01Introduction
Stateside Scripts, Inc., doing business as Stateside Scripts ("Stateside Scripts," "we," "us," or "our"), owns and operates the website located at statesidescripts.com, along with related online services, account features, intake forms, telehealth tools, checkout pages, messaging tools, and support services.
This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit our website, create an account, complete an online health intake, communicate with us, purchase products or services, use our telehealth services, or otherwise interact with us.
Stateside Scripts provides access to online health services, including prescription treatment options when determined appropriate by a licensed medical provider. Prescription medications are available only after a provider determines that treatment is appropriate based on your health history, intake responses, and other relevant clinical information.
By using our website or services, you acknowledge that you have reviewed this Privacy Policy. If you do not agree with this Privacy Policy, do not use our website or services.
02Eligibility and Use by Adults
Our services are intended for adults who are at least 18 years old and located in jurisdictions where our services are available.
Our website and services are not intended for children under 13. We do not knowingly collect personal information from children under 13.
If we learn that we have collected information from a child under 13, we will take reasonable steps to delete that information unless we are legally required to retain it.
03Protected Health Information and Medical Information
When you use our telehealth services, certain information you provide may be health or medical information. Some of that information may be considered protected health information, or "PHI," under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations, commonly known as HIPAA.
PHI may include information such as your health history, symptoms, medications, allergies, lab results, provider communications, prescription details, treatment plan, payment information related to care, and other information that identifies you and relates to health care services.
Not all information collected through our website is PHI. For example, basic account information, website browsing information, marketing information, customer support information, or transaction information may not be PHI unless it is connected to covered health care services in a way that qualifies under applicable law.
Where HIPAA applies, our use and disclosure of PHI is governed by HIPAA, applicable state privacy laws, business associate agreements, provider obligations, and our separate Notice of Privacy Practices.
If there is a conflict between this Privacy Policy and the Notice of Privacy Practices regarding PHI, the Notice of Privacy Practices will control.
We do not sell protected health information.
04Information We Collect
The information we collect depends on how you interact with us.
Information You Provide Directly
We may collect information you provide when you create an account, complete an intake, purchase a product or service, request support, message a provider, subscribe to communications, or otherwise interact with us.
This may include:
Health and Treatment Information
We may collect health-related information needed to support telehealth services, provider review, prescription treatment, refill management, lab testing, pharmacy fulfillment, and ongoing care support.
This may include information about weight, health goals, metabolic health, medications, prior treatments, contraindications, side effects, symptoms, medical history, lab values, and provider recommendations.
Completing an online intake does not guarantee that a prescription will be issued.
Information Collected Automatically
When you visit our website or use our platform, we may automatically collect certain information, including:
Some browsing activity may relate to health-related pages. We treat this information carefully and apply privacy safeguards consistent with applicable law.
Information From Third Parties
We may receive information from third parties, including:
05How We Use Information
We may use information to:
- —Provide, operate, and improve our website, platform, and services.
- —Create and manage your account.
- —Process your online intake.
- —Facilitate licensed provider review.
- —Support telehealth visits and provider messaging.
- —Determine whether prescription treatment may be appropriate.
- —Process prescriptions when authorized by a licensed provider.
- —Coordinate with licensed pharmacies.
- —Support lab testing, if ordered or offered.
- —Process payments, refunds, subscriptions, and transactions.
- —Ship products or medications when prescribed or purchased.
- —Send appointment reminders, refill reminders, account notices, order updates, shipping updates, and support messages.
- —Respond to customer support requests.
- —Monitor safety, adverse events, side effects, or treatment concerns.
- —Maintain compliance with legal, regulatory, licensing, pharmacy, and certification requirements.
- —Detect and prevent fraud, misuse, unauthorized access, or security incidents.
- —Analyze website and service performance.
- —Improve patient experience and service quality.
- —Send marketing communications where permitted by law.
We do not use protected health information for advertising or marketing unless permitted by law or authorized by you where required.
06How We Disclose Information
We may disclose information as needed to provide services, comply with law, protect safety, or operate our business.
Licensed Medical Providers
We may disclose information to physicians, nurse practitioners, physician assistants, or other licensed providers involved in reviewing your intake, evaluating treatment eligibility, prescribing medication, managing follow-up care, or responding to clinical questions.
Pharmacies and Fulfillment Partners
If medication is prescribed, we may disclose information to licensed pharmacies, pharmacy support vendors, fulfillment partners, and shipping providers as needed to dispense, package, ship, track, and support your prescription.
Laboratories
If lab testing is ordered or offered, we may disclose information to laboratory partners, specimen collection partners, diagnostic vendors, and providers who review lab results.
Service Providers
We may disclose information to vendors that help us operate our website, platform, EHR, telehealth tools, hosting, email, SMS, customer support, scheduling, analytics, security, payment processing, fraud prevention, and shipping. Where required, these vendors must protect PHI or other protected information under applicable contracts and law.
Payment Processors
We may disclose payment and transaction information to payment processors, banks, card networks, fraud prevention vendors, and related financial service providers.
Compliance, Legal, and Safety Purposes
We may disclose information when required or permitted by law, including for subpoenas, court orders, law enforcement requests, regulatory inquiries, licensing obligations, public health reporting, adverse event reporting, pharmacy requirements, prescription monitoring requirements, certification reviews, fraud prevention, or safety concerns.
Business Transfers
If we are involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction, information may be disclosed or transferred as part of that transaction, subject to applicable law.
07Cookies, Analytics, and Tracking Technologies
We may use cookies, pixels, web beacons, analytics tools, and similar technologies to operate our website, remember preferences, analyze performance, improve user experience, measure marketing effectiveness, and understand how users interact with our services.
These technologies may collect device information, browser information, IP address, pages viewed, clicks, referral sources, and other usage information.
You may be able to control cookies through your browser settings. Some features may not work properly if cookies are disabled.
We do not knowingly use tracking technologies in a way that discloses protected health information to advertising platforms without appropriate authorization or another legally permitted basis.
08Your Choices and Privacy Controls
Depending on applicable law and the type of information involved, you may have the right to:
- —Access certain information we maintain about you.
- —Request correction of inaccurate information.
- —Request deletion of certain information, subject to legal and medical record retention requirements.
- —Request a copy of certain information.
- —Opt out of certain marketing communications.
- —Request limits on certain uses or disclosures of PHI.
- —Request confidential communications.
- —Receive an accounting of certain disclosures of PHI where required by HIPAA.
- —Appeal certain privacy request decisions where required by state law.
To submit a privacy request, contact us at admin@statesidescripts.com.
We may verify your identity before responding to a request.
09Text Messages, Email, and Communications
By providing your contact information, you authorize us to contact you about your account, intake, provider review, prescriptions, refills, orders, shipping, billing, support requests, and other service-related matters.
We may communicate by email, phone, mail, SMS, secure portal, or other methods you provide.
If you consent to receive SMS messages, message and data rates may apply. Message frequency may vary. You may opt out of non-essential text messages by replying STOP. You may request help by replying HELP or contacting admin@statesidescripts.com.
Opting out of marketing messages does not stop necessary service-related communications.
Because ordinary email and SMS may not always be fully secure, we avoid including sensitive medical details in unsecured messages unless permitted by law and appropriate under the circumstances.
10Payments and Transactions
We may collect and process payment information when you purchase products, services, memberships, subscriptions, lab testing, or other offerings.
Payment information may be processed by third-party payment processors. We may not store full payment card numbers directly.
We may retain transaction records as needed for accounting, tax, compliance, refunds, chargebacks, fraud prevention, and legal obligations.
11Data Retention
We retain information for as long as necessary to provide services, maintain medical and prescription records, comply with law, resolve disputes, enforce agreements, prevent fraud, and operate our business.
Medical records, prescription records, pharmacy records, lab records, telehealth records, payment records, and communications may be retained for periods required by federal law, state law, pharmacy regulations, medical board rules, professional standards, or contractual obligations.
12Data Security
We use administrative, technical, and physical safeguards designed to protect personal information and health information.
These safeguards may include encryption, secure hosting, access controls, authentication, audit logs, employee training, vendor review, security monitoring, and policies limiting access based on role and need.
No system is completely secure. We cannot guarantee absolute security, but we work to protect information using safeguards appropriate to the sensitivity of the information.
13State Privacy Rights
Residents of certain states may have additional privacy rights under state privacy laws. These rights may include access, correction, deletion, portability, opt-out rights, appeal rights, and rights related to targeted advertising, sale, sharing, profiling, or sensitive information.
We do not sell protected health information.
We do not knowingly sell personal information of minors.
To exercise state privacy rights, contact us at admin@statesidescripts.com.
If applicable, you may also use an authorized agent to submit a request on your behalf. We may require proof of authorization and identity verification.
14HIPAA Notice of Privacy Practices
If you receive health care services through Stateside Scripts, certain medical information may also be governed by a separate Notice of Privacy Practices.
The Notice of Privacy Practices explains how PHI may be used and disclosed for treatment, payment, health care operations, and other purposes permitted or required by law.
You may request a copy by contacting admin@statesidescripts.com.
15Breach Notification
If we discover a breach involving unsecured protected health information or other personal information, we will investigate and provide notifications as required by applicable law.
Depending on the nature of the information and the services involved, notification obligations may arise under HIPAA, state breach notification laws, the FTC Health Breach Notification Rule, or other applicable privacy laws.
16Third-Party Services
Our website or platform may link to or integrate with third-party services, including pharmacies, labs, payment processors, identity verification tools, customer support tools, analytics tools, advertising platforms, or shipping providers.
We are not responsible for the privacy practices of third parties that we do not own or control.
We encourage you to review the privacy policies and terms of any third-party services you use.
17Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
When we update it, we will revise the "Last Updated" date above. If we make material changes, we may provide additional notice or request consent where required by law.
Your continued use of our website or services after an updated Privacy Policy is posted means you acknowledge the updated Privacy Policy.
18Contact Us
If you have questions about this Privacy Policy, your privacy rights, or our privacy practices, contact us:
Stateside Scripts, Inc.
Attn: Privacy Officer
2810 North Church Street, Wilmington, DE 19802
Phone: (239) 380-1838
Email: admin@statesidescripts.com
For medical emergencies, call 911 or seek emergency medical care immediately. Do not use our website, email, SMS, portal, or customer support channels for emergency medical needs.