Privacy Policy
Last Updated: 3/22/2023
About us
May Health US Inc (“May Health”, “we”, “us” or “our”) is a clinical-stage medical device company that focuses on the treatment of Polycystic Ovary Syndrome. We operate the website at www.mayhealth.com (the “May Health Website”), which sets out information about our therapies, technologies, pipelines and clinical trials.
If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please send an email to
May Health US Inc.
3489 Edison Way
Menlo Park, CA 94025
9 Rue d’Enghien
75010
Paris, France
About this Privacy Notice
This Privacy Notice explains how we collect, use, disclose, and otherwise process information that is identifies or is associated with you (your “personal information”) in connection with the May Health Website.
This Privacy Notice is not a contract and does not create any legal rights or obligations. It also does not apply to any processing of personal information during the course of any of our partner’s clinical research trials. Please refer to the clinical trial operator’s specific privacy notice for the relevant clinical trial for further information.
Who is responsible for your personal information?
May Health is the data controller responsible for the collection and use of your personal information when you use the May Health Website, contact us about our products, services, and clinical trials, or click on an online advert promoting us or clinical trials of our product. This means that we determine and are responsible for how your personal information is used.
What personal information do we collect through the May Health Website and how do we use it?
We collect the following personal information when you use the May Health Website, contact us about our products, services, and clinical trials:
| Category of personal information | How We Use the personal information | Legal Bases for Processing |
| Personal information you provide to us. | ||
| Contact Information when you make an information request, such as your first name, last name, email address and any other personal information you may disclose in communications with us. | We use this information to provide you with the information you have specifically requested or to deal with enquiries made by you in relation to the May Health Website. | The processing is necessary for our legitimate interests, namely, to respond to comments and queries that you send to us via the May Health Website. |
| Comments or queries that you submit to us. | We use this information to respond to the questions or requests that you send to us. | The processing is necessary for our legitimate interests, namely to respond to specific information requests made by you via the May Health Website. |
| Whether you have signed up to receive newsletters and notifications from us. | We use this information to provide notifications, send news, alerts to users that have signed up to our newsletter. | The processing is necessary for our legitimate interest, namely ensuring the user receives our newsletter and email alerts (as requested). |
| Personal information we collect automatically when you use the May Health Website | ||
| Information about how you access and use the May Health Website. For example, how frequently you access the May Health Website, the time you access the May Health Website and how long you use it for, the approximate location that you access May Health from, the site from which you came and the site to which you are going when you leave May Health Website, the pages you visit, the links you click, and other actions you take on the May Health Website. | We use information about how you use the May Health Website to present the May Health Website to you on your device and protect the security and integrity of the May Health Website. We use this information to monitor and improve the May Health Website and to resolve any issues. | The processing is necessary for the performance of a contract, namely our website terms of service. Our legal basis for this processing is user consent obtained via our cookie consent tool. |
| Log files and information about your device. We also collect information about the tablet, smartphone or other electronic device you use to connect to the May Health Website. This information can include details about the type of device, unique device identifying numbers, operating systems, browsers and applications connected to the May Health Website through the device, your mobile network, your IP address and your device’s telephone number (if it has one). | We use information about how you use and connect to the May Health Website to present the May Health Website to you on your device and protect the security and integrity of the May Health Website. We use this information to monitor and improve the May Health Website. | The processing is necessary for the performance of a contract, namely our terms of service. Our legal basis for this processing is user consent obtained via our cookie consent tool. |
How we collect personal information through the May Health Website
We collect personal information directly from you when you contact us through the May Health Website or subscribe to our newsletter.
We also collect information about how you use the May Health Website through cookies and similar technologies. Cookies are pieces of code that we transfer to your computer's hard disk to store or collect information. To find out more about the cookies we use on the May Health Website, please see our Cookie Policy.
Other than cookies and similar technologies that are required to operate the May Health Website, we will only place cookies on your device or otherwise use these technologies to collect data from your device with your consent.
You can change your cookie preferences through our cookie banner or by clicking on the cookie widget on the May Health Website.
How long we store personal information.
Unless a longer period is required by law, we will only hold your personal information on our systems for the following periods:
| Personal information | How long we keep it |
| Comments, queries and feedback | We will store this personal information for no longer than necessary for the purposes set out above and in accordance with our legal obligations and legitimate business interests. |
| Contact information | We will store this personal information for no longer than necessary for the purposes set out above and in accordance with our legal obligations and legitimate business interests. Where you have signed up to receive our newsletters and notifications from us, we will store this personal information until you inform us that you no longer wish to receive such communications from us. |
| Communication preferences | Where you have signed up to receive our newsletters and notifications from us, we will store this personal information until you inform us that you no longer wish to receive such communications from us. |
| Information about how you access the Website. | We do not store this personal information for longer than two (2) years. |
How do we share personal information
We do not normally share your personal information directly with clinical trial providers. If you click on a link to find out more about how you can participate in a clinical trial, you will be redirected to the clinical trial provider's website or invited to email them directly.
If you contact us about participating in a clinical trial, we will share your contact details with the clinical trial provider but will not collect any further information (such as whether you have registered your interest in the clinical trial).
We may, however, share the personal information we collect with the following recipients:
| Recipients | Why we share your personal information with these recipients | How these recipients will use your personal information |
| Our affiliates | We may share your personal information with companies that are owned by us, or under common ownership as us so that these companies can perform services (such as data analytics or support) for us, or if certain business units (such as outreach or research) are run by these other entities. | These companies that receive your personal information will use it in same way as described in this privacy policy. The lawful basis we rely on for sharing your personal information with these companies is that it is necessary for our and these companies' legitimate interests, namely coordinating and administering intragroup services. |
| Entities which might buy our business. | We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose personal information to a third-party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal information may also be disclosed in the event of insolvency, bankruptcy, or receivership. | These companies that receive your personal information will use it in the same way as described in this privacy policy. The lawful basis we rely on for sharing your personal information with these persons is that it is necessary for our and their legitimate interests, namely assessing and entering into a transaction to purchase all or part of our business. |
| Data hosting providers. | We may share your personal information with companies that host data in the cloud on our behalf. | These recipients will use your personal information as processors on our instructions. |
| Law enforcement, regulators and other parties for legal reasons. | We may share your personal information with third parties as required by law or if we reasonably believe that such action is necessary to (i) comply with the law and the reasonable requests of law enforcement; (ii) detect and investigate illegal activities and breaches of agreements; and/or (iii) exercise or protect the rights, property, or personal safety of May Health, its users or others. | These recipients will use your personal information in the performance of their regulatory or law enforcement role. The lawful basis we rely on for sharing personal information with these recipients is that the processing is either necessary to comply with a legal obligation to which we are subject or is necessary for our legitimate interests, namely enforcing our rights or complying with requests from regulatory authorities. |
International Data Transfers
We may transfer, store or process personal information in a country other than the one in which it was collected.
Where we transfer your personal information to countries outside of the UK or EEA, we ensure that such transfers are subject to appropriate safeguards recognized under applicable data protection laws, including:
- Decisions by the European Commission or UK Secretary of State that the country in which the recipient is located provides an adequate level of protection for personal data; and
- Standard Contractual Clauses approved by the European Commission and / or the UK Secretary of State (as applicable) ("SCCs").
Your personal information may be transferred as follows:
| Recipients | Country | Safeguard |
| Our affiliate | France | Adequacy (UK) |
| Our data hosting providers | United States | SCCs |
| Our email service providers | United States | SCCs |
If you would like to find out more about the transfers we undertake and the safeguards we implement, please contact us using the details set out in the About us section above.
Your Privacy Rights
You have the following rights in relation to your personal information (subject to certain limitations at law):
Access
The right to access and obtain a copy of personal information about you, as well as information relating to its processing.
Rectification
The right to correct or update any personal information about you that is inaccurate or incomplete.
Restriction of Processing
The right to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you.
Erasure
The right to request the deletion or erasure of personal information about you without undue delay if the continued processing of that personal information is not justified.
Portability
The right to obtain a copy of personal information about you in an easily accessible format and the right to transmit that personal information to another controller.
Objection to Processing
You also have the right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal information, and we will assess and inform you if that is the case. You can object to marketing activities for any reason.
Please note that if the exercise of these rights limits our ability to process personal information, we may not be able to provide our products or services to you, or otherwise engage with you going forward.
Right to Withdraw Consent
Where we rely on your consent for processing of your personal information, you also have the right to withdraw your consent to such processing, subject to certain limitations at law. Withdrawing consent shall not affect the lawfulness of processing carried out on the basis of that consent before it was withdrawn.
Submitting Requests
To exercise any of your privacy rights, please contact us as set forth in the About Us section above. We may need to verify your identity before processing your request, which may require us to obtain additional personal information from you. In certain circumstances, we may decline a request to exercise the rights described above if we are unable to identify you.
Right to Lodge a Complaint
You may also have the right to lodge a complaint to your local data protection authority. If you are based in the European Union, information about how to contact your local data protection authority is available here [https://ec.europa.eu/newsroom/article29/items/612080]. If you are based in the UK, information about how to contact your local data protection authority is available here [https://ico.org.uk/global/contact-us/].
Online advertising
We work with online advertising networks, social media companies and advertising partners to display targeted advertising to you about us and our clinical trials on other websites that you visit and on social media sites.
We do this by identifying groups of individuals that share similar traits, such as demographics or location, who we think would be interested in May Health, our products or participation in clinical trials, and notifying our advertising partners and social media companies that we would like to display adverts to these groups of individuals.
What information does May Health collect to show you an advert?
The ads you see online and on social media sites are tailored to your interests based on information collected about you, including information about your age, demographic, location, as well information about your internet usage over time, such as the websites you visit, the products and pages you view and the links you click on (including links in ads played or displayed to you).
We do not collect this information directly from you when you visit the May Health Website; however, other websites or social media pages that you visit may work with advertising partners to collect this information to determine what advert to show you.
If you visit a website or social media page that supports online advertising, the provider of that page may notify us if you fit some or all of the characteristics of the groups, we believe are interested in May Health, and allow us to serve you an advert about us or inviting you to sign up for a clinical trial.
If you are in Europe or the United Kingdom, we only receive and use your personal information to display adverts to you online to the extent you provide your consent through the cookie settings on the relevant website where the advert is displayed.
For adverts displayed to you on social media based on demographic information that you provide in your social media profile, the use of your personal information is necessary for our legitimate interests, namely identifying appropriate recipients of our social media advertising. You can opt out of such advertising using the settings and functionalities provided by the relevant social media provider.
What information does May Health collect about the adverts we serve?
In order to understand the effectiveness of any online advertising campaigns that we undertake, we may collect information about how you interact with any adverts that we show you on websites or social media pages that you visit, namely whether you viewed the advert or clicked on it. We will then use that information in an aggregated and anonymized form to understand how many people saw or clicked on our adverts.
If you are in Europe or the United Kingdom, we only receive and use this personal information to the extent you provide your consent through the cookie or similar tracking settings on the relevant service where the advert is displayed.
Controlling the adverts you see online and on social media
Typically, the information used to tailor online advertising to your interests is collected through cookies or similar technologies. Depending on where you are located, you have rights under applicable law to limit the collection and sharing of data through these technologies, such as the right to withhold consent or opt out of their use.
To opt out of targeted advertising, you may also use the following links provided by third parties that manage opt outs for some ad networks:
- http://preferences-mgr.truste.com
- http://www.networkadvertising.org/managing/opt_out.asp
- http://www.aboutads.info/
- https://policies.google.com/privacy/partners
If you opt out of all use of your personal information for advertising you will still get adverts when you browse the internet or social media, but those adverts will not necessarily be tailored to you.
Our Policy towards Children
The May Health Website is not directed at persons under 18 and we do not knowingly collect personal information from children under 18. If you become aware that your child has provided us with personal information, without your consent, then please contact us using the details set forth in the Contact Us section so that we can take steps to remove such information as quickly as possible.
Third-Party Websites
The May Health Website and communications that we send to you in accordance with your preferences may include links to third-party websites and applications. Except where we post, link to or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to, any personal information practices of third-party websites and online services or the practices of other third parties. To learn about the personal information practices of third parties, please visit their respective privacy notices.
Updates to This Privacy Notice
We will update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the "Last Updated" date at the beginning of this Privacy Notice. We will also notify you by email to your registered email address, by prominent posting on this website or our online services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.