clearly stated purposes (education, program administration, or research). We do not require you to share health data to browse our site. We ask that you never submit information you are not comfortable sharing.

How We Use Information

We use personal information to:

Provide services: run chapters, ship donations, verify eligibility, manage accounts, respond to requests.
Education & outreach: send curricula, event info, program announcements, and resources you request.
Impact & quality: evaluate program effectiveness, measure demand, and improve content and logistics.
Research (with consent): conduct IRB-approved or ethics-reviewed studies; analyze de-identified/aggregated data to advance hormone-health understanding; publish only aggregated results.
Security & compliance: prevent fraud/abuse, enforce terms, comply with laws, and maintain records.
Marketing (where permitted): send updates; you can opt out anytime.

Our Legal Bases (GDPR/UK GDPR)

Consent (e.g., newsletters, cookies, research participation).
Contract (e.g., fulfilling a donation shipment you request).
Legitimate interests (program operations, site security, improvement—balanced against your rights).
Legal obligation (tax/accounting, sanctions screening, safety).

Sharing & Disclosures

We do not sell personal information. We may share:

Service providers/Processors: hosting, email, analytics, payment, shipping, customer support—bound by contracts to use data only for our instructions.
Program partners: clinics, schools, NGOs to coordinate donations or participation you requested.
Research partners/IRBs: only as described in your consent; health data is de-identified or pseudonymized whenever possible.
Legal & safety: to comply with law, respond to lawful requests, or protect rights, safety, or property.
Business changes: if we reorganize or merge, your data may transfer under equivalent protections.

International Transfers

We operate chapters in multiple countries. Your information may be processed outside your country. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) and assess local laws to protect your data.

Retention

We keep information only as long as necessary for the purposes above, then delete or de-identify it:

Accounts & chapter records: while active + 2 years.
Donation & finance records: 7 years (tax/audit).
Program surveys & support: 2 years.
Research data: per consent/IRB protocol, typically 10 years (de-identified wherever feasible).
Web logs: up to 24 months (shorter where required).
Actual periods may vary to meet legal, audit, or safety obligations.

Security

We use reasonable technical and organizational measures (TLS encryption in transit, encryption at rest for key systems, access controls, least-privilege, staff training, vendor DPAs). No method is 100% secure; please use strong passwords and report suspected issues to [security@yourdomain.org].

Your Choices & Rights

Email: unsubscribe via footer or email us.
Cookies: manage in our cookie banner or your browser settings.
Access/Correct/Delete: request a copy, correction, deletion, or portability of your data.
Object/Restrict: object to or restrict certain processing.
Withdraw consent: where processing is based on consent.
Appeal: where available by law. We will verify your request (and, when required, identity/authority).

California & U.S. State Privacy (CA/CO/CT/VA/UT and similar)

Residents may have rights to know/access, delete, correct, opt-out of sale/share, and limit use of sensitive information. We do not sell personal information. We do not “share” for cross-context behavioral advertising unless you consent to marketing cookies; you can opt out anytime via the cookie banner or by contacting us. We will not discriminate against you for exercising rights.

EEA/UK

You may lodge a complaint with your local Data Protection Authority. If we rely on legitimate interests, you can object and we will assess your request.

Children & Teens

Our educational programs often serve youth through schools/guardians. We do not knowingly collect personal information from children under 13 (US) or under the age applicable in your country without verifiable parental/guardian consent and, where applicable, school/clinic agreements. If you believe a child provided information without proper consent, contact us to delete it.

Research, Pilots, and Health Data – Additional Terms

Participation is voluntary and based on a separate consent form describing what we collect, why, risks/benefits, retention, and contacts for questions/withdrawal.
Health data is stored with heightened safeguards and access controls.
Publications and reports use de-identified or aggregated information.
Unless explicitly stated in a separate agreement, we are not a HIPAA “covered entity.” We still treat health data as sensitive and protect it accordingly.

User-Generated Content & Testimonials

If you submit testimonials, photos, or stories, you grant us permission to display and edit for length/clarity. You may withdraw permission by emailing [privacy@yourdomain.org]; we will remove future uses where feasible (past print runs or social reposts may persist).

Cookies & Tracking

We use:

Essential cookies – required for site operation.
Analytics – to understand usage and improve services.
Marketing – only with consent, to measure outreach effectiveness.

Manage preferences via our cookie banner. Third-party providers (e.g., Google Analytics, email tools) may set their own cookies; see their policies for details.

Third-Party Links

Our site may link to other websites or tools. We are not responsible for their privacy practices. Review their policies before providing information.

Do Not Track

Some browsers offer “DNT” signals; we do not currently respond to DNT. Use our cookie controls to manage tracking preferences.

Changes to This Policy

We may update this Policy from time to time. Material changes will be posted on this page with a new “Last updated” date. Continued use of our services after changes means you accept the revised Policy.

Contact Us

Questions, requests, or complaints:

Quick TL;DR

We collect only what we need to run chapters, ship donations, and improve programs. Health data is optional and used only with consent (often de-identified). We don’t sell your data. You control emails, cookies, and can request access/correction/deletion anytime.