The Rx Spot

Privacy Policy

Last updated: May 10, 2026

1. Scope of this policy

This Privacy Policy explains how The Rx Spot LLC and the The Rx Spot platform collect, use, disclose, and protect information when you visit our website, contact us, use a portal account, submit a storefront intake, complete checkout, or otherwise interact with services that link to this policy. Some storefronts may be operated under a clinic, pharmacy, or wellness brand's name. In those cases, that business may also provide its own privacy terms.

2. Information we collect

The information we collect depends on how you use the platform. It may include:

• Contact and account information, such as name, email address, phone number, login details, organization, role, and business contact details.
• Patient intake and health-related information submitted for provider review, such as medical history, medication requests, allergies, current medications, questionnaire answers, state of residence, shipping details, and optional uploaded photos or documents.
• Order, fulfillment, and support information, including selected products, consultation details, provider-case status, pharmacy or fulfillment status, shipping and tracking information, support messages, and audit records.
• Payment and billing information needed to process transactions. Full card details are handled through payment tokenization and gateway services, such as USA Payments/NMI, when public payments are enabled for a storefront.
• Device, log, and usage information, such as IP address, browser type, device identifiers, pages viewed, error logs, cookie preferences, approximate location inferred from technical data, and timestamps.
• Business onboarding and operations information for clinics, partners, and storefront owners, such as licensure or attestation details, catalog choices, pricing settings, support contacts, and integration preferences.

3. Health information and HIPAA-related roles

The Rx Spot treats health-related information as sensitive. Depending on the relationship between The Rx Spot, a tenant, a medical practice, a pharmacy, or another healthcare organization, some information may be protected health information under HIPAA or may be regulated by other federal or state health privacy laws. Where a Business Associate Agreement or other required data-protection agreement applies, we handle information according to those agreements and applicable law.

When information is not governed by HIPAA, it may still be sensitive consumer health data. We use it only for the purposes described in this policy, the applicable storefront or tenant relationship, and the consents or authorizations provided during intake and checkout.

4. How we use information

We use information to:

• Operate, secure, and improve the website, portals, storefronts, checkout, intake, and support workflows.
• Create and manage accounts for staff, clinics, businesses, storefront owners, and patients where applicable.
• Send patient intake, selected items, and related order information to licensed providers and pharmacies for review, care coordination, fulfillment, and status updates.
• Process payments, prevent duplicate charges, record payment status, and support refunds, voids, settlement, and accounting workflows.
• Provide customer support, operational notices, security alerts, order updates, and administrative communications.
• Maintain audit logs, troubleshoot errors, detect fraud or misuse, enforce terms, and comply with legal, tax, accounting, contractual, and regulatory obligations.
• Analyze aggregate or de-identified usage patterns so we can improve reliability, product design, catalog workflows, and storefront performance.

5. When we share information

We share information only as needed to operate the platform and related services. Recipients may include:

• Licensed clinicians, medical practices, provider networks, pharmacies, wholesalers, fulfillment partners, and their authorized personnel.
• The clinic, medspa, wellness brand, pharmacy, or business whose storefront, portal, or program you are using.
• Payment processors, tokenization providers, banks, fraud-prevention vendors, and accounting or reconciliation tools.
• Hosting, email, SMS, analytics, security, error-monitoring, storage, and support vendors that help us operate the services.
• Government authorities, regulators, courts, law enforcement, or other parties when required by law, needed to protect rights or safety, or necessary to enforce agreements.
• Successor organizations in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality and legal requirements.

We do not sell personal information for money. We do not knowingly sell sensitive health information. If a privacy law treats certain analytics or advertising disclosures as "sharing," you may limit non-essential cookies through the cookie controls where available or contact us using the information below.

6. Cookies, analytics, and tracking

We use necessary cookies and local storage to operate the website, remember preferences, support sessions, and preserve cookie choices. Where enabled, analytics or functional cookies may help us understand traffic and improve the experience. Some storefront tracking features are controlled by tenant configuration and are restricted on sensitive flows where the platform requires suppression or redaction.

You can adjust browser settings to block cookies. Some services may not work correctly without necessary cookies.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encrypted transport, audit logging, provider/payment authorization checks, and operational monitoring. No online system can be guaranteed to be perfectly secure. Please use a secure device and contact us promptly if you believe your account or information has been compromised.

8. Retention

We keep information for as long as needed to provide services, maintain accounts, support provider and pharmacy workflows, resolve disputes, keep audit and transaction records, comply with legal and contractual obligations, and protect the platform. Retention periods may differ for medical, pharmacy, payment, accounting, tax, support, security, and backup records.

9. Your choices and rights

Depending on where you live and how you interact with us, you may have rights to request access, correction, deletion, portability, restriction, objection, or information about how personal information is used or disclosed. You may also have the right to opt out of certain sale, sharing, targeted advertising, or sensitive-data uses where applicable law provides those rights.

To make a privacy request, contact us at support@therxspot.com. We may need to verify your identity or authority before acting on a request. We will not discriminate against you for exercising privacy rights provided by applicable law.

10. Children's privacy

The services are intended for adults and are not directed to children under 18. We do not knowingly collect personal information from children under 18 without appropriate parent, guardian, provider, or legal authorization. If you believe a child has provided information improperly, contact us so we can review the issue.

11. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date. Material changes may also be communicated through the website, portal notices, email, or other appropriate channels.

12. Contact us