Effective Date: June 26, 2026

RootMD LLC ("RootMD," "we," "our," or "us") respects your privacy and is committed to protecting the personal information you provide when visiting our website, purchasing our products, completing our Hair Quiz, subscribing to our communications, or otherwise interacting with our services collectively, the "Services".

By using our Services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

1. Information We Collect

We may collect the following categories of information:

Personal Information

When you voluntarily provide it, we may collect:

• Full name
• Email address
• Shipping address
• Billing address
• Telephone number
• Date of birth, if provided
• Payment information, processed securely through third-party payment providers
• Account login information
• Purchase history
• Product preferences
• Hair Quiz responses
• Customer support communications

Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address
• Browser type
• Device type
• Operating system
• Pages viewed
• Time spent on pages
• Referring website
• Geographic region
• Session identifiers
• Cookies
• Pixels
• Analytics information

2. Hair Quiz Information

If you complete our Hair Growth Quiz, you voluntarily provide information regarding your hair concerns, goals, lifestyle, and other responses.

The Hair Quiz is designed solely for educational and product recommendation purposes.

It is not intended to diagnose medical conditions or provide medical advice.

3. How We Use Your Information

We may use your information to:

• Process orders
• Ship products
• Process payments
• Create customer accounts
• Respond to customer service requests
• Recommend products
• Improve our website
• Improve our products
• Personalize your shopping experience
• Conduct analytics
• Detect fraud
• Prevent unauthorized activity
• Send promotional emails
• Send transactional emails
• Send subscription renewal notices
• Improve customer support
• Comply with legal obligations

4. Email Marketing

If you subscribe to our newsletter or otherwise consent, we may send promotional emails regarding:

• Product launches
• Sales
• Educational content
• Hair health information
• Company news

You may unsubscribe at any time using the unsubscribe link included in our emails.

5. SMS Marketing

If you voluntarily opt into SMS communications, you consent to receive recurring automated marketing and transactional text messages.

Message frequency varies.

Message and data rates may apply.

Consent is not required as a condition of purchase.

You may opt out at any time by replying STOP.

6. Cookies & Tracking Technologies

RootMD uses cookies and similar technologies to:

• Remember preferences
• Analyze website traffic
• Improve website functionality
• Measure advertising effectiveness
• Personalize content
• Enable shopping cart functionality

We may use services such as Google Analytics, Meta Pixel, TikTok Pixel, Shopify Analytics, Klaviyo, and similar technologies.

You may disable cookies through your browser settings, although portions of the website may not function properly.

7. How We Share Information

We do not sell your personal information.

We may share information with trusted third parties necessary to operate our business, including:

• Shopify
• Payment processors
• Shipping providers
• Marketing platforms
• Analytics providers
• Customer support software
• Email service providers
• SMS providers
• Fraud prevention services
• Professional advisors
• Government authorities when legally required

These providers receive only the information reasonably necessary to perform their services.

8. Payment Information

Payment information is processed through secure third-party payment providers.

RootMD does not store complete credit card numbers on its servers.

Payment processors maintain their own privacy and security practices.

9. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, or destruction.

However, no website or internet transmission can be guaranteed to be completely secure.

You use the Services at your own risk.

10. Data Retention

We retain personal information only as long as reasonably necessary to:

• Provide Services
• Fulfill orders
• Maintain business records
• Resolve disputes
• Comply with applicable law
• Enforce our agreements

When information is no longer required, we may securely delete or anonymize it.

11. Children's Privacy

The Services are not directed toward children under the age of 13.

We do not knowingly collect personal information from children.

If we learn that a child has submitted personal information, we will take reasonable steps to delete such information.

12. Your Privacy Rights

Depending upon your state or country of residence, you may have the right to:

• Access personal information we maintain about you.
• Correct inaccurate information.
• Request deletion of personal information.
• Request a copy of your information.
• Object to certain processing.
• Withdraw consent where applicable.

To exercise these rights, contact us using the email below.

13. California Privacy Rights

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to:

• Know what categories of personal information we collect.
• Request deletion of certain personal information.
• Request correction of inaccurate information.
• Receive a copy of your personal information.
• Limit certain uses of sensitive personal information where applicable.

RootMD does not sell personal information as defined under California law.

14. International Users

If you access the Services outside the United States, you understand that your information may be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.

15. Third-Party Links

The Services may contain links to third-party websites.

RootMD is not responsible for the privacy practices, policies, or content of any third-party website.

16. Product Reviews & Testimonials

If you voluntarily submit product reviews, testimonials, photographs, videos, or before-and-after images, you grant RootMD permission to publish, reproduce, and use that content for marketing, educational, and promotional purposes, unless prohibited by applicable law.

17. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time.

Updated versions will be posted on this page with a revised Effective Date.

Your continued use of the Services following any update constitutes acceptance of the revised Privacy Policy.

18. Contact Us

If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact: