Last Updated: 9/30/2025
MyHerbalist Inc. ("MyHerbalist," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information, and your choices relating to your personal information.
This Privacy Policy applies to personal information collected or processed in connection with our website at www.myherbalist.com and any other MyHerbalist-operated website that links to this Privacy Policy (collectively, the "Site") and our related services, email and other communications, social media pages, and events (collectively, the "Services").
IMPORTANT NOTICES: This Platform is for U.S. residents only. We do not provide medical services. All services are for educational purposes only. For medical emergencies, call 911 immediately.
1. Information We Collect
1.1. Information You Provide
We collect information you provide directly, including:
Account Information: Name, email address, phone number, username, password, account preferences, profile information and account history
Payment Information: Payment card details, billing address, transaction history
Communications: Messages, support tickets, reviews, feedback and correspondence, session notes and consultation records created by Providers
Provider Information (if applicable): Qualifications and certifications, insurance details, professional background
1.2 Information We Collect Automatically
Device Data: IP address and device identifiers, browser type and operating system, general location (city, state)
Usage Data: Pages viewed and time spent, navigation paths and clicks, access times and duration, search queries and preferences
1.3 Information from Third Parties
We may receive information from payment processors (transaction data), social media platforms (if you connect accounts), analytics providers (usage patterns), and background check providers (for Providers only).
Note: We do not collect Protected Health Information (PHI) as defined by HIPAA. MyHerbalist is not a HIPAA-covered entity.
2. HOW WE USE YOUR INFORMATION
2.1 Platform Operations: Providing and managing your account, processing payments and transactions, enabling scheduling and appointments, facilitating user-provider connections, providing customer support
2.2 Communications: Sending service-related updates, marketing communications (with consent), responding to inquiries, providing appointment reminders
2.3 Improvement and Development: Analyzing usage trends, developing new features, improving user experience, creating aggregated analytics
2.4 Legal and Safety: Complying with legal obligations, protecting rights and property, preventing fraud and abuse, enforcing our terms, maintaining platform security
3. HOW WE SHARE INFORMATION
We do not sell personal information for money. We share information with:
3.1 Service Providers: Payment processors (Stripe), email service providers, cloud hosting services, analytics providers, customer support tools
3.2 Legal Requirements: When required by law enforcement requests, court orders, government regulations, or legal proceedings
3.3 Business Transfers: In connection with mergers or acquisitions, sale of assets, or bankruptcy proceedings
3.4 With Your Consent: When you specifically authorize sharing
3.5 Advertising Partners: For targeted advertising (California residents may opt-out)
4. DATA SECURITY
We implement reasonable safeguards including encryption of data in transit and at rest, access controls and authentication, regular security assessments, and employee training on data protection. However, no system is completely secure. We cannot guarantee absolute security of your information.
5. DATA RETENTION
We retain personal information as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on data type and purpose.
6. YOUR PRIVACY RIGHTS
6.1 All Users
Access: Request a copy of your personal information
Correction: Request correction of inaccurate information
Deletion: Request deletion of your personal information (subject to exceptions)
Opt-Out: Opt-out of marketing communications and targeted advertising
Non-Discrimination: Exercise rights without discriminatory treatment
7. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
7.1 Categories of Personal Information We Collect
• Identifiers: Name, email address, phone number, IP address, device IDs
• Payment Information: Credit card details, billing address
• Commercial Information: Transaction history, purchase records
• Internet Activity: Browsing history on our Platform, search queries, interaction with advertisements
• Geolocation Data: General location based on IP address
• Professional Information: For Providers only
• Inferences: Preferences and characteristics drawn from the above
7.2 Your California Rights
• Right to Know: Request specific pieces and categories of personal information collected, sources of collection, purposes for collection, and categories of third parties with whom we share information
• Right to Delete: Request deletion of personal information we collected from you, subject to certain exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: Direct us not to sell or share your personal information
• Right to Limit Use of Sensitive Personal Information: Limit use of sensitive personal information to necessary purposes
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising privacy rights
7.3 How to Exercise California Rights
Submit Requests: Email support@myherbalist.com or click "Do Not Sell My Personal Information" in our website footer
Verification: We will verify your identity before processing requests
Authorized Agents: You may designate an authorized agent to make requests on your behalf with written permission
Response Time: We will respond within 45 days, with one 45-day extension if needed
7.4 Do Not Sell or Share My Personal Information
We do not sell personal information as traditionally defined. However, California law broadly defines "sale" and "sharing" to include certain data transfers for advertising. You can opt-out at any time.
8. OTHER STATE PRIVACY RIGHTS
Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws have similar rights to California residents. Contact support@myherbalist.com to exercise these rights.
9. DATA BREACH NOTIFICATION
In the event of a data breach affecting your personal information, we will notify affected users within 72 hours of discovery via email and prominent website notice, as required by applicable laws.
10. COOKIES AND TRACKING TECHNOLOGIES
10.1 What Are Cookies? Cookies are small text files stored on your device that help us recognize your browser and remember information about your preferences.
10.2 Types of Technologies We Use: We use cookies and similar tracking technologies to operate and improve our Platform. Specific technologies and purposes will be detailed in our Cookie Settings when implemented.
11. Changes to Our Privacy Policy
11.1 Essential Cookies (Always Active): Required for basic Platform functionality: User authentication and account access, security and fraud prevention, core platform features
11.2 Optional Cookies: We may use additional cookies for performance and analytics, marketing and advertising (where permitted), and enhanced functionality. Detailed information about specific cookies will be provided in our Cookie Consent Banner when implemented.
12. COOKIE CONSENT AND MANAGEMENT
12.1 Your Choices: When implemented, you will be able to accept all cookies, accept only essential cookies, or customize your preferences.
12.2 Managing Cookies: You can manage cookies through our Platform's Cookie Settings (when available), your browser settings, or your device settings. Most browsers allow you to block or delete cookies. Blocking all cookies may affect Platform functionality.
12.3 California Opt-Out Preference Signals: We honor Global Privacy Control (GPC) signals for California users, automatically opting them out of advertising cookies and data sharing where legally required.
13. THIRD-PARTY PRIVACY POLICIES
Third-party services have their own privacy policies. We encourage reviewing policies for Google, Facebook, Stripe, and other services we use.
14. CHILDREN'S PRIVACY
We do not knowingly collect information from children under 18. If we learn we have collected such information, we will promptly delete it.
15. INTERNATIONAL USERS
This Platform is intended for U.S. residents only. International users access at their own risk and must comply with local laws.
16. UPDATES TO THIS POLICY
We may update this Policy periodically. Material changes will be announced via email notification to registered users and Platform banner notices. Continued use after changes constitutes acceptance.
17. CONTACT US
For Privacy Inquiries:
MyHerbalist Inc.
103 Foulk Road, Suite 202
Wilmington, Delaware 19803
Email: support@myherbalist.com
For Privacy Rights Requests: support@myherbalist.com
Response Time: Within 45 days for privacy requests
For Regulatory Complaints:
• Your State Attorney General
• California Privacy Protection Agency (for CA residents): cppa.ca.gov
BY USING MYHERBALIST, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD
THIS PRIVACY & COOKIES POLICY AND AGREE TO ITS TERMS.