Privacy Policy — Mane For Men

1. Who We Are

Mane For Men ("we," "us," or "our") operates the website and telehealth platform at maneformen.com. We connect men experiencing male pattern hair loss with licensed healthcare providers who can evaluate their case and, if clinically appropriate, prescribe FDA-approved medications.

Because we handle protected health information (PHI), we are committed to complying with the Health Insurance Portability and Accountability Act (HIPAA) and applicable state privacy laws.

2. Information We Collect

Information you provide directly:

Name, email address, date of birth, and mailing address
US state of residence (to verify clinician licensure)
Health intake information: hair loss history, pattern, duration, and goals
Medical history, current medications, and pre-existing conditions
Photos of your hair and scalp submitted during intake
Payment information (processed by Stripe; we do not store full card details)
Messages sent to your clinician through the platform

Information collected automatically:

IP address, browser type, and device information
Pages visited, time on site, and referring URLs
Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

We use the information we collect to:

Facilitate your clinical intake and connect you with a licensed clinician in your state
Enable clinicians to review your case and, if appropriate, issue a prescription
Coordinate prescription fulfillment and monthly delivery with licensed US pharmacies
Process payments and manage your subscription through Stripe
Send transactional emails (e.g., intake confirmation, prescription status, shipping updates)
Provide customer support
Improve the platform through aggregated, de-identified analytics
Comply with legal and regulatory obligations

We do not use your health information for advertising or sell it to third parties.

4. HIPAA and Protected Health Information

Health information you submit — including your intake responses, photos, medical history, and clinician communications — constitutes Protected Health Information (PHI) under HIPAA. We act as a Business Associate to the independent medical groups whose clinicians treat you.

We use HIPAA-compliant, SOC 2-certified infrastructure. Your PHI is encrypted in transit (TLS) and at rest (AES-256). Access is restricted to personnel and systems with a legitimate need.

You have the right to access, amend, and request an accounting of disclosures of your PHI. To exercise these rights, contact us at support@maneformen.com.

5. How We Share Your Information

We share your information only in the following circumstances:

Clinicians: Licensed healthcare providers in our partner medical groups receive your intake information and photos to evaluate your case.
Pharmacies: If a prescription is issued, your prescription and shipping address are transmitted to a licensed US pharmacy for fulfillment.
Payment processors: Stripe processes payment information under its own privacy policy and PCI-DSS compliance program.
Service providers: Hosting, email delivery, and analytics vendors operate under data processing agreements that prohibit them from using your data for their own purposes.
Legal requirements: We may disclose information when required by law, subpoena, or to protect the rights, property, or safety of our users or the public.

We never sell your personal or health information to third parties.

6. Data Retention

We retain your account and health information for as long as your account is active and for a minimum of seven (7) years thereafter, as required by applicable healthcare record-keeping laws. You may request deletion of non-health personal data at any time; we will comply to the extent not constrained by legal retention requirements.

7. Cookies

We use essential cookies required for the platform to function (session authentication, CSRF protection). We may also use analytics cookies to understand aggregate usage patterns. We do not use advertising cookies or share cookie data with ad networks.

You can disable non-essential cookies in your browser settings. This will not affect core platform functionality.

8. Security

We implement technical and organizational safeguards including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security reviews. No system is perfectly secure; if you believe your account has been compromised, contact us immediately at support@maneformen.com.

9. Your Rights

Depending on your state of residence, you may have the right to:

Access the personal information we hold about you
Correct inaccurate personal information
Request deletion of personal information (subject to legal retention requirements)
Opt out of certain data uses

To exercise any of these rights, email us at support@maneformen.com. We will respond within 30 days.

10. Children

Our service is intended for adults 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information to us, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. The effective date at the top of this page will always reflect the most recent version.

12. Contact Us

Questions or concerns about this Privacy Policy or how we handle your information? Contact us at:

Mane For Men
support@maneformen.com