Draft — pending legal & compliance review before launch
What information we collect, why, who it goes to, and what you can ask us to do with it.
This Policy describes how 20 Science LLC handles information collected through 20Science. Health information you provide during a medical intake, and information generated in the course of your care, is protected health information handled under our HIPAA Notice of Privacy Practices, which governs where the two documents differ.
Information you give us: name, email address, phone number, state of residence, date of birth, and the medical information you submit during intake. Information collected automatically: IP address, device and browser characteristics, pages viewed, and referring URL. Marketing attribution: where you arrived from, including campaign parameters and advertising click identifiers, so we can understand which of our marketing actually reaches people. We do not knowingly collect information from anyone under 18.
To route your intake to a licensed provider and support your care; to process and fulfil orders through our platform and pharmacy partners; to communicate with you about your treatment, orders and account; to send marketing communications where you have opted in; to measure and improve the Site and our marketing; to detect fraud and misuse; and to meet legal and regulatory obligations.
an independent, physician-owned medical group and its affiliated clinicians, so they can evaluate and treat you. our technology and pharmacy-fulfilment partner, which provides the technology platform, coordinates pharmacy fulfilment, and supports payment processing as part of record. Accredited compounding pharmacies, to dispense and ship. Service providers acting on our instructions — hosting, email and text delivery, analytics — under contractual confidentiality obligations. And where required by law, or in connection with a merger or sale of assets. We do not sell your personal information, and we do not share health information with advertising networks.
We use analytics and advertising tools to understand how people find and use the Site. These tools may set cookies or similar identifiers. We do not pass health information, intake responses or treatment details to any advertising platform. You can control cookies through your browser, and where required we ask for consent before setting non-essential cookies.
Medical records are retained for the period required by applicable law and professional standards, which is generally longer than you might expect and is not something we can shorten on request. Marketing and analytics data is retained only as long as it serves the purpose it was collected for.
You can opt out of marketing email using the unsubscribe link in any marketing message, and out of text messages by replying STOP. Transactional messages about your care and orders are not marketing and will continue. Depending on where you live you may have rights to access, correct, delete or port your personal information, and to appeal a refusal. California residents have specific rights under the CCPA/CPRA. To exercise any of these, contact support@20science.com. Health information held by your treating clinicians is subject to the separate process described in our HIPAA Notice.
We use technical and organisational measures appropriate to the sensitivity of the information we handle, including encryption in transit and access controls. No system is perfectly secure, and we do not claim otherwise.
Privacy questions: support@20science.com, or write to 20 Science LLC, 2625 Townsgate Rd, Suite 330, Westlake Village, CA 91361.