Privacy Policy

Last Update: May 2026

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from hellowinx.com (the “Site”).

INTRODUCTION

We at Winx Health, Inc. (“we”, “us” or “Winx Health”) value your privacy and are committed to keeping your personal data confidential. We use your data solely in the context of providing the Winx Health products (which may include, but not be limited to, emergency contraception, pregnancy tests, ovulation tests, yeast infection tests, UTI tests, probiotics, vitamins, and supplements) (the “Products”) and providing all relevant content and functionality associated with the Site.

Privacy Policy Applicability

This Privacy Policy applies to personal data that Winx Health collects from users of the Site and those who purchase Products through the Site. The term “Personal Information” includes any information that can be used on its own or with other information in combination to identify or contact one of our users, including Health Information, Order Information, User Content, and Device Information (as those terms are later defined). Personal Information also includes categories such as biometric data, precise geolocation data, online identifiers, and other information defined as ‘personal information’ or ‘sensitive personal information’ under applicable laws (e.g., the California Consumer Privacy Act, as amended by the CPRA). We believe that privacy and transparency about the use of your Personal Information are of utmost importance. Therefore, our privacy practices are intended to comply with all applicable federal and state laws related to privacy. Additionally, in this Privacy Policy, we provide you detailed information about our collection, use, maintenance, and disclosure of your Personal Information. The Privacy Policy explains what kind of information we collect, when and how we might use your Personal Information, how we protect Personal Information, and your rights regarding your Personal Information.

Agreement to Privacy Policy Terms

BY ACCESSING AND/OR USING THE SITE OR PURCHASING PRODUCTS FROM THE SITE, YOU ARE ACKNOWLEDGING THAT YOU HAVE READ AND AGREE TO THE TERMS OF THIS PRIVACY POLICY. IF YOU DO NOT AGREE, YOU MUST IMMEDIATELY CEASE USING THE SITE.

COLLECTION AND USE OF PERSONAL INFORMATION

What Personal Information Do We Collect?

When you visit the Site or purchase a Product on the Site, we may collect the following types of information from you:

Device Information: Winx Health collects certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically collected information as “Device Information.”

We collect Device Information using the following technologies:

  • “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
  • “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
  • “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

Order Information: When you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card number), email address, and phone number. We refer to this information as “Order Information.” If you create a user account, Order Information may be stored in that user account. You may also have the ability to participate in loyalty or rewards programs, if such programs are offered.

Payment transactions for purchases on our Site are processed securely through third-party payment providers such as Shopify and/or Stripe. Winx Health does not store your complete payment card details on our systems. Our payment processors maintain compliance with the Payment Card Industry Data Security Standard (PCI DSS).

Health Information: If you complete a care plan quiz on the Site, we may collect certain personal information about you, including health data. This information may include, but is not limited to, your name, email address, age range, health goals, health history, health product or treatment usage, reproductive health information, health symptoms, and preferred communication methods. We refer to this information as “Health Information.” We will not use Health Information for marketing purposes without your explicit consent. You may withdraw your consent at any time.

User Content: Through the Site, we may also collect certain content that is voluntarily provided by users, including account username, account password, name, email, address, text, images, photos, audio, video, location data, and other forms of data or communication in connection with your use of the Site and Products. This may include but is not limited to, ratings, reviews, compliments, check-ins, messages, subscriptions, and information that you publicly display. We refer to this information as “User Content.”

Telehealth Services and Health Information

Winx Health partners with Telegra MD P.C. to offer telehealth consultations in connection with certain products, including UTI Test & Treat. Winx Health is not a healthcare provider and does not provide medical care, diagnosis, or treatment.

How your health information is handled. When you initiate a telehealth consultation, you will be directed to a platform operated by Telegra MD P.C. The information you provide during that consultation — including your medical history, symptoms, test results, photographs, and any communications with a clinician — is collected and maintained by Telegra MD P.C. and the treating provider, not by Winx Health. That information is protected health information (“PHI”) under the Health Insurance Portability and Accountability Act (“HIPAA”) and is governed by Telegra MD P.C.’s Notice of Privacy Practices, available at https://telegramd.com/privacy-policy/.

Information shared between Winx Health and Telegra MD P.C. To facilitate your consultation and any resulting treatment, we share limited information with Telegra MD P.C., which may include your name, date of birth, shipping address, email, phone number, the product you purchased, and order details. Telegra MD P.C. may share limited information back with us for fulfillment and customer support purposes, including consultation status and prescription status. This exchange is governed by a Business Associate Agreement between Winx Health and Telegra MD P.C.

Winx Health’s role. Winx Health is not a HIPAA-covered entity. To the extent Winx Health receives or accesses protected health information in connection with telehealth services, it does so as a subcontractor to Telegra MD P.C. under a Subcontractor Business Associate Agreement, and handles such information in accordance with HIPAA, the HITECH Act, and that agreement. Information you provide directly to Winx Health (for example, when you create an account, place an order, or contact customer service) is governed by this Privacy Policy, not by HIPAA.

Pharmacies and labs. If a clinician prescribes medication or orders a lab test, your information may also be shared with the dispensing pharmacy or laboratory. Those entities maintain their own privacy practices.

Sensitive Personal Information (CCPA and State Privacy Laws)

We may collect and share “sensitive personal information” as defined under California and other state privacy laws, including health-related information you provide in connection with telehealth services. We use this information solely to provide the products and services you request and do not sell it or use it for cross-context behavioral advertising. Certain categories of Personal Information we collect, such as reproductive Health Information and other medical data, may also be considered ‘Sensitive Personal Information’ under applicable laws. California residents may exercise the right to limit our use and disclosure of Sensitive Personal Information by contacting us at [email protected].

How Do We Use Your Personal Information?

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

  • Communicate with you;
  • Manage payment processing;
  • Screen our orders for potential risk or fraud; and
  • When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

We use the Health Information that we collect to provide educational materials and product recommendations to users, to manage and improve our operations and the Site, including the development of additional functionality, and to conduct research and analysis using your information, which may be subject to a separate written authorization.

Finally, we may use any of your Personal Information to perform any of the following functions:

  • Fulfill our obligations to you under the Terms of Use;
  • Enforce and ensure your compliance with our Terms of Use;
  • Properly store and track your data within our Site;
  • Protect our rights, privacy, safety, or property, and/or that of you or others by providing proper notices, pursuing available legal remedies, and acting to limit our damages;
  • Handle technical support and other requests from you;
  • Evaluate the quality of services or products you receive, identify usage trends, and improve your user experience;
  • Send you information about changes to our terms, conditions, and policies; and
  • Allow us to pursue available remedies or limit the damages that we may sustain.

How Do We Share or Disclose Your Personal Information?

We share your Personal Information with third parties to help us provide our Products, operate the Site, and use your Personal Information, as described above. For example, we use Shopify to power our online store — you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site — you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

We may also share your Personal Information with the following categories of third parties:

  • Telehealth providers and medical groups, including Telegra MD P.C., to facilitate consultations and treatment.
  • Service providers and vendors who assist us in operating our business and the Site.
  • Government authorities or law enforcement where required by law or legal process.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

How Long Do We Retain Personal Information?

Winx Health retains your Personal Information only if necessary and as required for our business operations, the sale of Products or services, archival purposes, and/or to satisfy legal requirements. The exact period of retention (the “Retention Period”) is as follows:

  • Order Information: retained for at least seven (7) years for tax, accounting, and legal purposes.
  • Health Information: retained for three (3) years from the date of collection unless a longer period is required by law.
  • Device Information and analytics data: retained for 12 months.

Health information collected by Telegra MD P.C. in connection with telehealth services is retained by Telegra MD P.C. in accordance with applicable medical record retention laws, which may require retention for several years after your last consultation. Winx Health retains the limited information it receives in connection with telehealth services for as long as needed to support your order, comply with legal obligations, and resolve disputes.

At the end of the applicable Retention Period, we will remove or de-identify your Personal Information from our databases unless required for legal purposes. If there is any data that we are unable to delete entirely from our systems for technical reasons, we will put in place appropriate measures to prevent any further processing of such data.

Winx Health reserves the right to continue using de-identified data indefinitely, even after Personal Information has been removed from our databases. Our continued use of de-identified data will comport with applicable law.

Data Breach

In the event of a data breach or other security incident that affects the confidentiality, integrity, or availability of your Personal Information, Winx Health will notify you as required under applicable law. Such notice may include information about the nature of the breach, the categories of data affected, steps we are taking to mitigate harm, and measures you can take to protect yourself.

What Happens to Personal Data Submitted by Minors?

Winx Health is committed to protecting the privacy of children. If we learn that Personal Information from users under the age of 13 has been collected, we will take reasonable measures to promptly delete such data from our records. The Site does NOT allow children or any user to make their information publicly available. Parents/legal guardians have the right to ask us to delete their child’s Personal Information, as well as to refuse to permit us to further collect or use their child’s Personal Information. To do any of these, please contact us at: [email protected].

Security

We implement appropriate technical, administrative, and physical safeguards designed to protect Personal Information against unauthorized access, use, disclosure, alteration, or destruction. While we take reasonable measures to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on where you reside, you may have the following rights regarding your Personal Information:

  • Right to access and obtain a copy of your data;
  • Right to request correction or deletion;
  • Right to restrict or object to processing;
  • Right to request data portability;
  • Right to opt out of the sale or sharing of Personal Information, or to limit the use of Sensitive Personal Information;
  • Right to withdraw consent (if applicable).

To exercise these rights, please contact us at [email protected]. We will not discriminate against you for exercising your rights.

What Rights Do I Have to Update, Correct, or Delete My Personal Information?

You have the right to request restrictions on uses and disclosures of your Personal Information. While we are not required to agree to all restriction requests, we will attempt to accommodate reasonable requests when appropriate. If you request that we delete your Personal Information, we will comply unless an exception applies. For example, we may retain certain information where necessary to comply with legal obligations, resolve disputes, prevent fraud, maintain security, or enforce our agreements. In such cases, your data will be retained only as long as necessary for those purposes. You have the right to request deletion of any Personal Information from the Site. To request deletion of your Personal Information, please email us at [email protected] and include a description of the Personal Information you would like removed. We will respond to all requests for data deletion as soon as reasonably possible.

Does This Privacy Policy Apply to Third Party Sites?

Our Site may contain links to other sites that are not operated by Winx Health. If you click a third-party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy(ies) of every site you visit. Winx Health has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party sites or services. This Privacy Policy does not apply to your use of or access to any third-party sites or services.

ADVERTISING, MARKETING, AND TRACKING

Does Winx Health Send Marketing or Advertising Materials?

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by Winx Health at any time by following the unsubscribe link or by contacting us. You can also opt out of targeted advertising by third-party websites as follows:

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

Can Users Opt Out of Receiving Communications from Winx Health?

We may send communications, including emails and newsletters, to you regarding your order and any quizzes you complete on the Site. You can choose to filter any emails using your email settings, but we do not provide an option for you to opt out of these communications.

If you consent to receive marketing or other communications not related to an order or quiz, we will provide you with the option to opt out of such marketing communications within the applicable messaging.

Do Not Track Disclosure

Some web browsers may transmit do not track (“DNT”) signals to websites with which the user communicates. To date, there is no industry standard for DNT and users cannot know how a given company responds to a DNT signal they receive from browsers. Winx Health is committed to remaining apprised of DNT standards. However, Winx Health does not support DNT browser settings and does not currently participate in any DNT frameworks that would allow Winx Health to respond to signals or other mechanisms regarding the collection of your personal information.

UPDATES AND CONTACT INFORMATION

Privacy Policy Updates

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. If we make material changes to this Privacy Policy, we will notify you by email (if you have provided it) or by posting a prominent notice on our Site prior to the change becoming effective. Continued use of the Site after such changes constitutes acceptance of the updated Privacy Policy.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at [email protected] or via mail:

Winx Health, Inc.

9450 SW Gemini Dr

PMB 53351

Beaverton, Oregon 97008-7105 US

Mobile Terms of Service — Winx Health, Inc.

Last updated: July 28, 2025

The Winx Health mobile message service (the “Service”) is operated by Winx Health (“Winx Health”, “we”, or “us”). Your use of the Service constitutes your agreement to these terms and conditions (“Mobile Terms”). We may modify or cancel the Service or any of its features without notice. To the extent permitted by applicable law, we may also modify these Mobile Terms at any time and your continued use of the Service following the effective date of any such changes shall constitute your acceptance of such changes.

By consenting to Winx Health’s SMS/text messaging service, you agree to receive recurring SMS/text messages from and on behalf of Winx Health through your wireless provider to the mobile number you provided, even if your mobile number is registered on any state or federal Do Not Call list. Text messages may be sent using an automatic telephone dialing system or other technology. Service-related messages may include updates, alerts, and information (e.g., order updates, account alerts, etc.). Promotional messages may include promotions, specials, and other marketing offers (e.g., cart reminders).

Any Personal Information collected through our SMS/text messaging program (including mobile number, opt-in status, and message preferences) is subject to this Privacy Policy. We do not sell or share SMS opt-in data with third parties for their marketing purposes.

You understand that you do not have to sign up for this program in order to make any purchases, and your consent is not a condition of any purchase with Winx Health. Your participation in this program is completely voluntary.

We do not charge for the Service, but you are responsible for all charges and fees associated with text messaging imposed by your wireless provider. Message frequency varies. Message and data rates may apply. Check your mobile plan and contact your wireless provider for details. You are solely responsible for all charges related to SMS/text messages, including charges from your wireless provider.

You may opt-out of the Service at any time. Text the single keyword command STOP to +18776843629 or click the unsubscribe link (where available) in any text message to cancel. You’ll receive a one-time opt-out confirmation text message. No further messages will be sent to your mobile device, unless initiated by you. If you have subscribed to other Winx Health mobile message programs and wish to cancel, except where applicable law requires otherwise, you will need to opt out separately from those programs by following the instructions provided in their respective mobile terms.

For Service support or assistance, text HELP to +18776843629 or email [email protected].

We may change any short code or telephone number we use to operate the Service at any time and will notify you of these changes. You acknowledge that any messages, including any STOP or HELP requests, you send to a short code or telephone number we have changed may not be received and we will not be responsible for honoring requests made in such messages.

The wireless carriers supported by the Service are not liable for delayed or undelivered messages. You agree to provide us with a valid mobile number. If you get a new mobile number, you will need to sign up for the program with your new number.

To the extent permitted by applicable law, you agree that we will not be liable for failed, delayed, or misdirected delivery of any information sent through the Service, any errors in such information, and/or any action you may or may not take in reliance on the information or Service.

Text Messaging Privacy

We take your privacy seriously. The following disclosures explain how we handle your information in relation to our SMS messaging program.

We use cookies and other tracking technologies to identify when a customer has abandoned their shopping cart. If you have opted in to receive SMS messages from us, we may send you text message reminders about your cart. These messages are triggered by your activity on our website and are sent in compliance with applicable laws and wireless carrier guidelines.

We do not sell or share your SMS opt-in data or consent status with any third parties for their marketing or promotional purposes. This includes information such as your mobile number and your consent to receive SMS messages.

If we share your data with service providers (e.g., SMS platforms), it is solely for purposes related to delivering our communications and managing our SMS program. All such service providers are contractually bound to handle your data securely and in accordance with applicable regulations.

If you enable location services or if our SMS program involves location-based offers, we may collect information about your device’s location. This data is used solely to deliver relevant content or offers based on your geographic area. We do not share your location data with third parties without your explicit consent, except where required to provide the service you have requested.