Privacy Policy
Last updated: January 1, 2025
1. Who We Are
TheDrugClub Inc. ("TheDrugClub," "we," "us," or "our") operates the website thedrugclub.com and provides membership-based pharmacy services. We are committed to protecting your privacy and handling your personal and health information responsibly.
2. Information We Collect
We collect information you provide directly to us, including:
- Personal identifiers: Name, date of birth, email address, phone number, mailing address
- Health information: Prescription details, medications, prescribing physician information
- Payment information: Credit or debit card details (processed securely through Stripe; we do not store full card numbers)
- Account credentials: Username and encrypted password
- Communications: Messages you send us via chat, email, or phone
We also collect certain information automatically when you use our site, including IP address, browser type, pages visited, and referring URL, through cookies and similar technologies.
3. How We Use Your Information
We use the information we collect to:
- Process your membership enrollment and fulfill prescriptions
- Communicate with you about your account, orders, and refills
- Verify your identity and prevent fraud
- Comply with legal and regulatory obligations, including HIPAA
- Improve our services and website
- Send you service-related notifications (you may opt out of marketing communications)
4. HIPAA and Health Information
TheDrugClub acts as a covered entity and/or business associate under the Health Insurance Portability and Accountability Act (HIPAA). Your protected health information (PHI) is used solely for treatment, payment, and healthcare operations as permitted by HIPAA. We do not sell your PHI. We maintain administrative, technical, and physical safeguards to protect your health data.
5. Information Sharing
We do not sell your personal information. We may share your information with:
- Pharmacy partners: Licensed pharmacies fulfilling your prescriptions
- Payment processors: Stripe, for secure payment handling
- Benefits network: RxSavings and pharmacy benefits administrators necessary to establish and verify your membership eligibility
- Service providers: Email, SMS, and technology vendors operating on our behalf under data protection agreements
- Legal authorities: When required by law, court order, or to protect the rights and safety of our members and staff
6. Data Security
We use industry-standard encryption (TLS/SSL) for data in transit and at rest. Payment information is processed exclusively through Stripe's PCI-compliant infrastructure. We conduct regular security reviews and limit access to your information to authorized personnel only.
7. Cookies
We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze site usage. You can control cookies through your browser settings, though disabling cookies may affect some site functionality.
8. Your Rights
Depending on your state of residence, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information (subject to legal retention obligations)
- Opt out of marketing communications
- Request a copy of your health records (under HIPAA)
To exercise any of these rights, contact us at support@thedrugclub.com.
9. Data Retention
We retain your personal and health information for as long as your account is active and as required by applicable law, including pharmacy and healthcare regulations. If you close your account, we may retain certain records for up to seven years as required by state and federal pharmacy law.
10. Children's Privacy
Our services are intended for adults 18 and older. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have inadvertently collected information from a child, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by email or by posting a prominent notice on our website. Continued use of our services after changes take effect constitutes your acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us:
TheDrugClub Inc.
Email: support@thedrugclub.com
Phone: (424) 375-7114