Privacy Policy

1. Information We Collect

When you use Zora Women, we collect the following categories of personal information:

• Identity information — your name and email address, provided when you complete our intake assessment or create an account.
• Health intake responses — your age range, symptoms, and prior medical history that you voluntarily share through our assessment form. This may constitute protected health information under HIPAA.
• Usage data — information about how you interact with our website, including pages visited and actions taken, collected via standard analytics tools.
• Communication preferences — your consent to receive marketing and clinical communications from us.

2. How We Use Your Information

We use the information we collect to:

• Provide, personalize, and improve our telehealth services
• Match you with licensed clinicians appropriate to your needs
• Send you clinical updates, care plans, and health resources by email
• Send you marketing communications, product updates, and community content where you have consented to receive them
• Comply with applicable legal and regulatory obligations

3. Email Marketing — Klaviyo

We use Klaviyo as our email marketing platform. When you submit your email address through our intake form or website, your email and assessment responses may be stored in Klaviyo's systems to enable us to send you relevant, personalized communications. Klaviyo processes this data on our behalf and is prohibited from using it for their own marketing purposes. You may unsubscribe from marketing emails at any time using the unsubscribe link included in every email. For more information, see Klaviyo's Privacy Notice.

4. We Do Not Sell Your Data

Zora Women does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. We share your information only with service providers who assist us in operating our platform and delivering care, and only to the extent necessary to provide those services.

5. HIPAA Compliance

To the extent that Zora Women handles protected health information (PHI) as defined under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), we are committed to maintaining the privacy and security of that information in accordance with applicable law. This includes:

• Limiting access to PHI to authorized personnel and clinicians only
• Using administrative, technical, and physical safeguards to protect your health information
• Not disclosing your PHI without your authorization except as permitted or required by law
• Maintaining Business Associate Agreements with third-party vendors who handle PHI on our behalf

If you have questions about how your health information is handled, please contact us at hello@zorawomen.com.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. You may request deletion of your data at any time by contacting us. We will honor such requests subject to any legal obligations that require us to retain certain records.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your personal information
• Opt out of marketing communications at any time

To exercise any of these rights, contact us at hello@zorawomen.com.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us at: