Website Privacy Policy

This Privacy Policy describes how NuBod Rx collects, uses, and shares your personal information when you visit or make a purchase from nubodrx.com (the “Site”).

PERSONAL INFORMATION WE COLLECT

When you visit the Site, we automatically collect certain information about your device. This may include information about your web browser, IP address, time zone, and some of the cookies that are installed on your device.

Additionally, as you browse the Site, we may collect information about the individual web pages or products you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically collected information as “Device Information.”

We collect Device Information using the following technologies:

• Cookies are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies and how to disable cookies, you may visit: http://www.allaboutcookies.org.
• Log files track actions occurring on the Site and collect data including your IP address, browser type, internet service provider, referring and exit pages, and date and time stamps.
• Web beacons, tags, and pixels are electronic files used to record information about how you browse the Site.

Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you. This may include your name, billing address, shipping address, payment information, email address, and phone number. We refer to this information as “Order Information.”

When we refer to “Personal Information” in this Privacy Policy, we are referring to both Device Information and Order Information.

MEDICAL INFORMATION AND HIPAA

When you receive medical services through NuBod Rx, the medical information you share with your provider and the information generated about your treatment may be considered Protected Health Information (“PHI”). PHI is governed by the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations, including the HIPAA Privacy and Security Rules.

NuBod Rx acts as a business associate to the providers and pharmacies that hold the patient relationship and processes PHI only as permitted by HIPAA and the relevant business associate agreements.

NuBod Rx does not practice medicine, prescribe medication, or make treatment decisions. Medical care is provided by independent licensed healthcare providers. Pharmacies are responsible for dispensing medications when prescribed and clinically appropriate.

PHI may include, but is not limited to:

• Information you provide in a medical intake form or health assessment;
• Information related to your eligibility for treatment;
• Prescription or medication information;
• Provider notes, treatment decisions, and consultation records;
• Pharmacy fulfillment and shipping information related to prescribed treatment; and
• Communications related to your medical care.

NuBod Rx may use or disclose PHI only as permitted by HIPAA, applicable law, and any relevant agreements with healthcare providers, pharmacies, or other covered entities. This may include using PHI to help coordinate care, support pharmacy fulfillment, provide customer support related to treatment, assist with payment processing, maintain records, comply with legal obligations, and support healthcare operations.

PHI is handled separately from general website information whenever required by law. Your rights related to PHI may include the right to access, amend, or request restrictions on certain uses of your medical information, as provided by HIPAA and applicable law.

HOW WE USE YOUR PERSONAL INFORMATION

We use the Order Information that we collect generally to fulfill any orders placed through the Site. This may include processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations.

Additionally, we use this Order Information to:

• Communicate with you;
• Screen our orders for potential risk or fraud;
• Provide customer support;
• Coordinate services related to your order;
• Maintain internal records; and
• When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help screen for potential risk and fraud, particularly your IP address. We also use Device Information to improve and optimize our Site. For example, we may generate analytics about how customers browse and interact with the Site and assess the success of our marketing and advertising campaigns.

SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties to help us use your Personal Information as described above.

For example, we use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.

We may also use Google Analytics to help us understand how customers use the Site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

We may share Personal Information with service providers who help us operate our Site, process payments, provide customer support, support marketing and advertising, analyze website performance, and fulfill business operations.

When medical services are involved, PHI may be shared only as permitted by HIPAA and applicable law with independent licensed healthcare providers, pharmacies, technology vendors, payment processors, and other service providers involved in supporting treatment, payment, healthcare operations, or legal compliance.

Finally, we may also share your Personal Information or PHI when required to comply with applicable laws and regulations, respond to a subpoena, search warrant, court order, or other lawful request for information, or otherwise protect our rights, users, providers, pharmacies, and business operations.

BEHAVIORAL ADVERTISING

As described above, we may use your Personal Information to provide you with targeted advertisements or marketing communications that we believe may be of interest to you.

For more information about how targeted advertising works, you may visit the Network Advertising Initiative’s educational page at: http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You may opt out of targeted advertising by using the links below:

• Facebook: https://www.facebook.com/settings/?tab=ads
• Google: https://www.google.com/settings/ads/anonymous
• Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

Additionally, you may opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

DO NOT TRACK

Please note that we do not alter our Site’s data collection and use practices when we see a “Do Not Track” signal from your browser.

YOUR RIGHTS

Depending on where you live, you may have certain rights regarding your Personal Information. These rights may include the right to access, correct, update, delete, or request restrictions on certain uses of your Personal Information.

If you would like to exercise any applicable privacy rights, please contact us using the contact information below.

If you are a European resident, you have the right to access the personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident, we note that we process your information in order to fulfill contracts we may have with you, such as when you make an order through the Site, or otherwise to pursue our legitimate business interests listed above. Please note that your information may be transferred outside of Europe, including to Canada and the United States.

Rights related to PHI may be governed by HIPAA and applicable state law. Requests involving medical records or PHI may need to be directed to the healthcare provider, pharmacy, or covered entity responsible for your care.

DATA RETENTION

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information, unless we are required or permitted by law to retain it.

Medical records, PHI, prescription information, and treatment-related information may be retained by healthcare providers, pharmacies, or NuBod Rx as required or permitted by HIPAA, applicable state law, business associate agreements, and other legal or regulatory obligations.

SECURITY

NuBod Rx takes reasonable administrative, technical, and physical safeguards to help protect Personal Information and PHI from unauthorized access, use, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

CHANGES

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons.

Any changes will be posted on this page with an updated “Last Updated” date.

CONTACT US

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email at support@nubodrx.com.