Privacy Policy

Introduction

AskRx LLC ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring you have a positive experience on our website and through our telehealth services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at ask-rx.com (the "Site") and use our services, including our telehealth platform for GLP-1 weight loss medications.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Site or services. By accessing and using AskRx, you signify that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

AskRx is a telehealth platform that connects patients with licensed healthcare providers for consultations related to GLP-1 weight loss medications. We are committed to maintaining the confidentiality and security of your health information in compliance with applicable federal and state laws, including the Health Insurance Portability and Accountability Act (HIPAA) and other relevant privacy regulations.

Information We Collect

We collect various types of information in connection with the services we provide, including personal information, health information, and technical information.

Information You Provide Directly

Account Registration Information: When you create an account with AskRx, we collect information such as your name, email address, phone number, date of birth, and password.

Medical and Health Information: As part of our telehealth services, we collect detailed health information necessary to provide appropriate medical care. This includes your medical history, current medications, allergies, weight and height information, lifestyle factors, prior treatment attempts, and any other health information you provide to our healthcare providers during consultations.

Billing and Payment Information: We collect billing information including your name, address, phone number, insurance information (if applicable), and payment method details. Payment processing is handled by third-party payment processors, and we do not store complete credit card numbers on our servers.

Communications: We collect records of any communications you have with our healthcare providers, customer support team, and other AskRx staff members, including messages, emails, and video consultation recordings.

Survey and Feedback Information: We may collect information from optional surveys, feedback forms, and questionnaires to improve our services.

Information Collected Automatically

Device Information: We automatically collect information about the devices you use to access our Site and services, including device type, operating system, browser type, unique device identifiers, and device settings.

Connection and Usage Information: We collect information about your interactions with our Site and services, including the pages or content you view, features you use, actions you take, and the dates and times of your activities.

Location Information: We may collect information about your general geographic location through IP addresses and, with your permission, through precise location services on your device. This information helps us verify state licensure requirements for our healthcare providers.

Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to recognize you, remember your preferences, understand your usage patterns, and improve our Site and services. This includes both session-based cookies (which expire when you close your browser) and persistent cookies (which remain on your device).

IP Address and Log Information: Our servers automatically record information about your connection, including your Internet Protocol (IP) address, the date and time of your access, the pages you visit, and any errors that occur.

How We Use Your Information

We use the information we collect for a variety of purposes essential to our business and our relationship with you:

Service Delivery

We use your information to deliver our telehealth services, including:

• Creating and managing your account
• Enabling consultations with our licensed healthcare providers
• Evaluating your eligibility for GLP-1 weight loss medications
• Prescribing, dispensing, and managing your medications
• Providing ongoing clinical monitoring and follow-up care
• Responding to your questions and providing customer support

Healthcare Services

We use health information to provide appropriate, evidence-based medical care, including treatment planning, clinical decision-making, and coordination of care with other healthcare providers when necessary.

Communications

We use your contact information to:

• Send you appointment reminders and confirmations
• Provide medication refills and prescription information
• Notify you about changes to our policies or services
• Send educational materials related to weight loss and GLP-1 medications
• Request your feedback on your experience

Analytics and Site Improvement

We analyze usage patterns and trends to understand how our Site and services are used, identify problems, improve functionality, and enhance user experience. This helps us make data-driven decisions about feature development and service offerings.

Legal Compliance

We use information as required by law, including:

• Maintaining medical records as required by state medical practice laws
• Reporting to state licensing boards as required
• Complying with HIPAA and other healthcare privacy laws
• Responding to legal process, court orders, or government inquiries
• Detecting, preventing, and addressing fraud or security incidents

Business Operations

We use information for legitimate business purposes, including billing, financial reporting, contract fulfillment, and general business administration.

Online Analytics and Advertising

Google Analytics

We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses cookies to analyze how you use our Site. The information generated by these cookies (including your IP address) is transmitted to and stored by Google on servers in the United States. Google uses this information to evaluate your use of the Site, compile reports on Site activity, and provide other services related to Site activity and Internet usage.

Google may transfer this information to third parties as required by law or where such third parties process information on Google's behalf. Google will not associate your IP address with any other data held by Google. You can prevent Google Analytics from recognizing you on return visits to our Site by disabling cookies in your browser settings.

Cookies and Tracking Technologies

Our Site uses cookies to track Site usage and to remember your preferences. Cookies are small files that are stored on your computer's hard drive. We use both session cookies (which are deleted when you close your browser) and persistent cookies (which remain until you delete them or they expire).

Most web browsers are set to accept cookies by default. If you prefer not to receive cookies, you can typically modify your browser settings to decline cookies. However, disabling cookies may affect your ability to use certain features of our Site and services.

Device Identifiers and Similar Technologies

We may use device identifiers and similar technologies (such as pixels, web beacons, and SDKs) to track user behavior, deliver personalized content, and measure the effectiveness of our marketing efforts.

Advertising

We may work with third-party advertising partners to display ads about our services on other websites and platforms. These partners may use cookies and similar technologies to track your browsing behavior and deliver targeted advertisements. You can typically opt out of targeted advertising through the Digital Advertising Alliance's opt-out tool.

How We Share Your Information

We take your privacy seriously and only share information as necessary to provide our services and as permitted by law.

Healthcare Providers and Practitioners

We share your health information with our network of licensed physicians and healthcare providers who treat you. They use this information to evaluate your condition, prescribe appropriate medications, monitor your progress, and provide clinical care.

Service Providers

We work with third-party service providers who assist us in operating our Site and delivering our services. These include:

• Hosting and cloud infrastructure providers
• Payment processors and billing service providers
• Pharmacy partners who dispense medications
• Customer service and support platforms
• Communications service providers for emails and SMS
• Analytics and data analysis providers
• Legal, accounting, and consulting advisors

We require these service providers to maintain the confidentiality and security of your information and to use your information only for the purposes for which we engage them.

Legal Requirements and Law Enforcement

We may disclose your information when required by law, including in response to:

• Subpoenas, court orders, or other legal processes
• Government agency requests and investigations
• Law enforcement inquiries
• Regulatory board requests related to medical licensing

We will attempt to provide you with notice of such requests when legally permitted to do so.

Business Transfers

If AskRx is involved in a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction or proceeding, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

Safety and Harm Prevention

We may disclose information when we believe in good faith that disclosure is necessary to prevent physical harm or financial loss, protect your safety or the safety of others, or investigate potential violations of our Terms of Service or this Privacy Policy.

Aggregate and De-identified Information

We may share aggregate and de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.

Your Marketing Choices

You have choices regarding how we communicate with you and use your information for marketing purposes.

Email Communications

If you receive promotional or marketing emails from AskRx and no longer wish to receive them, you can opt out by clicking the "unsubscribe" link at the bottom of any marketing email. Please note that even if you opt out of marketing communications, we will continue to send you transactional emails about your account, appointments, and clinical care.

Text Messages

If you have opted in to receive text messages from AskRx, you can opt out by replying to any text message with "STOP." You may also contact us directly at support@ask-rx.com to manage your communication preferences.

Push Notifications

If you have installed the AskRx mobile application, you can disable push notifications through your device settings or through the app's notification preferences.

Advertising Preferences

You can control cookie-based advertising through your browser settings or by opting out through the Digital Advertising Alliance at www.aboutads.info. However, even if you opt out of targeted advertising, you will still see advertisements; they will simply not be personalized based on your browsing activity.

Third Party Services

Our Site and services may contain links to third-party websites and services that are not operated by AskRx. This Privacy Policy does not apply to third-party websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services before providing your information or engaging with them.

Pharmacy Partners

We work with licensed pharmacy partners to dispense your medications. These pharmacies have their own privacy policies and are subject to HIPAA and state pharmacy regulations. We encourage you to review their privacy practices.

Insurance and Payment Partners

If you use insurance or other third-party payment methods, those entities may collect and use your information according to their own privacy policies.

Social Media

If you interact with AskRx through social media platforms, those platforms' privacy policies govern your information on their services. We encourage you to review the privacy practices of any social media platform before engaging with our content.

How We Protect Your Information

Protecting your information is a top priority. We implement comprehensive physical, electronic, and procedural safeguards to protect your information against unauthorized access, alteration, disclosure, or destruction.

Security Measures

Our security measures include:

• Encryption of data in transit using SSL/TLS protocols
• Encryption of sensitive data at rest using industry-standard encryption
• Secure servers with firewall protection and intrusion detection systems
• Regular security audits and penetration testing
• Access controls limiting employee access to information on a need-to-know basis
• Employee training on data privacy and security practices
• Secure destruction of data when no longer needed
• Incident response procedures for potential security breaches

HIPAA Compliance

AskRx complies with the Health Insurance Portability and Accountability Act (HIPAA) and associated regulations (45 CFR Parts 160 and 164). We maintain comprehensive HIPAA policies and procedures, conduct regular risk assessments, and implement administrative, physical, and technical safeguards to protect your protected health information (PHI).

Limitations

While we implement reasonable security measures, no system is completely secure. We cannot guarantee the absolute security of your information. If you become aware of a security breach or unauthorized access to your account, please contact us immediately at support@ask-rx.com.

Privacy Information for California Residents

If you are a California resident, you have additional privacy rights under the California Consumer Privacy Act (CCPA). This section provides information about those rights and how to exercise them.

Your Rights Under CCPA

Right to Know: You have the right to request that we disclose what personal information we collect, use, share, and sell about you.

Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (such as when we must retain information to fulfill legal obligations or complete transactions you have requested).

Right to Opt-Out of Sale or Sharing: You have the right to direct us not to sell or share your personal information with third parties for cross-context behavioral advertising.

Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.

Right to Limit Use and Disclosure: You have the right to limit our use and disclosure of sensitive personal information (such as health information) to purposes necessary to provide the services you requested.

Exercising Your Rights

To exercise any of these rights, please contact us at support@ask-rx.com with "CCPA Request" in the subject line, or mail your request to the address provided at the end of this Privacy Policy. Please include sufficient information to identify you and describe your request clearly.

We will verify your identity before fulfilling your request. You may designate an authorized agent to make requests on your behalf; however, we will require proof of authorization.

Non-Discrimination

We will not discriminate against you for exercising your CCPA rights. We will not deny, charge different prices for, or provide different quality of service based on your exercise of CCPA rights, except as permitted by law.

Categories of Information Collected

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, email, phone number, account identifiers)
• Commercial information (transaction history, billing information)
• Biometric information (health information, medical history)
• Internet activity (browsing history, interaction data)
• Geolocation data
• Sensory information (video recordings of consultations)
• Professional or employment information
• Inferences drawn from this information

Privacy Information for Nevada Residents

If you are a Nevada resident, you have the right to opt-out of the sale of covered information as defined by Nevada Revised Statutes Chapter 603A. While AskRx does not currently sell personal information in the traditional sense, we may share information with third-party service providers and partners.

Opt-Out of Sale of Covered Information

If you are a Nevada resident and wish to opt-out of the potential sale or sharing of your covered information, please send an opt-out request to support@ask-rx.com with "Nevada Opt-Out" in the subject line. We will honor your request and will not sell your covered information.

Contact for Nevada Rights

For questions about your Nevada privacy rights, please contact us using the information provided in the Contact Us section below.

Retention of Your Information

We retain your information for as long as necessary to provide our services, fulfill the purposes outlined in this Privacy Policy, and comply with applicable legal and regulatory requirements.

Medical Records

Medical records are retained in accordance with state medical practice laws and HIPAA requirements. Most states require medical records to be maintained for a minimum of 6 years from the date of the last patient encounter. We may retain records for longer periods as required by law or in connection with ongoing treatment relationships.

Account Information

We retain account information and user identifiers for as long as you maintain an account with us. If you request account deletion, we will retain information only as required by law or for legitimate business purposes.

Marketing Information

Marketing and promotional information is retained until you unsubscribe from our communications or request deletion.

Technical and Analytical Data

Technical information, analytics data, and log files are typically retained for 12 months or as required by security and compliance standards.

Legal Obligations

We may retain information longer when required by law, in response to legal process, or when necessary to protect our legal interests or the safety of others.

Revisions to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Effective Date" at the top of this Privacy Policy and, when required by law, by sending you an email notification or prominently displaying a notice on our Site.

Your continued use of our Site and services following the posting of revised Privacy Policy means that you accept and agree to the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have questions about this Privacy Policy, our privacy practices, or your information, please contact us. You may also contact us to exercise your privacy rights or to report a privacy concern.

We will respond to requests and inquiries within 30 business days. If you are not satisfied with our response, you may have the right to lodge a complaint with your state's regulatory authorities or the Federal Trade Commission.