Privacy Policy

1. Who we are and what this covers

Prescripa LLC, a Florida limited liability company (“Prescripa,” “we,” “us”) provides technology and administrative services to telehealth programs: licensed medical practices, and the brands whose care is delivered by a licensed practice. Prescripa is not a medical provider, is not a pharmacy, and is not a compounding pharmacy. We do not practice medicine, prescribe, compound, or dispense medications.

This Privacy Policy explains how we handle information collected through this website (www.prescripa.com) and through the Prescripa platform: the patient storefront, portal, clinical intake, provider review queue, and fulfillment coordination tools we build and operate for the practices we serve.

2. Our role versus your practice's role

Two consequences follow, and they matter for patients:

• The practice, not Prescripa, determines what care is offered, which clinicians deliver it, and how patient records are used for treatment. Our handling of PHI is limited to what the practice's agreement with us permits.
• The practice's own Notice of Privacy Practices governs the practice's use and disclosure of a patient's PHI. This policy does not replace it. Where the two differ regarding care delivered by a practice, the practice's notice controls.

Information we collect for our own business purposes, for example a demo request submitted by a business owner or website analytics, is handled by Prescripa as the controller of that information, and this policy governs it directly.

3. Information we collect

Business and practice information

When a business, practice, or clinician requests a demo, applies to onboard, or corresponds with us, we collect business contact details (name, role, practice name, email address, telephone number), the states in which the practice's clinicians are licensed, and the licensure and business-registration information we verify before onboarding. This is business information, not patient information.

Patient information processed for a practice

Through the platform we process, on the practice's behalf, information patients provide or that is generated in the course of their care: identity and contact details, identity verification records, clinical intake responses, recordings of telehealth consultations where the practice records them, the clinical decision recorded by the treating clinician, prescriptions issued, and order and fulfillment records. Some of this is PHI.

Payment information

Payment card details are collected and processed by our third-party payment processor. Prescripa does not store full payment card numbers. We retain transaction records, meaning amount, date, status, and the associated order, as required to operate the service and meet our record-keeping obligations.

Technical and usage information

We collect standard technical information from visitors to this website and users of the platform: IP address, device and browser type, pages viewed, referring page, and similar log data.

Website chat and demo scheduling

If you use the chat on this website, we collect the name, email address, topic, and messages you send so our team can reply; they are stored as a support ticket. Please do not share health information in the chat. If you book a demo, the scheduling form is provided by LeadConnector, which receives the details you enter to book the call.

4. How we use information

• To verify a practice's business registration and its clinicians' licensure before onboarding, and to re-verify at renewal.
• To operate the platform: route patient intakes to a clinician licensed in the patient's state, record the clinical decision, transmit approved prescriptions to a licensed pharmacy partner, and coordinate order processing, shipping, tracking, and delivery exceptions.
• To process payments and maintain transaction and fulfillment records.
• To provide non-clinical support to patients regarding their orders, and support to the practices we serve.
• To maintain the auditable record a practice, a pharmacy, a board, or a regulator may require.
• To secure the platform, prevent fraud and abuse, and comply with law.
• To market our services to businesses and licensed medical practices, using business contact information only.

We do not use PHI to market anything to patients, and we do not use PHI to develop or promote products to third parties.

5. How we share information

We share information only as follows:

• With the practice whose patients are being served, and with the clinicians treating those patients.
• With licensed pharmacy partners, to the extent necessary to fill and ship a valid prescription.
• With service providers that host, secure, or support the platform, under contracts that restrict their use of the information, and, where PHI is involved, under a Business Associate Agreement.
• With our payment processor, to process transactions.
• When required by law, or to protect the rights, safety, or property of patients, practices, or Prescripa.
• In a corporate transaction, such as a merger or sale of assets, subject to the protections described in this policy and to applicable law.

6. Cookies, analytics, and health information

This website uses cookies and similar technologies for basic site functionality and aggregate traffic measurement. You can control cookies through your browser settings; blocking them may affect how parts of the site work.

Clinical intake pages and the patient portal are treated differently from marketing pages. We do not transmit protected health information, including intake responses, conditions, medications, or the fact that a specific individual sought a specific treatment, to advertising networks, marketing platforms, or general-purpose analytics services. Any vendor that receives PHI does so under a Business Associate Agreement.

7. Security

We maintain administrative, physical, and technical safeguards designed to protect information against unauthorized access, use, and disclosure, including access controls, encryption in transit, and audit logging of access to patient records. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Retention

We retain information for as long as needed to provide the service and to meet legal, regulatory, and contractual obligations. Records associated with clinical care are retained in accordance with the practice's instructions and the record-retention period applicable in the relevant state, which is generally no less than seven years. Business and transaction records are retained for the periods required by applicable tax, corporate, and consumer-protection law.

9. Your choices and rights

Patients

Rights in your medical record, meaning access, amendment, an accounting of disclosures, restrictions, and confidential communications, are exercised through the practice that treated you, as described in that practice's Notice of Privacy Practices. If you contact us directly about PHI we process for a practice, we will refer your request to that practice and support the practice in responding.

Practices and business contacts

You may request access to, correction of, or deletion of the business contact information we hold about you, and you may opt out of our marketing emails at any time using the unsubscribe link in the message.

State privacy laws

Depending on where you live, you may have additional rights regarding personal information that is not PHI, including the right to know what we collect, to request deletion or correction, and to opt out of sale or targeted advertising. We do not sell personal information or use it for targeted advertising. To exercise a right, contact us using the details below; we will verify your request before acting on it, and we will not discriminate against you for making one.

10. Children's privacy

The platform is intended for adults. Services are not offered to individuals under 18, and we do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it.

11. Changes to this policy

We may update this policy. When we do, we will revise the “last updated” date above, and where the change is material we will provide additional notice through the platform or to the practices we serve.

12. Contact us

Questions about this policy, or about how we handle information, can be directed to support@prescripa.com, marked “Attn: Privacy Officer.” Patients with questions about their own medical record should contact the practice that treated them.