Privacy Policy

This Privacy Policy describes how NuLife Group LLC (“Rx-Dr”, “we”, “us”, or “our”) collects, uses, discloses, and protects your personal and health information when you use our website, telehealth platform, and related services (together, the “Services”). By using the Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.

1. Information we collect

We collect information you voluntarily provide when you create an account, complete a health intake questionnaire, place an order, or communicate with our care team, including:

• Identifiers: name, date of birth, email address, phone number, and mailing address.
• Health information: medical history, current medications, symptoms, treatment goals, identity-verification documents, and your responses to clinical intake questions.
• Payment information: billing address and payment card details. Card payments are processed by our payment processor; Rx-Dr does not store full card numbers.
• Usage data: pages visited, features used, and general device and browser information collected automatically as you navigate the platform.

2. How we use your information

• Providing care: presenting your intake information to licensed providers for clinical review, prescription determination, and ongoing treatment management.
• Fulfillment: transmitting your prescription and shipping details to licensed pharmacies that dispense and ship your treatment.
• Billing: processing payments, issuing receipts, and managing subscription renewals.
• Communications: sending appointment reminders, shipment notifications, care-team messages, and — where you have opted in — health education and program updates.
• Safety and compliance: verifying identity, detecting fraud, meeting legal obligations, and maintaining accurate medical records as required by applicable law.
• Service improvement: analyzing aggregated, de-identified usage patterns to improve the quality and reliability of the platform.

3. Who we share your information with

Rx-Dr does not sell your personal or health information. We share it only in the following circumstances:

• Licensed providers: your intake and health history are shared with the licensed provider reviewing your case so they can make a clinical determination.
• Pharmacies: once a prescription is issued, the necessary fulfillment details (name, address, prescription) are transmitted to a licensed pharmacy for dispensing and shipment.
• Service providers: third-party vendors who help us operate the platform (payment processing, cloud hosting, email and SMS delivery, analytics) receive only the minimum data necessary and are contractually bound to protect it.
• Legal requirements: we may disclose information if required by law, court order, or to protect the safety of our patients or the public.

4. HIPAA notice

Rx-Dr protects your Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA). As a healthcare platform facilitating telehealth consultations and prescription fulfillment, we treat the health information you share with us as PHI subject to HIPAA protections.

We implement administrative, physical, and technical safeguards designed to protect your PHI from unauthorized access, disclosure, or misuse. Service providers who handle PHI on our behalf are required to execute Business Associate Agreements (BAAs) obligating them to the same standards.

You have the right to receive a full Notice of Privacy Practices describing how your PHI may be used and disclosed. Contact us using the details in Section 10 to request a copy.

5. Text messages and email

If you provide your mobile number, we may send you transactional text messages about your care — appointment reminders, prescription and shipment updates, and care-team notifications. Message and data rates may apply. Reply STOP to opt out of text messages or HELP for help. Marketing emails include an unsubscribe link in every message. Clinical and transactional messages (prescription confirmations, shipment updates) are not marketing and may still be sent while you are an active patient.

Your phone number and SMS opt-in consent are never shared with or sold to third parties or affiliates for their own marketing purposes. Text messaging opt-in data is used solely to deliver the messages you have consented to receive.

6. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Services are used. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Services from functioning.

7. Third-party links

The Services may contain links to third-party websites and services that we do not operate. This Privacy Policy does not apply to those sites; we encourage you to review the privacy policy of any third-party site you visit.

8. Data retention and security

We retain personal and health information for as long as necessary to provide the Services and to satisfy medical-record retention requirements under applicable law. We use encryption in transit and at rest, role-based access controls, and audit logging to protect your information. No method of transmission or storage is completely secure; if a breach affecting your information occurs, we will notify you as required by law.

9. Your rights

• Access: request a copy of the personal and health information we hold about you.
• Correction: ask us to correct inaccurate information in your record.
• Deletion: request deletion of your account and associated personal data, subject to our obligation to retain medical records under applicable law.
• Portability: request a machine-readable export of the personal data you have provided to us.
• Marketing opt-out: unsubscribe from marketing communications at any time via the unsubscribe link in any email or by contacting us.

Depending on where you live, you may have additional rights under state privacy laws (for example, the California Consumer Privacy Act). We do not discriminate against you for exercising any privacy right. To exercise any of these rights, contact us using the details in Section 10; we respond to verified requests within 30 days.

10. Contact us

If you have questions about this Privacy Policy, wish to exercise your rights, or need to report a privacy concern, contact our Privacy Team:

11. Children's privacy

The Services are intended for adults 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on the platform before the change takes effect. Your continued use of the Services after the effective date constitutes acceptance of the updated policy.