Privacy Policy
This Privacy Policy explains how EmberRx LLC ("EmberRx," "we," "us," or "our") collects, uses, shares, and protects information when you visit emberrx.co, sign up for our communications, or otherwise interact with us (collectively, the "Services"). Please read it carefully. By using the Services, you agree to the practices described here.
Contents
- Scope of this Policy
- Information we collect
- Health information & HIPAA
- How we use information
- Cookies & tracking
- How we share information
- Advertising & no sale of data
- Marketing & your choices
- Data security
- Data retention
- Your privacy rights
- Children's privacy
- Third-party links
- U.S.-only Services
- Changes to this Policy
- Contact us
1. Scope of this Policy
This Policy applies to information collected by EmberRx through the emberrx.co website and our marketing activities. It does not apply to:
- Information you provide directly to licensed providers, medical practices, or pharmacies through the Telehealth Platform, including intake questionnaires, medical history, lab results, and treatment records. That information is governed by those parties' HIPAA Notice of Privacy Practices.
- Payment information you submit to complete a medical order, which is processed by the Telehealth Platform and its payment processors, not by EmberRx.
- Third-party websites or services that link to or from the Services.
2. Information we collect
Information you provide to us
- Contact and signup details — such as your name and email address when you join our email list, request information, or contact support.
- Communications — the contents of messages you send us (for example, support or general inquiries).
- Preferences — such as topics you're interested in or your communication choices.
Information collected automatically
- Device and usage data — IP address, browser type, device type, operating system, referring/exit pages, pages viewed, and dates/times of visits.
- Cookies and similar technologies — see Cookies & tracking below.
Information from third parties
- Analytics and advertising partners — aggregated or de-identified information about how visitors reach and use the Services.
- Our Telehealth Platform partner — limited, non-clinical account status information (for example, that an assessment was started or completed) where permitted, so we can support you and improve our Services. We do not receive your medical records or clinical details for marketing purposes.
3. Health information & HIPAA
EmberRx is committed to keeping health information out of our marketing systems. To that end:
- Medical intake, health questionnaires, lab work, diagnoses, and prescription information are collected and stored by the licensed providers and pharmacies through the Telehealth Platform — not on emberrx.co.
- We do not knowingly transmit protected health information to advertising platforms, tracking pixels, or analytics tools.
- Where EmberRx handles information on behalf of a HIPAA-covered entity, it does so under a Business Associate Agreement and applies the safeguards HIPAA requires.
- The providers who treat you maintain their own HIPAA Notice of Privacy Practices describing your rights over your medical records. You will receive or be able to access that Notice through the Telehealth Platform.
4. How we use information
We use the information described above to:
- Operate, maintain, and improve the Services and our website.
- Respond to your inquiries and provide customer support.
- Send you newsletters, product updates, and marketing communications you've asked to receive.
- Understand how visitors use the Services through analytics.
- Measure and improve our marketing (using aggregated or non-health data).
- Protect the security and integrity of the Services and prevent fraud or abuse.
- Comply with legal obligations and enforce our Terms of Service.
5. Cookies & tracking technologies
We and our partners use cookies, pixels, and similar technologies to run the website, remember your preferences, measure traffic, and support marketing. Categories include:
| Type | Purpose |
|---|---|
| Strictly necessary | Enable core site functionality and security. These cannot be switched off in our systems. |
| Analytics / performance | Help us understand how visitors use the site so we can improve it. |
| Marketing / advertising | Help us reach relevant audiences and measure ad performance. These do not use your health information. |
You can control cookies through your browser settings and, where offered, through our cookie preferences tool. Some browsers offer a "Do Not Track" (DNT) or Global Privacy Control (GPC) signal; where required by law, we treat a recognized GPC signal as a valid request to opt out of the "sale" or "sharing" of personal information.
6. How we share information
We do not sell your personal information for money. We share information only as follows:
- Service providers — vendors who perform services on our behalf, such as website hosting, email delivery, and analytics, under contracts that limit their use of the information.
- Telehealth Platform, providers, and pharmacies — to connect you with licensed care and fulfillment. Clinical and payment data you submit there is governed by their policies and HIPAA, not this Policy.
- Legal and safety — when we believe disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of EmberRx, our users, or others.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
- With your direction or consent — when you ask us to share information or otherwise agree to it.
7. Advertising & no sale of data
We may use advertising partners to reach people who might benefit from our Services. We do not share protected health information with advertising platforms. We do not sell your personal information for monetary payment. Some data sharing for cross-context behavioral advertising may be considered a "sale" or "sharing" under certain state laws; where that applies, you can opt out — see Your privacy rights and our cookie/GPC controls above.
8. Marketing communications & your choices
If you receive marketing emails from us, you can opt out at any time by clicking the "unsubscribe" link in any message or by contacting us at support@emberrx.co. You may still receive non-marketing messages, such as responses to your inquiries. Opting out of EmberRx marketing does not affect communications from your care team through the Telehealth Platform.
9. Data security
We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a security incident affecting your information, we will notify you and any regulators as required by law.
10. Data retention
We keep personal information for as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete it or de-identify it. Medical records held by your providers are retained by them under applicable medical record-keeping laws, not by EmberRx.
11. Your privacy rights
Depending on where you live, you may have some or all of the following rights regarding the personal information EmberRx holds:
- Access / know — request the categories and specific pieces of personal information we hold about you.
- Correct — request that we fix inaccurate personal information.
- Delete — request that we delete personal information, subject to legal exceptions.
- Opt out — opt out of the "sale" or "sharing" of personal information and of targeted advertising.
- Non-discrimination — you will not receive discriminatory treatment for exercising your rights.
Residents of California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have specific rights and appeal processes. To exercise any right, email support@emberrx.co with the subject line "Privacy Request." We will verify your identity before responding and will reply within the timeframe required by applicable law. You may use an authorized agent to submit a request on your behalf where the law permits. Requests concerning your medical records should be directed to your care team through the Telehealth Platform, who are the custodians of that information.
12. Children's privacy
The Services are intended for adults 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact support@emberrx.co and we will delete it.
13. Third-party links
The Services may link to third-party websites and services, including the Telehealth Platform. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing information.
14. U.S.-only Services
The Services are intended for use in the United States. If you access the Services from outside the U.S., you do so on your own initiative and are responsible for compliance with local laws. Information we collect is processed and stored in the United States.
15. Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice as required by law. Your continued use of the Services after an update means you accept the revised Policy.
16. Contact us
If you have questions about this Policy or our privacy practices, or to exercise your rights, contact us:
- Email: support@emberrx.co
- EmberRx LLC
7901 4th St N, Ste 300
St. Petersburg, FL 33702