RxHere Privacy Policy

Effective Date: June 18, 2026 | Last Updated: June 24, 2026

At RxHere (“we,” “us,” or “our”), we are committed to protecting your privacy and safeguarding your personal and financial data, as well as your Protected Health Information (“PHI”). This Privacy Policy explains how we collect, use, disclose, and secure your information when you visit our website at https://rxhere.com/, use our pharmacy services, or communicate with us.

Our handling of Protected Health Information is strictly governed by the Health Insurance Portability and Accountability Act (“HIPAA”) and applicable state laws, as further described in the Notice of Privacy Practices within our Terms of Service. Where the HIPAA Notice of Privacy Practices and this Privacy Policy conflict with respect to PHI, the Notice of Privacy Practices controls.

1. Scope and Who This Policy Covers

RxHere provides compounded pharmacy services to and through licensed healthcare providers. This Privacy Policy applies to the providers and authorized provider staff who use our services, and to the patients on whose behalf prescriptions are submitted and to whom medications are dispensed. References to “you” and “your” apply to the relevant party in context.

2. Information We Collect

We collect several types of information from and about users of our services, including:

• Personal Identification Information: Name, mailing address, billing address, email address, phone number, and date of birth.
• Health and Medical Information (PHI): Prescriptions, medication history, health insurance details, pharmacy benefit manager (PBM) information, clinical notes, and healthcare provider details.
• Financial Information: Payment card details (processed securely via third-party payment gateways) and transaction history.
• Technical and Usage Data: IP address, browser type, operating system, pages visited, time spent on our site, and information collected through first-party cookies that help us maintain secure sessions and optimize website performance.

3. How We Use Your Information

We use the information we collect to operate efficiently and provide you with a secure, optimized pharmacy experience. This includes:

• Fulfilling Services (Treatment): Processing and dispensing prescriptions, coordinating care with prescribing providers, and offering pharmacist counseling.
• Billing and Processing (Payment): Verifying insurance coverage, managing co-pays, and billing third-party payers or PBMs.
• Operations and Improvements: Managing account access, monitoring service quality, training pharmacy staff or interns, and performing security audits.
• Communications: Sending prescription status updates, refill reminders, responding to support inquiries, and handling customer service issues.

4. How We Share Your Information

We do not sell, rent, or lease your personal information or health records to third parties. We share your data only with trusted partners under the following conditions:

• Healthcare Providers and Insurers: To fulfill prescriptions and process payments.
• Business Associates: Third-party contractors (e.g., cloud hosting, secure billing systems, claims submission services) that agree in writing, through a HIPAA-compliant Business Associate Agreement, to safeguard your data.
• Legal and Regulatory Obligations: When required by state or federal law, law enforcement requests, FDA reporting, state boards of pharmacy, public health reporting, or valid judicial subpoenas.

5. Cookies and Web Tracking Technologies

Our website uses first-party cookies and similar technologies to maintain your secure session, analyze aggregate site traffic, and optimize page performance. We do not place third-party advertising or behavioral tracking pixels on authenticated portal pages or on any page through which Protected Health Information is collected or displayed.

You can configure your browser to refuse cookies, but certain features of the RxHere portal or checkout system may not function properly as a result. Where state law requires, you may also exercise the opt-out rights described in Section 10 below.

6. Data Security

We employ industry-standard physical, technical, and administrative access controls to keep your personal data and health information safe. All online transmissions involving sensitive data use secure encryption (SSL/TLS protocols). While we deploy aggressive safeguards, no transmission of data over the internet can be guaranteed 100% secure, and use of our portal is at your own risk.

7. Data Retention

We retain personal information and PHI for as long as necessary to provide our services and to meet our legal, regulatory, and recordkeeping obligations. Pharmacy and prescription records are retained in accordance with applicable state pharmacy recordkeeping laws and HIPAA, retaining records for the longer of any applicable required period. When information is no longer required, we securely dispose of it in accordance with applicable law.

8. Breach Notification

In the event of a breach of unsecured Protected Health Information, we will provide notification to affected individuals, and to regulators and the media where applicable, in accordance with the HIPAA Breach Notification Rule and applicable state breach-notification laws.

9. Your Rights Regarding Your Health Information (HIPAA)

Subject to HIPAA and applicable state health laws, you have rights regarding your PHI, which include:

• The right to inspect and obtain an electronic or paper copy of your records.
• The right to request an amendment to your data if you believe it is incorrect or incomplete.
• The right to request restrictions on how we use or disclose your health data for payment or treatment operations.
• The right to request an accounting of disclosures we have made of your PHI.

To exercise these rights, contact our Privacy Officer using the information in Section 12. Detailed procedures are set out in our Notice of Privacy Practices.

10. State Privacy Rights

Most information we hold about patients is PHI governed by HIPAA, which is generally exempt from state consumer-privacy statutes. For personal information that is not PHI (such as website usage data and general marketing contact information), residents of certain states may have additional rights, including the right to access, correct, or delete that information, and the right to opt out of the sale or sharing of personal data and of targeted advertising.

We do not sell personal information or share it for cross-context behavioral advertising. To submit a state-privacy request or an opt-out, contact our Privacy Officer using the information in Section 12. We will respond within the timeframe required by applicable law, generally within 45 days, and will not discriminate against you for exercising these rights. Where required, you may designate an authorized agent to make a request on your behalf, and you may appeal a declined request.

11. Changes to This Privacy Policy

We reserve the right to revise this Privacy Policy at any time. When modifications are deployed, we will update the effective date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your information.

12. Contact Information

If you have any questions, concerns, or formal requests regarding your data privacy rights, please contact our Privacy Officer at:

RxHere Pharmacy Email: [email protected]

Phone: (848) 379-4373 / +1 (848) 379-4373