Privacy Policy

Last Updated August 26, 2021

1. INTRODUCTION

Dermatologist Prescribed Inc, doing business as Easy Derm, and its subsidiaries, divisions, and affiliates ("DP," “we,” “our,” and/or “us”) understand and value the importance of your privacy and protecting your personal information. This privacy policy (the "Policy") explains how we collect, use, and share information about you through our website, social media, email exchanges, mobile apps, and other online services on which this Policy is posted (the "Service"). Please read this Policy carefully. By using our Service, you agree to the collection, use, disclosure, and procedures this Policy describes. In addition to this Policy, your use of our Service is subject to DP’s Terms of Service (accessible at easyderm.com/terms-conditions). Should you have any questions regarding this Policy, please contact us before continuing use of our Service.

This Policy is written in the English language. We do not guarantee the accuracy of any translated versions of this Policy. To the extent that any translated versions of this Policy conflict with the English language version, the English language version of this Policy shall control.

2. COLLECTION OF PERSONAL INFORMATION

Information you provide to us

Much of the personally identifiable information we receive comes directly from users who are interested in signing up to use our Service. We collect information you provide to us when you create or modify your account; register to use our website, http://www.easyderm.com/ (the "Site"); purchase products or services from us; post comments or reviews on our Site; request information from us; contact customer support; or otherwise communicate with us.

If you make a purchase through our Service, your payment-related information (e.g., credit card information) may be collected by us or a third-party payment processor on our behalf. We may collect personal information when you submit an e-mail or request for information to us. You are responsible for ensuring the accuracy of the personally identifiable information that you submit to us.

We may also collect other types of information (non-identifiable information), such as gender, age, personal interests and medical or health-related information that we may associate with personally identifiable information.

Information we obtain indirectly

We may receive certain information about you through our third-party affiliates or partners and from other companies that provide us with such information as a part of their relationship with us, including Google Analytics. If and when we associate any information that we obtained from third parties with personally identifiable information that we have collected under this Privacy Policy, we will treat the acquired information exactly like the information that we collected ourselves.

Information we collect through technology

When you use our Service, we collect certain information about you automatically through our use of cookies and similar technologies. Our Site may use “cookies,” which are pieces of information a website sends to your computer while you are viewing the website, for a variety of purposes. For example, when you return to our Site after looing in, cookies may provide information to the Site so that the Site will remember who you are. We may also use information collected through web beacons, which are small pieces of data that are embedded in images on the pages of websites, to analyze the traffic patterns on our Site, such as the frequency with which our users visit various parts or pages of our website. We may also use these technical methods in HTML e-mails that we send to our users to determine whether our users have opened those e-mails and/or clicked on links in those e-mails.

DP also uses Google Analytics. Google Analytics is a web analytics service provided by Google, Inc. to collect certain information relating to your use of the Site. Google Analytics uses cookies to help the Site analyze user activity. We may also use Google Analytics Advertising Features or other advertising networks to provide you with interest-based advertising based on your online activity.

3. CATEGORIES OF PERSONAL INFORMATION AND PURPOSE FOR COLLECTION

DP collects the following categories of personal information: (1) contact information, including your name, address, email address, and telephone number; (2) authentication information, including the user name and password that you use to register an account on the Site; (3) financial information, including your debit or credit card number, its expiration date, and its security code, for payment processing purposes; (4) personal characteristics, including date of birth, photographs of your head and hair, and other information relevant to diagnosis and treatment, such as hair loss, lifestyle and general medical history; (5) comments, reviews, and suggestions; (6) personal preferences including product preferences, online preferences, and interests; (7) online behavior information including online activity, preferences, and time spent viewing features; and (8) IP address, mobile network information, or device information.

DP only collects and processes the minimum amount of personal information from you that is necessary to the purposes of our information processing activities and retains such information only if required to fulfill such purposes. Additionally, any information sent by you to a doctor regarding your diagnosis or treatment is kept private and confidential. Our information processing activities include conducting our business, customer communications and support, user verification, payment processing, shipping, quality management services, Site maintenance and improvements, enforcing our legal rights, and complying with legal requirements. Where applicable, if DP intends to further process your personal information for a purpose other than that for which the personal information was initially collected, DP shall, prior to such processing, provide you with any relevant information on such additional purpose, and, to the extent required by applicable law, obtain your consent for this.

Protected Health Information

When you set up an account with DP, you are creating a direct customer relationship with DP that enables you to access and/or utilize the various functions of the Service as a user. As part of that relationship, you provide information to DP, including but not limited to your name, email address shipping address and phone number, that we may collect, use and disclose in accordance with our Privacy Policy, and that we do not consider to be “health” or “medical” information.

However, in using certain components of the Service, you may also provide certain medical information that may be protected under applicable laws. DP is not a “covered entity” under the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191, and its related regulations and amendments from time to time (collectively, “HIPAA”). One or more of the Labs, Pharmacies or Medical Groups may or may not be a “covered entity” or “business associate” under HIPAA, and DP may in some cases be a “business associate” of a Lab, Pharmacy or Medical Group. It is important to remember that, while state-specific privacy laws may apply, HIPAA does not necessarily apply to an entity or person simply because there is health information involved, and HIPAA may not apply to your transactions or communications with DP, the Telehealth Groups, the Providers, Labs, or the Pharmacies. To the extent DP is deemed a “business associate” however, and solely in its role as a business associate, DP, may be subject to certain provisions of HIPAA with respect to “protected health information,” as defined under HIPAA, that you provide to Lab, Pharmacies, or Medical Groups (“PHI”). In addition, any medical or health information that you provide that is subject to specific protections under applicable state laws (collectively, with PHI, “Protected Information”), will be used and disclosed only in accordance with such applicable laws. However, any information that does not constitute Protected Information under applicable laws may be used or disclosed in any manner permitted under our Privacy Policy. Protected Information does not include information that has been de-identified in accordance with HIPAA.

The Telehealth Group and Providers have adopted a Notice of Privacy Practices that describes how they use and disclose Protected Information. By accessing or using any part of the Service, you are acknowledging receipt of the Notice of Privacy Practices from the Telehealth Group and Provider(s).

By using the Service, you are agreeing that even if HIPAA does apply to DP, the Telehealth Group, the Providers, the Labs, or the Pharmacies, any information that you submit to DP that is not intended and used solely for the provision of diagnosis and treatment by the Medical Group and Providers or prescription fulfillment by the Pharmacies or laboratory services by the Labs, is not considered Protected Information, and will only be subject to our Privacy Policy and any applicable state laws that govern the privacy and security of such information.

How we may use the information we collect

We may use the information we collet:

To provide, maintain, improve, and enhance our Service;
To personalize your experience on our Service such as by providing tailored content and recommendations;
To enable communication between you and the provider you contact;
To send you email, text messages and other notifications;
To communicate with you, provide you with updates and other information relating to our Service, provide information that you request, respond to comments and questions, and otherwise provide customer support;
To understand and analyze how you use our Service and develop new products, services, features, and functionality;
To generate anonymized, aggregate data containing only de-identified, non-personal information that we may use to publish reports, including for our internal product improvement and sharing with third parties with which we have an agreement;
To facilitate transactions and payments;
To find and prevent fraud, and respond to trust and safety issues that may arise;
For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
For other purposes for which we provide specific notice at the time the information is collected.

4. DISLCOSURE OF PERSONAL INFORMATION

DP does not trade, rent, sell, disseminate, or share your personal information with nonaffiliated third parties for their direct marketing purposes, unless we have your permission.

We may share or disclose your personal information for the following limited purposes:

Healthcare Providers. We share your personal information with Telehealth Group PLLC, doctors, and relevant medical staff ("Telehealth Group") to provide you with services related to your diagnosis and treatment. In addition to this Policy, our disclosure of your personal information to Telehealth Group is subject to Telehealth Group's Notice of Privacy Practice Policy.
Vendors and Services Providers. We may provide information to third party vendors and service providers that perform services and functions on our behalf to help us operate and manage our Site, process orders, and fulfill and deliver products and services that you purchase from us. These vendors and service providers will have access to your personal information in order to provide these services, but when this occurs we implement reasonable contractual and technical protections to limit their use of that information to helping us provide our Service and support our interactions with you.
Your Consent to Have Your Personal Information Shared. In addition to the sharing described elsewhere in this Policy, we will share personal information with companies, organizations, or individuals outside of DP when we have your consent to do so.
Legal Disclosure. We may access, preserve, and disclose your information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena, where permitted by applicable law; (b) respond to your requests; (c) protect your, our, or others’ rights, property, or safety, including the safety and security of property that belongs to you, any property that belongs to any professional entity rendering services in relation to the Site or platform, and/or the Site/platform itself; or (d) will help to enforce any of our Terms of Use or other applicable policies. For the avoidance of doubt, the disclosure of your information may occur if you post any objectionable content on or through the Service.
Transfer in the Event of Sale or Change of Control. If the ownership of all or substantially all of our business changes, or we otherwise transfer assets relating to our business or the Site to a third party, such as by merger, acquisition, bankruptcy proceeding or otherwise, we may transfer personal information to the new owner, service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction. In such a case, unless prohibited by applicable law, your information would remain subject to the privacy policy applicable at the time of such transfer, unless you discontinue use of our Service. We will inform you of any such changes in ownership. We will also inform you if we sell your personal information to any new owners.
Operational Uses. We may also use your personal information for “Operational Uses,” such as to complete transactions requested by you (for example, your purchase of our Service) or to send you administrative communications.

5. ACCESS TO YOUR INFORMATION AND CHOICES

You can access and update certain information we have relating to your online account by signing into your account and going to the Account section of our Site. If you have questions about personal information we have about you or need to update your information, you can email us at info@dermatologistprescribed.com.

Opt-Out

With regard to personal information that you have provided under this Policy, you may exercise your opt-out choices available to you (if any and where applicable) by contacting us directly.

Please keep in mind that any opt-out choices you make will not apply in situations where: (a) you either have made, simultaneously make or later make a specific request for information from the website/platform; (b) we use your personal information for “Operational Uses” (as described above); or (c) we collect your personally identifiable information under any of the provisions above.

It may take up to ninety (90) days for your opt-out choices to be fully effective. Our systems may require time to update, and promotional mailings, by e-mail or otherwise, using personal information shared before your opt-out may already be in process. Thus, you might continue to receive promotional materials upon the personal information you have provided under this Privacy Policy for up to ninety (90) days.Location information

You can prevent your device from sharing precise location information at any time through your device’s operating system settings.

6. SECURITY OF YOUR INFORMATION

We use industry standard physical, technical, electronic, and administrative security measures and safeguards to protect the confidentiality and security of your personal information. For example, we limit access to personal information about you to employees who we believe reasonably need to come into contact with that information to provide products or services to you or in order to do their jobs. From time to time, we review our security procedures in order to consider appropriate new technology and methods. Please be advised, however, that while we take reasonable security measures to protect your personal information, we can make no guarantees as to the security or privacy of your information. DP cannot guarantee that hackers, cybercriminals, or other unauthorized third parties will be wholly prevented from improperly collecting, accessing, or modifying your personal information. Accordingly, it is your responsibility to protect the security of your login information, including your username and password. Additionally, please note that emails and other communications you send to us through our Site are not encrypted, and we strongly advise you not to communicate any confidential information through these means.

7. ADVERTISEMENT

We may manage and place advertisements on our website on behalf of third parties referred to herein as “network advertisers.” We may also use cookies and other technology to collect information when you click on or move your cursor over one of these banner advertisements.

Please note that once you have clicked on any such advertisement and have left our Site, our Policy no longer applies, and you must read the privacy policy of the advertiser to see how your personal information will be handled on its website. Advertisers or other third party companies will not have access to our cookies or other information-gathering technology.

Currently, our Site does not recognize if your browser sends a "do not track" signal or similar mechanism to indicate you do not wish to be tracked or receive interest-based ads.

8. CHILDREN'S PRIVACY

We are committed to protecting the privacy of children. The Site is not designed or intended to attract children under the age of 18. The parent or guardian is solely responsible for providing supervision of the minor’s use of the Service and the Site. The parent or guardian also assumes full responsibility for the interpretation and use of any information or suggestions provided through Company or its website for the minor.

If you are under the age of 18, please do not attempt to register with us at this Site, engage our Service, or provide any personal information about yourself to us. We do not collect personal information from any person we actually know is under the age of 18. If we learn that we have collected personal information from someone under 18, we will promptly delete that information. If you believe we have collected personal information from someone under the age of 18, please email us at info@dermatologistprescribed.com.

9. SPECIAL NOTES TO OUT-OF-STATE AND INTERNATIONAL RESIDENTS

Special Note to California Residents

California residents have the right to request in writing from businesses with whom they have an established business relationship (1) a list of the categories of personal information, such as name, address, e-mail address and the type of services provided to that customer, that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes, and (2) the names and addresses of all such third parties. In compliance with California law, we provide California residents such information and access upon request ("Consumer Request"). This Policy outlines how California residents can request the information and what you can receive.

If you would like to submit a Consumer Request, you can contact DP at info@dermatologistprescribed.com. If you choose to submit a Consumer Request, you must provide us with enough information to identify you and enough specificity on the requested data. DP will only use the information it receives to respond to your request. DP will not be able to disclose information if it cannot verify that the person making the Consumer Request is the person about whom we collected information, or someone authorized to act on such person's behalf.

We will respond to such written requests within thirty (30) days following receipt at the e-mail address above. We reserve the right not to respond to requests submitted other than to the e-mail address specified above or as otherwise exempted by law."Personal information" means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. "Personal information" does not include publicly available information.

Request to Access. You may submit a Consumer Request to obtain a copy of or access to the personal information that DP has collected on you.
Request to Know. You may submit a Consumer Request to receive information about DP' data collection practices. You may request information on the categories of personal information (as defined by California law) DP has collected about you; the categories of data collection sources; DP' business or commercial purpose for collecting or selling personal information; the categories of third parties with whom DP shares personal information, if any; and the specific pieces of personal information we have collected about you.

Please note that the categories of personal information and sources will not exceed what is contained in this Policy. Additionally, DP is not required to retain any information about you if it is only used for a one-time transaction and would not be maintained in the ordinary course of business. DP is also not required to reidentify personal information if it is not stored in that manner already, nor is it required to provide the personal information to you more than twice in a twelve-month period.

If you would like to know if DP has disclosed information about you to specific third parties, you may also email info@dermatologistprescribed.com to receive information about the categories of information that we disclosed to third parties for their direct marketing purposes. You may receive the names and addresses of those third parties, and you may request this information for the year prior to your request. Note that these particular requests may only be made once per calendar year. Additionally, please be aware that only sharing activities covered by California law will be included in our response to your request.

Request to Delete. You may request that DP delete your personal information. Subject to certain exceptions set out below we will, on receipt of a verifiable Consumer Request, delete your personal information from our records and direct any service providers to do the same.

Please note that we may not delete your personal information if it is necessary to:

complete the transaction for which the personal information was collected;
provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
detect security incidents, protect against malicious, deceptive activity, and take all necessary and appropriate steps to mitigate current and future risk;
debug and repair internal information technology as necessary;
undertake internal research for technological development and demonstration;
exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
comply with the California Electronic Communications Privacy Act;
engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
comply with an existing legal obligation; or
otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

DP may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may charge you a different rate, or provide a different level of quality, if the difference is reasonably related to the value provided by your personal information.

Special Note to Nevada Residents

DP does not sell, rent, or lease your personally identifiable information to third parties. However, if you are a resident of Nevada and would like to submit a request not to sell your personally identifiable information, you may do so by emailing us at info@dermatologistprescribed.com.

Special Note to International Residents

Our Service is hosted in the United States and intended for visitors located within the United States. If you choose to use the Service from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal information outside of those regions to the United States for storage and processing. Also, we may transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Service. By providing any information, including personal information, on or to the Service, you consent to such transfer, storage, and processing. Further, you acknowledge that your continued use of the Service is governed by U.S. law and regulation, this Policy and our Terms of Service.

10. LINKED SITES

The Site may contain links to third-party owned or operated websites, including, without limitation, social media websites (each a "Linked Site"), as a convenient method of accessing information that may be useful or of interest to you. This Policy and the practices that we follow under this Policy do not apply to Linked Sites. We are not responsible for the content, accuracy, or opinions expressed on any Linked Site or for the privacy practices or security standards used by third parties on such Linked Sites. These Linked Sites have separate privacy and data collection practices, and we have no responsibility or liability relating to them.

Please note that once you have clicked on a link to a Linked Site and have left our Site, our Policy no longer applies, and you must read the privacy policy of the Linked Site to see how your personal information will be handled on the Linked Site.

11. USER CONTENT

Some features of the Service may now or in the future allow you to provide content, such as written comments or reviews, to be published or displayed on public areas of the Site ("User Content"). Be careful about giving out information in public areas of the Service. The information you share in public areas may be read, collected, or used by any user of the Service. We cannot control the actions of other users of the Site with whom you may choose to share your User Content.

12. CHANGES TO OUR PRIVACY POLICY

While this Policy may change from time to time, DP will enforce and comply with all applicable laws with respect to this Policy, any future versions of this Policy, our Service, our rights, and our obligations to you. We will post any privacy policy changes on this page and, if the changes are significant, we will provide a more prominent notice, including, for certain services, email notification of Policy changes.

13. QUESTIONS AND HOW TO CONTACT US

If you have any questions, concerns, complaints, or suggestions regarding this Policy, please email us at info@dermatologistprescribed.com.

4839-8072-5494, v. 2