PRIVACY POLICY | Essential Health RX
Effective Date: 1.1.2026
This Privacy Policy describes how Essential Health RX collects, uses, and protects information from individuals who visit our website, use our telehealth services, or interact with us through any means. By accessing or using our Services, you agree to this Privacy Policy and our Terms of Service.
BY USING OUR SERVICES, YOU CONSENT TO THE PROCESSING OF YOUR INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY. IF YOU DO NOT AGREE, DO NOT USE THE SERVICES.
Important Notice
Essential Health RX is not a medical provider. We connect users with licensed physicians and affiliated pharmacies. We are not responsible for how physicians or pharmacies use or disclose your information. Our Services are intended for users in the United States and available only in certain states as described in our Terms of Service.
1. Information We Collect
1.1 Registration Information
When you register, we collect: name, mailing address, date of birth, email address, phone number, photo ID image, and information about your interests in specific products or services.
1.2 Health Information
You may provide us with health-related information including medical history, symptoms, pre-existing conditions, images or videos for diagnosis, and communications with physicians. This information is used for medical consultation, treatment coordination, and prescription fulfillment.
HIPAA Status: Essential Health RX is not a “covered entity” under HIPAA. However, we may be considered a “business associate” of medical providers and pharmacies. If so, we protect your health information in accordance with HIPAA. We may use and disclose de-identified information for analytics, research, or other purposes.
1.3 Payment Information
We use secure third-party payment processors (such as Stripe) to handle transactions. Your payment information is subject to the payment processor’s privacy policy and terms. We do not store credit card information on our servers.
1.4 Technical Information
We automatically collect:
- Browser type, language preference, and device information
- IP addresses and referring websites
- Usage data, including pages visited and time spent
- Device type, operating system, and crash data
2. How We Use Your Information
We use your information to:
- Provide and improve our services
- Process your medical consultations and prescriptions
- Administer your account and respond to inquiries
- Personalize your experience
- Send service announcements and updates
- Protect against fraud and security threats
- Analyze usage patterns to improve our platform
Health information is only used to provide services you directly request, unless the information is fully anonymized.
3. Information Sharing
3.1 Medical Providers and Pharmacies
We share your information with licensed physicians and affiliated pharmacies to enable them to provide medical services to you.
3.2 Service Providers
Third-party service providers (hosting, analytics, data management) may access your information to perform services on our behalf. They are contractually required to protect your information and may not share it with other parties.
3.3 Legal Requirements
We may disclose information when required by law or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
3.4 Business Transfers
If Essential Health RX is acquired or merges with another company, your information may be transferred. Any acquirer will be bound by this Privacy Policy.
3.5 What We Don’t Do
We do not sell or rent your personal information to third parties for marketing purposes.
4. Data Security
We implement industry-standard security measures to protect your information:
4.1 Encryption
We use:
- AES-256 encryption for data at rest
- SSL/TLS encryption for data in transit
- Secure key management through AWS Key Management Service
4.2 Access Controls
We maintain:
- Role-based access with AWS Identity and Access Management (IAM)
- Database user authentication with limited privileges
- Network isolation through Virtual Private Cloud (VPC) configuration
5. Cookies and Tracking Technologies
We use cookies and similar technologies to improve your experience and analyze usage patterns. We use:
Strictly Necessary Cookies: Essential for site functionality
Performance Cookies: Help us understand how you use our site (Google Analytics, Adobe Analytics)
Functionality Cookies: Remember your preferences and settings
Advertising Cookies: Deliver relevant advertisements
You can modify your browser settings to decline cookies, though this may limit your ability to use certain features. We do not permit third parties to access communications with medical providers through cookies.
6. Data Retention
We retain your information for as long as necessary to provide services, comply with legal obligations, and resolve disputes. When no longer needed, information is either anonymized, deleted, or destroyed. Medical providers may retain records as required by law (typically five years minimum).
7. Your Privacy Rights
7.1 General Rights
You have the right to:
- Access your health information
- Request amendments to your health records
- Request restrictions on information use
- Receive confidential communications
- Receive an accounting of disclosures
- Opt out of marketing communications
- File a complaint if you believe your rights have been violated
7.2 California Privacy Rights (CCPA)
California residents have additional rights:
- Know what personal information is collected and how it’s used
- Request deletion of personal information
- Opt out of the sale of personal information (we don’t sell your information)
- Not be discriminated against for exercising these rights
To exercise your rights, we may require you to verify your identity by matching at least three pieces of personal information.
7.3 Nevada Privacy Rights
Nevada residents may submit a verified request directing us not to sell personal information. For clarity, we do not sell or exchange your personal information for monetary consideration.
8. Children’s Privacy
Our Services are not intended for individuals under 18 years of age. We do not knowingly collect information from children under 18. If we learn that we have collected information from a child under 18, we will delete it promptly.
9. Third-Party Links
Our Services may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies.
10. Do Not Track Signals
Some browsers transmit “do-not-track” signals. We currently do not respond to these signals due to lack of industry standards.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this document. We encourage you to review this Privacy Policy periodically.
12. Contact Information
For questions about this Privacy Policy or to exercise your privacy rights, contact:
Data Security Officer Essential Health RX +1 949-229-5643
28562 Oso Pkwy, Ste. D 204, Rancho Santa Margarita, CA 92688
Patient Services Email: clinic@essentialhealthrx.com
