Personal Identifiable Information (PII): name, email address, phone number, physical delivery and billing address, date of birth, and account credentials.

Health Information: medication type, pharmacy name, prescribing facility, and delivery instructions — collected solely for the purpose of completing deliveries and handled in accordance with our HIPAA Privacy Notice.

Payment Information: billing address and payment method details, processed securely through Stripe. We do not store full credit card numbers on our servers.

Location Data: GPS coordinates from drivers and delivery tracking links to facilitate real-time delivery and proof-of-delivery verification.

Device & Usage Data: IP address, browser type, device identifiers, operating system, and usage patterns when you interact with our Service.

Referral Information: referral codes, referrer and referred email addresses, and signup metadata used to administer our referral program and prevent fraud.

We use collected information to:

• Provide, schedule, route, and complete prescription and healthcare-essentials deliveries;
• Verify recipient identity and authority to receive a delivery;
• Process payments, issue refunds, and manage subscriptions via Stripe;
• Communicate with you regarding orders, deliveries, reminders, and account updates;
• Maintain chain-of-custody, proof-of-delivery, and audit records required by law and partner pharmacies;
• Administer our referral and loyalty programs and prevent fraud or abuse;
• Respond to customer support requests and billing inquiries;
• Comply with HIPAA, CCPA, and other applicable legal and regulatory obligations.

We do not sell your personal information to third parties.

We share information only as necessary to provide the Service and as described below:

• Partner Pharmacies & Healthcare Facilities: information required to fulfill and verify your delivery order.
• Service Providers: Stripe (payment processing), SendGrid (transactional email), Twilio (SMS notifications), and our hosting provider — each under written agreements restricting their use of your data.
• Authorized Recipients: designated representatives (spouse, power of attorney, caregiver) for delivery verification purposes only.
• Legal Compliance: when required by law, court order, or government regulation, or to protect the rights, property, or safety of PharmDL, our users, or others.

We use cookies and similar tracking technologies (web beacons, pixels, and analytics) to:

• Remember your session and authentication status;
• Analyze website traffic and usage patterns to improve our Service;
• Deliver targeted support and relevant delivery updates.

You may disable cookies through your browser settings, though some features of the Service may not function properly without them.

We implement industry-standard technical, physical, and administrative safeguards to protect your information, including:

• Encryption of data in transit (TLS) and at rest;
• Role-based access controls limiting staff to the minimum necessary information;
• Biometric authentication, anti-screenshot, and anti-camera protections on sensitive screens;
• Automatic session logout after periods of inactivity;
• Audit logging of access to sensitive records;
• Background-checked drivers and chain-of-custody tracking for controlled substances.

No method of transmission over the Internet is 100% secure. For PHI-specific safeguards, see our HIPAA Privacy Notice.

If you are a California resident, under the California Consumer Privacy Act (CCPA) you have the right to:

• Know what personal information we collect about you and how it is used;
• Access a copy of the personal information we hold about you;
• Delete your personal information (subject to legal retention requirements);
• Opt-out of the sale or sharing of your personal information;
• Correct inaccurate personal information;
• Non-discrimination — we will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at support@pharmdl.com. We will verify your identity before responding to requests.

Our Service is not intended for individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

We retain personal and delivery information only for as long as necessary to provide the Service, comply with legal obligations (including HIPAA and DEA recordkeeping requirements), resolve disputes, and enforce our agreements. After the retention period expires, we securely dispose of or de-identify the data.

Our Service may contain links to third-party websites (e.g., Stripe, partner pharmacies). We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing personal information.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent version. We will notify you of material changes by posting the updated policy on this page or via email. Continued use of the Service after changes constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, contact us:

PharmDL LLC

Email: support@pharmdl.com

Website: pharmdl.com