Privacy Notice

Last updated: August 28, 2024

This Privacy Notice (“Notice”) describes how RIS Rx, LLC, its global affiliates, and subsidiaries (collectively, “RIS Rx,” “we,” “our,” or “us”) collect, use, disclose, and otherwise process the personal information described in this Notice and the rights and choices individuals have regarding such personal information. For information about your privacy choices, please review Section 7 Your Privacy Choices.

If you are a resident of California: Please refer to Section 14. California Notice at Collection and Privacy Policy, which includes additional information about the personal information that we may collect about you, and your rights under California privacy laws.

Your use of our Services (defined below), and any dispute over privacy, is subject to this Notice.

Table of Contents

Scope
Personal Information Collected
Purposes for Collecting and Processing
Disclosures of Personal Information
Aggregate and De-identified Information
Cookies and Tracking
Your Privacy Choices
Retention
Children’s Information
Security
Third-Party Links
Changes to this Privacy Notice
Contact Us
California Notice at Collection and Privacy Policy

1. Scope

Except as otherwise described below, this Notice applies to the personal information RIS Rx collects and processes related to your use of our website, www.risrx.com, where this Notice is posted, and other websites that may display or include a link to this Notice (“Site” or “Sites”), other online and offline services, and other products or services we make available to you, (collectively, “Services”).

Not in Scope.

Human Resources Data. This Notice does not apply to the personal information that we collect and process about RIS Rx employees, contractors, personnel, job applicants, or candidates.
Business Customers. This Notice does not apply to the personal information that we process in our capacity as a service provider to our customers (“Business Customers”). In general, we process information that we receive in our capacity as a service provider for the purposes for which our Business Customers provided the information and subject to our contract with the particular Business Customer. Please note that we may use information, including personal information, that we have collected and/or processed on behalf of our Business Customers in our capacity as a service provider where we believe it is required or permitted by law or necessary to protect the security of our Services, our rights and interests, and/or the rights and interests of other persons.
Protected health information. In certain circumstances, we may collect or use your information through our Services while acting as a “business associate” under the Health Insurance Portability and Accountability Act of 1996, as amended, and its implementing regulations (“HIPAA”), and your information may constitute “Protected Health Information.” A business associate includes an entity that provides services to a HIPAA covered entity which involve the use or disclosure of Protected Health Information. If your health care provider or health insurance company qualifies as a HIPAA covered entity, and we provide services to them or on their behalf, we may qualify as their business associate. Protected Health Information as defined under HIPAA generally means information about you that identifies you and that relates to your physical or mental health or condition, the provision of health care to you, or payment for health care provided to you. To the extent we are acting as a business associate, we will only use and disclose your information as permitted by HIPAA, which may include, but is not limited to, fulfilling our service obligations, for our internal management and administration, executing our legal responsibilities, de-identifying or aggregating data, or as otherwise required by law.

2. Personal Information Collected

As further described below, we collect personal information directly from individuals, from third parties, and automatically through your use of our Services.

Personal Information Collected Directly from You. The personal information we may collect from you depends on how you use our Services or otherwise interact or engage with us, but generally includes:

Professional contact information and details. When you contact us (including via email, phone, or webform) or work with us in your professional capacity, we collect certain personal information from you, such as your name, address, phone number, email address, institution, employer, title, and any other personal information that you otherwise submit to us.
Survey responses. When you fill out our surveys, we may collect your survey responses, including information regarding preferences and your opinion about our products and Services. Participation in our surveys is voluntary.
Transaction Information. If you purchase Services from us, we collect certain transaction information, such as the products or services purchased and payment submission confirmation.
Communications and interactions. When you email, call, or otherwise communicate with us, we collect and maintain a record of your contact details, a history of our interactions with you, feedback you may provide us, and information about your use of our products or Services. We also maintain records of communications and information that you may post on our social media channels, and information you provide to us related to any customer support request.
If you register for or attend an event that we host or sponsor, we may collect personal information related to your registration for and participation in such event.
We also may collect information about your preferences, such as communications preferences, preferences related to your use of our Services, a record of your purchases from us, and any other preferences you provide when interacting with us.

Personal Information Collected from Third Parties. We may collect personal information about you from third-party sources, such as public databases, joint marketing/promotional partners, social networking platforms, or other third parties.

Lead and prospect information. We may receive lead and prospect information, such as names, email addresses and contact information from third parties about individuals who may be interested in engaging with us.
Social network information. If you post information about us or engage with us on third-party platforms, such as through your social media account, we may collect personal information about you from that third-party platform or account (e.g., your name and/or handle). These third-party platforms and services control the information that they collect and share about you. For information about how they may use and disclose your information, including any information you make public, please consult their respective privacy policies.

Personal Information Collected Automatically. We and our providers automatically collect and derive personal information related to your use of our Services and your interactions with us. Such information may include:

Device and browsing information. We use cookies, log files, pixel tags, and other tracking technologies to automatically collect information when users access or use our Services. We may collect device IP address, general location information, domain name, pageviews, date and time stamps, browser type, device type, device ID, internet service provider, referring and exiting URLs, clickstream data, operating system, language, and similar device and usage information. For more information, please see Section 6 Cookies and Tracking.
Activities and usage. We also collect activity information related to your use of the Services, such as information about links clicked, searches, features used, items viewed, and time spent within the Services.
Location Information. We may collect or derive general location information about you such as through your IP address.

3. Purposes for Collecting and Processing

Generally, we collect, use, and otherwise process the personal information that we collect for the following purposes:

Services and support. To provide our products and to operate our Services, communicate with you about your use of our products and Services, respond to your inquiries, gather feedback, fulfill your requests, communicate with you, run our day-to-day operations, and for similar support purposes.
Relationship management. To manage our business relationship with you, for example, to process your transactions, manage and maintain your account with us, respond to your questions and comments, and for other similar purposes.
Analytics and improvement. To better understand how users access and use our Services, products, and offerings, and for other research and analytical purposes, such as to evaluate and improve our Services and business operations, to develop Services, features and new products and offerings, and for internal quality control and training purposes.
Marketing, advertising, and public relations. For marketing, advertising, and public relations purposes. For example, to send you information about our products and Services and the products and services of our affiliates, such as newsletters, and other marketing content, as well as any other information that you sign up to receive and to provide you with information about, or samples of, our product range for marketing purposes. We also may use certain personal information that we collect to manage and improve our advertising campaigns (both online and offline) so that we can better reach individuals with relevant content based on your interests and geographic region.
Planning and managing events. For event planning and management, including registration, attendance, connecting you with other event attendees, and contacting you about relevant events and Services.
Research, surveys, and product development. To administer surveys, such as for market research or customer satisfaction purposes; to improve or enhance our products and Services and to create new products and Services; to conduct statistical and data analytics; and for other similar purposes.
Security and protection of rights. To protect our Services and our business operations; to prevent and detect fraud, unauthorized activities and access, and other misuse, where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, violations of our Policy or other agreements we have with you or this Notice, to defend our rights, including through legal or other dispute resolution processes.
Legal proceedings and obligations. To comply with the law and our legal obligations, to respond to legal process and related legal proceedings, and government or law enforcement requests.
General business and operational support. To consider and implement mergers, acquisitions, reorganizations, bankruptcies, and other transactions such as financings; and for purposes related to the administration of our general business, accounting, auditing, compliance, recordkeeping, and legal functions.

4. Disclosures of Personal Information

Generally, we disclose the personal information that we collect to provide our Services, respond to and fulfil your transactions or requests, as otherwise directed or consented to by you, and as follows:

Global affiliates and subsidiaries. We may disclose the personal information we collect to our global affiliates and subsidiaries who will use and disclose this personal information in accordance with the principles of this Notice.
Vendors and service providers. We may disclose the personal information that we collect to our service providers and others who perform functions on our behalf or provide us services. These may include, for example, service providers that host or operate our Site, payment processors, information technology service providers, analytics providers, customer service vendors, consultants, auditors, and legal counsel. These companies and individuals may only use the data as permitted by our contracts with them.
Advertising and analytics platforms, providers, and networks. We may disclose or make available personal information to the platform providers and vendors that we use to provide or make available certain features or portions of the Services, or as necessary to respond to your requests. We may also make certain information (such as browsing information) available to advertising platforms, providers and networks in support of our marketing, advertising, and campaign management.
General operations. If we or our affiliates are or may be acquired by, merged with, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected about you to the other company. We may also share certain personal information as necessary prior to the completion of such a transaction or corporate transactions such as financings or restructurings, to lenders, auditors and other advisors, including attorneys and consultants, as part of due diligence or as necessary to plan for a transaction.
Others as permitted or required by applicable law. We may disclose personal information to other parties to the extent permitted or required by applicable law. This may include regulators, government entities, and law enforcement. It may also include certain disclosures that we are required to make.
Security and protection of rights. We may disclose your personal information when we believe it is appropriate to do so to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of this Notice, or as evidence in litigation in which we are involved.
With permission. We may disclose personal information in ways not described above. If we do so, we will notify you, and if necessary, obtain your consent.

5. Aggregate and De-Identified Information

We may use and disclose aggregate and other de-identified data related to our business and the Services for quality control, analytics, research, development, and other purposes. Where we use, disclose, or otherwise process de-identified data (data that is no longer reasonably linked or linkable to an identified or identifiable natural person, household, or personal or household device) we will maintain and use the information in de-identified form and not attempt to reidentify the information, except (1) in order to determine whether our deidentification processes are reasonable and adequate pursuant to applicable privacy laws; or (2) where required by law.

6. Cookies and Tracking

We and our providers may use cookies, pixel tags, and other similar tracking technologies to automatically collect information about browsing activity, device type, and similar information within our Site and Services. This information, which may be considered personal information in some jurisdictions, is used, for example, to analyze and understand how you access, use, and interact with our Site and Services; to identify and resolve bugs and errors in our Site and Services; to assess, secure, protect, optimize, and improve the performance of our Site and Services; to personalize content on our Site; and for marketing, advertising, measurement and analytics purposes. We may also de-identify and/or aggregate such information to analyze trends, administer our Site and Services, and gather broad demographic information for aggregate uses, and for any other lawful purposes.

Cookies. Cookies are alphanumeric identifiers used for tracking purposes. Some cookies allow us to make it easier for you to navigate our Site and Services, while others are used to enable a faster log-in process, to support the security and performance of the Site and Services, or to allow us to track activity and usage data within and across our Site and Services.

Pixel Tags and Similar Technologies. Pixel tags (sometime called web beacons or clear GIFs) are tiny graphics with a unique identifier, similar in function to cookies. We may use these tracking technologies to understand users’ activities, to help manage content and compile usage statistics, and in emails to let us know when they have been opened or forwarded so we can track response rates and gauge the effectiveness of our communications.

Local Storage Objects. Local storage is a web storage mechanism that allows us to store data on a browser that persists even after the browser window is closed. Local storage may be used by our web servers to cache certain information in order enable faster loading of pages and content when you return to our Sites. You can clear data stored in local storage through your browser. Please consult your browser help menu for more information.

Analytics. We use analytics tools, such as Google Analytics, to evaluate usage and traffic on our Site and Services. These analytics providers use cookies, pixels, and other tracking technologies to collect usage data to provide us with reports and metrics that help us analyze, improve, and enhance performance and user experience. You can learn more about how Google uses your information at www.google.com/policies/privacy/partners/ (“How Google uses information from sites or apps that use our services”). You can also download the Google Analytics Opt-out Browser Add-on to prevent your information from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout.

Do-Not-Track. Currently, our Services do not recognize web browser “Do-Not-Track” requests. You may, however, disable certain tracking as discussed below (e.g., by disabling cookies).

7. Your Privacy Choices

You have certain choices regarding our processing of your personal information, and we make available several ways for you to manage your preferences and privacy choices, as described below:

Marketing Communications. We may send periodic promotional and operational emails or other similar communications to you. You may change your preferences or unsubscribe by following the instructions provided to you in the communication. If you opt out of receiving promotional emails from us, we may still send you communications that you have requested to receive from us.

Cookie Settings. You can set your browser to block certain cookies or notify you when a cookie is set; you can also delete cookies. The “Help” portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to delete cookies. Visitors to our Site who disable cookies will be able to browse the Site, but some features may not function. If you visit our Site from a different device or from a different browser on the same device, you will need to apply your cookie settings for that browser and/or device as well.

Industry Ad Choice Programs. You can control how participating ad networks use the information that they collect about your visits to our Site and Services and those of third parties, in order to display more relevant targeted advertising to you. You can obtain more information and opt out of receiving targeted ads from participating ad networks at aboutads.info/choices (Digital Advertising Alliance) and optout.networkadvertising.org (Network Advertising Initiative).

8. Retention

We retain your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected or as otherwise necessary to comply with our legal obligations, resolve disputes, maintain appropriate business records, and enforce our agreements

9. Children’s Information

Our Services are not designed for children. If we discover that a child has provided us with personal information, we will delete such information from our systems. If you are a parent or guardian and believe we have collected your child’s information in violation of applicable law, please contact us as set forth in Section 13 Contact Us.

10. Security

We have implemented safeguards that are intended to protect the personal information we collect from loss, misuse, unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security.

11. Third-Party Links

Our Site and Services may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Notice, but instead is governed by the privacy notices of those third-party websites. We are not responsible for the information practices of such third-party websites.

12. Changes to this Privacy Notice

We may make changes to this Notice from time to time, so please be sure to check back periodically. We will post updates to the Notice on the Site. If we make any material changes to this Notice, we will endeavor to provide you prior notice, such as by emailing or posting prominent notice on our Site.

13. Contact Us

RIS Rx welcomes your questions and comments about your privacy or this Notice. Please contact us by emailing info@risrx.com.

14. California Notice at Collection and Privacy Policy

This Section of the Notice provides additional information for California residents and describes our information practices pursuant to applicable privacy laws, including the California Consumer Privacy Act and the regulations issued thereto, each as amended (“CCPA”). To the extent you are a California resident, and we collect “personal information” subject to the CCPA, the following applies.

This Section does not address or apply to our handling of personal information that is exempt under the CCPA, such as publicly available information or de-identified or aggregated information. Additionally, this Notice does not apply to personal information we collect, receive, or otherwise maintain about you that is primarily governed by certain federal laws, such as the Health Insurance Portability and Accountability Act (“HIPAA”). The CCPA recognizes that health information subject to HIPAA is already protected under federal law, so the CCPA does not apply to such information.

Categories of Personal Information Collected and Disclosed. The table below identifies, generally, the categories of personal information we have collected about California residents, as well as the categories of third parties to whom we may disclose this personal information for a business or commercial purpose.

Categories of Personal Information

Third Party Disclosures for Business or Commercial Purposes

Identifiers. Includes direct identifiers such as name, alias, email, phone number, address, unique personal identifier, online identifier, IP address, or other similar identifiers.

Advisors and agents
Affiliates and subsidiaries
Data analytics providers
Internet service providers
Operating systems and platforms
Regulators, government entities, and law enforcement
Others with your permission or as required by law

Customer Records. Includes your account information and customer records that contain personal information, such as name, contact information, and financial or payment information.

Advisors and agents
Affiliates and subsidiaries
Data analytics providers
Internet service providers
Regulators, government entities, and law enforcement
Others with your permission or as required by law

Commercial Information. Includes records of Services purchased, obtained, or considered, or other purchasing or use histories or tendencies.

Advisors and agents
Affiliates and subsidiaries
Data analytics providers
Internet service providers
Regulators, government entities, and law enforcement
Others with your permission or as required by law

Internet or Other Electronic Network Activity Information. Includes browsing history, clickstream data, search history, and information regarding interactions with our Site and Services, advertisements, or emails, including other usage data related to your use of any of our Services or other similar online services.

Affiliates and subsidiaries
Data analytics providers
Internet service providers
Operating systems and platforms
Regulators, government entities, and law enforcement

Others with your permission or as required by law

Location Data. Such as general location information about a particular individual or device (e.g., via your IP address).

Affiliates and subsidiaries
Data analytics providers
Internet service providers
Operating systems and platforms
Regulators, government entities, and law enforcement
Others with your permission or as required by law

Audio, Electronic, Visual, or Similar Information. Includes information collected via call recordings if you are interacting with us in a customer service capacity or if you call us on a recorded line, recorded meetings and webinars, videos, and photographs.

Advisors and agents
Affiliates and subsidiaries
Internet service providers
Regulators, government entities, and law enforcement
Others with your permission or as required by law

Inferences. Such as inferences drawn from any of the information described in this Section about a consumer including inferences reflecting consumer preferences, characteristics, behaviors, attitudes, abilities, and aptitudes.

Affiliates and subsidiaries
Operating systems and platforms
Regulators, government entities, and law enforcement
Data analytics providers
Others with your permission or as required by law

Sales and Sharing of Personal Information. The CCPA defines “sale” as disclosing or making available personal information to a third-party in exchange for monetary or other valuable consideration, and “sharing” includes disclosing or making available personal information to a third-party for purposes of cross-contextual behavioral advertising. While we do not disclose personal information to third parties in exchange for monetary compensation, we may “sell” or “share” the following categories of personal information: identifiers; location data (via your IP address); and Internet and network activity information. We may disclose these categories to third-party analytics providers for purposes of providing you with a more personal experience, to improve and measure our ad campaigns, and for survey purposes.

We do not sell or share sensitive personal information, nor do we sell or share personal information about individuals we know are under age sixteen (16).

Sources of Personal Information. We generally collect personal information from the following categories of sources: directly or indirectly from you; affiliates and subsidiaries; business customers; vendors and service providers; social networks; internet service providers; operating systems and platforms; and data analytics providers.

Purposes of Collection, Use, and Disclosure. As further described in Section 3 Purposes for Collecting and Processing and Section 4 Disclosures of Personal information, we may collect, use, disclose, and otherwise process the above listed personal information for the following business or commercial purposes and as otherwise directed or consented to by you:

Services and support.
Relationship management.
Analytics and improvement.
Marketing, advertising, and public relations.
Planning and managing events.
Research, surveys, and product development.
Security and protection of rights
Legal proceedings and obligations.
General business and operational support.

Retention. We retain the personal information that we collect only as reasonably necessary for the purposes described above or as otherwise disclosed to you at the time of collection. For example, we will retain your account information for as long as you have an active account with us and additional information as necessary to comply with our tax, accounting, and recordkeeping obligations, to provide you with the Services you have requested, as well as an additional period of time as necessary to protect, defend, or establish our rights, defend against potential claims, and comply with our legal obligations. In some cases, rather than delete your personal information, we may deidentify or aggregate it and use it in compliance with the CCPA.

California Residents’ Rights. Under the CCPA, California residents have the following rights (subject to certain limitations):

To opt out of sales and sharing. The right to opt-out of our sale and sharing of their personal information.
To limit certain uses and disclosures of sensitive personal information. We do not collect, use, or disclose sensitive personal information as a Business under the CCPA; thus, this right is not available to California residents.
The right to the deletion of their personal information that we have collected, subject to certain exceptions.
To know/access. The right to know what personal information we have collected about them, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about them.
The right to correct inaccurate personal information that we maintain about them.
Non-discrimination. The right not to be subject to discriminatory treatment for exercising their rights under the CCPA.

Submitting CCPA Requests. California residents may exercise their CCPA privacy rights as set forth below:

Rights to Know, Delete, and Correct. California residents may submit CCPA requests to access/know, delete, and correct their personal information by using our webform (available at: www.risrx.com) or by calling 1-844-487-9700.

When you submit a request, we will take steps to verify your identity and request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information in order to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for denial.

You may also designate someone as an authorized agent to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization and we may also require the relevant consumer to directly verify the identity and the authority of the authorized agent.

Right to Opt Out of Sales and Sharing. To exercise your right to opt out of the “sale” or “sharing” of your personal information, you can set your browser to block certain cookies or notify you when a cookie is set; you can also delete cookies. The “Help” portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to delete cookies. Visitors to our Site who disable cookies will be able to browse the Site, but some features may not function. If you visit our Site from a different device or from a different browser on the same device, you will need to apply your cookie settings for that browser and/or device as well.

California Shine the Light Rights. California’s “Shine the Light” law (Cal. Civ. Code § 1798.83) permits California residents who provide us certain personal information to request and obtain from us, free of charge, information about the personal information (if any) we have shared with third parties for their own direct marketing purposes. To make a California Shine the Light request, please call 844.799.0907 or email us at info@risrx.com. Requests may be made once per year.

Contact Us

If you have any questions about this Privacy Notice, You can contact us:

By email: info@risrx.com