Privacy Policy

Last updated: September 2026. This notice covers OshiJournal website only. Oshi Health processes patient data under its own notices once you leave for onboarding.

1. Controller

2. What this site collects

This is a static information site. When you load a page, our hosting provider may process technical data required to deliver the site: IP address, date and time, requested URL, referrer, browser and device information, and standard server logs. We do not run a patient portal on this domain.

3. Contact email

If you write to us, we process the content of your message and your email address to answer you. We keep correspondence only as long as needed for that purpose or as required by law.

4. Cookies and analytics

We may use strictly necessary cookies to operate the site. If we add analytics or advertising cookies, we will do so only where legally required consent has been collected. You can control cookies in your browser.

5. Outbound booking

Buttons labeled for booking send you to https://my.oshihealth.com/onboarding/universal/intro and related Oshi Health properties. From that moment, Oshi Health is an independent controller for any account, insurance, or health information you submit. Read Oshi’s privacy policy and Notice of Privacy Practices on their website before you enter medical details.

6. Legal bases (EEA/UK readers)

Where GDPR applies, we process server logs on the basis of legitimate interests in delivering and securing the website (Art. 6(1)(f) GDPR), and correspondence on the basis of contract or legitimate interests (Art. 6(1)(b) or (f) GDPR). Consent is the basis for non-essential cookies if they are used (Art. 6(1)(a) GDPR).

7. U.S. state privacy

We do not sell personal information for money. If you are a resident of a U.S. state with a comprehensive privacy law and believe we hold personal information about you, email the controller above to request access, correction, or deletion. We will not discriminate against you for exercising those rights.

8. Retention and security

Log data is kept only as long as needed for security and operations, unless a longer period is required by law. No method of transmission is perfectly secure.

9. Your rights

Depending on your location you may have rights to access, correct, delete, restrict, or port your data, and to object to certain processing. You may lodge a complaint with a supervisory authority, including the Estonian Data Protection Inspectorate, or the authority of your EU member state of residence.

10. Children

This site describes an adult clinical service (18+). We do not knowingly collect data from children.

11. Changes

We may update this policy. The date at the top will change when we do.