Privacy Policy

1. Introduction

RemedyX Holdings LLC d/b/a RemedyX ("Company," "we," "our," or "us") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, place an order, or engage with our services.

Important Notice: This Privacy Policy applies solely to RemedyX Holdings LLC d/b/a RemedyX. By accessing our website, creating an account, or purchasing products, you acknowledge that you have reviewed this Privacy Policy and understand the practices described herein. This Privacy Policy governs information collected through our website and related services and does not apply to third-party websites or services that may be linked from our site. Privacy-related disputes may be subject to the dispute resolution provisions in our Terms & Conditions.

2. Information We Collect

We collect information to provide secure, compliant, and efficient services. We limit the collection of personal information to information reasonably necessary for the purposes described in this Policy, including account administration, order processing, fulfillment, security, fraud prevention, compliance, customer support, analytics, and other legitimate business operations. This includes:

A. Personal Information You Provide

• Identity Data: Name.
• Contact Data: Billing address, shipping address, email address, telephone number, and related business contact information voluntarily provided.
• Account Data: Username, password (encrypted), order history, and preferences.
• Researcher and Research-Purpose Information: The researcher category you select, organization or institutional information you provide, and research-purpose declarations submitted during registration, checkout, or compliance review.
• Financial Data: Payment details are processed directly by our PCI-DSS compliant third-party payment processors. We do not store or have access to your full credit card number. Payment processors operate under their own privacy policies, which govern their handling of payment information.

B. Information Collected Automatically

• Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
• Usage Data: Information about how you use our website, products, and services, including referring URLs and interaction timestamps.
• Collection Mechanism: This information is collected automatically through cookies, server logs, and similar technologies.

3. Security Logging & Transaction Verification

To support transaction security, fraud prevention, payment-processing requirements, legal compliance, and enforcement of RemedyX's Research Use Only policies, RemedyX maintains transaction, security, and compliance records associated with account and order activity.

Consent Verification:

When a registered purchaser submits an order, RemedyX records information associated with applicable consent and compliance actions, which may include the purchaser's account identity, date and time of acceptance in UTC, IP address, device/browser information, researcher classification, the applicable version or snapshot of the agreement presented, and affirmative acceptance of the Checkout Compliance Acknowledgment.

Electronic Compliance Records:

We maintain records of submitted checkout acknowledgments, including the acknowledgment text and revision, server-recorded acceptance time, references to applicable policy revisions, and associated account, order, and technical information.

Cryptographic signatures and integrity hashes are used to help detect subsequent alterations to signed records and verify the linkage between captured acknowledgments and resulting paid orders.

These records support transaction verification, fraud prevention, compliance review, dispute resolution, policy enforcement, and applicable legal obligations. Their collection, use, retention, and disclosure remain subject to this Privacy Policy, including its information-sharing, data-retention, and privacy-rights provisions.

Purpose of Logging:

These records may be retained and used as reasonably necessary for transaction verification, fraud prevention, compliance, payment-network requirements, accounting, legal obligations, dispute resolution, enforcement of Company policies, and protection of RemedyX and its customers.

4. How We Use Your Information

We use your information strictly for legitimate business purposes:

• Fulfillment: Processing and delivering orders.
• Communication: Sending order confirmations, shipping updates, and support responses.
• Security: Detecting and preventing fraud, unauthorized access, and policy violations.
• Compliance: Enforcing our Terms & Conditions and meeting regulatory obligations.
• Improvement: Analyzing user behavior to improve website functionality. We may use aggregated or de-identified information for analytical or operational purposes that does not identify any individual.
• Service Continuity: In the event of payment processing or banking service interruptions, order processing may be temporarily delayed. We will communicate any such delays as promptly as possible.

Automated Decision-Making:

We do not use automated decision-making processes that produce legal or similarly significant effects without human review.

Legal Basis for Processing:

We process personal information based on contractual necessity, legitimate business interests, legal compliance obligations, and user consent where applicable.

5. SMS Messaging & Mobile Privacy

This section governs our use of mobile phone numbers for SMS communications.

Message frequency may vary. Message and data rates may apply. Reply HELP for help or contact support@remedyx.bio. Reply STOP to opt out. Consent to receive SMS messages is not a condition of purchase.

5.1. Consent & Opt-In. You consent to receive SMS messages (including order updates) only by explicitly checking the opt-in box during checkout or sign-up.

5.2. No Third-Party Sharing. Your mobile information will not be sold or shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent information are excluded from any general data sharing categories.

5.3. Opt-Out. You may opt out of SMS communications at any time by replying STOP to any message.

5.4. Disclosure to Service Providers. We may share mobile data only with telecommunications providers and technical vendors strictly necessary to deliver the message. These parties are contractually prohibited from using your data for any other purpose.

6. Information Sharing and Disclosure

We disclose personal information only as reasonably necessary for the purposes described in this Policy, including:

• Service Providers: We may disclose information to vendors that provide services on our behalf, including payment processing, website hosting, fraud prevention, shipping, communications, analytics, security, and related business operations.
• Analytics and Advertising Technologies: We may use third-party analytics and advertising technologies to measure website performance, understand advertising effectiveness, attribute conversions, and improve our marketing. These technologies may receive limited identifiers, device information, or website interaction information. Although RemedyX does not sell customer information as part of its business model, certain disclosures may be legally classified as "sharing," targeted advertising, or, under some state privacy laws, a "sale." Where applicable law provides a right to opt out of such processing, RemedyX will honor that right.
• Legal, Security, and Compliance Purposes: We may disclose information when required by valid legal process or where reasonably necessary to investigate fraud, enforce our policies, protect rights or security, respond to payment disputes, or comply with applicable legal obligations.
• Business Transactions: Information may be transferred in connection with a merger, acquisition, financing, reorganization, or sale of all or part of the business, subject to applicable law.

RemedyX does not use customer personal information for another company's independent direct marketing unless the customer has provided any consent required by applicable law.

7. Service Providers & Data Processing Roles

RemedyX generally determines the purposes and means of processing personal information collected directly through its website and services. Third-party providers may process information on RemedyX's behalf as service providers or processors, while certain providers may independently determine limited purposes and means of processing as permitted by applicable law and their contractual terms. RemedyX requires service providers processing personal information on its behalf to use the information only for authorized purposes and to maintain appropriate privacy and security safeguards.

8. Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected:

• Transaction Records: Retained for seven (7) years for tax, audit, and legal defense purposes.
• Account Information: Retained until you request deletion, unless retention is required for legal, tax, audit, fraud prevention, or dispute resolution purposes.
• SMS Consent Records: Retained as required to demonstrate carrier compliance.

Retention periods may be extended where necessary to comply with legal obligations or resolve disputes.

9. Your Privacy Rights

Depending on your jurisdiction, you may have specific rights regarding your personal data:

• Access & Correction: The right to request a copy of your data and correct inaccuracies.
• Deletion: The right to request deletion of your data (subject to our legal retention obligations).
• Opt-Out: The right to opt out of marketing communications.
• Verification: We may request verification of your identity before processing privacy rights requests to protect account security.

California Residents (CCPA/CPRA):

California residents have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purposes for collection, and the categories of third parties with whom we share information.
• Right to Delete: You may request deletion of personal information we have collected, subject to exceptions for legal obligations, fraud prevention, and dispute resolution.
• Right to Correct: You may request correction of inaccurate personal information we hold about you.
• Right to Opt-Out of Sale/Sharing: RemedyX does not sell personal information for monetary consideration. Where our use or disclosure of personal information constitutes a “sale” or “sharing” under applicable California law, eligible California residents may exercise the applicable right to opt out.
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising any of these rights.

We will respond to verified California privacy rights requests within 45 days as required by law.

Nevada Residents (NRS Chapter 603A):

Nevada residents have the right to opt out of the sale of certain covered information. RemedyX does not sell personal information as defined under Nevada law. If you have questions about our data practices under Nevada law, you may contact us at support@remedyx.bio.

U.S. State Privacy Rights:

Depending on your state of residence and the applicability of state privacy law to RemedyX, you may have rights concerning your personal information, including the right to confirm whether we process your information, obtain access to it, correct inaccuracies, request deletion, obtain a portable copy of certain information, and opt out of certain processing for targeted advertising, sale or sharing of personal information, or qualifying profiling activities.

Privacy requests may be submitted to support@remedyx.bio. RemedyX may take reasonable steps to verify the identity and authority of the person submitting a request where permitted or required by law. We will respond within the period required by applicable law.

Where applicable law provides a right to appeal a decision concerning a privacy request, you may appeal by replying to our response or contacting support@remedyx.bio with "Privacy Appeal" in the subject line. Where required, RemedyX will provide information regarding additional complaint rights following disposition of an appeal.

RemedyX will not unlawfully discriminate against a consumer for exercising an applicable privacy right.

To exercise any of the rights described in this section, contact us at: support@remedyx.bio

10. Data Security

RemedyX maintains reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, misuse, or loss. These safeguards include:

• Encryption: Personal information is protected using encryption in transit and, where applicable, encryption at rest. Website communications are protected using SSL/TLS.
• Authentication & Credential Protection: Account credentials are protected using appropriate cryptographic and authentication controls. RemedyX does not store customer passwords in readable plaintext.
• Payment Security: Full payment-card information is processed by authorized third-party payment processors and is not stored within RemedyX's website application systems.
• Access Controls: Access to personal information is restricted to authorized personnel and service providers with an appropriate business need.
• Security Monitoring: RemedyX maintains security, transaction, and system logging reasonably necessary to detect unauthorized activity, investigate incidents, prevent fraud, and protect its systems and customers.
• Breach Response: In the event of a confirmed security incident involving personal information, RemedyX will provide notifications to affected individuals and governmental or regulatory authorities where required by applicable law.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and support marketing and advertising efforts.

• Essential Cookies: Required for the website to function (e.g., maintaining your cart).
• Analytics Cookies: Help us understand how visitors interact with the site. We may use third-party analytics providers (such as Google Analytics) to help analyze website usage. These providers receive information in accordance with their own privacy policies.
• Advertising & Marketing Pixels: We may use third-party advertising technologies, such as Meta Pixel, Google Ads conversion tracking, or similar tools, to measure advertising performance and deliver relevant advertisements. These technologies may collect information about your interactions with our website and may use cookies or similar technologies to track conversions and audience engagement.

We do not sell personal information for monetary consideration. Certain advertising and analytics technologies may involve disclosure of identifiers, device information, or online activity to service providers or advertising partners as described in this Policy. Where such disclosure constitutes a sale or sharing under applicable law, applicable privacy rights will be honored.

You may control or disable cookies through your browser settings; however, disabling certain cookies may affect website functionality.

Do Not Track Signals:

Our website does not currently respond to "Do Not Track" (DNT) browser signals.

Universal Privacy Signals:

Certain jurisdictions recognize browser- or device-based privacy preference signals, such as Global Privacy Control ("GPC"), as requests to opt out of certain sale, sharing, or targeted-advertising activities. Where RemedyX is legally required to recognize such a signal, and the signal can be reasonably associated with the applicable browser, device, or consumer, RemedyX will process it in accordance with applicable law.

Cookie Preferences & Opt-Out:

You may opt out of Google Analytics data collection by installing the Google Analytics Opt-out Browser Add-on. You may control Meta Pixel data collection by visiting your Meta ad preferences. For all other cookies, you may manage your preferences through your browser settings. Disabling analytics or advertising cookies does not affect your ability to use our website or place an order.

12. Age Restriction (21+)

12.1. Verification & Enforcement. By creating a purchaser account and placing an order, you represent that you are at least twenty-one (21) years of age. Age representations are material representations upon which RemedyX relies in determining purchaser eligibility. RemedyX may request additional age or identity verification where reasonably necessary. Accounts determined to belong to individuals under 21 may be terminated, pending orders cancelled, and associated information deleted or retained as reasonably necessary for legal compliance, fraud prevention, dispute resolution, or enforcement of Company policies.

13. International Visitors & Data Transfers

RemedyX is based in the United States. Personal information collected through our website and services may be processed, stored, or accessed in the United States or other jurisdictions in which our service providers operate. Privacy and data-protection laws in those jurisdictions may differ from those applicable in your place of residence.

RemedyX does not currently direct or market its products or services to consumers in the European Union, European Economic Area, or United Kingdom. Where an applicable foreign data-protection law nevertheless governs a particular processing activity, RemedyX will process personal information and honor applicable rights as required by that law.

By using our services, you acknowledge these limitations and consent to the transfer of your information to the United States for the purposes described in this Privacy Policy.

14. Updates to This Policy

RemedyX may update this Privacy Policy from time to time to reflect changes in our practices, technologies, service providers, business operations, or legal requirements. When required by applicable law, RemedyX will provide appropriate notice of material changes through the website, account notification, email, or another legally permitted method. The effective date displayed with this Policy identifies the most recent revision. Where applicable law requires consent before materially different processing may begin, RemedyX will obtain the required consent.

15. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us: