Privacy Policy

Table of Contents

Last updated: August 15, 2026

Introduction

EdgeRx (“EdgeRx,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information, including health information, that you share with us.

This Privacy Policy explains how we collect, use, disclose, retain, and safeguard information when you visit our website, create an account, complete an intake form, use our telehealth services, communicate with us, receive email or SMS communications, or otherwise interact with EdgeRx, including through our telehealth technology platform, Wizlo.

This Privacy Policy is intended to be read together with our Notice of Privacy Practices, which describes in more detail how we handle protected health information (“PHI”) under the Health Insurance Portability and Accountability Act (“HIPAA”). Where this Privacy Policy and our Notice of Privacy Practices overlap with respect to PHI, the Notice of Privacy Practices controls.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our website or services.

Scope

This Privacy Policy applies to information we collect through:

  • Our website and any subdomains operated by EdgeRx.
  • Intake forms, questionnaires, and consultation materials submitted through our platform, including those hosted by Wizlo.
  • Our patient portal, including messaging with providers, prescription history, and account settings.
  • Marketing communications you receive from us or interact with, including email, SMS, and social media advertising.
  • Customer support interactions, including email, phone, and chat.

This Privacy Policy does not apply to third-party websites, applications, or services that may be linked from our website or platform. We encourage you to review the privacy policies of any third-party sites or services you use.

Information We Collect

Personal Information You Provide to Us

We may collect information you provide directly to us, including your name, date of birth, sex assigned at birth and gender identity where relevant to care, mailing address, email address, mobile phone number, payment and billing information, government-issued identification where required to verify identity or age, and emergency contact information.

Health Information

As part of our intake process and ongoing care, we may collect health information, including your medical history, current medications and supplements, allergies, lab results, symptoms, treatment goals, responses to provider questions, photographs or images you submit, if any, and communications with your provider regarding diagnosis, treatment, and prescriptions.

This information may constitute protected health information under HIPAA when it is created or received by EdgeRx or our provider network in connection with your care and is handled according to our Notice of Privacy Practices.

SMS and Communications Information

If you provide your mobile phone number and opt in to receive text messages, we may collect and process your mobile number, SMS consent status, consent timestamp, message history, delivery information, opt-out activity, and message engagement data.

We may also collect similar engagement information relating to email communications, such as message delivery, opens, clicks, and subscription preferences.

Technical and Usage Information

When you visit our website or use our platform, we may automatically collect certain information through cookies, pixels, and similar technologies, including your IP address, browser type, device identifiers, operating system, referring URLs, pages viewed, links clicked, and the dates and times of your visits.

Information From Third Parties

We may receive information about you from:

  • The Wizlo platform and the licensed providers, pharmacies, and administrative systems operating through it.
  • State-licensed 503A and 503B compounding pharmacies and other pharmacy partners that fulfill prescriptions.
  • Payment processors, including Gr4vy, that process payments on our behalf.
  • Identity-verification and fraud-prevention vendors.
  • Klaviyo, which supports email and SMS communications.
  • Marketing and advertising partners, including Meta, Google, and TikTok, when you interact with our advertising.
  • Affiliates and referral partners participating in our affiliate program through Tapfiliate.
  • Shipping carriers and fulfillment partners involved in delivery.
  • Publicly available sources, where permitted by law, for identity verification or fraud-prevention purposes.

How We Use Your Information

We may use the information we collect to:

  • Facilitate your intake, medical consultation, and ongoing care, including connecting you with a licensed provider.
  • Process and fulfill prescriptions through our pharmacy partners.
  • Process payments and manage subscriptions, billing, renewals, cancellations, and refunds.
  • Communicate with you about your account, orders, prescriptions, appointments, and customer-support requests.
  • Send marketing communications by email or SMS where you have provided the required consent and have not opted out.
  • Operate, maintain, personalize, and improve our website, platform, and services.
  • Measure marketing and advertising performance.
  • Detect, investigate, and prevent fraud, abuse, and security incidents.
  • Comply with applicable laws, regulations, licensing-board requirements, and legal process.
  • Evaluate and improve the quality of care, subject to the limitations described in our Notice of Privacy Practices.

SMS Communications

If you provide your mobile phone number and opt in to receive marketing text messages, EdgeRx and its third-party SMS provider, Klaviyo, Inc., will process your phone number and message engagement data to send you marketing, transactional, and account-related messages.

Message frequency varies. Message and data rates may apply. You may opt out of marketing text messages at any time by replying STOP to any message. For help, reply HELP or email team@edgerx.com.

Consent to receive marketing text messages is not a condition of purchase.

We do not share your SMS opt-in or consent status with third parties for purposes unrelated to providing or supporting our messaging services.

For additional information, please review our SMS Terms And Conditions.

Klaviyo specifically recommends disclosure of SMS practices and limits on sharing SMS opt-in information in the Privacy Policy.

Legal Basis for Processing

For users in jurisdictions that require a stated legal basis for processing personal information, we may process information:

  • To perform a contract with you by providing services you have requested.
  • To comply with legal obligations, including applicable health-care, pharmacy, tax, and recordkeeping requirements.
  • Based on your consent where required, including for certain marketing communications.
  • For legitimate business interests such as operating and improving services, protecting security, preventing fraud, and administering our business, where those interests are not overridden by applicable privacy rights.

How We Share Your Information

We do not sell your health information. We disclose information only as described in this Privacy Policy and subject to applicable law.

Licensed Providers and Provider Network

We may share intake and health information with licensed clinicians participating in the Wizlo provider network who review your case and, where clinically appropriate, provide care and issue prescriptions.

Pharmacy Partners

We may share information necessary to fulfill a prescription with state-licensed 503A and 503B compounding pharmacies and other pharmacy partners engaged to prepare and ship prescribed medications.

Information shared may include prescription information, patient contact information, and shipping information as necessary to fulfill the prescription.

Named Third-Party Processors

Wizlo

Purpose: Telehealth technology platform, intake, EMR functionality, prescriptions, patient portal, clinical workflows, and related patient services.

Information processed: Clinical and intake information, contact information, prescription information, patient communications, account information, and relevant order information.

Klaviyo, Inc.

Purpose: Email and SMS communications, marketing automation, subscription management, and marketing analytics.

Information processed: Email address, mobile phone number, first name, state, consent status, marketing engagement information, website engagement information, and non-PHI marketing properties where appropriate.

Tapfiliate

Purpose: Affiliate and referral attribution.

Information processed: Referral identifiers and limited transaction or order-value information necessary to attribute eligible referrals.

We do not provide affiliates with health information.

Gr4vy

Purpose: Payment processing and payment orchestration.

Information processed: Payment and transaction information necessary to authorize and process payments.

Payment-card information is handled by the applicable payment-processing infrastructure. EdgeRx does not intentionally store complete payment-card numbers on its website.

Pharmacy and Fulfillment Partners

Purpose: Prescription fulfillment, packaging, and delivery.

Information processed: Information necessary to fulfill prescribed treatment, including prescription information, patient identification details, and shipping information.

Shipping Carriers

Purpose: Delivery and shipment tracking.

Information processed: Recipient name, shipping address, contact information where required, and shipment-related information.

Cloud Infrastructure and Hosting Providers

Purpose: Website hosting, infrastructure, security, data availability, backups, and related technology services.

Information processed: Technical information and other information hosted or processed through our systems as necessary to provide these services.

Identity Verification, Security, and Support Vendors

We may also use vendors for identity verification, fraud prevention, website security, technical support, and customer-service operations.

Where applicable, vendors are contractually limited in how they may use information provided to them. Where PHI is involved and legally required, appropriate HIPAA contractual safeguards apply.

Affiliates and Referral Partners

If you were referred to EdgeRx through our affiliate program, we may share limited, non-health information with the referring affiliate through Tapfiliate for purposes of tracking and paying referral commissions.

We do not share your health information with affiliates for affiliate-marketing purposes.

Marketing and Advertising Partners

We work with advertising and analytics platforms including Meta, Google, and TikTok to measure advertising effectiveness and, where permitted, deliver relevant advertising.

This may involve cookies, pixels, server-side technologies, or hashed or pseudonymized identifiers.

We do not knowingly provide diagnosis, treatment, prescription, or other PHI collected in connection with your medical care to advertising platforms for advertising purposes.

Legal Disclosures

We may disclose information where required by law, subpoena, court order, or other valid legal process; where reasonably necessary to protect the rights, property, safety, or security of EdgeRx, our patients, or others; or in connection with a merger, acquisition, financing, restructuring, or sale of assets, subject to applicable legal and confidentiality requirements.

We may also disclose information for other purposes with your consent.

Cookies and Tracking Technologies

We and our partners may use cookies, pixels, software development kits, server-side integrations, and similar technologies to operate the website, remember preferences, understand site usage, measure advertising performance, and personalize content where permitted.

Meta Pixel and Conversions API

Used to measure advertising effectiveness and support advertising analytics using browser-based and server-side signals.

Google Ads and Analytics Tags

Used for website analytics and to measure and optimize advertising campaigns.

TikTok Pixel and Events API

Used to measure the performance of advertising delivered through TikTok.

Klaviyo Tracking Technologies

Used to understand email and SMS engagement and website behavior in support of email and SMS communications.

You can control certain cookies through your browser settings. Where required by applicable law, we may provide a cookie preference or consent tool that allows you to accept or reject certain non-essential cookies.

Opting out of certain advertising cookies will not prevent you from using the website or receiving care, although it may affect the relevance of advertising you see.

We do not knowingly use diagnosis, treatment, prescription, or other PHI collected in connection with medical care to create advertising audiences.

Do Not Track Signals

Some browsers and devices allow users to send a “Do Not Track” or similar privacy signal.

Because there is not a single universally accepted standard for responding to all Do Not Track signals, our website may not respond to every such signal in the same manner.

Where applicable law requires recognition of legally valid browser-based opt-out preference signals, we will process such signals as required by applicable law.

HIPAA-Protected Information vs. Other Personal Information

EdgeRx and members of its provider network may act as HIPAA-covered entities or business associates, as applicable, with respect to protected health information created or received in connection with care.

Information such as medical history, consultation notes, lab results, diagnoses, and prescriptions may constitute PHI and is governed by HIPAA and our Notice of Privacy Practices.

Other information that is not created or received in connection with providing health care—such as certain website analytics or marketing information—may be governed by this Privacy Policy without necessarily constituting PHI.

Where information overlaps, we apply applicable privacy and health-information protections based on the context in which the information is collected and used.

Your Privacy Rights

General Rights

Depending on where you reside and subject to applicable law, you may have rights to:

  • Know or access personal information we maintain about you.
  • Obtain a copy of certain personal information.
  • Correct inaccurate information.
  • Request deletion, subject to legal, regulatory, clinical-record, and other permitted retention requirements.
  • Receive certain information in a portable format.
  • Opt out of certain processing, advertising, sale, or sharing activities where required by law.

California Privacy Rights — CCPA/CPRA

If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

Right to Know

You may request information regarding the categories and specific pieces of personal information we have collected, sources of that information, purposes for collection or use, and categories of third parties to whom information has been disclosed.

Right to Delete

You may request deletion of certain personal information, subject to applicable exceptions and legally required retention obligations.

Right to Correct

You may request correction of inaccurate personal information.

Right to Opt Out of Sale or Sharing

You may direct us not to sell or share personal information, as those terms are defined under applicable California law, including certain sharing for cross-context behavioral advertising.

Right to Limit Certain Uses of Sensitive Personal Information

Where applicable, you may request limits on certain uses or disclosures of sensitive personal information.

Right to Non-Discrimination

We will not unlawfully discriminate against you for exercising applicable privacy rights.

Certain PHI and health-care information may be subject to exemptions or separate protections under HIPAA and applicable law.

How to Exercise California Privacy Rights

To submit a privacy request, contact us at: team@edgerx.com

We may take reasonable steps to verify your identity before processing a request.

We will respond to a verifiable consumer request within the period required by applicable law, generally within 45 days, subject to permitted extensions and exceptions.

Do Not Sell or Share My Personal Information

We do not sell personal information in exchange for money.

However, certain advertising technologies, including Meta, Google, or TikTok advertising tools, may constitute “sharing” or targeted/cross-context behavioral advertising under applicable privacy laws.

Where required, users may exercise an opt-out through our website’s privacy preference mechanism or by contacting: team@edgerx.com

Important: if advertising cookies are active at launch, add a visible “Do Not Sell or Share My Personal Information” link or preference mechanism to the site. This should not remain merely as policy text.

Virginia, Colorado, Connecticut, Utah, and Other State Residents

Residents of states with applicable comprehensive privacy laws may have additional rights, which may include rights to access, correct, delete, or obtain certain personal data and to opt out of certain targeted advertising, sale, or profiling activities.

To exercise applicable rights, contact: team@edgerx.com

Additional state-specific disclosures may be added as EdgeRx’s services, state footprint, and data practices are finalized.

International Users / GDPR

EdgeRx’s services are directed to U.S. residents.

If EdgeRx does not offer its services to residents of the European Economic Area or United Kingdom, users located in those jurisdictions should not submit intake information or attempt to obtain medical services through EdgeRx.

If we inadvertently receive personal information from an individual located in the EEA or UK, applicable privacy rights may include access, correction, erasure, restriction of processing, data portability, objection to certain processing, and the right to lodge a complaint with an appropriate supervisory authority.

Where GDPR or UK GDPR applies, processing may rely on applicable lawful bases such as contractual necessity, legal obligations, consent, or legitimate interests, depending on the processing activity.

For privacy inquiries relating to international data, contact: team@edgerx.com

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy and to satisfy applicable legal, regulatory, clinical, accounting, security, and contractual requirements.

Clinical and Medical Records

Clinical and medical records are retained for the period required by applicable federal and state laws and professional recordkeeping requirements. Depending on the applicable jurisdiction and type of record, this may require retention for seven years or longer.

Marketing Profiles and Consent Records

Marketing profiles, email and SMS subscription information, opt-in records, and consent records may be retained while you maintain an active relationship with EdgeRx and for an appropriate period afterward to document consent, opt-out requests, legal compliance, and suppression preferences.

Transaction and Order Records

Transaction, billing, fulfillment, and order records may be retained as necessary for accounting, tax, fraud-prevention, dispute-resolution, chargeback, and legal-compliance purposes.

Technical and Analytics Information

Technical, analytics, cookie, and advertising information may be retained according to the applicable platform’s configuration and our legitimate operational needs.

When information is no longer reasonably required, we take appropriate steps to delete, de-identify, or otherwise dispose of it consistent with applicable requirements.

Note: the exact retention periods should be confirmed by EdgeRx legal/compliance because clinical-record retention requirements vary by jurisdiction.

Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information and PHI against unauthorized access, use, disclosure, alteration, or destruction.

These measures may include encryption where appropriate, access controls, authentication safeguards, monitoring, and contractual protections with vendors that process information on our behalf.

No method of electronic transmission or storage can guarantee absolute security.

Children’s Privacy

EdgeRx’s services are intended only for adults 18 years of age or older.

We do not knowingly collect personal information from individuals under 18. If we learn that we have inadvertently collected personal information from a person under 18, we will take appropriate steps to delete it, subject to any applicable legal obligations.

Individuals under 18 should not use EdgeRx’s services or submit personal information through the website.

International Data Transfers

EdgeRx operates in the United States, and information collected through our services is generally processed and stored in the United States.

If information is submitted from outside the United States, it may be transferred to, stored in, or processed in the United States, where privacy protections may differ from those available in another jurisdiction.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, data practices, technologies, or applicable legal requirements.

When we update the policy, we will post the revised version on this page and update the “Last updated” date above. Where legally required, we may provide additional notice regarding material changes.

Contact Us

If you have questions about this Privacy Policy or would like to exercise an applicable privacy right, please contact us:

EdgeRxLLC
Business address: 30 N Gould St #4501 Sheridan, WY 82801
Privacy inquiries: team@edgerx.com
General support: team@edgerx.com