Last Updated: March 12, 2023
1. Please Read Carefully
This Privacy Policy describes the information that governs your access to and use of the websites, and all other services (collectively, the “Services”) provided by IVY RX PLLC. (referred to as “Company”) collects about you through our website(s), and any other services we provide (collectively, the “Services”), how we use and share that information, who will have access to the information we collect, and the security measures Company offers to protect your information. This policy applies to information we collect when you access or use our website(s). The Site may hereinafter be referred to as the “Platform”, when you use our Services or when you otherwise interact with us.
When you create, register or log into an account through the Platform, you are automatically accepting and agreeing to the most-recent version of this Privacy Policy, as well as the Site’s Terms and Conditions.
Similarly, by visiting, accessing or using the Platform, you are automatically accepting and agreeing to the most-recent version of this Privacy Policy, as well as the Site’s Terms and Conditions, and your continuing visit, access or use of the Site reaffirms your acceptance and agreement in each instance.
2. Changes to this Privacy Policy
We may change this Privacy Policy from time to time. If we make changes, we will notify you by posting the updated policy on our Platform and revising the “Last Updated” date above. We encourage you to review the Privacy Policy whenever you use our Services to stay informed about our information practices and about ways you can help protect your privacy.
3. Confidentiality of Health Information
Health information that Company receives and/or creates about you, personally, relating to your past, present, or future health, treatment, or payment for healthcare services, may be “protected health information” under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and the Health Information Technology for Economic and Clinical Health Act (“HITECH Act”). Your health information may also be protected by state privacy laws and regulations.
Company understands that health information about you and your health is personal. We support your privacy and ensure that the transmittal and use of your information complies with all laws, except to the extent that you have authorized Company to transmit information to you by other means. In this regard, where applicable, we comply with HIPAA, HITECH, and other relevant state laws and regulations.
You will find more specific information below in the Notice of Privacy Practices about how we collect your protected health information, how we use or disclose it, and what your rights are regarding your protected health information.
4. Use of Services
Your access to and use of our Services are subject to certain terms and conditions, which are set forth in our Terms of Use and Telehealth Authorization and Consent.
5. Collection of Information
5.1 Information You Provide
We collect information you provide, such as when you email us, sign up through our Platform, or submit information through our Platform. We may collect, but are not limited to collecting, the following information: your name, gender, email address, mailing address, phone number, date of birth, payment and bank information provided through the use of our website.
5.2 Children
Company provides content on its Platform intended for use only by persons eighteen (18) years of age and older. Neither the Site nor the Platform is designed or intended to attract and is not directed to, children under 18 years of age, let alone children under thirteen (13) years of age. Company does not knowingly collect or maintain personally identifiable information from persons under 18 years of age without verifiable parental consent. If you are under 18 years of age, then please do not use the Services without parental consent.
If Company learns that personally identifiable information of persons less than 18 years of age has been collected without verifiable parental consent, then Company will take the appropriate steps to delete this information. If you are a parent and know that your child of less than 18 years of age is using our Platform, you can make a request to delete their information (“Request for Removal of Minor Information”) from our Platform by contacting us at privacy@ivyrx.com.
Please submit any such Request for Removal of Minor Information by emailing privacy@ivyrx.com, with a subject line of “Removal of Minor Information”.
Please note that the aforementioned removal does not ensure complete or comprehensive removal of such content or information posted on the Site.
Also, please note that Company is not required to erase or otherwise eliminate, or to enable erasure or elimination of, such content or information in certain circumstances, such as, for example, when an international, federal, state, or local law, rule or regulation requires IVY RX to maintain the content or information; when the content or information is stored on or posted to the Site by a third party other than you (including any content or information posted by you that was stored, republished or reposted by the third party); when Company anonymizes the content or information so that you cannot be individually identified; when you do not follow the aforementioned instructions for requesting the removal of the content or information; and when you have received compensation or other consideration for providing the content or information.
The foregoing is a description of Company’s voluntary practices concerning the collection of personal information through the Site from certain minors, and is not intended to be an admission that Company is subject to the Children’s Online Privacy Protection Act, the Federal Trade Commission’s Children’s Online Privacy Protection Rule(s), or any similar international, federal, state, or local laws, rules, or regulations.
5.3 Information We Collect from Your Use of the Services
We collect information about you when you use our Platform, including, but not limited to the following:
5.4 Information from Third Parties
We may obtain additional information about you from third parties such as marketers, partners, researchers, and others. We may combine information that we collect from you with information about you that we obtain from such third parties and information derived from any other subscription, product, or service we provide.
5.5 Aggregate or De-identified Data
We may aggregate and/or de-identify information collected by the Services or via other means so that the information is not intended to identify you. Our use and disclosure of aggregated and/or de-identified information is not subject to any restrictions under this Privacy Policy, and we may disclose it to others without limitation for any purpose, in accordance with applicable laws and regulations.
6. Use of Information
We use the information that we collect for the following purposes:
We may use third-party service providers to process and store personal information in the United States and other countries.
7. Sharing of Information
We may share personal information about you as follows:
We may also share aggregated, non-personally identifiable information with third parties for any purpose because we have taken reasonable steps to carefully remove any identifiers that may personally identify you.
8. Opt-In Policy
When you supply us with personally identifiable information in connection with your use of the Services, you may be asked to indicate whether you are interested in receiving information from us about our product and service offerings and if you would like us to share personally identifiable information about you with our affiliates, partners or other third parties for their marketing purposes. If you do choose to opt-in, you will receive such communications and/or we will share your information in accordance with your “opt-in” consent.
You may, of course, choose not to receive additional marketing information from us or choose not to allow our sharing of your personally identifiable information as follows: at any time, you can follow a link provided in our marketing-related email messages (but excluding e-commerce confirmations and other administrative emails) to opt out from receiving such communications; or at any time, you can contact us in accordance with the “Contact Us” section below to opt out from receiving such communications.
If you decide to contact us to change your contact preferences to opt out of receiving communications from us, please specify clearly which of the following choices you are opting out of: (a) receiving marketing communications from us; (b) allowing us to share personally identifiable information about you with our affiliates and partners for their marketing purposes; and/or (c) allowing us to share personally identifiable information about you with other third parties for their marketing purposes.
We will endeavor to implement your requested change as soon as reasonably practicable after receiving your request. Please be aware that your requested change will not be effective until we implement such change. Please note that if you choose not to allow our sharing of your personally identifiable information, we are not responsible for removing your personally identifiable information from the databases of third parties with which we have already shared your personally identifiable information as of the date that we implement your request. If you wish to cease receiving marketing-related e-mails from these third parties, please contact them directly or utilize any opt-out mechanisms in their privacy policies or marketing-related e-mails.
Please note that if you do opt-out of receiving marketing-related messages from us, we may still send you important administrative messages. You cannot opt-out from receiving these administrative messages. We reserve the right, from time to time, to contact former customers or users of the Services for administrative purposes or in order to comply with applicable laws, rules or regulations.
9. Social Media and Third Party Platforms
Certain sections or functionalities on our Platform’s Services you engage with may permit you to share information on websites that are owned or operated by other companies, including third party social media sites or platforms such as Facebook, Instagram, LinkedIn, Twitter, or other similar sites (collectively, “Third-Party Websites”). When you use a link online to visit a Third-Party Website, you will be subject to that website’s privacy and security practices, which may differ from ours. You should familiarize yourself with the privacy policy, terms of use and security practices of the linked Third-Party Website before providing any information on that website. Company does not own or control such Third-Party Websites, and posting your information on Third-Party Websites is subject to the third party’s Privacy Policy and other legal terms, which may not provide privacy protections with which you agree. Company is not responsible for any act or omission of any Third-Party Website, nor are we responsible for the consequences of your choice to share your information on Third-Party Websites.
10. Security
We take reasonable measures, including administrative, technical, and physical safeguards, to help protect personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, Company cannot ensure or warrant the security of any information you transmit to us or from our online products or services, and you do so at your own risk. Please note that information you send to us electronically may not be secure when it is transmitted to us. We recommend that you do not use unsecure channels to communicate sensitive or confidential information (such as your Social Security number) to us. To help maintain the security of your personal information, we ask that you please notify us immediately of any unauthorized visit, access or use of the Site, or the loss or unauthorized use of your user access information for the Site (e.g., username or password).
11. Your Privacy Choices
11.1 How You Can Access and Update Your Information
You may update or correct information about yourself at any time or by emailing us at Privacy@ivyrx.com with a subject line of “Update Personal Information.”.
11.2 Cookies
Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject cookies; however, our Services may not function properly if you do so.
11.3 Options for Opting out of Cookies and Mobile Device Identifiers
If you are interested in more information about online behavioral advertising/interest-based advertising and how you can generally control cookies from being put on your computer to deliver tailored advertising, you may visit the Network Advertising Initiative’s Consumer Opt-Out link, the Digital Advertising Alliance’s Consumer Opt-Out link or TRUSTe’s Advertising Choices Page to opt-out of receiving tailored advertising from companies that participate in those programs.
Please note that even after opting out of interest-based advertising, you may still see Company’s advertisements that are not interest-based (i.e., not targeted toward you). Also, opting out does not mean that Company is no longer using its tracking tools—Company still may collect information about your use of the Services even after you have opted out of interest-based advertisements and may still serve advertisements to you via the Services based on information it collects via the Services.
11.4 How Company Responds to Browser “Do Not Track” Signals
We are committed to providing you with meaningful choices about the information collected on our Platform for third-party purposes, which is why we provide above the Network Advertising Initiative’s “Consumer Opt-out” link, Digital Advertising Alliance’s Consumer Opt-Out Link, and TRUSTe’s Advertising Choices page. However, we do not recognize or respond to browser-initiated Do Not Track signals, as the Internet industry is currently still working on Do Not Track standards, implementations and solutions. For more information about DNT signals, visit http://allaboutdnt.com.
11.5 Links to Other Websites
Our Services may contain links to other Third-Party Websites, and those websites may not follow the same privacy practices as Company. We are not responsible for the privacy practices of Third-Party Websites. We encourage you to read the privacy policies of such third parties to learn more about their privacy practices.
11.6 No Rights of Third Parties
This Privacy Policy does not create rights enforceable by third parties.
11.7 How to Contact Us
Please contact us with any questions or concerns regarding this Privacy Policy at Privacy@ivyrx.com.
12. Notice of Privacy Practices
Company is dedicated to maintaining the privacy of your protected health information (“PHI”). PHI is information about you that may be used to identify you (such as your name, social security number or address), and that relates to (a) your past, present or future physical or mental health or condition, (b) the provision of healthcare to you, or (c) your past, present, or future payment for the provision of healthcare. In conducting its business, Company may receive and create records containing your PHI. Company is required by law to maintain the privacy of your PHI and to provide you with notice of its legal duties and privacy practices with respect to your PHI.
Company must abide by the terms of this Notice while it is in effect. This Notice is in effect from the date noted above until Company replaces it. Company reserves the right to change the terms of this Notice at any time, as long as the changes are in compliance with applicable law. If Company changes the terms of this Notice, the new terms will apply to all PHI that it maintains, including PHI that was created or received before such changes were made. If Company changes this Notice, it will post the new Notice on its Platform and will make the new Notice available upon request.
12.1 Uses and Disclosures of PHI. Company may use and disclose your PHI in the following ways:
Public Health Activities. Company may disclose your PHI to public health authorities or other governmental authorities for purposes including preventing and controlling disease, reporting child abuse or neglect, reporting domestic violence and reporting to the Food and Drug Administration regarding the quality, safety and effectiveness of a regulated product or activity. Company may, in certain circumstances disclose PHI to persons who have been exposed to a communicable disease or may otherwise be at risk of contracting or spreading a disease or condition.Workers’ Compensation. Company may disclose your PHI as authorized by, and to the extent necessary to comply with, workers’ compensation programs and other similar programs relating to work-related illnesses or injuries.Health Oversight Activities. Company may disclose your PHI to a health oversight agency for authorized activities such as audits, investigations, inspections, licensing and disciplinary actions relating to the healthcare system or government benefit programs.Judicial and Administrative Proceedings. Company may disclose your PHI, in certain circumstances, as permitted by applicable law, in response to an order from a court or administrative agency, or in response to a subpoena or discovery request.Law Enforcement. Company may, under certain circumstances, disclose your PHI to a law enforcement official, such as for purposes of identifying or locating a suspect, fugitive, material witness or missing person.Decedents. Company may, under certain circumstances, disclose PHI to coroners, medical examiners and funeral directors for purposes such as identification, determining the cause of death and fulfilling duties relating to decedents.Organ Procurement. Company may, under certain circumstances, use or disclose PHI for the purposes of organ donation and transplantation.Research. Company may, under certain circumstances, use or disclose PHI that is necessary for research purposes.Threat to Health or Safety. Company may, under certain circumstances, use or disclose PHI if necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.Specialized Government Functions. Company, may in certain situations, use and disclose PHI of persons who are, or were, in the Armed Forces for purposes such as ensuring proper execution of a military mission or determining entitlement to benefits. Company may also disclose PHI to federal officials for intelligence and national security purposes.
12.2 Your Rights Regarding Your PHI. You have the following rights regarding the PHI maintained by Company :
13. State Specific Policies
If you are a resident of California, Virginia, or Colorado, you have the following rights under the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act, Colorado Privacy Act (“CPA”), and Virginia Consumer Data Protection Act (“VCDPA”). In the event of any conflict between the terms of this section and the rest of the Privacy Policy, the terms of this section prevail.
This Consumer Privacy Notice (the “State Privacy Notice”) supplements Company’s Privacy Policy and applies solely to the personal information and sensitive personal information of California consumers collected by Company. This State Privacy Notice also applies to Company’s contractors and job applicants.
13.1 Collecting and Using Your Personal Information
The following section lists the categories of Personal Information which Company collects or may collect. Company may collect this information from you or our service providers. For more information on where and how Company collects information, see Section 5 above and Section 13.2 below. The purposes for which Company collects the Personal Information are described in Section 6 above and Section 13.3 below. Company will retain Personal Information for as long as Company believes necessary; as long as necessary to comply with its legal obligations, resolve disputes and/or enforce its agreements; and/or as long as needed to provide you with the products and/or services of the Service or Company. The Company may dispose of or delete any such information at any time, except as set forth in any other agreement or document executed by Company or as required by law.
Personal Information that reveals:(1) A consumer’s social security, driver’s license, state identification card, or passport number.(2) A consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.(3) A consumer’s precise geolocation. (4) A consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership.(5) The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication.(6) A consumer’s genetic data; or (1)The processing of biometric information for the purpose of uniquely identifying a consumer; (2) Personal Information collected and analyzed concerning a consumer’s health; or (3) Personal Information collected and analyzed concerning a consumer’s sex life or sexual orientation.
Personal Information does not include:
13.2 Sources of Personal Information
We obtain the categories of Personal Information listed above from the following categories of sources:
13.3 Purposes for Collecting Personal Information
In addition to using Personal Information as set forth in the Privacy Notice, Company may use your Personal Information for the following business purposes:
If we decide to collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes we will update this State Privacy Notice.
13.4 Sale of Personal Information
Company does not sell Personal Information in exchange for monetary compensation or other valuable consideration and has not sold any Personal Information in the past twelve (12) months. While we do not sell any data of our customers, this website uses cookies. Cookies are used to improve user experience, track anonymous site usage, store authorization tokens, enhance users experience of site usability, marketing activities, and permit sharing on social media networks voluntarily by customers (please see our Privacy Policy for a full description of how we use your data). In certain cases, sharing data with these providers could be considered a “sale” under certain state laws even though it is not a sale in the traditional sense. We are therefore giving residents of states where such laws may apply the ability to opt out of the cookies and trackers that may fall under the definition of “sale.”
Please note: If you opt out of these cookies and trackers, your web experience may be severely degraded.
To opt out of these cookies and trackers, please contact us at Privacy@ivyrx.com with a subject line of “Personal Information Opt Out”.
3.4 Sharing of Personal Information
During the twelve (12) months prior to the effective date of this State Privacy Notice, Company may have collected the categories of Personal Information listed below and shared your Personal Information with third parties listed in the next section:
When we share Personal Information for a business purpose with a third party, we enter into a contract with that third party that describes the purpose and requires the recipient to both keep that Personal Information confidential and not use it for any purpose except performing the contract.
We may share your Personal Information identified in the above categories with the following categories of third parties:
13.6 Collection of Personal Information of Minors Under 16 Years of Age
We do not knowingly collect Personal Information from minors under the age of 16 through our Service, although certain third party websites that we link to may do so. These third-party websites have their own terms of use and privacy policies and we encourage parents and legal guardians to monitor their children’s Internet usage and instruct their children to never provide information on other websites without their permission.
We do not sell or share the Personal Information of Consumers we actually know are less than 16 years of age.
If you have reason to believe that a child under the age of 16 has provided Us with Personal Information, please contact Us with sufficient detail to enable Us to delete that information (“Request for Removal of Minor Information”).
13.7 Automated Decision-Making or Profiling
We may in some cases use automated decision-making if it is authorized by legislation, if you have provided an explicit consent or if it is necessary for the performance of a contract. When using automated decision-making, we will provide you with further information about the logic involved, as well as the significance and the envisaged consequences to you.
You can always express your opinion about a decision based solely on automated processing, including profiling, if such a decision would produce legal effects (e.g. contract cancellation) or otherwise similarly significantly affect you (e.g. refusal of an online application).
13.8 Your Consumer Privacy Rights
You have the following rights:
13.9 Exercising Your Data Protection Rights
In order to exercise any of your rights, you can contact us by sending us an email: Privacy@ivyrx.com.
Only you, or a person you authorize to act on your behalf, may make a verifiable request related to your Personal Information. To verify your identity, we may ask you to provide your name, address and email address and sign a declaration under penalty of perjury that you are the consumer whose Personal Information is the subject of the request.
We will not discriminate or retaliate against you if you choose to exercise any of your rights under the law. We are permitted, however, to charge you a reasonable fee to comply with your request.
Your request to us must:
We cannot respond to your request or provide you with the required information if we cannot:
Any disclosures we provide will only cover the 12-month period preceding the verifiable request’s receipt.
For data portability requests, we will select a format to provide your Personal Information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.