PRIVACY POLICY

Thank you for reviewing our Privacy Policy. This website (the "Site") is operated from the United States of America on behalf of GRX Holdings, LLC dba Medicap Pharmacy ("Company," "we," "us" and "our"). If you choose to access this Site from locations outside the U.S. you do so at your own risk and subject to the laws of the United States of America, and you are responsible for compliance with any local laws. You may not use or export anything (including information) from the Site in violation of U.S. export laws, regulations, or the Terms of Use.

Your privacy is important to us. It is our policy to protect your personal information and to use it only in accordance with this Privacy Policy. This Privacy Policy only governs our use and disclosure of information collected through this Site.

1.ACCEPTANCE OF PRIVACY POLICY. Please read this Privacy Policy carefully. We want you to understand what data we collect from you when you visit our Site; how we use such data; and whether and to whom we share such data with others. Using our Site is voluntary, and by accessing or using the Site, you: (i) acknowledge that you have read and understood this Privacy Policy; (ii) agree that your access and use of the Site are subject to the Privacy Policy and Terms of Use; and (iii) consent to our collection and use of your Non-Personal and Personally Identifiable Information as described in this Privacy Policy, as updated or revised from time to time. At all times, we reserve the right to disclose any information, including personally identifiable information, to comply with any applicable law, regulation, legal process or governmental request; to protect the Company’s rights or property (including without limitation in the event of a transfer of control of the company, or substantially all of its assets), or during emergencies when safety is at risk, or for credit fraud protection and risk reduction purposes.

2.INFORMATION WE COLLECT FROM YOU. When you use the Site, several types of data may be collected from you, including: (1) Non-Personal Information; and (2) Personally Identifiable Information. Certain types of data are specifically NOT collected, including personal information from children.

2.1 Non-Personal Information. We automatically collect certain anonymous data regarding usage of the Site. The anonymous data we collect may include information such as:

The name of the Internet domain you used to access the Internet;
Your IP address and if applicable, the IP address of the web site from which you linked to our Site;
The date and time you accessed our Site;
The type of web browser you are using; and
The pages you visited.

This information ("Non-Personal Information") does not personally identify users, by itself or in combination with other information. We use this Non-Personal Information to monitor the effectiveness of the Site and to consider potential changes to improve the user experience. Non-Personal Information may be collected through cookies. For more detailed information on cookies, please refer to the “Use of Cookies” section below.

2.2 Personally Identifiable Information Generally. If you would like to order products and prescription or non-prescription drugs using our Site to the extent they are available, our registration process asks you to provide us with a limited amount of personal, health-related and/or transactional information. This information is necessary to process your order and enable you to use our Site to access such functions, or to otherwise receive individualized or personalized customer service that we would not be able to offer to anonymous users. Categories of personally identifiable information include: name, address, e-mail address, phone number, date of birth, where appropriate, Protected Health Information such as, prescription number, and if applicable, Transaction Information as described in Section 2.2 (b) (collectively, “PII”). By providing such information, you consent to our collection and use of it, as described in this Privacy Policy.

a. Protected Health Information. Certain PII collected, such as your prescription number, may also be considered Protected Health Information (“PHI”). PHI is information that may identify you and that relates to your past, present or future physical or mental health or condition and related health care services. Additional information regarding PHI, including our use and disclosure of your PHI, and your health information rights, is provided in our Notice of Privacy Practices.

b. Financial and Other Transactional Information. In conjunction with our online prescription ordering service, we may collect certain categories of PII necessary to complete and process your requests for service or products, to process your selected method for payment and if applicable, to arrange for delivery of your prescription(s) to your door] (“Transactional Information”). This information is limited to your name, billing address, shipping address, email address, phone number, and if you choose to pay by credit card, credit card information, such as type of credit card, name on card, card number, validation number, and expiration date, as well as any relevant insurance information, if you would like us to submit your claim for payment to your insurance payor. We may retain Transactional Information as long as is necessary to fulfill the purposes specified in this Privacy Policy and for recordkeeping, subject to statutory or regulatory retention requirements and legitimate business needs, such as for order tracking and status retrieval purposes.

2.3 No Personal Information from Children. The services hosted on the Site, including online prescription ordering, are not offered to children. Children are not permitted to use the Site, and we request that children under the age of 13 not submit any personal information to the website. We do not knowingly collect personal information from children under the age of 13. Since information regarding children under the age of 13 should not be collected, the Company does not knowingly distribute personal information regarding children under the age of 13. If your child has submitted personal information, please contact us to request that such information be removed. Once we are aware of information entered by a child, we will exercise commercially reasonable efforts to remove such information from our databases and storage areas; however, we are not liable for any consequences relating to such information.

2.4 Other Information NOT Collected. Our services and your use of the Site do not require you to disclose, nor require us to request or collect, any information not described above. We do not request, solicit or intend to collect any such information and you should not disclose any such information on the Site. If we discover that such information was disclosed by you, we will exercise commercially reasonable efforts to delete such information; however, we are not liable for any consequences relating to such disclosures of information.

3. USE AND DISCLOSURE OF INFORMATION COLLECTED. Our use and disclosure of certain information varies with respect to the type of information collected, including: (1) Non-Personal Information; (2) Personally Identifiable Information; and (3) Transactional Information.

3.1 Non-Personal Information. We use the Non-Personal Information collected through the Site for statistical purposes and for improving the functionality of the Site. In general, this information is used internally but we may, from time to time, engage a third party’s software or services to assist us with these analyses. In those limited cases, disclosure of this information to a third-party is necessary; however, the data remains anonymous at all times.

3.2 Personally Identifiable Information. We use PII collected through the Site in conjunction with our online prescription ordering function to respond to your requests for service. We may also use PII to communicate with you regarding refill reminders and other information relevant to your health.

Additionally, we may use your email address or other contact information to send you transactional messages, newsletters, special promotional offers, consumer surveys and other commercial messages. If you no longer wish to receive such commercial messages, simply click the 'unsubscribe' link that we include at the bottom of every email that we send you.

We may use third party service providers and suppliers to facilitate our operation of the Site and/or to do mailings on our behalf, and they may have access to PII. Additionally, we may provide PII to third parties for marketing purposes or to third parties that we believe have products or services of interest to you.

3.3 Transactional Information. We use Transactional Information collected through the Site for the purpose of processing commercial activities that you have initiated. This may include contacting third-party payors such as your insurance carrier, processing your request to pay by credit card or for delivery purposes, where applicable. Additionally, Transactional Information may be used for recordkeeping purposes, as appropriate.

Though we make every effort to preserve your privacy, disclosure of PII to third parties for non-marketing purposes may occur in certain situations such as: (i) responding to a subpoena, court order or other such request; (ii) responding to a law enforcement agency's request or as otherwise required by law; and (iii) providing PII and/or Transactional Information to a third party if we file for bankruptcy, or there is a transfer of the assets or ownership in connection with proposed or consummated corporate reorganizations, such as mergers, acquisitions, or sales of business units. In all such instances, we will take the utmost care to disclose only that information which is necessary and appropriate under the circumstances.

4. USE OF COOKIES. Cookies are small bits of data cached or stored on your computer based on Internet activity. We use cookies to monitor individual activity in aggregate to improve the Site and provide features that are tailored to your needs. The information we gather may include IP address, user language, the operating system, browser type, the presence/absence of “flash” plug-ins, screen resolution, connection type, and information that identifies the cookie. However, no other user information is generally collected. We do not use cookies to obtain any personally identifiable information. Most web browsers automatically accept cookies, but you can usually change your browser settings to prevent this. If you disable cookies, your ability to use some features of the Site may be limited.

5. LINKED SITES. We may provide links on the Site to other sites of interest; however, we do not review or endorse the content of these sites and are not responsible for that content or the privacy policies of websites to which the Site links. If you provide any information to such third parties, different rules regarding the collection and use of your personal information may apply. We strongly suggest you review such third party's privacy policies and terms of use before providing any data to them. You should contact these entities directly if you have any questions about their use of the information that they collect.

6. SECURITY. We strive to maintain the security of your information by using appropriate measures designed to protect our systems. However, we cannot guarantee the security of any information that is disclosed online. Consequently, we do not insure or warrant the security of any information you transmit, and you do so at your own risk.

7. MODIFICATIONS TO THIS PRIVACY POLICY. It may be necessary for us to modify this Privacy Policy. We will notify all users by posting an amendment to the Privacy Policy on the Site. Such modifications will become effective on the day they are posted. We encourage you to frequently review the Privacy Policy for any modifications.

8. QUESTIONS. If you have any questions or concerns about this policy or the use of your information, or to modify or update any information we have received, please contact us through our website, in person or by mail.

9. FOR MORE INFORMATION OR TO REPORT A PROBLEM. If you have questions or would like additional information about Pharmacy privacy practices, you may contact our Privacy Official Mike Fuller at GRX Holdings, LLC by mail or in person (2929 Westown Parkway Suite 100, West Des Moines, IA 50266), by email (compliance@onerorx.com), or by phone (515-440-1270).

If you believe your privacy rights have been violated, you can file a complaint with the Privacy Official at the above address. You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.

There will be no retaliation for filing a complaint.