Privacy Policy

Introduction

Signal-RX (“Signal-RX,” “we,” “us,” or “our”) operates signal-rx.com and the related account, intake, ordering, support, and telehealth services (collectively, the “Services”). This Privacy Policy explains the personal information we collect, how we use and disclose it, and the choices that may be available to you.

This Privacy Policy applies when you visit our website, create or use an account, complete an intake or health update, communicate with us, request a clinical review, place an order, or otherwise use the Services. It also applies to information we receive from participating clinicians, pharmacies, payment providers, shipping carriers, and other service providers in connection with the Services.

By using the Services, you acknowledge the practices described in this Privacy Policy. If you use the Services for another person, you represent that you are authorized to act for that person and to provide their information.

Limitations on Use by Minors

The Services are intended only for adults who are at least eighteen (18) years old, or any older minimum age required by applicable law. We do not knowingly provide the Services to, or collect personal information through the Services from, anyone under eighteen. If you believe a minor has provided information to us, please contact us using the information below.

We may retain information when required by law, needed for patient safety, or maintained as part of a clinical or transaction record that we are not legally permitted to delete.

Health Information and Clinical Privacy

Some information collected through the Services concerns your health, medical history, medications, allergies, treatment interests, or clinical care. Depending on who holds the information and how it is used, federal or state health-privacy laws may apply.

Licensed healthcare professionals—not Signal-RX software—make eligibility, prescribing, treatment-approval, medication-order, and renewal decisions. Signal-RX provides administrative and technology services that support those clinical and fulfillment activities.

The treating clinical entity’s separate Notice of Privacy Practices (“NPP”), or a joint notice if participating entities lawfully use one, describes how HIPAA-regulated clinical information may be used and disclosed and explains the rights that apply to those records. This Privacy Policy is a website and services privacy policy. It does not replace the applicable NPP.

Please use the secure patient portal for sensitive clinical communications. Do not send medical details, questionnaire answers, photographs, or other sensitive health information through ordinary email.

Information We Collect

The information we collect depends on how you use the Services. It may include:

• Identity and contact information, such as your name, date of birth, email address, telephone number, account identifiers, and state of residence.
• Billing and delivery information, such as billing and shipping addresses, order details, transaction status, payment confirmation, refunds, and related financial records.
• Health and intake information, such as sex assigned at birth, height, weight, blood-pressure range, medical conditions, current medications, allergies, nicotine use, reproductive status, family and surgical history, treatment interests, and answers you provide in an initial intake or periodic health update.
• Clinical-workflow information, such as review status, requests for more information, provider decisions, treatments approved for ordering, approval dates, and patient portal or chart status.
• Order and fulfillment information, such as prescribed-item orders, dispensing-pharmacy routing, shipment status, carrier, tracking information, and delivery events.
• Communications, including support requests, secure portal messages, and records showing that account, order, review, dispatch, or tracking notices were sent.
• Technical information, such as IP address, browser and device type, access times, security events, server logs, and necessary cookie or session identifiers.

We collect information directly from you, from your use of the Services, and from clinicians, clinical entities, payment providers, pharmacies, carriers, and other service providers involved in your care or transaction.

How We Use Information

We may use personal information to:

• provide, operate, maintain, and improve the Services;
• create and secure accounts and verify identity or eligibility;
• collect intake information and make it available to participating clinicians for human review;
• coordinate clinical reviews, patient-portal activity, prescriptions, orders, and six-month health updates;
• process payments, prevent fraud, maintain transaction records, and address refunds or disputes;
• route approved orders to dispensing pharmacies and coordinate shipping and tracking;
• send necessary account, security, review, decision, order, fulfillment, support, and tracking communications;
• respond to requests, investigate errors, protect the Services, and enforce our terms and policies; and
• comply with legal, regulatory, recordkeeping, safety, and professional obligations.

Routine service emails are designed to be neutral and to avoid questionnaire answers and treatment names. Sensitive clinical information should be communicated through the secure patient portal.

Signal-RX does not sell personal or health information. We do not use health information for targeted advertising. The Services do not provide automatic clinical approvals, automatic refills, or automatic medication shipments.

Cookies and Similar Technologies

We and service providers acting for us use cookies and similar storage that are necessary to operate and protect the Services. These technologies support functions such as signing in, maintaining a secure session, remembering a cart, completing checkout, protecting against fraud, and keeping account features working.

We do not use advertising pixels or cross-site behavioral advertising trackers on the Services. Some necessary features, such as secure payment fields, hosted fonts, security tools, or verification services, may cause your browser to make technical requests to the provider of that feature.

You can configure your browser to block or delete cookies, but blocking necessary cookies may prevent account, cart, checkout, or security features from working. If our tracking practices materially change, we will update this Privacy Policy and provide any choice or notice required by law.

How We Disclose Information

We disclose personal information only as reasonably necessary to provide the Services, operate our business, protect patients and the Services, or comply with law. Recipients may include:

• Participating clinicians and clinical entities that evaluate intake information, provide care, prescribe when appropriate, maintain clinical records, or communicate through the patient portal.
• Operational service providers that support website hosting, accounts, forms, workflow management, clinical records, secure portals, email, security, maintenance, and technical support.
• Payment and financial-service providers that authorize transactions, prevent fraud, and manage payments, refunds, disputes, or related services.
• Dispensing pharmacies and shipping carriers that fill approved prescriptions, prepare packages, deliver orders, and provide shipment status.
• Professional advisers such as attorneys, accountants, auditors, insurers, and compliance consultants when their work requires the information.
• Government authorities and other parties when we believe disclosure is required by law, legal process, professional obligations, or is reasonably necessary to prevent fraud, protect safety, enforce agreements, or protect legal rights.
• Parties to a business transaction involving a merger, financing, acquisition, restructuring, sale of assets, or similar event, subject to applicable confidentiality and legal requirements.

Service providers are permitted to use information for the work they perform for us and as otherwise allowed by their agreements and applicable law. De-identified or aggregated information that cannot reasonably identify an individual may be used or disclosed as permitted by law.

Transactions and Payment Processing

When you pay for a review, medication, shipping, or another Service, payment credentials are handled through Easy Pay Direct and its gateway and processing partners. These providers process the information needed to authorize and complete the transaction. Signal-RX receives transaction status, payment identifiers, and limited information needed to manage the order, accounting, refunds, disputes, and fraud prevention.

Payment providers maintain their own privacy and security practices. Their processing of payment credentials is governed by their agreements, notices, and applicable law.

Your Choices and Privacy Rights

Depending on where you live and subject to legal exceptions, you may have the right to request access to personal information, obtain a copy, correct inaccuracies, request deletion, or limit certain uses or disclosures. You may also have the right to use an authorized agent, withdraw consent where processing depends on consent, and appeal a denied request.

Signal-RX does not sell personal information or use personal information for targeted advertising. If applicable law treats any future practice as a sale, sharing, or targeted advertising, we will provide the required notice and opt-out method before using information that way.

To protect your information, we may verify your identity and account ownership before completing a request. An authorized agent may be required to provide proof of authority, and we may verify the request directly with you. We may deny or limit a request where allowed by law, including when information must be retained for clinical, transaction, security, legal, or safety purposes. Exercising a privacy right will not result in unlawful discrimination.

Submit website and account privacy requests to support@signal-rx.com. If an appeal right applies, reply to our decision or email us with “Privacy Appeal” in the subject line. Requests for medical records, amendments to clinical records, or other rights under an applicable NPP should be directed to the treating clinical entity through the secure patient portal or the process stated in that NPP.

Data Retention

We retain information for the period reasonably necessary for the purpose for which it was collected and to meet clinical, recordkeeping, transaction, tax, accounting, security, dispute, contractual, and legal obligations. Retention periods vary by the type of information and the entity responsible for it.

Clinical charts and prescription records are retained by the responsible clinical entity under its policies and applicable law. Intake submissions, questionnaire snapshots, review history, order records, workflow records, and operational copies may be retained by Signal-RX and its service providers under applicable schedules, agreements, and legal requirements.

When information is no longer required, it may be deleted, de-identified, or securely disposed of, subject to technical limitations, backup cycles, legal holds, and lawful retention requirements.

Security

We use reasonable administrative, technical, and physical safeguards intended to protect personal information. Depending on the system and information involved, safeguards may include authentication, role-based access, secure transmission, activity records, restricted exports, backups, vendor controls, and procedures for investigating suspected incidents.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your account credentials and for notifying us if you believe your account has been compromised.

If an incident requires notification, we will provide notice in accordance with the law that applies to the affected information and entity. Depending on the circumstances, obligations may arise under HIPAA, the FTC Health Breach Notification Rule, state breach or consumer-health laws, or more than one framework.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Services, our practices, or applicable law. We will post the revised policy and update the effective date. When required, we will provide additional notice before a material change takes effect.

Contacting Us

For questions about this Privacy Policy or to submit a website or account privacy request, contact:

Please do not include medical details in email. Use the secure patient portal for clinical questions, medical-record requests, or sensitive health information.