Consumer Health Data Privacy Policy

This policy covers consumer health data under Washington's My Health My Data Act and similar laws in Nevada and Connecticut. Low Cost RX Club is a brand of LOW COST RX LLC (Ohio). It applies to LOW COST RX LLC, doing business as Low Cost RX Club.

The short version

• What: records of the pages you visit on this site, including pages about treatment options, and the fact that you signed up for member pricing on prescription treatments, and the page that opened sign-up, once HighLevel links them to your contact record. Your membership may itself suggest a health interest.
• Why: to run and secure the site, understand how visitors use it, and run your membership.
• Who gets it: HighLevel and Stripe, and the mobile carriers that deliver your texts.
• How to withdraw consent: the steps are under "Your rights" below.

What we collect

The consumer health data we may hold is the visit records that HighLevel links to your contact. These can include pages you viewed about treatment options, the fact that you signed up for member pricing on prescription treatments, and the page that opened sign-up. Your membership may also suggest a health interest. Our website host, HighLevel, collects visit information automatically, as described in our Privacy Policy.

Where it comes from

• From your browser or device when you visit this site.
• From you, when you sign up, check out, or contact us.

Signing up creates your contact record in HighLevel before you start your membership. HighLevel may then link your earlier visits on this site, including pages about treatment options, to that record, even if you never become a member.

If you send a privacy request, HighLevel also creates or updates a contact record with your name and email, and may link your earlier visits to that record.

Why we collect it

To run and secure the site, to understand how visitors use it, and to run your membership. We don't use linked visit records to choose, group or target your emails or texts.

How long we keep it

• Contact details from a sign-up that was never finished: 1 year.
• Records of members who cancel: 3 years after they cancel, unless the law requires us to keep them longer.
• Text message consent records: 5 years. We keep these as proof of your choice.
• Records made by our team while testing the site: deleted after testing.
• Anything you ask us to delete: deleted, unless the law requires us to keep it.

These are the same periods as in our Privacy Policy.

Who we share it with

• HighLevel. It hosts the site, stores our customer records, and sends our emails and texts. It acts for us as a service provider, and it uses its own service providers to deliver email and texts.
• Stripe. It takes your membership payment.
• Mobile carriers. They deliver text messages to your phone.
• Service providers that keep the site secure and load it, which may include content delivery and font services.

We don't share your mobile number or your text message choice with anyone for their own marketing. We may also share information if the law requires it.

Your rights

You can ask us to:

• confirm whether we collect your consumer health data
• show it to you
• delete it
• give you a list of who we've shared it with

You can also withdraw any consent you've given:

• Any consent you gave at sign-up: use the privacy request form on our Privacy Policy page (/privacy) or email support@lowcostrxclub.com.
• Texts: reply STOP to any text.
• Marketing emails: use the unsubscribe link in the email.

We act on requests within the time the law allows. For withdrawing consent under Connecticut law, that is 15 days. For other requests, it is 45 days. If we deny your request, you can appeal by choosing "Appeal a decision" on the same form.