Privacy Policy

At OT Rx, we are proud to introduce our updated suite of services hosted at otrxhealth.co. These terms govern your engagement with our platform, including our new and existing digital offerings.

Effective Date: 07/12/2026
Last Updated: 07/12/2026

1. Overview

This Privacy Policy governs your use of the various digital platforms, websites, and interfaces owned and managed by OT Rx LLC (“we,” “us,” “our,” or “OT Rx”) (collectively, the “Service(s)”). This includes our primary web domain located at www.otrxhealth.co (the “Site”) along with any associated online properties we control. By interacting with or using our Services, you expressly consent to the collection, processing, and disclosure of your data as outlined in this document. If you do not agree to these terms, please refrain from using our Site or Services.

We reserve the right to modify this Privacy Policy at any time without prior individual notice. Any updates will be published directly on this page. Revisions become effective 30 days after posting, and your continued use of the platform following that window constitutes your formal acceptance of the updated terms. We encourage you to review this policy periodically.

2. Information Sharing Practices

2.1 Marketing and Advertising Collateral

We may share data with designated promotional and advertising partners to refine our marketing efforts. This typically involves the transfer of de-identified, anonymous, or aggregated data points to analyze user trends and deliver targeted advertising.

2.2 Clinical and Healthcare Service Partners

To effectively deliver clinical care through our digital platform, we coordinate with specific healthcare service entities, including compounding pharmacies and diagnostic laboratories. These external providers:

• Are strictly bound by federal and state healthcare privacy regulations.
• May only access the specific information required to fulfill their medical services.
• Must maintain independent compliance protocols with all relevant laws.
• Are legally obligated to protect your sensitive health data.
• Maintain their own independent terms of service and privacy agreements governing their operations.

2.3 Legal Mandates and System Protection

We may access, preserve, and disclose your personal details if required by law or if we hold a good-faith belief that such disclosure is necessary to:

• Satisfy applicable legal obligations, regulatory requests, or legal processes (such as a court order or subpoena).
• Enforce our active Terms of Use, Privacy Policy, or related clinical agreements.
• Investigate, prevent, or address potential policy violations or systemic abuse.
• Ensure the safety, legal rights, and physical property of our company, our patients, and the general public.
• Assist in comprehensive fraud prevention, cybersecurity monitoring, and financial risk mitigation.
• Comply with statutory medical record retention mandates requiring storage for seven (7) years.

2.4 Corporate Transitions

In the event that our business undergoes a corporate transition—such as a merger, acquisition, restructuring, or asset sale—user data may be transferred as a core business asset. This transfer encompasses:

• Secure medical records (retained for the legally mandated seven (7) year minimum).
• Standard account profiles.
• Client contact coordinates.
• Historical service records.

2.5 Public Forums and Patient Testimonials

Our digital platforms may feature options for public interaction, allowing users to:

• Submit personal testimonials.
• Publish public reviews.
• Participate in open community message boards.

Please note that any details you share in public spaces can be viewed openly by external parties. We reserve the right to feature public reviews in our promotional materials. Please use discretion when posting personal details publicly. Public content may be archived as part of our permanent business records. To request the removal of your public submissions, please reach out to us at [email protected].

2.6 User-Authorized Consent

We may share your personal data in alternative ways when you grant us explicit permission to do so. This includes transmitting medical data to the independent, licensed healthcare practitioners you choose to consult with via our platform. For questions regarding how your data is distributed, please contact our support team at [email protected].

3. Aggregated and Anonymized Data Sets

We frequently generate aggregated, anonymous, or de-identified data sets from the information gathered through our platform. During this process, all personal identifiers are removed or altered in strict accordance with HIPAA compliance standards. The resulting anonymized data points track generalized user behaviors, statistical platform usage, and macro demographic trends.

Because this data no longer contains personally identifiable information, we may store it beyond our standard seven (7) year retention window. This anonymous information is used to optimize platform functionality, perform clinical research, and analyze healthcare trends. We may share these de-identified metrics with our medical partners for quality control or use them for other compliant business purposes. This data cannot be reverse-engineered to identify you.

4. Data Retention Timelines

We preserve your information in strict compliance with federal regulations and professional medical standards. Your personal profile, including health history and clinical communications, will be securely archived for seven (7) years following your last interaction with our platform. This structural retention timeline guarantees compliance with medical record laws while ensuring continuity of care.

Throughout this period, we safeguard your data using comprehensive encryption and strict role-based access controls. Extended retention may occur if mandated by regulatory authorities, required to resolve active legal disputes, or necessary to enforce our corporate contracts.

Residual copies of data may briefly persist within our encrypted backup archives before being permanently overwritten or rendered completely inaccessible during routine data management cycles. For detailed questions on specific data lifetimes, please contact our team at [email protected].

5. Managing Your Privacy Rights

As a user, you hold distinct rights regarding the personal information we maintain. You may submit a request to access your records, correct structural inaccuracies, or obtain a clean copy of your data file. Additionally, you may request restrictions on how your data is processed or object to specific data utilization.

To execute any of these data rights, please submit an email request to [email protected]. Our support team will process your inquiry in compliance with applicable laws, requiring identity verification to safeguard your privacy.

For marketing outreach, you retain full control. You can opt out of direct promotional updates or targeted profiling at any time by messaging [email protected].

Please note that certain data categories are mandatory to perform our services. Restricting or deleting required clinical information may limit your access to our platform, as independent medical practitioners require complete details to safely prescribe and manage your treatments.

6. Tracking and Cookies

To learn more about how our platform utilizes tracking technologies and your management choices regarding them, please view our comprehensive Cookie Policy at www.otrxhealth.co/cookie-policy.

7. Integration of Automated and AI Technologies

Our platform integrates automated systems and artificial intelligence (AI) tools to refine user workflows and enhance customer support efficiency. While AI assists with administrative tasks and data sorting, all diagnostic and treatment decisions are managed exclusively by independent, licensed healthcare professionals exercising independent clinical judgment.

Our automated integrations adhere to the same stringent data privacy and security frameworks that govern our manual operations. When partnering with third-party automated software providers, we enforce rigorous legal data protection agreements to ensure full compliance with healthcare privacy laws. For inquiries about how automated systems manage data securely on our site, reach out to [email protected].

8. External Social Media Interactions

When you interact with our brand across external social media channels (such as liking, commenting, or sharing our posts), we receive basic public profile details permitted by those networks.

We maintain a strict separation between your public social media presence and your clinical interactions. Your protected health information and private medical records are never synced with, exposed to, or shared across social media platforms.

If you choose to integrate external wellness applications (such as health trackers or wearable devices) with our platform, those data streams fall under our standard clinical security protocols. You retain full autonomy over these integrations and can sever the connection at any time. Integrated health data is preserved for seven (7) years in line with our standard data retention schedule. For help managing external application connections, contact [email protected].

9. Third-Party Authentication and External Services

If you choose to log into our Services via an external authentication method (such as a social media login or third-party single sign-on service), you grant us permission to collect specific profile attributes based on your settings with that provider. To restrict this data flow, simply use our native direct email login path instead.

Likewise, if you choose to sync our platform with external calendar tools, device contacts, or photos to assist with scheduling and onboarding, those integrations will pull necessary metadata to function. If you prefer not to share this metadata, you can decline permissions within your device settings.

10. Protection of Minors

Our Services are built exclusively for adults aged 18 and older. We do not intentionally gather, process, or maintain personal information from individuals under the age of 18. If we discover that an underage individual has submitted data through our portal, we will immediately purge that information from our active databases. If you suspect an individual under 18 has submitted data to us, please report it to [email protected].

Parents and guardians may reach out to [email protected] to coordinate the removal of any accidentally submitted minor data. We comply fully with state-specific frameworks governing minor data security, including guidelines established in California, Virginia, Colorado, Connecticut, and Utah.

11. Security Frameworks for Sensitive Data

Safeguarding your private information, specifically your clinical records, is our highest operational priority. We utilize multiple layers of advanced security to defend your information, including industry-standard secure firewalls, comprehensive SSL encryption protocols for data transmission, and rigid multi-factor authentication paths. You can verify the security of your web session by confirming the active lock icon in your browser’s address bar.

Our operational security matches established healthcare regulatory standards. Your medical records are isolated within an enterprise-grade digital infrastructure. While we use robust technical defenses, no system is entirely invulnerable. If you notice suspicious account changes or potential unauthorized portal use, please report it immediately to [email protected]. We advise using strong, distinct passwords and keeping your credentials private.

All affiliated medical practitioners are legally required to manage their local devices and networks in complete accordance with healthcare privacy laws, creating an end-to-end chain of custody for your data.

12. Geographic Privacy Provisions

We administer our services across multiple jurisdictions and conform to all state-specific data protection regulations. While federal laws lay the groundwork for clinical data protection, state frameworks provide expanded consumer rights.

Residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia maintain specific statutory rights regarding their records. These rights generally allow users to:

• Verify the specific categories of data we process.
• Access or request the deletion of their personal file.
• Amend structural inaccuracies in their records.
• Export their data in a clean, portable digital format.
• Restrict specific processing or data utilization paths.

13. California Consumer Privacy Act (CCPA) Framework

California residents hold specific digital rights under the CCPA, which we fulfill alongside our medical compliance mandates. These rights include:

• The Right to Know and Access: You may request clear details regarding the categories of data we gather, our collection sources, our operational motives, and the corporate entities we coordinate with. These metrics are stored for seven (7) years and can be provided upon verified request.

• The Right to Deletion: You may request the absolute deletion of your personal attributes, subject to standard regulatory exceptions requiring the preservation of official medical records.

• The Right to Opt-Out: We do not engage in the sale of personal information. However, you may opt out of alternative non-essential data distributions. Core data sharing with your designated medical practitioners cannot be disabled, as it is required to administer clinical care.

14. Non-Discrimination Protections

We will never penalize, discriminate against, or alter service pricing for users who choose to execute their legal privacy rights. Please note, however, that withholding necessary medical variables may physically prevent our clinical team from managing your treatment safely.

To execute any relevant state data rights, contact our support team at [email protected]. We will address your request while verifying your identity to protect your account.

15. Domestic Data Processing

Our platform is intended solely for citizens and residents located inside the United States. All data gathering, processing, and long-term storage occurs on servers physically located within the United States. We maintain these records for seven (7) years under domestic legal frameworks. For inquiries about our storage systems, contact [email protected].

15.1 Territorial Service Limitations

Our website and digital medical offerings are strictly limited to users residing within the United States. Due to cross-border clinical licensing restrictions and varying international data laws, we do not service international patients. We may implement geo-blocking software to verify your domestic location prior to granting portal access. All user data is:

• Transferred directly to servers inside the United States.
• Controlled under U.S. clinical data protection standards.
• Managed by U.S.-based medical providers.

We do not market our services to individuals outside the United States.

16. Inquiries and Support

If you have questions, feedback, or concerns regarding our data management practices, please contact us directly:

• Email: [email protected]
• Mailing Address: 117 State Route 34, Hurricane, WV 25536
• Phone: +1 (304) 908-9446

About Us

Connecting you with expert guidance and affordable treatments, delivered directly to your door. No hidden fees, no insurance needed.

117 State Route 34
Hurricane, WV 25536
(304) 908-9446
[email protected]

Treatments

Weight Loss | Wellness