Privacy Policy &
Data Protection

1. Introduction

OmniRx Health ("we," "our," or "us") is committed to protecting the privacy and security of your personal information, including your Protected Health Information (PHI). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our telemedicine platform and related services.

As a healthcare provider, we are required to comply with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable federal and state privacy laws. This Privacy Policy works in conjunction with our HIPAA Notice of Privacy Practices to provide you with a complete understanding of our privacy commitments.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us, including:

• Name, address, phone number, email address, and date of birth
• Government-issued identification numbers for verification purposes
• Payment and billing information
• Emergency contact information
• Insurance information (if applicable)

2.2 Health Information

We collect health-related information necessary to provide you with medical care, including:

• Medical history, symptoms, and current health conditions
• Current medications and allergies
• Vital signs and other health measurements
• Photos or videos for medical assessment (with your consent)
• Treatment plans, prescriptions, and medical recommendations
• Records of consultations and communications with healthcare providers

2.3 Technical Information

When you use our platform, we automatically collect certain technical information:

• Device information (type, operating system, browser)
• IP address and general location information
• Usage patterns and interaction with our platform
• Log files and error reports
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information for the following purposes:

3.1 Healthcare Services

• Providing medical consultations, diagnoses, and treatment recommendations
• Prescribing medications and coordinating pharmacy services
• Managing your medical records and treatment history
• Coordinating care with other healthcare providers
• Following up on treatments and monitoring your health progress

3.2 Administrative Purposes

• Processing payments and managing billing
• Scheduling appointments and sending reminders
• Verifying your identity and eligibility for services
• Communicating with you about your care and our services
• Maintaining and improving our platform's functionality

3.3 Legal and Compliance Purposes

• Complying with HIPAA and other healthcare regulations
• Responding to legal requests and court orders
• Protecting against fraud and ensuring platform security
• Reporting to public health authorities when required by law

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We only share your information in the following limited circumstances:

4.1 Healthcare Operations

• With pharmacies to fulfill your prescriptions
• With laboratories for test processing and results
• With specialist physicians for referrals and consultations
• With your primary care physician (with your consent)
• With insurance companies for coverage verification

4.2 Service Providers

We may share information with trusted third-party service providers who help us operate our platform, including:

• Cloud hosting and data storage providers
• Payment processors and billing companies
• IT support and security service providers
• Communication and messaging platforms

All service providers are required to sign Business Associate Agreements (BAAs) to ensure HIPAA compliance.

4.3 Legal Requirements

We may disclose your information when required by law or to:

• Comply with court orders, subpoenas, or legal processes
• Report suspected abuse, neglect, or domestic violence
• Prevent or investigate fraud or illegal activities
• Report certain diseases to public health authorities
• Cooperate with law enforcement when required

5. Data Security Measures

We implement comprehensive security measures to protect your personal and health information:

5.1 Technical Safeguards

• End-to-end encryption for all data transmission
• Advanced encryption standards (AES-256) for data at rest
• Multi-factor authentication for account access
• Regular security audits and vulnerability assessments
• Secure cloud infrastructure with redundant backups

5.2 Administrative Safeguards

• Regular staff training on HIPAA and privacy requirements
• Access controls ensuring minimum necessary access to information
• Incident response procedures for potential security breaches
• Regular review and updating of security policies
• Background checks for all employees with access to PHI

5.3 Physical Safeguards

• Secure data centers with restricted access
• Surveillance and monitoring systems
• Secure disposal of physical media containing PHI
• Workstation and device security controls

6. Your Privacy Rights

Under HIPAA and other privacy laws, you have the following rights regarding your personal and health information:

6.1 Right to Access

You have the right to request and receive copies of your medical records and other personal information we maintain about you.

6.2 Right to Amendment

You may request corrections to your personal information if you believe it is inaccurate or incomplete.

6.3 Right to Request Restrictions

You may request limitations on how we use or disclose your health information for treatment, payment, or healthcare operations.

6.4 Right to an Accounting

You may request a list of disclosures of your health information that we have made to third parties.

6.5 Right to Deletion

You may request deletion of your personal information, subject to legal and regulatory retention requirements.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience and maintain platform functionality:

7.1 Essential Cookies

These cookies are necessary for the platform to function properly, including authentication, security, and session management.

7.2 Functional Cookies

These cookies enhance functionality and personalization, such as remembering your preferences and settings.

7.3 Analytics Cookies

We use analytics cookies to understand how our platform is used and to improve our services. This data is aggregated and does not identify individual users.

8. SMS/Text Messaging Privacy

8.1 SMS Opt-In and Consent

By providing your mobile phone number and opting in to our SMS/text messaging service, you expressly consent to receive text messages from OmniRx Health. You may opt in by:

• Texting START to +1 (770) 243-5753
• Providing your phone number during the appointment booking or registration process and checking the SMS consent box
• Requesting text message communications from your healthcare provider or our support team

Your consent to receive SMS messages is not a condition of purchasing any goods or services. You may opt out at any time.

8.2 How We Use Your Mobile Information

When you opt in to SMS communications, we may send you text messages related to:

• Appointment confirmations, reminders, and scheduling updates
• Prescription and refill notifications
• Health and wellness tips related to your treatment
• Important updates about your care plan
• Account notifications and verification codes
• Promotional offers and service information (only with your additional consent)

8.3 How to Opt Out

You may opt out of receiving SMS messages at any time by replying STOP to any text message you receive from us. You may also text HELP for assistance. After opting out, you will receive a one-time confirmation message and will no longer receive SMS messages from us unless you opt in again.

8.4 Mobile Information Sharing

We do not sell, rent, lease, or share your mobile phone number or any personal information collected through our SMS program with third parties or affiliates for promotional or marketing purposes.

Your mobile information may only be shared with service providers who assist us in delivering SMS messages (such as our SMS platform provider), and these service providers are contractually prohibited from using your information for any purpose other than delivering messages on our behalf.

8.5 Message Frequency and Data Rates

Message frequency varies based on your interactions and care plan. Standard message and data rates from your wireless carrier may apply. OmniRx Health is not responsible for any fees charged by your carrier.

9. Data Retention

We retain your personal and health information for as long as necessary to:

• Provide ongoing healthcare services
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements
• Maintain business records for operational purposes

Medical records are typically retained for a minimum of seven years after your last visit, or longer as required by state law. Personal information not related to healthcare may be deleted sooner upon request.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Post the updated policy on our website with a new effective date
• Notify you by email or through our platform
• Provide you with a reasonable opportunity to review the changes
• Obtain your consent for material changes that affect your rights

Your continued use of our services after the effective date constitutes acceptance of the updated Privacy Policy.

11. Contact Information

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about our privacy practices, please contact us:

We will respond to your privacy-related requests within 30 days of receipt, or as required by applicable law.