This policy explains what MedRxMarket.com ("MedRxMarket", "we") collects from the pharmacies that use it and the people who sign in for them, why, and who it is shared with.
It goes with the Terms of Service.
1.What we collect
- Account details. Name, email address, phone number and password for each person who signs in. Passwords are stored only in hashed form. We also keep each person's role and permissions within their pharmacy.
- Pharmacy identity. Legal name, trading name, address, phone, fax, website, NPI number, DEA number, NCPDP number, state of licensure, federal tax ID (EIN), pharmacy type, number of stores, pharmacy software, 340B participation, and the names of the pharmacy manager and contract manager.
- Verification documents. The files you upload with your application: DEA registration, pharmacy license, IRS confirmation letter (147c) and a voided check.
- Bank details. The account holder name, routing number and account number of the business bank account used for payments and payouts.
- Listings. The products you list, with NDC, lot number, expiration date, quantity, condition and price.
- Orders and shipping. What was bought and sold, by which pharmacies, the amounts and fees, shipping addresses, package details, FedEx labels and tracking, invoices, offers, buy requests, disputes and the messages in them.
- Signatures. The image of the signature drawn at checkout and at sale confirmation, with who signed and when.
- Support requests. What you write to us and our replies.
- Technical records. Sign-in sessions and a log of important actions, including IP address and browser type. The app keeps your sign-in in a cookie and in your browser's storage so you stay signed in. We do not use advertising or analytics trackers.
The marketplace is for trade between pharmacies. It does not ask for patient information, and you must not upload any.
2.Why we collect it
- To check that each pharmacy is licensed and is who it says it is, before it can trade.
- To run the marketplace: show listings, process orders, calculate fees, create shipping labels, take payments and pay sellers.
- To keep a record of each transaction, including who agreed to it, for both pharmacies and for us.
- To send emails and text messages about your account and orders, such as verification codes, order updates and review decisions.
- To answer support requests and resolve disputes.
- To keep the service secure and to prevent fraud and misuse.
- To meet legal and regulatory obligations.
We do not sell your information.
[Legal bases for processing, where required: to be completed by counsel.]
4.How we protect it
- Access to a pharmacy's data is limited to that pharmacy's own users, according to the permissions its owner gives them, and to our staff who review applications and handle support.
- Payments are handled by Stripe.
- Important actions are recorded in an audit log.
No system is perfectly secure. Tell us straight away if you think an account has been accessed by someone else.
[Security commitments and breach notification: to be completed by counsel.]
5.How long we keep it
[Retention periods for account data, verification documents, bank details, order and shipping records, signatures and audit logs, including after an account is closed: to be completed by counsel.]
6.Your choices and rights
- You can see and update your profile and your pharmacy's details in Settings.
- A pharmacy's owner can add and remove staff.
[Rights of access, correction, deletion and objection, how to exercise them, and state-specific notices: to be completed by counsel.]
7.Changes and contact
We may update this policy. The date at the top shows when it last changed.
Questions about privacy: use the Support page after signing in.
[Legal name, address and privacy contact of the company operating MedRxMarket.com: to be completed by counsel.]