Effective date: October 12, 2026
Last updated: October 12, 2026
This policy explains what personal information myHirsutism.com (“myHirsutism,” “we,” “us”) collects, why, who we share it with, and the choices and rights you have. It applies to visitors worldwide, including the United States, the European Economic Area (EEA), the United Kingdom and Switzerland.
The short version:
- We collect very little: your email address if you sign up, basic website analytics, and the details you enter if you leave a comment.
- We don’t sell or share your personal information for advertising. The site has no ads and no affiliate links.
- The self-check tool runs in your browser. We never see your answers or your score.
- You can unsubscribe, ask for a copy of your data or ask us to delete it at any time.
1. Who we are
myHirsutism.com is operated by Asri Ventures, based in Sofia, Bulgaria. Asri Ventures is the “controller” of your personal data under the EU and UK General Data Protection Regulation (GDPR).
Contact for anything privacy-related: office@myhirsutism.com
2. What we collect and why
Newsletter and free guides
When you sign up for our newsletter or download a free guide (for example the Hirsutism Action Plan or the doctor visit checklist), we collect:
- Your email address
- The form you used and the page you signed up from
- The date and time of sign-up, and your IP address at sign-up (to confirm the sign-up and prevent abuse)
We use this to send you the guide you asked for, a short welcome series and our weekly email. Our emails contain standard tracking that tells us whether an email was opened and which links were clicked. This helps us see which topics are useful and stop emailing people who no longer read them.
We don’t ask for, and you don’t need to give us, any information about your health to sign up.
Analytics
We use Google Analytics 4 to understand how people use the site: which pages are read, how visitors find us, roughly where they are (country or city level), what device and browser they use, and a few actions such as clicking the self-check button, clicking a source link or signing up. Google Analytics doesn’t give us your name or email address, and we don’t send it any.
If you’re in the EEA, the UK or Switzerland, Google Analytics only runs after you accept analytics cookies. Elsewhere, it runs by default and you can switch it off at any time (see section 6).
Comments
If you comment on an article, we collect the name, email address and optional website you enter, your comment, your IP address and your browser’s user agent. Your name and comment are shown publicly. Your email address is never shown. Comments are checked for spam by Akismet (see section 4).
Please don’t post personal health details in comments you wouldn’t want to be public.
Contact
If you email us, we keep your email and our reply so we can answer you and follow up.
Technical and security data
Like every website, our server automatically records basic technical data when you visit: IP address, browser type, the page requested, the referring page and the time of the request. We use this to run the site, keep it secure, fix errors and manage redirects.
The self-check tool
The hirsutism self-check runs entirely in your browser. Your answers and your score are not sent to us, not stored on our servers and not linked to your email address. When you close or reload the page, they’re gone.
3. Legal bases (EEA, UK and Switzerland)
We rely on the following legal bases under the GDPR:
| What | Legal basis |
|---|---|
| Newsletter and free guides | Your consent (Art. 6(1)(a)). You can withdraw it at any time by unsubscribing. |
| Analytics cookies | Your consent (Art. 6(1)(a)), given through the cookie banner. Google Analytics doesn’t load until you accept. |
| Comments | Our legitimate interest in running a discussion area and keeping it free of spam (Art. 6(1)(f)). |
| Replying to your emails | Our legitimate interest in answering you (Art. 6(1)(f)). |
| Server logs and security | Our legitimate interest in operating a secure website (Art. 6(1)(f)). |
| Keeping records we must keep by law | Legal obligation (Art. 6(1)(c)). |
Where we rely on legitimate interests, you can object (see section 8).
4. Who we share data with
We don’t sell your personal information, rent it or share it with advertisers. We share it only with service providers that help us run the site, under contracts that limit how they can use it:
| Provider | What they do | Where |
|---|---|---|
| beehiiv, Inc. | Sends our emails, hosts sign-up forms and stores subscriber lists | United States |
| Google LLC / Google Ireland Ltd. (Google Analytics 4) | Website analytics | United States and EU |
| Hostinger International Ltd. | Website hosting and server logs | EU and other regions |
| Automattic Inc. (Akismet) | Spam filtering for comments | United States |
We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a sale or transfer of the website. If the site changes ownership, the new owner would be bound by this policy for data collected under it, and we would notify subscribers by email.
5. International transfers
We’re based in the EU, and some of our providers are in the United States. Where your data is transferred outside the EEA or UK, we rely on the EU-US Data Privacy Framework (and its UK Extension and Swiss counterpart) where the provider is certified, or on the European Commission’s Standard Contractual Clauses (and the UK Addendum). You can ask us for more information about these safeguards.
6. Cookies and similar technologies
| Cookie or storage | Purpose | Set by | Duration |
|---|---|---|---|
_ga, _ga_6K2H0SMRNF |
Google Analytics: distinguishes visitors and sessions | Up to 2 years | |
comment_author_* |
Remembers your name and email if you choose to when commenting | WordPress | 1 year |
| Sign-up form storage | Remembers that you’ve seen or closed the sign-up pop-up, so it isn’t shown again too soon | beehiiv | Up to 14 days |
mh_consent (local storage) |
Remembers your cookie choice | myHirsutism | Until you change it or clear your browser data |
In the EEA, the UK and Switzerland, analytics cookies are only set if you accept them in the cookie banner. In other regions, they’re set by default, and you can turn them off. Either way, you can change your choice at any time with the Cookie settings link in the site footer, or by clearing cookies in your browser. If your browser sends a Global Privacy Control signal, we don’t load Google Analytics unless you accept it in the banner.
Essential cookies and storage don’t require consent.
7. How long we keep data
| Data | Retention |
|---|---|
| Newsletter subscriber data | Until you unsubscribe or we remove inactive subscribers. After that, we keep only your email address on a suppression list so we don’t email you again. |
| Google Analytics data | Automatically deleted after no more than 14 months |
| Comments | As long as the comment is published. Spam is deleted. |
| Emails you send us | Up to 2 years after our last exchange, unless needed longer |
| Server and security logs | Kept for a limited period by our host, longer only if needed to investigate a security issue |
8. Your rights
Everyone
Wherever you live, you can:
- Unsubscribe from our emails at any time using the link at the bottom of every email
- Ask what personal information we have about you and get a copy
- Ask us to correct or delete it
Email office@myhirsutism.com and we’ll respond within 30 days. We may need to confirm your identity, usually by replying from the email address we have on file. We won’t treat you differently for exercising your rights.
EEA, UK and Switzerland
Under the GDPR you also have the right to restrict processing, to data portability, to object to processing based on legitimate interests and to withdraw consent at any time (this doesn’t affect processing before you withdrew).
You can complain to a data protection authority. Our lead authority is the Bulgarian Commission for Personal Data Protection (cpdp.bg). You can also contact the authority where you live or work, for example the Information Commissioner’s Office (ico.org.uk) in the UK.
United States
Residents of California and other US states with consumer privacy laws (including Colorado, Connecticut, Virginia, Texas, Oregon and others) have rights to know, access, correct and delete personal information, and to opt out of its sale, sharing for targeted advertising and profiling.
- We don’t sell personal information and don’t share it for cross-context behavioral advertising. We haven’t done so in the past 12 months.
- We don’t use personal information for profiling that produces legal or similarly significant effects.
- Global Privacy Control. We treat a Global Privacy Control (GPC) signal from your browser as a request to opt out of sale and sharing, and we don’t load Google Analytics for browsers that send it.
- Authorized agents. You can use an authorized agent to make a request on your behalf. We may ask for proof of the agent’s authority.
- Appeals. If we decline your request, you can appeal by replying to our decision. If you’re not satisfied with the outcome of your appeal, you can contact your state attorney general.
Categories collected in the past 12 months (California disclosure): identifiers (email address, IP address, name if you comment), internet activity (pages viewed, interactions, via analytics), approximate location derived from IP address, and the content of comments and emails you send us. Sources: you, your device, and our service providers. Purposes and recipients are described in sections 2 and 4.
Sensitive personal information. We don’t ask for sensitive personal information and don’t use it to infer characteristics about you.
9. Consumer health data
Some US state laws, including Washington’s My Health My Data Act and Nevada law, cover information that could identify a person’s past, present or future health status. Signing up for a guide about hirsutism could be read that way. To be clear about how we handle it:
- What we collect: your email address and which guide or form you signed up through. We don’t collect symptoms, diagnoses, test results, treatments or self-check scores.
- Why: only to deliver what you asked for and send you our emails.
- Sources: you, when you fill in a form.
- Who we share it with: only our email provider (beehiiv) to send emails. We never sell consumer health data and never share it with advertisers.
- Your rights: you can confirm whether we hold your data, get a copy, withdraw consent and have it deleted by emailing office@myhirsutism.com. Appeals work as described in section 8.
10. Children
This site is for adults and isn’t directed at children under 13. We don’t knowingly collect personal information from children under 13 (or under 16 in the EEA and UK without parental consent). If you believe a child has given us personal information, contact us and we’ll delete it.
11. Security
We use HTTPS across the site, keep our software updated, limit who can access the site’s back end and choose providers with appropriate security measures. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.
12. Links to other sites
Our articles link to research papers, guidelines and other websites. Those sites have their own privacy policies, and we’re not responsible for how they handle your data.
13. Medical disclaimer
myHirsutism provides general educational information. It isn’t medical advice and doesn’t replace a consultation with a doctor.
14. Changes to this policy
We’ll update this policy when our practices or the law change, and update the date at the top. If we make significant changes, we’ll let subscribers know by email before they take effect.
15. Contact
Asri Ventures
Sofia, Bulgaria
office@myhirsutism.com