Privacy Policy
Last Updated: September 2, 2026
1. Scope
This Privacy Policy explains how MDRx Labs LLC ("MDRxLabs," "we," "us," or "our") collects, uses, discloses, and protects personal information in connection with mdrxlabs.com, MDRxLabs-operated online interfaces, customer support, account administration, marketing, and other non-clinical services that link to this Policy.
MDRxLabs is not a medical practice. Clinical services are provided by independent licensed healthcare professionals. To the extent information is protected health information ("PHI") maintained by or for a HIPAA-covered healthcare provider, the provider's Notice of Privacy Practices and applicable HIPAA requirements govern that PHI. This Privacy Policy supplements, but does not replace, those healthcare privacy notices.
2. Information We Collect
We may collect the following categories of personal information depending on how you interact with us: identifiers and contact information, such as name, email address, telephone number, mailing or shipping address, account identifiers, date of birth, and age-verification information; account and authentication information; transaction and commercial information, such as purchases, subscriptions, payment status, refunds, and order history; device and internet activity, such as IP address, browser type, device identifiers, pages viewed, referring pages, interaction data, cookie identifiers, and approximate location inferred from IP address; customer-support communications; audio recordings where calls are recorded; and information you provide in forms, questionnaires, or messages.
When you seek weight-management services, you may provide health-related information such as height, weight, health history, medications, symptoms, treatment interests, eligibility information, and other information needed for clinical review or program administration. Health information may be collected directly by a healthcare provider or through technology used to facilitate your care. Some of this information may be subject to HIPAA, while other health-related information may be regulated as consumer health data under state law.
Payment card information is generally processed by payment service providers. MDRxLabs may receive transaction identifiers, payment status, limited billing details, and other information necessary to administer your account, but does not intend to store full payment card numbers unless expressly stated at the point of collection.
3. Sources of Information
We collect information directly from you; automatically from your browser or device; from healthcare professionals and pharmacies to the extent necessary to administer services you request and permitted by law; from payment, fraud-prevention, customer-support, communications, analytics, and other service providers; and from advertising or referral sources when legally permitted.
4. How We Use Information
We use personal information to operate and secure the website; create and administer accounts; facilitate intake and access to requested telehealth services; provide customer support; process and reconcile payments; coordinate order and shipping status; communicate about your account or requested services; detect fraud or misuse; comply with legal obligations; investigate disputes; maintain records; improve website functionality; measure non-clinical site performance; and, where permitted and with any required consent, market MDRxLabs services.
MDRxLabs does not use consumer health data or PHI for cross-context behavioral advertising and does not sell consumer health data. MDRxLabs may use non-health information from public-facing pages for analytics or advertising as described below and subject to applicable privacy choices.
5. How We Disclose Information
We may disclose personal information to categories of recipients that perform services for us or are necessary to fulfill services you request, including licensed healthcare professionals and professional medical entities, licensed pharmacies, payment and fraud-prevention providers, hosting and information-security providers, customer-support and communications providers, shipping carriers, professional advisers, and government authorities when required or permitted by law.
We may also disclose information in connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar corporate transaction, subject to applicable law and appropriate confidentiality protections.
We do not publish our internal vendor or provider-network roster in this Privacy Policy. Where a law requires disclosure of categories of recipients or specific affiliates, we provide that information in the applicable state or consumer-health-data notice.
6. Cookies, Analytics, and Advertising
We use cookies and similar technologies for essential site functions, security, preferences, analytics, and, where enabled, advertising. Depending on the technology and applicable state law, certain advertising or analytics disclosures may be considered "sharing" for cross-context behavioral advertising or targeted advertising even when no money is exchanged.
You can manage non-essential cookies through available privacy controls. MDRxLabs does not intentionally transmit health intake, eligibility, secure messaging, clinical, or patient-portal information to advertising platforms.
7. Marketing Communications
You may opt out of marketing emails by using the unsubscribe link in the message. Marketing text messages are governed by the MDRxLabs SMS Terms and any consent presented when you opt in. Consent to marketing is not a condition of purchasing MDRxLabs services.
Opting out of marketing does not prevent MDRxLabs or a healthcare provider from sending non-marketing communications that are necessary to provide requested services, administer your account, protect safety, or comply with law.
Telephone and support calls may be recorded or monitored for quality assurance, training, security, compliance, and customer-service purposes. Where required by law, notice or consent will be provided before recording.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain business and transaction records, comply with legal and regulatory obligations, resolve disputes, prevent fraud, and enforce agreements. The retention period depends on the type and sensitivity of the information, the purpose for collection, and applicable legal requirements.
Clinical medical records are retained by or on behalf of the applicable healthcare provider in accordance with healthcare record-retention requirements and the provider's policies.
9. Security
We use administrative, technical, and physical safeguards designed to protect personal information. No security measure, transmission method, or storage system can be guaranteed to be completely secure, and MDRxLabs cannot promise absolute security.
10. Your Privacy Rights
Depending on where you live and the laws that apply to MDRxLabs, you may have rights to request access to personal information, obtain a copy, correct inaccuracies, request deletion, opt out of certain sales, sharing, or targeted advertising, limit certain uses of sensitive information, withdraw consent to certain processing, or appeal a denied privacy request.
To exercise a privacy right, email support@mdrxlabs.com or use the MDRxLabs Privacy Choices page. We may request information reasonably necessary to authenticate and process your request. We will not unlawfully discriminate against you for exercising applicable privacy rights.
11. Consumer Health Data
If you are a resident of a state with a consumer health data privacy law, additional rights and disclosures may apply to health-related information that is not exempt under HIPAA or another applicable law. Please review the Consumer Health Data Privacy Policy.
12. California Residents
California residents may have additional rights under California privacy law. Please review the California Privacy Notice where applicable.
13. Children
The MDRxLabs program and website services are intended for adults age 18 or older. MDRxLabs does not knowingly collect personal information from children for participation in the program. If we learn that a person under 18 submitted information for program participation, we may delete or restrict the information as appropriate and as permitted by law.
14. Third-Party Sites and Services
The website may link to services operated by third parties. Their privacy practices are governed by their own notices and are not controlled by MDRxLabs. Review those notices before providing information directly to a third party.
15. Changes to This Policy
We may update this Policy periodically. The current version will be posted with a revised "Last Updated" date. We will provide additional notice of material changes when required by law.
16. Contact Us
MDRx Labs LLC
16411 N 90th Street Suite 101, Scottsdale, AZ 85260
Email: support@mdrxlabs.com