Privacy Policy

Overview

This Privacy Policy explains how Holistically Rx, LLC. collects, uses, and protects your personal information when you use our website and telemedicine services. We take your privacy seriously — especially because the information you share with us is sensitive. Read this policy to understand exactly what happens with your data.

What information we collect

When you interact with Holistically Rx, we may collect the following categories of information:

• Identity — full name, date of birth, gender, government-issued ID.
• Contact — email address, phone number, mailing address.
• Medical — medical conditions, current medications, medical history relevant to your evaluation.
• Payment — credit or debit card information (processed securely — we do not store full card numbers).
• Program — information related to the treatment programs you select, such as your goals and assessment answers.
• Usage — IP address, browser type, pages visited, time spent on our site.
• Account — login credentials and account activity on our patient portal.

How we use your information

Everything we collect serves a specific purpose tied to providing your care and keeping your experience secure. Here is exactly how we use your data:

• Complete your telemedicine evaluation with a licensed physician.
• Coordinate your treatment plan, including labs and pharmacy fulfillment.
• Securely handle your payment for our services.
• Communicate with you about your evaluation status, care progress, and refill reminders.
• Verify your identity for security and legal compliance.
• Improve our platform and services based on how you use them.
• Comply with applicable federal and state laws.

Who we share your information with

We only share your information with parties who are directly involved in providing your care. We do not share your data for advertising, marketing lists, or profit-driven data sales.

Licensed physicians — the board-certified doctors in our network receive the medical and identity information they need to conduct your telemedicine evaluation and make independent clinical decisions.

Heally (telemedicine platform) — Heally powers our scheduling and virtual consultation system. They receive the information necessary to facilitate your appointment and maintain your patient records within their secure platform. Heally handles your data in accordance with HIPAA requirements.

Payment processors — your payment information is processed through a secure payment gateway. The processor receives only what is needed to complete the transaction — nothing more.

Pharmacies and laboratories — licensed US pharmacies and partner laboratories receive the information needed to fill prescriptions or process the tests your provider orders. We only share what is specifically required.

Legal and regulatory bodies — we may disclose your information when required by law, such as in response to a court order or a lawful request from a government agency.

How we protect your data

Protecting your information is one of the most important things we do. Here is how we keep your data safe:

• All data is transmitted using SSL/TLS encryption.
• We are HIPAA-compliant — your Protected Health Information (PHI) is handled according to federal healthcare privacy standards.
• Access to your personal and medical data is restricted to authorized personnel only.
• We conduct regular security assessments and maintain administrative, physical, and technical safeguards.
• Payment information is handled through PCI-compliant processors and is never stored in full on our systems.

How long we keep your information

We retain your information for as long as needed to provide your care and to meet any legal or regulatory record-keeping requirements. Once your data is no longer needed and retention requirements have been met, we securely delete or anonymize it.

If you would like us to delete your non-essential data sooner, contact us at Info@holisticallyrx.com and we will respond within 30 days.

Your rights

You have the right to control your personal information. Here is what you can do:

• Access — request a copy of the personal information we have on file for you.
• Correct — ask us to update or correct any inaccurate information in your records.
• Delete — request deletion of your personal data where legally permitted. Note that we may be required to retain certain records for medical or legal compliance.
• Opt out — unsubscribe from marketing or promotional communications at any time.

California residents — CCPA/CPRA rights

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA):

• The right to know what personal information we collect, use, disclose, and retain.
• The right to correct inaccurate personal information we maintain about you.
• The right to delete your personal information, subject to legal exceptions.
• The right to opt out of the “sale” or “sharing” of your personal information. We do not sell or share your personal information as those terms are defined under the CPRA.
• The right to limit the use and disclosure of sensitive personal information (such as health information) to what is necessary to provide the services you request.
• The right to non-discrimination for exercising your privacy rights.

We collect the categories of personal information described above — including sensitive personal information such as health and identity data — to provide our services, never to sell it. To exercise any of these rights, contact us at Info@holisticallyrx.com with the subject line “California Privacy Request.” You may use an authorized agent to submit a request on your behalf, and we will verify your identity before responding.

Other U.S. state privacy rights

Depending on your state of residence, you may have similar privacy rights under laws such as the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Texas Data Privacy and Security Act (TDPSA), the Utah Consumer Privacy Act (UCPA), and other comparable state laws. Where these laws apply, you may have the right to:

• Confirm whether we process your personal data and access that data.
• Correct inaccuracies in your personal data.
• Delete personal data you provided or that we obtained about you.
• Obtain a portable copy of your personal data.
• Opt out of targeted advertising, the sale of personal data, and certain profiling — we do not sell personal data or use it for targeted advertising.

To exercise these rights, contact us at Info@holisticallyrx.com. If we deny your request, you may appeal by replying to our response, and we will inform you of any action taken within the timeframe required by your state's law.

Do Not Sell or Share, cookies, and Global Privacy Control

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Because we do not sell or share your data, there is nothing for most opt-out requests to stop — but you may still submit a request to Info@holisticallyrx.com and we will honor it.

Global Privacy Control (GPC) — where required by law, we recognize and honor opt-out preference signals such as Global Privacy Control, which lets you communicate your privacy choices automatically through your browser or a browser extension.

Cookies — our website uses cookies and similar technologies. For details on what we use and how to control them, see our Cookie Policy.

Links to third-party websites

Our website may contain links to third-party websites that we do not own or operate. This Privacy Policy applies only to Holistically Rx and our services. If you visit a third-party site, their privacy policy governs how they handle your data.

Changes to this policy

We may update this Privacy Policy from time to time. If we make any changes, we will post the updated version on this page with a new effective date. We encourage you to review this policy periodically.

Contact us

If you have questions about how we handle your information or want to exercise any of your rights, reach out to us:

Holistically Rx, LLC. · Email: Info@holisticallyrx.com · Phone: 660-243-5303 · Headquarters: Oklahoma City, Oklahoma, USA.