Privacy Policy

1. Where This Policy Applies

Pursuance Shore LLC, doing business as Peoples First Rx, publishes this Privacy Policy, and "we", "us" and "our" in it mean that company. It applies when you browse peoplesfirstrx.com, when you send us a contact form and when you start a telemedicine visit on our platform, and it tells you what information we collect and how we use, share and protect it. Besides the website itself, it extends to information we process while running our telemedicine platform. Your medication is dispensed by Rush Pharmacy, and the physicians treating you work in independent practices; this policy does not cover either of them. You will receive their privacy practices from them directly, since each has its own.

2. The Details We Collect

Everything we collect belongs to one of these groups:

• What you tell us yourself. That means the name, phone number, email address and state you give us, plus the text of any message sent through our contact forms. If a physician or another licensed professional asks about joining the network, we may also receive their profession, their NPI or license number and the states that license them.
• Health details from your visit. The online intake is where you record your symptoms, allergies, medical history, current medications, measurements and treatment goals.
• Purchase history and card details. These records show each visit and order, where it was shipped and limited card details (the expiry date and final four digits). A payment processor handles card payments, and we do not store full card numbers.
• Server log data. IP address, browser and device type, referring page and requested pages all appear in the standard server logs our hosting provider keeps. We consult them for troubleshooting, fraud prevention and site security.
• Settings and sign-ups saved in your browser. Display preferences you pick in the accessibility toolbar can be saved by your browser. So can an email address entered in the email updates pop-up; for now it sits in your browser's local storage, stored with the signup time and the address of the page where you entered it. That data is held on your device, and we do not receive it.

3. How Information Gets Used

Your information is used to:

• Get back to you about a message you sent, including any follow-up it needs.
• Deliver your intake to a physician whose license covers your state, as part of arranging your telemedicine visit.
• If a physician issues a prescription, send it to Rush Pharmacy to be dispensed, and coordinate how the order is fulfilled and shipped.
• Handle your payments, whether for the visit itself, medication, taxes or shipping.
• Keep you informed about your visit and about your order as it ships.
• Confirm the licensure of physicians and other licensed professionals who contact us about joining, and assess their requests.
• Guard against spam, fraud, automated submissions and other abuse that could affect the site or our patients.
• Look for improvements to our services and this website, using data that is pooled and does not identify you.
• Comply with the laws, regulations and record-keeping rules we are subject to.

4. Nothing About You Is Sold

Selling your personal information is not something we do. Nor do we pass it to anyone else for that party's own advertising or marketing. Your health information plays no part in targeted advertising. If these commitments ever change, the change will not take effect until we have updated this policy and obtained any consent the law requires.

5. Who Receives Your Information

Sharing is limited to what a service you requested needs, plus anything the law requires. Within those limits, your information can go to:

• Remedora Inc., our partner for pharmacy and fulfillment under our partnership agreement.
• LocumTele, the company behind the physician network, which also provides medical oversight, licensure verification and the intake and e-prescribing infrastructure.
• The physician who reviews your intake, an independent practitioner licensed in your state.
• Rush Pharmacy, the state-licensed pharmacy responsible for dispensing your prescription and shipping it to you.
• The companies that process our payments, host our website and deliver our email.
• The shipping carrier that brings your order to you.

Every recipient is limited to the information its part in the service calls for.

There are also a few other occasions when we may disclose information: when a law, a subpoena or other legal process requires it; when we are investigating a threat to someone's safety or suspected fraud; when we need to enforce our Terms; and in a merger, acquisition or asset sale. If that last situation arises, you will get notice from us before a different privacy policy starts to govern your information.

6. Your Health Data Under HIPAA

HIPAA treats the physicians and pharmacies involved in your care as covered entities. You receive a Notice of Privacy Practices directly from each of them, and that notice governs how they handle your protected health information. Peoples First Rx, LocumTele and Remedora Inc. may handle protected health information on behalf of those covered entities; when they do, they act as business associates bound by written agreements. Each agreement restricts what the information can be used for and obliges the business associate to keep appropriate safeguards in place. Nothing in this policy replaces those notices; it sets out only our own practices as the company running the platform. Please keep detailed medical information out of the general contact forms on this website, because anything sent through them is not protected health information.

7. Messages Sent Through Our Forms

Our support mailbox receives each contact form message by email, and the connection it travels over is encrypted. Spam protection relies on a hidden form field plus a brief rate limit for each IP address. Neither measure processes anything beyond your message and your IP address. Only the people who need a form message to respond to you ever see it, and it is never used for advertising.

8. Cookies and Stored Preferences

No advertising or cross-site tracking cookies are set by this site, which is a static website. Strictly necessary cookies, which protect the site and keep it performing well, may be set by our hosting provider. Inside your browser, the accessibility toolbar can keep your preferences, and the email updates pop-up notes whether you have seen it during the current visit. You decide whether to block or delete cookies and site data, using your browser's settings. If you block strictly necessary cookies, parts of the site may stop working. Any cookies the patient portal uses are explained in a separate notice on the portal, which our partners operate.

9. Your Choices and Requests

Where your personal information is concerned, you can ask us to:

• Let you see what we hold about you.
• Correct it or delete it.
• Give you a copy in a portable format.
• Restrict or object to some of the ways we process it.
• Stop contacting you.

Send your request by email to support@peoplesfirstrx.com. You will get our response within the period applicable law requires. Identity verification may be needed before we act on a request. Where a law or a record-keeping duty obliges us to keep information, we may retain it. We won't discriminate against anyone for using the rights described here.

10. Rights in Some States

If you live in a state with a comprehensive privacy law (California, Colorado, Connecticut, Utah and Virginia are examples), that law gives you specific rights. They may include the right to:

• Find out which personal information is collected about you and what it is used for.
• Have that information corrected or deleted.
• Receive it as a portable copy.
• Opt out of the sale of your information or of targeted advertising.
• Appeal when a request is refused.

Wherever you live, you can use these rights with us.

Requests and appeals go through the contact details in the final section. Please spell out exactly what you want us to do. Someone acting as your authorized agent can also submit a request, provided they can prove their authority.

11. Keeping and Deleting Records

A contact form message is deleted once we have dealt with your request and no longer need it for a reasonable business record. Tax, accounting and regulatory rules set how long we keep order and payment records. Your treating physician and the dispensing pharmacy hold the medical records created during your visit. The retention requirements they must follow decide how long those records are kept, and those periods are usually longer than ours. Server logs follow the standard retention schedule set by our hosting provider.

12. Security and Safeguards

We serve this site over HTTPS, which encrypts the connection. The credentials used for sending contact form email are kept outside the public web folder, and file permissions restrict who can read them. Your messages are visible only to the people responsible for answering you. Each partner applies technical, physical and administrative safeguards of its own. Where protected health information is involved, those safeguards include signed business associate agreements. Because information can never be sent or stored with complete security, sensitive medical details do not belong in the general contact forms.

13. Minors

Our services and this website are designed for adults who are 18 or older. Anyone younger should not send us personal information, and we do not knowingly collect it from them. We will delete information a minor has given us once you let us know about it.

14. Leaving Our Website

The patient portal, government resources and our partners' websites are among the other sites this website links to. How a site we do not operate handles privacy is outside our responsibility. When you follow a link from here, we encourage you to look at that site's privacy policy.

15. Visiting From Another Country

Our services are limited to adults located in one of the 49 states we serve, all within the U.S. If you use this website from somewhere else, you understand that your information is processed on U.S.-based systems and is subject to U.S. law.

16. How We Announce Revisions

Every revision to this Privacy Policy comes with a new "Last updated" date near the top of the page. A new date will not be the only notice if a change has a material effect on the way we handle information we already hold about you. For such a change, we will also get your consent wherever that is required.

17. Reaching Us

Have a question about this policy, or want to exercise one of your privacy rights? Our email address is support@peoplesfirstrx.com, and our phone number is +1 (877) 908-1485. Our mailing address is Pursuance Shore LLC, doing business as Peoples First Rx, 6034 W Placer Claim Way, West Jordan, UT 84081. Our usual response time is one business day or less.