Privacy Policy

We collect information you provide and information generated when you use our service, including:

• Account information — your name, email, phone number, and password;
• Health information — the medical and demographic details you submit so a provider can review your request;
• Order and shipping information — the medications you request and the address they ship to;
• Payment information — processed by our third-party payment processor; we receive confirmation and limited details (such as the card brand and last four digits), not your full card number;
• Usage information — device and log data generated as you browse the site.

We use your information to:

• Provide the service — route your request to a licensed provider and, if approved, dispense and ship your medication;
• Process payments and prevent fraud;
• Communicate with you about your orders, including transactional email and, if you opt in, SMS;
• Operate, maintain, and improve the website; and
• Comply with legal, regulatory, and pharmacy record-keeping obligations.

We share your information only as needed to provide the service or as required by law, including with:

• The licensed providers who review your request;
• Payment processors, shipping carriers, communication vendors, and other service providers acting on our behalf;
• Authorities when required by law, subpoena, or to protect safety.

We do not sell your personal information.

Some of the information you provide is protected health information. We maintain administrative, technical, and physical safeguards designed to protect it, and we limit access to those who need it to provide your care. Where applicable, our separate Notice of Privacy Practices describes your rights regarding your health information in more detail.

We use safeguards such as encryption in transit, access controls, and audit logging to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information consistent with applicable law.

You can review and update your account information at any time from your account settings. You can manage communication preferences there as well, and opt out of SMS messages by replying STOP. Transactional messages necessary to fulfill your orders may still be sent.

We use cookies and similar technologies to keep you signed in, remember your cart, and understand how the site is used. You can control cookies through your browser settings; disabling them may affect how the site works.

We retain your information for as long as needed to provide the service and to meet our legal, regulatory, and pharmacy record-keeping obligations, after which it is deleted or de-identified.

Our service is intended for adults 18 and older. We do not knowingly collect information from children under 18.

Many states now give residents rights over personal information. Which law applies depends on where you live, but the rights below are the ones we honour for every resident of a state that grants them — and, as a matter of policy, we will consider a request from a resident of any state.

One thing to understand first, because it shapes everything else: we are a licensed pharmacy, and most of the information we hold about you is protected health information governed by HIPAA. Nearly every state privacy law exempts PHI held by a HIPAA covered entity, precisely so the two regimes do not conflict. Your rights over that information come from HIPAA and are described in our Notice of Privacy Practices. The rights on this page apply to the information that sits outside it — website and device data, marketing preferences, and account details not tied to your care.

Subject to the exemptions above, you may:

• Know and access — ask what personal information we hold about you and get a copy;
• Correct — ask us to fix personal information that is inaccurate;
• Delete — ask us to delete personal information, except what we must keep to fill prescriptions and to meet pharmacy record-keeping law;
• Port — receive your information in a portable, machine-readable format where technically feasible;
• Opt out of targeted advertising, of any sale of personal information, and of profiling that produces legal or similarly significant effects;
• Limit the use of sensitive personal information to what is needed to provide the service;
• Appeal — if we decline your request, ask us to reconsider, and be told how to raise the matter with your state Attorney General;
• Be free from discrimination — exercising any of these rights will never change your price or the service you receive.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

These states have enacted comprehensive consumer privacy laws. Residents of each may exercise the rights above, subject to that state’s own thresholds, exemptions and effective date:

• California — Consumer Privacy Act, as amended by the Privacy Rights Act (CCPA/CPRA);
• Virginia — Consumer Data Protection Act;
• Colorado — Privacy Act;
• Connecticut — Data Privacy Act;
• Utah — Consumer Privacy Act;
• Texas — Data Privacy and Security Act;
• Oregon — Consumer Privacy Act;
• Montana — Consumer Data Privacy Act;
• Iowa — Consumer Data Protection Act;
• Delaware — Personal Data Privacy Act;
• New Jersey — Data Protection Act;
• New Hampshire — Data Privacy Act;
• Nebraska — Data Privacy Act;
• Tennessee — Information Protection Act;
• Minnesota — Consumer Data Privacy Act;
• Maryland — Online Data Privacy Act;
• Indiana — Consumer Data Protection Act;
• Kentucky — Consumer Data Protection Act;
• Rhode Island — Data Transparency and Privacy Protection Act.

Some states also grant rights that go further, and we honour those too:

• California — the right to know the categories of information collected, the sources, the business purpose and the categories of recipients; the right to limit the use of sensitive personal information; and the right to opt out of sale or sharing. California residents may also designate an authorised agent to act for them;
• Washington and Nevada — consumer health data laws (the My Health My Data Act and Nevada SB 370) give residents rights over health data held OUTSIDE HIPAA, including the right to withdraw consent and to have that data deleted;
• Colorado, Connecticut, Virginia, Montana, Oregon, Texas, Delaware, New Jersey and others — a formal right to appeal a refused request, which we answer within the time their law allows;
• Illinois and Texas — biometric identifier laws. We do not collect biometric identifiers.

Send your request to our Privacy Office using the contact details at the end of this policy, and tell us which right you are exercising and which state you live in.

We will verify your identity before acting — for an account holder, usually by confirming control of the email on the account; for a request about health information, to the standard HIPAA requires. We ask for no more information than the verification needs, and we use anything you send for verification only.

An authorised agent may act for you where your state allows it, with written permission we can confirm with you directly.

We respond within the period your state’s law sets — 45 days in most states, extendable once where the law permits, and we will tell you if we need the extension. There is no charge for a reasonable request. If we decline, we will tell you why and how to appeal.

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent version.

Questions about this policy, or about how your information is handled? Write to our Privacy Office:

Specialty Care Pharmacy LLC 5915 Memorial Hwy Suite 104 Tampa, FL 33615 Attn: Privacy Office

You can also reach the pharmacy through our Contact page.