Online Refills ("we," "us," or "our") is committed to protecting the privacy of the individuals who use our patient coordination service. This Privacy Policy explains how we collect, use, store, and protect information you submit through OnlineRefills.to (the "Site").
By using the Site, you consent to the practices described in this policy.
A Note on HIPAA
Online Refills takes the privacy of health-related information seriously. While we are a coordination and referral service — and not a Covered Entity under HIPAA in the traditional sense — we voluntarily commit to handling all health information you share with us with the same degree of care, confidentiality, and security that HIPAA requires. We do not sell, rent, or trade your health information to third parties.
1. Information We Collect
When you use the Site, we may collect the following types of information:
- Identity & Contact Information: Full name, email address, phone number, and state of residence.
- Health-Related Information: The type of coordination service you are seeking, names of medications, and any additional health context you voluntarily provide in the intake form.
- Technical Information: Browser type, IP address, device type, and site interaction data collected automatically via standard web server logs.
- Communications: Any messages or emails you send to our coordination team.
We collect only the information necessary to facilitate your coordination request. We do not collect payment card numbers, Social Security numbers, or government identification numbers through this Site.
2. How We Use Your Information
We use the information you provide to:
- Review your intake submission and assess whether our coordination service may assist you.
- Contact you via phone or email to discuss your coordination needs.
- Refer or connect you to independent licensed healthcare professionals who may be able to assist you.
- Respond to your inquiries and provide customer service.
- Improve the Site and the quality of our coordination services.
- Comply with applicable legal obligations.
We do not use your information for automated clinical decision-making, targeted advertising, or sale to third-party marketers.
3. Information Sharing & Disclosure
We do not sell, rent, or trade your personal or health information. We may share your information only in the following limited circumstances:
- Referred Providers: With your knowledge and for the purpose of your coordination request, we may share relevant intake information with independent licensed healthcare professionals to facilitate a potential consultation or referral.
- Service Providers: We may share information with trusted third-party vendors (e.g., email delivery services, secure hosting providers) who assist us in operating the Site and are contractually bound to protect your information.
- Legal Requirements: We may disclose information when required by law, subpoena, or other legal process, or to protect the rights, safety, or property of Online Refills, our users, or the public.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to the same privacy protections described here.
4. Data Security
We implement reasonable technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These include encrypted email transmission, secure server hosting, and access controls limiting who within our organization can view submitted information.
However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data. You submit information through this Site at your own risk.
5. Data Retention
We retain your personal and health information for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, and to resolve disputes. If you would like your information deleted from our records, please contact us at [email protected] and we will process your request within 30 days, subject to any legal retention requirements.
6. Cookies & Tracking
The Site may use basic session cookies and standard web analytics tools to understand how visitors use the Site and to improve functionality. We do not use advertising cookies, cross-site tracking pixels, or third-party behavioral profiling tools.
You may disable cookies in your browser settings; however, some features of the Site may not function properly as a result.
7. Third-Party Links
The Site may contain links to third-party websites, including healthcare provider directories or telehealth platforms. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before submitting any information.
8. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has submitted information through the Site, please contact us immediately and we will delete it.
9. Your Rights
Depending on your state of residence, you may have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your information (subject to legal retention obligations).
- Opt out of certain communications from us.
To exercise any of these rights, contact us at [email protected].
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Your continued use of the Site after any change constitutes your acceptance of the revised policy.
11. Contact
For questions, concerns, or data requests related to this Privacy Policy, contact us at: [email protected]