Rx Collective Co LLC ("RxCollective," "we," "us," or "our") respects your privacy and is committed to protecting the confidentiality and security of information entrusted to us.

RxCollective operates a healthcare technology platform and provides non-clinical management and administrative services to healthcare organizations. Our services include technology infrastructure, patient workflow support, administrative services, provider coordination, billing and collection support, pharmacy coordination, and related operational services.

This Privacy Policy describes how RxCollective collects, uses, maintains, protects, and discloses information obtained through our website, technology platform, and related services.

1. Our Role

RxCollective provides technology and non-clinical infrastructure that supports healthcare organizations and independent healthcare providers.

Healthcare organizations contract with RxCollective to access and utilize the RxCollective platform and its integrated service infrastructure.

RxCollective maintains contractual relationships with independent professional medical entities through which appropriately licensed healthcare professionals provide clinical and telemedicine services utilizing the RxCollective technology platform.

Those independent licensed healthcare professionals are responsible for evaluating patients and exercising independent professional judgment regarding diagnosis, treatment, medical necessity, and prescribing.

RxCollective does not control, direct, or interfere with the independent clinical judgment of healthcare professionals.

RxCollective does not itself prescribe or dispense prescription medications. Pharmacy dispensing and fulfillment services are performed by independently licensed pharmacies.

2. Scope of This Privacy Policy

This Privacy Policy applies to information collected through:

• Our public-facing website
• The RxCollective technology platform
• Business and account registration
• Forms and communications
• Administrative and operational workflows
• Provider and healthcare organization workflows
• Other services that reference this Privacy Policy

Certain information processed through the RxCollective platform may constitute Protected Health Information ("PHI") subject to the Health Insurance Portability and Accountability Act of 1996 ("HIPAA").

Where PHI is subject to a separate Notice of Privacy Practices issued by the healthcare provider or professional medical entity responsible for the patient's care, that Notice of Privacy Practices governs the provider's use and disclosure of such medical information.

3. Information We Collect

We may collect information directly from you, from healthcare organizations and authorized users, through our technology platform, from service providers and business partners, and automatically when you interact with our website or services.

Depending on the nature of your interaction with RxCollective, this information may include:

Personal and Contact Information

Such as:

• Name
• Email address
• Telephone number
• Mailing or business address
• Date of birth, where applicable
• Other identifying or contact information

Business and Professional Information

Such as:

• Business or organization name
• Professional title
• Provider or organizational information
• Professional credentials, where applicable
• Information submitted through business inquiries, demonstrations, or onboarding

Account Information

Such as:

• Username and authentication information
• Organization affiliation
• Account permissions
• Login and account activity
• Security information

Transaction Information

We may collect information necessary to facilitate billing, payments, collections, or other transactions.

Payment information may be processed by third-party payment processors. RxCollective does not necessarily receive or retain complete payment card information.

Health and Patient Information

When the RxCollective platform is used in connection with healthcare services, the platform may create, receive, maintain, or transmit information concerning patients, including PHI.

Depending on the applicable workflow, this information may include patient demographics, intake information, medical history, medications, allergies, symptoms, provider communications, clinical documentation, prescription information, appointment information, and related healthcare information.

Device and Usage Information

We may automatically collect:

• IP address
• Browser type
• Device type
• Operating system
• Access times
• Pages viewed
• Referring URLs
• Platform activity
• Security and diagnostic information

4. HIPAA and Protected Health Information

RxCollective is subject to HIPAA requirements where applicable to its activities and maintains administrative, technical, and physical safeguards designed to protect PHI.

Depending on the particular healthcare arrangement and function being performed, RxCollective may create, receive, maintain, or transmit PHI in connection with healthcare operations and may act in the capacity applicable to that particular arrangement under HIPAA, including pursuant to Business Associate Agreements where required.

PHI processed through the RxCollective platform may be used or disclosed only as permitted by applicable law, applicable contractual arrangements, and any applicable Business Associate Agreement.

RxCollective's processing of PHI through its technology infrastructure does not alter the independent professional responsibility of the healthcare provider furnishing medical care.

Medical evaluations, diagnoses, treatment decisions, and prescribing decisions remain the responsibility of the applicable licensed healthcare professional.

5. Medical Records and Independent Providers

Clinical services facilitated through the RxCollective platform are provided by appropriately licensed healthcare professionals affiliated with independent professional medical entities.

Those healthcare professionals and their applicable professional medical entities maintain responsibility for the professional medical services they provide.

Medical information generated in connection with those clinical services may constitute part of the applicable provider organization's medical record and may be governed by that organization's Notice of Privacy Practices and applicable law.

RxCollective may access, maintain, or process such information as necessary to perform authorized technology, administrative, operational, billing, customer-support, and related functions.

If you are a patient seeking to exercise rights regarding medical records maintained by your healthcare provider, you should contact the healthcare provider or professional medical entity responsible for your care.

RxCollective will cooperate with applicable healthcare organizations as required by law and applicable contractual arrangements.

6. How We Use Information

We may use information collected through our website and services to:

• Provide and operate the RxCollective platform
• Create and administer accounts
• Provide technology and administrative services
• Support patient intake and healthcare workflows
• Facilitate communications and scheduling
• Support authorized provider workflows
• Facilitate billing and collection activities
• Facilitate authorized prescription-related and pharmacy coordination workflows
• Respond to inquiries and provide customer support
• Maintain, secure, and improve our technology
• Detect and prevent fraud, misuse, and security incidents
• Communicate with business customers and prospective customers
• Perform analytics and improve our services
• Comply with contractual obligations
• Comply with applicable laws and regulatory requirements
• Protect our rights and the rights and safety of our customers and users

Where information constitutes PHI, our use of that information is subject to applicable HIPAA requirements and contractual restrictions.

7. How We Disclose Information

We may disclose information where permitted or required for the operation of our services, including to:

Healthcare Organizations

Information may be made available to authorized healthcare organizations using the RxCollective platform in connection with their healthcare operations.

Independent Healthcare Providers

Patient information may be made available to appropriately authorized professional medical entities and licensed healthcare professionals to facilitate healthcare services.

Licensed Pharmacies

When an appropriately licensed healthcare professional issues a prescription, information necessary to facilitate lawful pharmacy processing, dispensing, and fulfillment may be transmitted to an appropriately licensed pharmacy.

RxCollective does not independently make prescribing or dispensing decisions.

Service Providers

We may engage third-party companies to provide services such as hosting, cybersecurity, communications, payment processing, technical support, analytics, and other infrastructure.

Where required by applicable law, vendors handling PHI are subject to appropriate contractual and privacy requirements.

Legal and Regulatory Purposes

We may disclose information when required or permitted by applicable law, including to:

• Respond to valid legal process
• Respond to governmental or regulatory requests
• Protect our legal rights
• Investigate fraud or security incidents
• Protect the health or safety of individuals where permitted by law

Business Transactions

Information may be disclosed or transferred in connection with a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, subject to applicable legal requirements.

We may also disclose information with your authorization or as otherwise permitted by applicable law.

8. Cookies and Similar Technologies

Our public-facing website may use cookies, pixels, web beacons, and similar technologies to:

• Enable website functionality
• Maintain security
• Remember preferences
• Understand website traffic and usage
• Improve our website and services
• Measure the effectiveness of business-to-business marketing

We may use third-party analytics and advertising technologies on our public-facing website.

You may control certain cookies through your browser settings. Disabling cookies may affect some website functionality.

RxCollective does not knowingly use PHI obtained through authenticated healthcare or clinical workflows for independent targeted advertising.

9. Communications and Marketing

RxCollective primarily provides services to healthcare organizations and healthcare professionals.

We may use business contact information to communicate about:

• RxCollective services
• Business inquiries
• Demonstrations
• Platform updates
• Partnerships
• Other business opportunities

You may unsubscribe from promotional email communications using the unsubscribe mechanism provided in the communication.

Even if you opt out of promotional communications, we may continue to send necessary administrative, contractual, security, or service-related communications.

If we offer SMS marketing, consent to receive marketing text messages is not a condition of purchasing our services. You may opt out of marketing text messages by replying STOP.

We do not sell or share SMS opt-in information or consent with third parties for their independent marketing purposes.

10. De-Identified and Aggregated Information

We may create or use information that has been aggregated or de-identified so that it does not reasonably identify an individual.

We may use and disclose such information for analytics, platform improvement, business operations, research, and other lawful purposes, subject to applicable law.

11. Information Security

RxCollective maintains reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, acquisition, use, alteration, disclosure, or destruction.

Our security measures are designed to account for the nature and sensitivity of the information we maintain, including PHI where applicable.

However, no electronic transmission, network, or storage system can be guaranteed to be completely secure.

12. Data Retention

We retain information for as long as reasonably necessary to:

• Provide our services
• Satisfy contractual obligations
• Maintain appropriate business and security records
• Comply with applicable legal and regulatory requirements
• Resolve disputes
• Enforce our agreements

Where RxCollective maintains information on behalf of a healthcare organization or professional medical entity, retention may also be governed by applicable agreements, healthcare record requirements, and applicable law.

13. Your Privacy Choices and Rights

Depending on applicable law and the nature of your relationship with RxCollective, you may have certain rights regarding your Personal Information.

These may include the right to request access to or correction of certain Personal Information.

For information collected directly by RxCollective for its own business purposes, requests may be submitted using the contact information below.

Medical Information

If your request relates to PHI or medical records associated with healthcare services, the request may need to be directed to the healthcare provider or professional medical entity responsible for your care.

Patients may have additional rights concerning PHI under HIPAA and applicable state law. Those rights are described in the applicable healthcare provider's Notice of Privacy Practices.

14. Children's Privacy

RxCollective's public-facing website and B2B services are not directed to children under 18.

Where information concerning a minor is processed through the RxCollective platform in connection with healthcare services, that information is handled in accordance with applicable law, contractual requirements, and the privacy practices of the applicable healthcare provider.

15. Third-Party Websites and Services

Our website and platform may contain links to or integrate with websites and services operated by third parties.

Third parties maintain their own privacy practices, and RxCollective is not responsible for the independent privacy practices of third-party websites or services.

We encourage users to review the applicable privacy policies before providing information directly to a third party.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our technology, services, business practices, or legal requirements.

When we update this Privacy Policy, we will revise the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically.

17. Contact Us

If you have questions or concerns regarding this Privacy Policy or RxCollective's privacy practices, please contact:

Rx Collective Co LLC
7901 4th Street N, Suite 300
St. Petersburg, FL 33702
United States

Email: [email protected]
Phone: 855-507-2059
Website: www.therxcollective.com

For questions regarding medical treatment, clinical decisions, prescriptions, or medical records, please contact the healthcare provider or professional medical entity responsible for the applicable healthcare services.