CONSUMER HEALTH DATA PRIVACY POLICY

Last Updated: October 30, 2025

PrescribedRX LLC (“we,” “us,” “our” or “PrescribedRX”) works hard to build and maintain a relationship of trust with you. This Consumer Health Data Privacy Policy is a supplement to our Privacy Policy and provides additional information about our collection, use, and disclosure of your Health Data (as defined below) in connection with your use of our website(s) on which this Consumer Health Data Privacy Policy is linked (collectively, “Sites”), such as www.PrescribedRX.com, and any transactions, interactions, or other engagements you might have with us (collectively, “Services”).  You should review our Privacy Policy in full.

ABOUT THIS CONSUMER HEALTH DATA PRIVACY POLICY

Policy Changes

This Consumer Health Data Privacy Policy is subject to change. We encourage you to review it frequently for any revisions or amendments. If we make any material changes to it, the revised policy will be posted on the Sites with the date of revision. Changes will be effective immediately upon posting. You will be deemed to have been made aware of and have accepted the changes by your continued use of our Sites or Services. We will also provide any other notices, and obtain any consents, required by law.

Conflict Between this Policy and Laws and Regulations

When federal, state, or local laws and regulations require a higher level of protection for your Health Data, they take precedence over this Consumer Health Data Privacy Policy. The specific requirements of this Consumer Health Data Privacy Policy apply unless disallowed by applicable laws or regulations. Please be aware that the Sites and Services are subject to the laws of the United States of America. The Sites and Services are solely intended for use by individuals in the United States of America 18 years of age and older. If you are not a member of the intended audience, please do not use the Sites and Services.

INFORMATION WE COLLECT

We may collect information that personally identifies, relates to, describes, or is capable of being associated with you (“Personal Information”), including information that identifies your past, present, or future health status (“Health Data”). Health Data we may collect includes information about your:

• Health conditions, testing, treatment, diseases, or diagnoses
• Social, psychological, behavioral, and medical interventions
• Surgeries or medical procedures
• Prescription, use, or purchase of medication
• Bodily functions, vital signs, symptoms, and other bodily measurements
• Reproductive or sexual health information (which may include sexual orientation)
• History of seeking healthcare services

HOW WE COLLECT HEALTH DATA

Voluntary Disclosure

We may ask you to provide us with Health Data when you communicate with us (online or offline), use the Sites or Services, enter into a relationship with us, and at other times. You are not required to provide us your Health Data; however, if you choose not to provide the requested information, you may not be able to use some or all of the features of the Sites or Services or we may not be able to fulfill your requested interaction.

Third-Party Data Sources

We may also collect Health Data from healthcare service providers, laboratories, and pharmacies.

RELATIONSHIP WITH INDEPENDENT HEALTHCARE PROVIDERS

We do not provide healthcare services to consumers. Rather, our Services help facilitate scheduling, communication, prescription management, and laboratory work with independent physician groups, pharmacies, and laboratories (“Healthcare Providers”). Accordingly, we are not a “covered entity” as defined under the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191, and its related regulations and amendments (collectively, “HIPAA”). The Healthcare Providers may be covered entities or “business associates” (as defined under HIPAA), and we may sometimes act as a business associate to a Healthcare Provider. If we act as a business associate to a Healthcare Provider, we will collect and/or process “protected health information” (as defined under HIPAA) in accordance with HIPAA, any other applicable law, and our agreement with the Healthcare Provider. The protected health information we collect and/or process in our capacity as a business associate to a Healthcare Provider will be governed by the relevant Healthcare Provider’s Notice of Privacy Practices, or if the Healthcare Provider is a business associate to a covered entity, the Notice of Privacy Practices of the covered entity Healthcare Provider that has contracted with the business associate Healthcare Provider. All other Health Data we collect and/or process that is not protected health information, such as Health Data you provide to register with our Services, purchase products and services, and complete intake questionnaires, will remain governed by this Consumer Health Data Privacy Policy and our comprehensive Privacy Policy.

The Healthcare Provider we have contracted with for medical consultations in connection with the Services has adopted the following Notice of Privacy Practices. By accessing or using our Services, you acknowledge receipt of the foregoing Notices of Privacy Practice. 

You are not required to use the Healthcare Providers with whom we have contracted. If you wish to use a different physician, pharmacy, or laboratory, please call us at 1-561-464-6220.

HOW WE USE AND DISCLOSE INFORMATION

Generally

We use Health Data for internal purposes, including:

• To provide, maintain, and support the Services provided to you. For example, to facilitate scheduling, communication, prescription management, and laboratory work with Healthcare Providers. 
• To comply with legal obligations, respond to governmental and other legal requests, and take other steps as necessary to protect our legal interests and the legal interests of others to the extent permitted by law such as the operation of our information security and anti-fraud programs.
• With your consent, to market our Services to you or to improve and develop new products and services.

Service Providers

We may establish a relationship with other businesses to provide services to us which may include corporate affiliates (“Service Providers”), including for:

• Provision of the Sites and Services;
• Facilitating marketing, non-marketing, and internal communications;
• Marketing design, development, and management;
• Business analytics (both marketing and non-marketing related);
• Project management and collaboration;
• IT and network administration such as data storage and management, website hosting, data security, mobile application development; 
• Sweepstakes, contest, and other promotional event design and administration;
• Financing products or services;
• Payment processing;
• Professional services such as legal and accounting; 
• Obtaining legal records;
• Collection of accounts; and
• Day-to-day business operations such as courier services, facilities management, electronic signatures, and document destruction.

We only provide our Service Providers with the Health Data and other Personal Information reasonably necessary for them to perform these services on our behalf.  Each Service Provider is expected to use reasonable security measures appropriate to the nature of the information involved to protect it from unauthorized access, use, or disclosure. Service Providers are prohibited from using Personal Information other than as specified or permitted by us. 

Third-Party Disclosures

We may disclose your Health Data to companies, governmental entities, Healthcare Providers, or other persons that are not our Service Providers as explained more fully below. We refer to these types of data recipients in this Consumer Health Data Privacy Policy as “Third Parties”. 

We do not sell your Health Data to Third Parties for their direct marketing purposes or for any other purpose.

We may disclose your Health Data to Healthcare Providers to provide, maintain, and support the Services provided to you. For example, we may disclose Personal Information to Healthcare Providers to facilitate scheduling, communication, prescription management, and laboratory work. We may disclose each type of Health Data we collect with one or more Healthcare Providers.  

We cooperate with government and law enforcement officials and private parties to enforce and comply with the law. We may disclose Health Data to government or law enforcement officials or private parties if, in our sole discretion, we believe it is necessary or appropriate to respond to legal requests (including court orders, investigative demands, and subpoenas), to protect the safety, property, or rights of ourselves, consumers, or any other third party, to prevent or stop any illegal, unethical, or legally actionable activity, or to comply with law.

We may disclose Health Data to businesses controlling, controlled by, or under common control with us and, if we in fact do so, we will update this Consumer Health Data Privacy Policy as required by law. If we are merged, acquired, or sold, or in the event of a transfer of some or all of our assets, we may disclose or transfer Health Data in connection with such transaction. 

OTHER PRIVACY AND SECURITY PROVISIONS

Security

We recognize the importance of safeguarding the confidentiality of Health Data from loss, misuse, or alteration. Accordingly, we employ commercially reasonable administrative, technical, and physical safeguards to protect such Health Data from unauthorized access, disclosure, and use, both in transit and at rest. Even with these safeguards, no data transmission over the Internet or other network can be guaranteed 100% secure. As a result, while we strive to protect information transmitted on or through our Sites or Services, you do so at your own risk.

How Long We Retain Your Data

We retain your Health Data in accordance with our record retention policies that are informed by our business needs as well as obligations to comply, and demonstrate compliance, with legal, regulatory, tax, and accounting requirements and standards.

Children’s Privacy

The Sites and Services are not intended for children under the age of 18 and we do not knowingly collect Health Data from children under the age of 18. If we become aware that we have inadvertently received Health data from a child under the age of 18, we will delete such information from our records.

De-Identified or Anonymized Information

We may de-identify or anonymize Health Data so that it is no longer capable of being associated with you and therefore is no longer Personal Information, or collect information that is already de-identified or anonymized. We may use and disclose de-identified or anonymized information without restriction as permitted by law. We will not attempt to re-identify the consumer(s) associated with previously de-identified or anonymized information.

ADDITIONAL STATE CONSUMER RIGHTS

We provide consumers with additional rights to access and control their Personal Information, including Health Data, subject to exemptions or exceptions that may apply under the laws of the relevant state.

Right to Know

You have the right to request that we provide you the categories or specific pieces of Personal Information we collected about you. You also are allowed to obtain certain information about our collection, use, and disclosure of your Personal Information over the past 12 months including: (i) the categories or specific pieces of Personal Information we collected about you; (ii) the categories of sources from which your Personal Information was collected; (iii) the business or commercial purpose(s) for which we collected your Personal Information; (iv) the categories of Third Parties with whom we shared your Personal Information; (v) the categories of Third Parties to whom we sold your Personal Information; and (vi) our business or commercial purposes for selling/sharing Personal Information.  We are not permitted to provide access to specific pieces of Personal Information if the Personal Information is sensitive or creates a high risk of potential harm from disclosure to an unauthorized person such as financial account information. We will not provide specific pieces of Personal Information unless you expressly request them.

Residents of Connecticut, Minnesota, and Oregon have the right to receive the names of Third Parties (not our Service Providers) to whom we disclosed Personal Information, if any. Further, residents of certain states may have the right to receive the names and contact information (active email address or other online mechanism for contact) of persons to whom we have disclosed their Health Data in specific circumstances as defined under applicable law. We will provide such information in compliance with a Right to Know request as required by law.

Right to Delete

You have the right to request that we delete any Personal Information we have collected about you. Please understand that we are not required to honor a deletion request if a legal exemption applies such as if we need the information to complete a requested or reasonably anticipated transaction, prevent security incidents or fraud, or comply with legal obligations.

Right to Correct

You have the right to request that we correct inaccurate Personal Information we maintain about you. After you request to correct inaccurate Personal Information, we will send you instructions for you to provide us with optional documentation to support your request and we will consider it. We may decline to correct your Personal Information if a legal exemption applies such as if we determine that your request is fraudulent or abusive or if we determine, based on the totality of the circumstances, that your correction is more likely inaccurate than accurate. We may decide to delete your allegedly inaccurate Personal Information instead of correcting it.

If you have an online account with us, you may also update your contact information and various other information through your online account which will be faster than submitting a correction request.

Right to Opt Out of Sales and Sharing

You have the right to direct us not to sell or share (for cross-context behavioral advertising or targeted advertising purposes) your Personal Information to Third Parties. We will process such requests within 15 business days, subject to any applicable exceptions and extensions permitted by law.

We will recognize and process Global Privacy Control and, to the extent required by law, other generally accepted browser-based opt-out signals. If we are able to reasonably associate a browser-based opt-out signal with an identifiable consumer, we will treat it as a request to opt-out of the sale or sharing of that consumer’s Personal Information as if the consumer made the request using a method below. If we are not able to reasonably associate a browser-based opt-out signal with an identifiable consumer, we will treat it as a request to opt-out of the sale or sharing of that Site visitor’s Personal Information collected while the signal is present. While the signal is present, we will also disable any Third-Party cookies or other tracking tools present on the Site that constitute the sale or sharing (for targeted or cross-context behavioral advertising purposes) of Personal Information.

Right to Limit Use of Sensitive Personal Information (including Health Data)

If you are a California resident, you have the right to request that we limit the use of your sensitive Personal Information as defined under California law to only exempt purposes such as to provide the goods and services reasonably expected by the average consumer who requests such goods and services, to prevent fraud, and to verify or maintain the quality or safety of goods or services we provide.

If you are a resident of a state with privacy rights listed above except California, and you make a request to limit the user of your sensitive Personal Information as defined under your applicable state’s law, we will treat that request as a revocation of your consent for us to collect and process your sensitive Personal Information and will delete your sensitive Personal Information subject to any exemptions available under applicable law. 

We may give you the ability to limit the scope of your revocation of consent. For example, you may be able to revoke consent for us to use your sensitive Personal Information for our marketing purposes but still consent to our use of your sensitive Personal Information to provide, maintain, and support the Services provided to you. Please carefully review any options made available to you to limit the scope of your revocation of consent. 

Please note we require the collection and processing of sensitive Personal Information in order provide certain of our Services and if you withdraw consent we may no longer be able to provide those Services to you.

We will process requests to limit use of sensitive Personal Information within 15 business days, subject to any applicable exceptions and extensions permitted by law.

Appeals

You have the right to appeal our decision to deny, in full or in part, your exercise of consumer rights by submitting a request to appeal. If we deny your appeal, we will provide you with a written explanation of the reasons for our decision.

Submitting a Privacy Request

You may submit your request(s) by using our Privacy Request Form, calling us at 1-855-772-6800, or emailing us at support@prescribedrx.com. In your correspondence, please include at least your name, mailing address, email address, and a description of your request. 

After you submit your request, we may contact you to obtain additional information necessary to verify your identity. For example, we may require you to verify certain information in our files or submit a signed declaration under penalty of perjury verifying your identity. We will not process Right to Know,  Deletion, Correction, or certain Appeal requests without verifying your identity, so please respond promptly. If you do not timely respond to our requests for information, we may deny your request.

We will process verified Right to Know, Deletion, and Correction requests within 45 days of receipt, subject to any applicable exemptions and extensions permitted by law up to 90 days. We will acknowledge receipt of your request within 10 business days. We will process verified Appeal requests within the time period allowed by applicable law, but typically within 45 days of receipt. If you have a password-protected online account with us, we may provide the response to your request via the online account, otherwise, we will give you the option to choose between mail and electronic delivery. We will retain a copy of your Deletion request for at 2 years as required by law. 

Authorized Agent

If you are an authorized agent submitting a request on behalf of a California resident, you must provide a copy of a lawful power of attorney or a written signed authorization from the consumer along with proof of your identity. You may provide this documentation via email to support@prescribedrx.com. after submitting the request. Depending on the request made, we may contact you and the consumer on whose behalf you claim to act to verify your identity, the consumer’s identity, and your authorization to act on the consumer’s behalf.

Non-Discrimination Notice

We will not discriminate against any consumer for exercising their privacy rights under law or this Consumer Health Data Privacy Policy. 

Contact Us

If you have any questions about our Sites, Services, or this Consumer Health Data Privacy Policy, please contact us using the information below.

PrescribedRX LLC
Attn: Privacy
516 Northwood Road
Unit 8532
West Palm Beach, Florida 33407
Email: support@prescribedrx.com