Privacy Policy

‍

Last Updated: April 17, 2026

This Privacy Policy (“Policy”) describes the information collected by or on behalf of Ivy Rx PLLC (“Ivy Rx,” “we,” “us,” or “our”) through our website https://www.ivyrx.com/ (“Website”),  including all of its subdomains, pages, and portals, our mobile application (“App”), and our interactions with you both online and offline (collectively, “Services”), and how that information is used and disclosed. If you have questions or concerns about this Policy, please contact us as set forth below. 

We may modify or update this Policy from time to time. Notice of changes that in our sole discretion are material will be posted on the Website or otherwise communicated to you. All changes will be effective immediately upon posting.

State Supplemental Privacy Notices: 

If you are a California resident, see the California Privacy Notice below. 

If you are a resident of any other U.S. state that has a privacy law in effect, including but not limited to, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, please see the Supplemental State Privacy Notice section below for additional information that may apply to you.

Consumer Health Information

Certain information you provide through our Website or Services may relate to your health. However, not all health-related information is regulated under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). HIPAA only applies to specific types of organizations. Ivy Rx is not an entity subject to HIPAA, and information you submit through our Website or Service is not “protected health information” under HIPAA. As a result, health-related information you submit through the Website or Service is not subject to HIPAA privacy and security requirements, even if that same type of information would be protected if provided directly to a HIPAA covered health care provider or health plan.

However, we may collect certain Personal Information (as defined below) that is classified as “Consumer Health Data” under laws enacted in the state of Nevada and Washington. If you are a resident of Nevada or Washington, please refer to our Consumer Health Data Privacy Notice to learn more about what Consumer Health Data we may collect and our privacy practices with respect to such data.

1. Information We Collect

We may collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to you or your household (“Personal Information”) when you use our Services. The Personal Information we collect falls into three categories: (A) information you provide to us; (B) information we collect through automated methods; and (C) information we collect from other sources, each further detailed below.  We will collect, use, and disclose such Personal Information pursuant to this Policy and applicable law. 

Information You Provide to Us

We collect Personal Information that you provide directly to us. This may occur in the following ways: 

General Inquiries: When you contact us, including through general inquiry forms, chat feature, subscription forms, or other contact options available on the Website or App, we collect the information you choose to provide, such as your name, email address, phone number, and the content of the message or attachments you submit. We use this information to respond to your request and communicate with you.

Accounts: Account registration is required to use certain Services. To register for an account, you are asked to provide certain Personal Information, such as your name, date of birth, address, email, and phone number. The email address that you provide is the email address that will be used for correspondence regarding your account as well as your medical information and prescriptions.

Online Orders and Payment: If you place an order online, you will be required to submit your contact, shipping, and billing information. Credit card information is sent directly to our payment provider who processes your online order. Credit card information is neither recorded nor stored by Ivy Rx, and it can only be accessed by our payment provider. We may keep a record of your purchases and contact information (including your name, shipment address and items ordered).

Ambassador Program. When you sign up for our Ambassador Program, we will collect your name, phone number, and email address and use this information to send you updates and communications related to the program. 

Testimonials and Reviews. If you submit a testimonial, review, or other user-generated content through our Website, App, or Social Media channels, we may collect your name, likeness, photograph, and the content of your submission. By providing a testimonial or review, you acknowledge that your submission and any associated Personal Information (such as your first name, last initial, and general location) may be publicly displayed on our Website, App, Social Media pages, or in other marketing materials. If you wish to update or remove your testimonial, please contact us using the information provided in this Policy. Please note that copies of your testimonial that have already been shared publicly may remain accessible in cached or archived pages, or may have been copied or stored by other users.

‍

Data Automatically Collected

We may use cookies, web beacons, pixel tags, social widgets, UTM codes and other tracking technologies (collectively “Tracking Technologies”) on our Website, App, and in our email and other electronic communications with you. Most browsers automatically accept Tracking Technologies. If you access our Website through a mobile device, we may automatically collect Personal Information about your device and your approximate physical location. Please refer to Section 9 below for information about your choices regarding Tracking Technologies.

Tracking Technologies may collect information such as:

• IP addresses assigned to the computers and other devices you use;
• Domain server
• Type of device
• Browser type, language and resolution
• Internet service provider
• Operating system
• Access date and time
• Clickstream data and mouse movement
• Unique identifiers, such as cookie IDs, device identifiers, and advertising IDs;
• Pages viewed, referring and exit URLs, and links clicked;
• Session duration and time spent on individual pages;

‍

Third-Party Tracking Technologies. We use third-party ad networks (called third-party ad servers or network advertisers) to deliver ads to you on our behalf across the internet, via email and media streaming services.  Some of our ad network providers use pixels, which are small pieces of code (also known as an HTML code, JavaScript code, snippet or tag) that are placed on our Website that allows us and our providers to collect and track data on user behavior such as page views, clicks, and conversions by our Website visitors and customers when they have seen or clicked on our advertisements on other sites. This helps us and our providers gain insight into which ads are performing well, which audience types are engaging with our content, and which actions users are taking after clicking on our ads. 

Google Analytics. In addition, we use Google Analytics to collect and process information about your use of the Website. Google sets Tracking Technologies on your browser or device, which causes your web browser to automatically send information to Google. Google uses this information to provide us with reports to better understand and measure how users interact with our Website. To learn more about how Google uses data, visit Google’s Privacy Policy and Google’s page on “How Google uses data when you use our partners’ sites or apps.” You may download the Google Analytics Opt-out Browser Add-on for each browser you use, but this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, visit Google’s “Google Analytics Cookie Usage on Websites” page. 

DNT Signals. Some browsers offer a “Do Not Track” feature that sends a signal to websites that a user does not want to be tracked. There is currently no industry standard for how companies should respond to these signals. As a result, our Website does not respond to Do Not Track signals at this time. 

Global Privacy Controls. Some browsers (like Mozilla Firefox, Duck Duck Go, and Brave) and browser extensions (such as Privacy Badger by EFF) support the Global Privacy Control (“GPC”) that can send a signal to websites you visit indicating your choice to opt-out from the sale or sharing of your data for targeted advertising. We have implemented tools such that when we detect a GPC signal, we will make reasonable efforts to treat the signal as an opt out request. Find more information about GPC signals. 

Data from Other Sources. 

We may receive Personal Information about you from third parties in limited circumstances. We use this information for the purposes for which it was provided and as otherwise described in this Policy. For example, we obtain information from third-party providers and pharmacies that provide services and medication in connection with our Services. 

2. How We Use Your Information  

We use Personal Information that we collect for the following purposes:

As Stated or Agreed to at the Point of Collection.  We use Personal Information for the purposes stated or agreed to (or as is obvious) at the point of collection. For example, we may use your Personal Information to respond to questions, comments, or complaints. We also use your Personal Information as otherwise requested or consented to by you.

Administration.  We use Personal Information for administrative purposes, such as complying with audit requirements, managing risks, obtaining professional advice, and understanding user demographics and preferences.

Management of Services.  We use Personal Information for Website and App management, such as troubleshooting problems, improving content and functionality, performing statistical analyses, customizing the Services for you and our other users, and to operate, maintain, and provide features and functions of the Services.

Advertising and Communications.  We may use Personal Information to notify you of new products or features of our Services, notify you of changes to our website terms or this Policy, send service-related or transactional communications, and other communications, including advertising communications. We may use third parties or service providers to deliver communications to you.  

To Protect Our Rights; Comply with Laws.  We may use Personal Information to protect our legal rights or interests, or those of other parties, including to bring a legal action against you or anyone who may be causing harm to us, our Services, or to other users of the Services. We may also use Personal Information to seek business, financial or legal advice, to respond to legal requests, or to comply with applicable laws, regulations, and reporting obligations.  

Create Aggregated and De-Identified Data. We may process Personal Information to create deidentified and aggregated data.  Any such deidentified and aggregated data is no longer subject to this Privacy Policy.  Ivy Rx is the sole and exclusive owner of such de-identified information. 

How We Use Data Collected by Tracking Technologies. We use Tracking Technologies to: (i) make our Website function properly; (ii) provide personalized experiences; (iii) tailor our interactions with you; (iv) help with our marketing efforts; and (v) provide us with valuable data and statistics about the usage and effectiveness of our Website (including conversion tracking) and to help us improve our Website and Services.

• Online Behavioral Advertising. We use third-party Tracking Technologies to provide interest-based advertising services. These services may serve advertisements on our behalf that are customized based on predictions about your interests generated from your visits to websites (including our Website) over time and across different websites. The data collected may be associated with your Personal Information. Please see Section 9 of this Policy for additional information on how to control your preferences. 
• To change your preferences with respect to certain online ads or to obtain more information about ad networks and online behavioral advertising, visit National Advertising Initiative Consumer opt-out page or the Digital Advertising Alliance Self-Regulatory Program. Changing your settings with individual browsers or ad networks will not necessarily carry over to other browsers or ad networks. As a result, depending on the opt-outs you request, you may still see our ads. Opting-out of targeted advertising does not opt you out of all ads, just those targeted to you.
  ‍

3. Retention of Personal Information

We retain Personal Information only for as long as needed to fulfill the purposes described in this Policy, or as required by applicable U.S. laws. We take reasonable steps to delete Personal Information when it is no longer needed for these purposes or when we are legally required to do so. We may also delete Personal Information if we determine that it is inaccurate, incomplete, or no longer needed for our business operations. When deletion occurs, the information will be removed from active systems, but copies may remain in backup or archival systems where deletion is not practical.

4. Disclosure of Personal Information

We may disclose Personal Information to the following categories of third parties, in compliance with applicable laws:

Affiliates.  We may disclose Personal Information to our corporate subsidiaries and affiliates and with their respective officers, directors, employees, and agents for business and marketing purposes.

Providers and Pharmacies. We provide Personal Information to third-party medical providers and pharmacies that provide services and medication in connection with our Services.  

Vendors and Service Providers.  We may disclose Personal Information to vendors and service providers that provide services for us. For example, we may disclose Personal Information to vendors, contractors and business partners to help us host and manage, improve content and functionality of, and support or provide the security of the Website and App. We also disclose Personal Information to vendors that provide marketing and advertising services. 

Government Officials / Law Enforcement.  We will cooperate with law enforcement and other governmental agencies, and may disclose Personal Information:  (i) if we believe in good faith we are legally required to disclose that Personal Information, (ii) if we are advised to disclose Personal Information by our legal counsel, (iii) when necessary to identify, contact or bring a legal action against someone who may cause or be causing harm to, or interfering with the legal rights of, Ivy Rx or any other party, or (iv) as otherwise appropriate and as otherwise permitted by applicable law.

Professional Advisors.  We may disclose Personal Information to our professional advisors, such as our attorneys, accountants, financial advisors and business advisors, in their capacity as advisors to Ivy Rx. 

Change in Ownership.  In the event Ivy Rx is the subject of a change of control or in the event the Services change ownership, in whole or in part, or in the event of a bankruptcy, receivership or a similar transaction, we may disclose Personal Information to the subsequent owner(s).

Other.  We may disclose Personal Information to third parties when explicitly requested by or consented to by you, or for the purposes for which you disclosed the Personal Information to us as indicated at the time and point of the disclosure (or as was obvious at the time and point of disclosure).

5. Children's Information 

The Services are not directed to children under 18 years of age. We do not knowingly collect, sell, use, or share Personal Information from children under 18. If we obtain actual knowledge that any Personal Information has been provided by a child under the age of 18, we will promptly delete that information. If a parent or legal guardian learns that their child provided us with Personal Information without his or her consent, please contact us and we will make commercially reasonable attempts to delete such Personal Information.

6. Data Security

We use commercially reasonable technical and organizational measures to help secure Personal Information against loss, misuse, and alteration appropriate to the type of Personal Information processed. You understand that no data transmission over the internet can be guaranteed to be 100% secure. While we strive to protect Personal Information, we do not guarantee the security of Personal Information and you provide Personal Information at your own risk.

7. Access from Outside the United States

If you access the Services from outside the United States, please be aware that Personal Information may be transferred to, stored in, and processed in the United States, which may have different data protection laws than other countries. 

8. Third-Party Websites

The Website may link to, or be linked from, websites not controlled by us. We are not responsible for third parties’ privacy policies or practices. This Policy does not apply to any third-party websites or to any data that you provide to third parties. You should read the privacy policy for each website that you visit.

We are active on social media, including Facebook, Instagram, and TikTok (“Social Media”). Anything you post on Social Media is public information and will not be treated confidentially. Your use of Social Media is governed by the privacy policies and terms of those platforms and not by this Policy. We encourage you to review those policies and terms.

9. Your Choices

• Tracking Technologies: To disable certain Tracking Technologies, including advertising cookies, or to update your preferences, please click on the cookie preferences icon on the footer of our Website. You also may be able to disable Tracking Technologies by changing your browser settings, depending on your browser. These features and options are browser and device specific and are not uniform. You can usually find these settings in the options or preferences menu of your browser. You may also opt out from Tracking Technologies using one of the consumer online tracking choices industry self-regulating sites. If you choose to block Tracking Technologies, certain features of the Website may not work. You cannot disable all Tracking Technologies, such as those that are essential to the functioning of the Website. Pursuant to certain state privacy laws, you may also have the right to opt out of the sale or sharing of your Personal Information for targeted advertising as detailed below in the California Privacy Notice and Supplemental State Privacy Notice Sections of this Policy. 
  ‍

• Marketing Communications: To provide you with information regarding our services or offerings, we may send you promotional materials or other information via email (“Marketing Communications”). 
  
  • Emails. You may choose to stop receiving Marketing Communications via email by clicking on the “Unsubscribe” link located at the bottom of any marketing email we send to you. Please note that certain emails that are transactional in nature may not contain an unsubscribe link or opt-out instructions. 
  • Text Messages: If you consent to receive text message Marketing Communications from us, we will only send messages to the phone number you provide. You may opt out of receiving marketing text messages at any time by replying "STOP" to any marketing text message you receive from us or by contacting us at privacy@ivyrx.com. After you opt out, you may still receive a single confirmation message. Message and data rates may apply, and message frequency may vary. By consenting to receive text messages, you confirm that you are the subscriber or customary user of the phone number provided. 
    ‍

Please note that certain communications that are transactional or service-related in nature (such as order confirmations, shipping notifications, or account alerts) may not contain an unsubscribe link or opt-out instructions, as they are not considered Marketing Communications.

• Account Information: If you would like to update or delete certain Personal Information related to your account, you can contact us at privacy@ivyrx.com.
  ‍

10. Contact Us

If you have questions or concerns regarding this Policy, you may send your request to privacy@ivyrx.com, or using one of the following methods:  

Email: privacy@ivyrx.com

Phone: 866-464-8979

Mail: 111 NE 1st Street 

8th Floor #8564 

Miami, FL 33132

‍CALIFORNIA PRIVACY NOTICE‍

This Section provides additional terms that apply to California Consumers. In the event of a conflict between this Section and the remainder of this Policy, this Section shall take precedence for California Consumers.  In this Section only, any capitalized terms not defined in this Policy have the meanings set forth in the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act, and including its implementing regulations (the “CCPA”).

The Collection, Source, Purpose and Sharing of Your Personal Information.

Categories of Personal Information.  In the last twelve (12) months, we have collected the following categories of Personal Information: 

• Identifiers consisting of: real name, date of birth, postal address, phone number, IP address, email address, and other similar identifiers. 
• Personal Information described in Cal. Civ. Code § 1798.80(e) consisting of: name, address, telephone number, financial information (such as billing and credit card details), and date of birth.
• Commercial Information consisting of: purchase records, products or services purchased or considered, shipping information, and other purchasing or consuming histories or tendencies.
• Geolocation Data consisting of: approximate physical location information collected when you access our Website or App through a mobile device.
• Internet Activity consisting of: browsing history, search history, and information regarding a consumer’s interaction with an internet website, or advertisement.
• Inferences: including inferences drawn from any Personal Information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
• Sensitive Personal Information: including Personal Information collected and analyzed concerning a consumer’s health and account log-in credentials (such as username and password combinations).
• We only collect Sensitive Personal Information when you choose to provide that information, or for legitimate business purposes appropriate for the use and disclosure of Sensitive Personal Information as contemplated in the CCPA, and do not otherwise use it to infer characteristics about you.
• ‍

Categories of Sources from Which Personal Information is Collected.  The categories of sources from which your Personal Information is collected are described in Section 1 (Information We Collect).

Purposes for Collecting Personal Information. We use the categories of Personal Information listed above for business purposes as disclosed in Section 2 (How We Use Your Information) and for the following business purposes expressly identified by the CCPA, which fall under one or more of the following categories below:

• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
• Helping to ensure security and integrity to the extent the use of your Personal Information is reasonably necessary and proportionate for these purposes.
• Debugging to identify and repair errors that impair existing intended functionality.
• Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your current interaction with us.
• Providing advertising and marketing services to you, except for cross-context behavioral advertising.
• Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, and processing payments.
• Undertaking internal research for technological development and demonstration.
• Other purposes as expressly authorized by the implementing regulations of the CCPA.

Categories of Our Service Providers or Contractors with Whom Personal Information is Disclosed for a Business Purpose.  In the last 12 months we have disclosed all the categories of Personal Information listed above for our business purposes. The categories of Service Providers or Contractors with whom we disclose Personal Information in the last 12 months are described above in Section 4 (Disclosure of Personal Information).

Categories of Third Parties with Whom Personal Information is Sold or Shared.  While we do not “sell” Personal Information for monetary consideration, certain information exchange with our advertising and analytics partners regarding certain identifiers may constitute a “sale” or “sharing” of Personal Information as broadly defined under the CCPA. In the last 12 months we have Shared Personal Information consisting of Identifiers (such as IP addresses and device identifiers) and Internet Activity as described above. The categories of third parties with whom we Sell or Share Personal Information in the last 12 months are third parties that provide services related to cross-contextual behavioral advertising.

We do not have any actual knowledge that we have Sold or Shared Personal Information of any individual under the age of 16 for monetary compensation or for cross-context behavioral advertising. 

Your California Privacy Rights 

California Consumers have the right to make the following requests:

• Right to Know and Access.  You have the right to request that we disclose the following information to you regarding our collection and use of your Personal Information over the past 12 months:
  
  • The categories of Personal Information we have collected about you;
  • The categories of sources from which we collect the Personal Information about you;
  • The business or commercial purpose(s) for which the Personal Information was collected, sold, or shared;
  • The categories of third parties with whom we disclose that Personal Information for a business purpose;
  • The specific pieces of Personal Information we collected about you in a format easily understandable to the average Consumer; and
  • The categories of Personal Information that we sold or shared, and the categories of third-party recipients to whom it was sold or shared.
• Right to Delete.  You have the right to request that we delete any of your Personal Information that we collected from you and retained.
• Right to Opt-out of “Sale” and Certain “Sharing” Practices. You have the right to opt-out of the “sale” and “sharing” of your Personal Information with third parties, as those terms are defined under CCPA. While we do not “sell” Personal Information for monetary compensation, you may limit the “sharing” of your Personal Information. 
• Right to Correct. You have the right to request that we correct inaccurate Personal Information that we maintain about you.  
• Right to Non-Discrimination. We will not discriminate against you for exercising any of your rights under the CCPA.  
• Right to Limit. You have the right to direct us to limit our use of your Sensitive Personal Information to what is necessary to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services, subject to exceptions. 
• ‍

How to Exercise Your California Privacy Rights.  To exercise your California privacy rights, you may submit your request to us by contacting us at privacy@ivyrx.com

To opt out of the sharing of Personal Information, you may send your request to privacy@ivyrx.com.

To limit the use of Sensitive Personal Information, you may send your request to privacy@ivyrx.com.

In addition, some browsers (like Mozilla Firefox, Duck Duck Go, and Brave) and browser extensions (such as Privacy Badger by EFF) support the Global Privacy Control (“GPC. ”) that can send a signal to websites you visit indicating your choice to opt-out from the sale or sharing of your data for targeted advertising. We have implemented tools such that when we detect a GPC signal, we will make reasonable efforts to treat the signal as request to opt out of selling and sharing. To learn more about the GPC, you can visit its website here

Verifiable Consumer Request.  In order to verify your request, we may require additional information to allow us to reasonably verify you are the person about whom we collected Personal Information, and you must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request. This information may vary depending on the Personal Information we already have. If we are unable to verify your identity as required by applicable laws and regulations, we will decline to comply with your request, and let you know why. We may reject or deny your request as permitted or as required by law. We may charge a fee as permitted by the CCPA, such as to process or respond to your request if it is excessive, repetitive, manifestly unfounded, or if we believe the request is fraudulent or submitted for purposes other than exercising applicable privacy rights.

Authorized Agents. You may only make a request to exercise your rights on behalf of yourself, or a parent or legal guardian may make a request on behalf of their minor child. You also have a right to submit requests to exercise your rights under the CCPA through an authorized agent. If an authorized agent contacts us to exercise the above rights, we will need to verify their identity as well as your identity. We will also require proof of your written authorization to the agent to be your agent and to make the specific request submitted, unless the agent is subject to a Power of Attorney under California probate laws. If the agent is a Power of Attorney under California probate laws, we may require evidence of that status.  

‍SUPPLEMENTAL STATE PRIVACY NOTICE

THIS SECTION PROVIDES ADDITIONAL PROVISIONS APPLICABLE ONLY TO RESIDENTS OF STATES WITH CONSUMER PRIVACY LAWS, EXCLUDING CALIFORNIA. Please refer to the Policy above to find detailed information about the categories of personal information we collect, our uses of Personal Information, and our disclosure of Personal Information, along with additional information about our privacy practices. If you have any questions as to whether the following rights apply to you, please contact us as set forth below. If any information in this section conflicts with the main body of this Policy above, the information in this section shall control if you are a resident of one of these states.

State Privacy Rights

Depending on where you live and subject to exceptions permitted by applicable law and verification of your identity, you may have some or all of the following rights:

• Right to Request Access. You have the right to confirm whether or not we are processing your Personal Information and to access such Personal Information. Depending on your state of residence, you may also have the right to receive a list of specific third parties with whom we disclose Personal Information.
• Right to Request Data Portability. You have the right to obtain a copy of your Personal Information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another business without hindrance. 
• Right to Know. You have the right to request that we disclose to you the Personal Information we collect, use, or disclose, and information about our data practices.
• Right to Request Correction. The right to request that we correct inaccurate Personal Information that we maintain about you.
• Right to Request Deletion. The right to request that we delete your Personal Information that we have collected from or about you.
• Right to Opt-Out of the Sale of Personal Information, Targeted Advertising, and Profiling. The right to opt-out of the sale of Personal Information, the right to opt-out of the use of Personal Information for targeted advertising, and in some states, the right to opt-out profiling in furtherance of decisions that produce legal or similarly significant effects.  While we do not sell Personal Information for monetary compensation or engage in profiling in furtherance of our decisions that produce legal or similarly significant effects, we do engage in targeted advertising.  
• Right to Non-Discrimination. The right not to receive discriminatory treatment for exercising your privacy rights.
• ‍

Additional State-Specific Rights

Oregon Residents: In addition to the rights described above, Oregon residents have the right, upon request, to receive a list of the specific third parties (not just categories) to whom we have disclosed Personal Information. To exercise this right, please contact us using the methods described below.

Minnesota Residents: In addition to the rights described above, Minnesota residents have the right to request information about the types of profiling we engage in and to question the results of any profiling decision that produces legal or similarly significant effects.

Maryland Residents: Maryland law places additional restrictions on the sale of Sensitive Personal Information and the use of Personal Information for targeted advertising. We do not sell Sensitive Personal Information of Maryland residents. We do not use sensitive personal information for targeted advertising purposes in Maryland, in accordance with applicable privacy laws in that state. We will comply with all applicable Maryland-specific restrictions on the use of Personal Information.

NOTICE FOR TEXAS RESIDENTS: We may sell your sensitive personal data. If you wish to opt out of the sale of your sensitive personal data, you may send your request to privacy@ivyrx.com. 

How to Exercise Your State Privacy Rights

To exercise your state privacy rights for Data Portability or to Delete, Access, Know, or Correct Your Personal Information described in this Policy, you may submit your request to us by contacting us at privacy@ivyrx.com 

To exercise your right to opt out of the sale or sharing of your Personal Information for targeted advertising, you may submit your opt-out request by following this link: [Do Not Sell or Share link]

We also make reasonable efforts to respond to Global Privacy Control browser signals as opt-out requests where applicable.

We are not required to comply with a rights request if we are unable to authenticate the request using commercially reasonable efforts. In such event, we will either deny the request or request more information from you to help us authenticate the request. Some states permit the submission of privacy requests by an authorized agent. If we receive a request from an authorized agent, we will need to verify and authenticate your identity as the data subject, the agent’s identity, and the agent’s authority to act on your behalf.  We may deny a request from an authorized agent if we do not have proof that they are authorized by you to act on your behalf or if applicable state law does not permit requests by anyone other than you. Furthermore, a parent or legal guardian may make a request on behalf of their dependent or non-adult child.  We may deny a request if you are unable to prove that you are the custodial parent or legal guardian.

If we reject or deny your request, you have the right to appeal our decision by submitting an appeal. You may submit your appeal either by responding directly to that correspondence or contacting us at privacy@ivyrx.com. We will respond to your appeal within the timeframe required by applicable law. If we deny your appeal, we will provide you with information on how to contact your state's Attorney General or applicable regulator to submit a complaint, if required by your state's law. 

‍