Platform migration privacy notice

FAQs What's happening?

Hims in the UK is moving to a new platform run by Fill Function UK Limited, part of the same group of companies as Hims & Hers UK Limited. It's a change to the technology and to who runs the service, not to the service itself. The full notice below explains what it means for your information.

Do I need to do anything?

No. Accounts move in stages over several weeks rather than all on one day. Yours moves automatically and you sign in the same way, with the same password.

Will my treatment be interrupted?

No. Your prescription stays valid, your orders continue, and the same pharmacy dispenses your treatment. You don't need a new consultation to move, and you'll have one as normal when your current prescription ends.

Who am I paying?

Hims & Hers UK Limited, as before. Your payment arrangement doesn't change, even though the platform does.

Who has my medical records now?

Fill Function UK Limited holds them and is responsible for them going forward. Hims & Hers UK Limited remains responsible for your payment contract and for records created before the change, and keeps those under its own privacy notice.

I'm on weight treatment. Is that different?

Yes. Weight treatment stays with Hims & Hers UK Limited until your current plan ends, so for a period you may hold treatment with both. Each can see what you're being treated for with the other, so your clinician and pharmacist have the full picture and you don't receive duplicate orders.

Does anyone new have access to my information?

The types of company involved are the same as before, but some of the specific providers change with the new platform. They act on our instructions and are bound by contract to protect your information.

Will I get more marketing?

No. Your existing preferences move with you, including any unsubscribes. We'll ask separately whether you'd like to keep receiving marketing emails, and until you say yes we won't send any.

About this notice

Hims in the UK is moving to a new platform run by Fill Function UK Limited, part of the same group of companies as Hims & Hers UK Limited.

This notice explains who is responsible for your personal information as a result, and what that means for you.

It sits alongside two others:

• The Fill Function UK privacy notice, which covers the Hims service day to day once your account has moved

• The Hims & Hers UK privacy notice, which continues to apply to your payment contract and to records created before the platform change

This notice covers the move and the arrangements between the two companies that follow from it. For anything else, the Fill Function UK privacy notice applies.

What is changing

Your account, treatment and prescriptions are unaffected by the move. Accounts move in stages rather than all on one day, and yours will move automatically.

Who is responsible for your information

Two companies have a role, and they are responsible for different things.

Fill Function UK Limited provides the Hims service going forward, including your account, consultations, clinical records and support. The clinicians who treat you work under its registration with the Care Quality Commission.

Hims & Hers UK Limited continues to be the company you contract with for payment. It processes your billing and payment information, and it also keeps the records it created before the platform change, because medical and pharmacy record-keeping rules require it.

Each is a data controller for the parts described above.

Weight treatment

If you are receiving weight treatment, that part of your care stays with Hims & Hers UK Limited until your current plan ends. During that period you may hold treatment with both companies. Each can see the treatment you hold with the other, so a clinician or pharmacist has the full picture and you are not sent duplicate orders.

What information moves to the new platform

• Your name, contact details and account information

• Your medical history, questionnaire answers and consultation records

• Your treatments, prescriptions and medication details

• Your orders, deliveries and payment records

• Messages you have exchanged with our support team

• Your communication preferences, including any unsubscribes

Your password is not copied. You sign in with your existing password, which is checked the first time you use the new platform.

Why we can do this

• Contract, to continue providing the treatment and service you signed up for, and to take payment

• Legitimate interests, to move your records safely and to make sure a clinician can see your full treatment picture

• Legal obligation, to keep medical, pharmacy and financial records as required

Because your information includes health information, and information about your sex life where relevant to your treatment, we also rely on the condition in data protection law that permits processing for the provision of health care and treatment. Access is limited to clinicians, pharmacy staff and those responsible for clinical governance.

How long information is kept

We keep personal information for as long as needed to provide the service, and for as long as healthcare, pharmacy, financial and other legal requirements demand.

Records held by Hims & Hers UK Limited, including payment records and records created before the platform change, are kept in line with its own retention periods. These are set out in the Hims & Hers UK privacy notice.

Who else sees your information

Moving to a new platform means some of the providers behind the service change. The categories of provider stay the same, but the specific companies in some of them are different from those used before.

Information is shared with:

• The pharmacies that dispense your treatment

• Clinicians and healthcare professionals involved in your care

• Delivery providers

• Technology and operational service providers, for example hosting, communications, customer support tools, analytics, security, identity verification and payment processing

• Companies in the group providing support and operational services

• Regulators, courts and law enforcement where required by law

Providers act on our instructions and are bound by contract to protect your information.

Where your information is held

Your records on the Hims platform are held in Google Cloud data centres in Europe. Where records are held by Hims & Hers UK Limited, its privacy notice explains where they are stored.

Authorised staff in other countries where the group operates can access records where needed for support, clinical operations, security and analytics. Those countries are Australia, the Philippines, South Africa, and the United States, where our parent company Hims & Hers Health, Inc. is based. Selected data is also copied to Australia for internal business analytics and reporting.

We rely on an intra-group agreement incorporating the standard contractual clauses and the UK addendum approved by the Information Commissioner's Office, together with access controls, encryption and audit logging.

Your rights

You can ask to see the information held about you, have it corrected or deleted, restrict or object to how it is used, receive a copy in a portable format, and withdraw consent where we rely on it. You can also complain to us about how your information is handled. Some rights are limited where records must be kept by law.

Because two companies hold information about you, you can contact either and your request will be handled across both, or passed to the right place.

• Fill Function UK Limited: privacy@eucalyptus.vc

• Hims & Hers UK Limited: privacy@forhims.co.uk

We will acknowledge a complaint within 30 days, look into it without undue delay, keep you updated and tell you the outcome. You can also complain to the Information Commissioner's Office at ico.org.uk, though we would ask you to come to us first so we have the chance to put things right.

Marketing

Your existing preferences move with your account, including any unsubscribes.

We will ask separately whether you would like to keep receiving marketing emails. Until you tell us you do, we will not send marketing by email. You will still receive messages about your treatment, orders and prescriptions, which are not marketing.

Contact

privacy@eucalyptus.vc