Legal
Privacy Policy
Last updated: July 26, 2026
Who We Are
Hair Scripts is a telehealth platform operated in Arizona. We connect patients with licensed Arizona clinicians for evaluation and treatment of hair loss conditions. Our registered business address is in Arizona. Questions about this policy: info@hair-script.com.
What We Collect
Information you give us: Name, date of birth, email, phone number, mailing address, state of residence, sex assigned at birth, medical history, current medications, and responses to our hair loss intake questionnaire.
Photos: Images of your scalp and hair that you upload as part of your consultation. These are used solely for clinical evaluation.
Test results: Photos and results from the Hair Scripts Response Test patch test kit.
Technical data: IP address, browser type, device type, pages visited, and time spent on the site — collected via standard web analytics tools.
How We Use It
We use your information to:
- —Provide telehealth consultations and write prescriptions
- —Communicate with you about your consultation status, test results, and prescription
- —Ship the Hair Scripts Response Test kit and your compounded medication
- —Comply with Arizona and federal healthcare law
- —Improve our platform and clinical protocols
We do not sell your data. We do not use your health information for advertising.
Who We Share It With
Licensed clinicians: Arizona-licensed providers who review your intake and write your prescription.
Compounding pharmacy: Your prescription and name/address are shared with our Arizona partner pharmacy solely to fill your prescription.
Technology vendors: We use HIPAA-compliant cloud infrastructure (Supabase) to store your data securely. These vendors sign Business Associate Agreements (BAAs) and cannot use your data for their own purposes.
We do not share your information with insurers, data brokers, or advertisers.
Data Security
Your health information is stored on encrypted, HIPAA-compliant servers. Photos are stored in a private, encrypted storage bucket with access restricted to your clinician and our administrative staff. We use row-level security so that only you and your provider can access your records.
Your Rights
You have the right to:
- —Request a copy of your health records
- —Request corrections to inaccurate information
- —Request deletion of your account and associated data
- —Withdraw consent for telehealth services (does not affect prior care)
To exercise any of these rights, email info@hair-script.com.
Cookies
We use essential cookies to keep you logged in and remember your quiz progress. We also use Google Analytics and Microsoft Clarity, which set cookies to help us understand how visitors use our site (pages visited, time on site, and general usage patterns). These analytics cookies are not used to serve you advertising, and we do not sell your data. You can block cookies in your browser settings without losing access to our site.
HIPAA
Notice of Privacy Practices
Required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) · Last updated: July 26, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Our Duties
Hair Scripts and its affiliated Arizona licensed clinicians (collectively, the “Practice”) are required by law to maintain the privacy of your Protected Health Information (PHI), to provide you with this Notice of Privacy Practices, and to follow the terms of this Notice.
How We May Use or Disclose Your PHI
Treatment: We may use your PHI to provide, coordinate, or manage your healthcare. For example, your clinician uses your intake, photos, and test results to write your prescription.
Payment: We may use or disclose your PHI to bill for services. Hair Scripts does not currently bill insurance.
Healthcare Operations: We may use your PHI for quality improvement, clinician oversight, and platform safety monitoring.
Pharmacy: We disclose your prescription information to our compounding pharmacy to fill your medication order.
Required by Law: We will disclose PHI when required by federal or Arizona state law, including public health reporting obligations.
Uses Requiring Your Authorization
The following uses require your written authorization: marketing communications, sale of your PHI, most uses of psychotherapy notes (not applicable to this practice), and any other use not described in this Notice. You may revoke authorization at any time in writing.
Your Rights Regarding Your PHI
- Right to Access: You may request a copy of your medical records. We will provide records in electronic format within 30 days.
- Right to Amend: You may request corrections to your records if you believe they are inaccurate.
- Right to an Accounting: You may request a list of disclosures we have made of your PHI (excluding treatment, payment, and operations).
- Right to Restrict: You may request restrictions on how we use or disclose your PHI, though we are not always required to agree.
- Right to Confidential Communications: You may request we communicate with you by a specific method or at a specific location.
- Right to a Paper Copy: You may request a paper copy of this Notice at any time.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with Hair Scripts at info@hair-script.com, or with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr. We will not retaliate against you for filing a complaint.
Changes to This Notice
We reserve the right to change this Notice at any time. Changes apply to PHI we already hold as well as new information. We will post the updated Notice on our website and make it available upon request.
Contact: Hair Scripts Privacy Officer · info@hair-script.com · Arizona