Privacy Policy

I. Introduction and Scope

This Privacy Policy (this "Privacy Policy") describes how EdgeRx Health, LLC, a Wyoming limited liability company with a business address at 1776 Broadway, Suite 2002, New York, NY 10019 ("EdgeRx," "we," "us," or "our"), collects, uses, and discloses information about you when you visit edgerx.org and any related sites or applications (collectively, the "Sites"), use the services offered through them (the "Services"), or otherwise communicate with us. It should be read together with the EdgeRx Terms and Conditions and the EdgeRx Telehealth Informed Consent, which are incorporated by reference.

EdgeRx provides the technology platform and administrative support for the Services. The Healthcare Services are provided by independent, licensed physicians and affiliated professional entities, each of whom is solely responsible for the care they provide. EdgeRx does not itself practice medicine and is not a covered entity under HIPAA. Protected health information that the affiliated professional entities and their physicians create or maintain in the course of treating you is governed by HIPAA and the EdgeRx Notice of Privacy Practices, not by this Privacy Policy.

Where EdgeRx collects information about your health that is not PHI under HIPAA — for example, information you provide while browsing the Sites, before any clinical relationship is formed, or in marketing interactions — that information is governed by this Privacy Policy and by applicable consumer health data laws. By using the Sites or the Services, you acknowledge that you have read and understood this Privacy Policy. If any term is unacceptable to you, do not use the Sites or the Services.

II. Information We Collect

A. Information you provide to us

• Account and contact information, such as your name, email address, telephone number, postal address, and the credentials you create when you register.
• Intake and health information, such as the medical history, symptoms, medications, and health metrics you submit so that a physician can assess you. When this information is reviewed by the affiliated professional entities for treatment, it becomes PHI governed by HIPAA and the Notice of Privacy Practices.
• Order and subscription information, such as the products and protocols you select, your subscription interval, and your order history.
• Payment information. We use Shopify Payments to process payments. Your payment card details and security code are collected and processed through Shopify's infrastructure; EdgeRx does not collect or store your full payment card number.
• Communications and support, such as the contents of messages, emails, and support requests you send us, and your contact preferences.
• Reviews and testimonials you choose to provide. Information you submit for public display may be visible to others.

B. Information we collect automatically

As you navigate the Sites, we and our service providers may automatically collect certain information using cookies, pixels, web beacons, and similar technologies, including your IP address, device and browser type, operating system, pages viewed, referring and exit pages, the dates and times of your visits, and your interactions with our content and advertisements. We may derive your approximate location from your IP address.

C. Information we receive from third parties

We may receive information about you from the affiliated professional entities and our telehealth technology partner, from our partner pharmacy and laboratory providers, from analytics and advertising partners, and from other service providers we work with to operate the Sites and deliver the Services.

III. How We Use Your Information

We use the information described above to:

• Provide, operate, secure, and improve the Sites and the Services;
• Facilitate your connection with the affiliated professional entities and coordinate the fulfillment of, and payment for, prescription compounded medications, laboratory testing, and related products and services;
• Process your payments and administer your subscription protocols, including recurring charges and renewals;
• Respond to your inquiries and provide customer support;
• Send you transactional messages about your assessment, protocol, orders, and account, and — where you have not opted out — marketing communications by email, text message, or other means;
• Personalize your experience and measure and improve the performance of the Sites, our communications, and our advertising;
• Detect, prevent, and investigate fraud, abuse, security incidents, and other unauthorized or illegal activity;
• Comply with applicable laws and regulations and enforce our agreements; and
• Create de-identified or aggregated information, which we may use and disclose for any lawful purpose.

IV. How We Disclose Your Information

We do not sell your protected health information, and we do not use or disclose your health or clinical information for third-party advertising. We may disclose the information we collect as follows:

• Affiliated professional entities and telehealth technology partner, so that you may be assessed and receive the Healthcare Services.
• Pharmacies and laboratories, including Strive Pharmacy, our compounding pharmacy partner, and our laboratory testing provider, to coordinate fulfillment and testing.
• Service providers and processors, who perform functions on our behalf — including Shopify, which hosts our storefront and processes payments through Shopify Payments; analytics providers such as Google Analytics; our email and text-message delivery providers; and customer-support and hosting providers. For information about how Shopify handles data, see shopify.com/legal/privacy.
• Advertising partners. We work with advertising and social media platforms that use cookies and pixels to measure and deliver advertising. We do not share health or clinical information with these partners. As described in Section V, this activity may be treated as "selling" or "sharing" under certain state laws, and you can opt out.
• HSA/FSA partner. If you choose to seek reimbursement, we share the information necessary to support your request with our partner Truemed.
• Legal, safety, and compliance, where we believe disclosure is necessary to comply with law or legal process, enforce our agreements, or protect the rights, property, or safety of EdgeRx, our users, or others.
• Business transfers, in connection with a merger, acquisition, financing, reorganization, or sale of assets.
• With your consent or at your direction.

V. Cookies, Analytics, and Advertising

We use cookies and similar technologies that are strictly necessary to operate the Sites, as well as analytics cookies (to understand how the Sites are used) and advertising cookies (to measure and deliver advertising across other sites and platforms you visit). You can manage cookies through your browser settings, and you can opt out of the sale or sharing of your personal information for advertising through our Your Privacy Choices page.

We honor the Global Privacy Control ("GPC") signal as a request to opt out of the sale or sharing of personal information for browsers and devices that transmit it. You may also opt out of interest-based advertising through industry tools at optout.aboutads.info and optout.networkadvertising.org. We do not currently respond to browser "Do Not Track" signals other than GPC.

VI. Your Communications Choices

You may opt out of marketing emails by using the unsubscribe link in any such email, and you may opt out of marketing text messages by replying STOP. Message and data rates may apply. We may still send you transactional or service messages about your account, orders, and protocols, which are not promotional.

VII. Health Information and Consumer Health Data

As noted above, PHI handled by the affiliated professional entities in the course of treatment is governed by HIPAA and the EdgeRx Notice of Privacy Practices. Separately, certain information we collect may be "consumer health data" under state laws such as the Washington My Health My Data Act and Nevada's consumer health data law. Where those laws apply, we collect and share consumer health data only as permitted, obtain your consent where required, and do not sell consumer health data without a valid authorization. You may exercise your rights regarding consumer health data, including the right to withdraw consent and to request deletion, by contacting us at privacy@edgerx.org.

VIII. Your U.S. State Privacy Rights

Depending on your state of residence — including California, Virginia, Colorado, Connecticut, Texas, and other states with comprehensive privacy laws — you may have some or all of the following rights, subject to exceptions in applicable law:

• To know or access the personal information we have collected about you;
• To correct inaccurate personal information;
• To delete personal information;
• To obtain a portable copy of your personal information;
• To opt out of the "sale" or "sharing" of personal information and of targeted or cross-context behavioral advertising;
• To limit the use and disclosure of sensitive personal information; and
• To opt out of profiling that produces legal or similarly significant effects.

Many state privacy laws exclude PHI governed by HIPAA and information governed by similar medical-confidentiality laws from these rights. For that information, please refer to the EdgeRx Notice of Privacy Practices.

A. Personal information we collect (California)

In the preceding twelve (12) months, we have collected the following categories of personal information, as defined under California law:

We use these categories for the purposes described in Section III and disclose them to the categories of recipients described in Section IV. We may "sell" or "share" identifiers, commercial information, and internet or network activity for cross-context behavioral advertising, as those terms are defined under California and other state laws. We do not knowingly sell or share the personal information of consumers under 16, and we do not sell or share health or clinical information.

B. How to exercise your rights

You may submit a request through our Your Privacy Choices page or by emailing privacy@edgerx.org. We will verify your request, which may require us to confirm information we hold about you, and we will respond within the time required by law. You may use an authorized agent to submit a request on your behalf with proper authorization. We will not discriminate against you for exercising your rights. If we deny your request, you may appeal by replying to our decision; we will inform you of the outcome and, where applicable, how to contact your state attorney general.

IX. Data Retention

We retain personal information for as long as necessary to provide the Services, maintain your account, comply with our legal and regulatory obligations (including recordkeeping requirements that apply to the Healthcare Services), resolve disputes, and enforce our agreements. When information is no longer needed, we delete it or de-identify it.

X. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful loss, access, or disclosure. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

XI. Children's Privacy

The Sites and the Services are intended only for adults age 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it.

XII. Third-Party Links and Services

The Sites may contain links to websites and services operated by third parties. We are not responsible for the privacy practices of those third parties, and this Privacy Policy does not apply to them. We encourage you to review the privacy policies of any third-party sites you visit.

XIII. United States Only

The Sites and the Services are offered only to individuals located in the United States, and the information we collect is processed and stored in the United States. We do not direct the Sites to individuals outside the United States.

XIV. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and post the updated version on the Sites. Your continued use of the Sites or the Services after an update takes effect constitutes your acceptance of the revised Privacy Policy.

XV. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at privacy@edgerx.org or:

EdgeRx Health, LLC
1776 Broadway, Suite 2002
New York, NY 10019
privacy@edgerx.org

© 2026 EdgeRx Health, LLC. All rights reserved.