How your data is kept safe
Data Protection
This page summarises how we protect personal and health information across The Hormone Method. It sits alongside our Privacy Policy, which explains what we collect and why.
1Our commitments
- Only collect what we genuinely need for the service you asked for.
- Treat health-related information with extra care and explicit consent.
- Never sell personal information.
- Keep the number of people who can access your information as small as possible.
- Give you clear ways to access, correct, export or delete your data.
2Access and accounts
Access to account and coaching data is restricted to authorised staff on a least-privilege basis. Admin accounts use strong, unique passwords and multi-factor authentication where the platform supports it. Access is reviewed periodically and revoked promptly when no longer needed.
3Encryption and transport
The website, app and forms are served over HTTPS. Personal information travels between your device and our providers over encrypted connections. Data held by our providers is encrypted at rest to the standard those providers offer.
4Vendors we rely on
We use reputable providers for hosting and app infrastructure, email delivery, analytics, payments (Stripe) and, with your consent, advertising measurement (Meta). Each provider is chosen for its security posture and processes personal information only to provide its service to us.
5Health data and AI
Where a feature uses AI to generate suggestions from information you provide, we make that clear and require your consent before enabling it. AI outputs are informational and do not replace medical advice. Free-text health notes are used to serve you, and not for advertising.
6Retention and deletion
We retain information only for as long as necessary for the purpose it was collected and for legal, tax and dispute-resolution reasons. You can request deletion of your account and associated personal information at any time by emailing thehormonemethodd@gmail.com. Certain records may be retained where the law requires it.
7Incidents
If we become aware of a security incident that materially affects your personal information, we will notify affected users and the appropriate authorities where required, and take steps to contain and remediate the incident.
8Getting in touch
Questions about how we handle your information, or a request to exercise your rights, can be sent to thehormonemethodd@gmail.com.
Questions or requests? thehormonemethodd@gmail.com
