Privacy Policy
Last updated: January 1, 2025
1. Introduction
RxVigor ("we," "our," or "us") is committed to protecting your privacy and the confidentiality of your personal health information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our telehealth platform at rxvigor.com.
As a telehealth service, we are subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable state privacy laws. We take our obligations under these laws seriously.
2. Information We Collect
Personal Information
- Name, email address, phone number, and date of birth
- Billing address and payment information (processed securely by Stripe)
- State of residence
Protected Health Information (PHI)
- Height, weight, and BMI
- Medical history and current conditions
- Current medications and supplements
- Weight loss history and goals
- Communications with your healthcare provider
Technical Information
- IP address, browser type, and device information
- Pages visited and time spent on our site
- Cookies and similar tracking technologies
3. How We Use Your Information
We use your information to:
- Facilitate your telehealth consultation with licensed physicians
- Process and fulfill your medication prescriptions
- Process payments and manage your subscription
- Communicate with you about your care and account
- Improve our services and user experience
- Comply with legal and regulatory obligations
4. HIPAA and Protected Health Information
Your Protected Health Information (PHI) is handled in accordance with HIPAA. We maintain appropriate administrative, physical, and technical safeguards to protect your PHI. We will not sell your PHI or use it for marketing purposes without your explicit consent.
We may disclose your PHI to:
- Licensed healthcare providers involved in your care
- Licensed compounding pharmacies fulfilling your prescription
- Business associates who assist in operating our platform, under HIPAA Business Associate Agreements
- Government agencies as required by law
5. Data Security
We implement industry-standard security measures including SSL/TLS encryption, secure data storage, access controls, and regular security audits. Payment information is processed by Stripe and is never stored on our servers.
6. Your Rights
Under HIPAA and applicable state laws, you have the right to:
- Access and receive a copy of your health information
- Request corrections to your health information
- Request restrictions on how we use or disclose your information
- Receive an accounting of disclosures of your PHI
- File a complaint with the U.S. Department of Health and Human Services
7. Cookies
We use cookies and similar technologies to improve your experience on our site. You can control cookie settings through your browser. Disabling cookies may affect some functionality of our platform.
8. Third-Party Services
We use trusted third-party services including Stripe for payment processing. These services have their own privacy policies and we encourage you to review them.
9. Children's Privacy
Our services are intended for adults 18 years of age and older. We do not knowingly collect personal information from individuals under 18.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:
RxVigor Privacy Office
Email: [email protected]
Hours: Monday–Friday, 9am–6pm EST