Privacy Policy

Privacy Notice

Curology makes customized skincare and haircare affordable and accessible. We use the information you share with us to help provide you with a customized experience from when you start interacting with us to when you receive your own personalized treatment plan and products.

Curology, Inc., its affiliates, and fully owned and operated brands, including Agency (“Company”), and our affiliated independent medical groups, including, David Lortscher, MD, P.C. , David Lortscher, MD, P.A., Lortscher Health of Hawaii, Professional Corporation, David Lortscher, MD, S.C., Lortscher Health of New Jersey, P.C., David Lortscher, MD, Professional Association (the “Medical Groups” and with Company, hereinafter referred to collectively as, “Curology,” “we,” “us,” or “our”) take your privacy and the trust you place in us to protect your privacy seriously. We are committed to protecting the privacy and security of your information.

The purpose of this Privacy Notice (“Privacy Notice”) is to explain how we may collect, use, store, disclose, or otherwise process your personal information when you interact with us through the Curology websites located at http://curology.com, https://shop.curology.com, and https://withagency.com (the “Website”), our Products and Services, and/or other communication channels under our control such as email, telephone, or social media that link to this Privacy Notice (collectively, the “Services”). All capitalized terms not otherwise defined in this Privacy Notice have the same meaning as set forth in the Curology Terms of Service, available here: https://curology.com/terms/. If you are a resident of California, Colorado, Connecticut, Nevada, Virginia, or Washington please view our State Privacy Notice Addenda.

When you access or use the Services, you are creating a customer relationship with Curology that enables you to access and use the Services as a “Website User”. As part of that relationship, Website Users can review our Products and Services, our resources, and provide information, including personal information that we do not consider to be health information. Once a Website User completes and submits our patient intake process and agrees to the Informed Consent to Treatment via Telehealth (or, if applicable, the Parent/Guardian Informed Consent to Treatment via Telehealth), that user is treated as a “Patient User.”

The Services are controlled and operated by us from the United States and are not intended to subject us to the laws or jurisdiction of any state, country, or territory other than that of the United States. All capitalized terms not otherwise defined in this Privacy Notice have the same meaning as set forth in the Curology Terms of Service, available here: https://curology.com/terms/.

Employees, job applicants and independent contractors who are California residents receive a supplemental privacy notice that applies to their relationship with Curology. In the event of any conflict or inconsistency with this Privacy Notice, the terms of that supplementary privacy notice will control.

Collection of Information
Sources of Information
Use of Information
Sharing of Information
Cookies and Other Tracking Technology
Persons Under the Age of 18
Security of Information
Retention of Information
Your Choices
International Transfers
Updates
Contact Us

1. Collection of Information

Curology collects and stores a variety of information when you use our Services so that we can provide the Services to you. If we do not have this information, you may not be able to access or use part or all of our Services.

The specific types of information we collect will depend on the Services you use (e.g., Website User, Patient User), but may include the following:

Personal Information

Personal information means information associated with or used to identify or contact a specific person. Personal information we collect about Website Users and Patient Users may include:

Identifiers such as first and last name, date of birth, sex or gender, physical address, email address, phone number, etc.
Audio, visual, and other electronic information such as photographs for purposes other than diagnosis or treatment
Commercial information such as order history, subscriptions, products purchased or considered, payment information, and shipping history
Internet and network activity information such as IP address, geolocation information, device information, log data, browsing history, search history, information on your interaction with a website, application, or advertisement, and cookies and similar technologies
Inferences drawn from any of the information collected, such as a user’s preferences, characteristics, and behavior, etc.

Health Information

Health information is a type of personal information that includes any identifying information we collect relating to your medical history, including symptoms, diagnoses, treatment and outcomes. Health information we collect about Patient Users may include:

Audio, visual, and other electronic information such as photographs for purposes of diagnosis or treatment
Medical history such as medical conditions, medications, allergies, treatment options, prescriptions, and any other health-related information for purposes of diagnosis or treatment.

2. Sources of Information

This Privacy Notice applies to information we collect information about you from the following categories of sources:

You (Actively)

You may actively provide us information when you use our Services such as through our Website, emails or other electronic communications, social media, surveys, sweepstakes and promotions, customer support, or any other online or offline interactions.

You (Passively)

You may also passively provide us information through your interactions and use of our Services such as your IP address, access times, hardware and software information, device information, device event information (e.g., crashes, unsuccessful logins, browser type), the web pages you’ve viewed or engaged with before and/or after using the Services, and other relevant information. We may use cookies and other tracking technology to collect this information. For more information on the cookies and other tracking technology we use, please see the Cookies and Other Tracking Technology section below. If you actively provide information, but do not complete the sign up for Services, our website cookies may store the data provided.

Third Parties

We may receive information from third parties such as affiliates, business partners, and service providers to operate our business and improve your experience and interactions with us.

Publicly Available Databases

We may receive information that is available publicly, either online or offline, to operate our business and improve your experience and interactions with us.

3. Use of Information

Curology and our service providers may use information (including personal information) for the following business or commercial purposes:

To provide teledermatology and related healthcare services to our Patient Users via the Medical Groups (including those who provide healthcare services, drugs, or medical devices)
To verify your identity as the holder of an account with us
To administer your account, process payments, troubleshoot issues, and provide you with customer support
To communicate with you about the Services, and to deliver any administrative notices or alerts and communications relevant to your use of the Services
To allow you to participate in sweepstakes, contests, or other promotions
To market our Services that we believe may be of interest
To tailor the features, performance and support of the Services to you and your preferences
To provide, operate, analyze usage of, and improve the Services, including performing research and development
To investigate, detect, deter, prevent, report, defend against, or take other action regarding security incidents, abusive behavior, suspected fraud, malicious or illegal activities, or violations of our Terms of Service or other policies
To make sure our terms, policies, and agreements with you and any third parties are enforced
To comply with applicable laws and regulations.

4. Sharing of Information

We understand the importance of protecting the confidentiality of your information and limit our disclosure of your personal and/or health information to the following possible business or commercial purposes:

To third-party service providers acting on our behalf or providing support to our business, enabling us to offer and deliver the Services
- Shopify. Our e-commerce platform, including our online store and related checkout services, are supported by Shopify Inc. (“Shopify”). Information you submit to our online store or during the checkout process will be transmitted to and shared with Shopify. Shopify is contractually required to implement and maintain technical, administrative, and physical security measures to protect the confidentiality and security of personal information. Shopify may compile and use aggregated and anonymized data (that does not identify any individual) derived from the use of the Shopify services to improve and enhance the Shopify platform including in connection with artificial intelligence and machine learning activities. For more information, please review Shopify’s Privacy Policy.
To market and communicate about our and third-party products, Services, events and other offerings that we believe you may find interesting and to measure the effectiveness of communications and marketing (directly or via third parties)
To personalize your Website experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and advertisements through our Website, third-party sites, and via email or text message (with your consent, where required by law). For more information, please see Section 5 (Cookies and Other Tracking Technology)
In order to protect the safety and security of Curology, the Services, our operations, our systems, our properties, our customers, or any other related person or entity
In order to investigate, detect, deter, prevent, report, defend against, or take other action regarding security incidents, abusive behavior, suspected fraud, malicious or illegal activities, or violations of our Terms of Service or other policies