Data Rights

By Keith Ward Jul 3 2024 0 Comments

Scope and Definitions

This Data Protection Notice explains how Pharma Solutions 4Rx-2 processes personal data in the United States of America in alignment with applicable U.S. privacy laws and, where relevant, the General Data Protection Regulation for individuals located in the European Economic Area or the United Kingdom. This notice applies to information collected through our website and any related communications.

References to personal data mean any information that identifies or can reasonably be linked to an individual. Sensitive personal data may include information such as health-related details you choose to provide in communications with us.

Data Controller and Contact

Pharma Solutions 4Rx-2 is owned by Keith Ward, who acts as the data controller for the personal data processed via this website.

Postal address: 160 Spear Street, San Francisco, CA 94105, United States

Email: [email protected]

Categories of Personal Data We Collect

Information you provide directly

Identifiers and contact details such as name, email address, postal address, and phone number when you contact us.
Content of communications, including inquiries related to medications, diseases, supplements, or treatments that you voluntarily share.
Preferences and consent choices for communications and cookies.

Information collected automatically

Technical and usage data such as IP address, device and browser information, pages viewed, timestamps, and referral URLs.
Cookie IDs and similar tracking identifiers used for essential site functions, analytics, and (if enabled) personalization.
Approximate location derived from IP address.

Information from third parties

Service providers that support hosting, security, analytics, and customer communications.
Publicly available sources to validate or enrich contact details when appropriate.

Purposes of Processing and Use

To operate, maintain, and secure the website and our services.
To respond to inquiries, provide requested information, and offer guidance related to pharmaceuticals and health topics.
To perform analytics that improve content, usability, and site performance.
To manage preferences and consent, including cookie settings.
To protect against fraud, abuse, and security incidents, and to comply with legal obligations.

Legal Bases for Processing (EEA/UK)

Consent: for non-essential cookies, newsletters, or when you provide health-related information in your communications.
Legitimate interests: to secure and improve our website, perform basic analytics, and communicate with you about your inquiries, provided these interests are not overridden by your rights.
Contract: when processing is necessary to fulfill your specific requests.
Legal obligations: to meet compliance, regulatory, or law enforcement requirements.

Notice at Collection for U.S. Residents

We collect personal information for the purposes described in this notice. We do not sell personal information. We do not share personal information for cross-context behavioral advertising. If our practices change, we will update this notice and provide required opt-out mechanisms.

Categories collected

Identifiers (name, email address, IP address, cookie IDs).
Internet or network activity (browsing history on our site, interaction data, device and browser data).
Approximate geolocation (derived from IP address).
Inferences drawn from usage to improve content relevance (non-profiled and aggregated where feasible).
Sensitive personal information only if you volunteer health-related information in your communications to us; we use such data solely to respond to your request and do not use it to infer characteristics about you.

Purposes

Providing and improving our website and content.
Communicating with you about your inquiries.
Security, fraud prevention, and debugging.
Compliance with laws and enforcement requests.

Retention

Inquiry and correspondence records: typically up to 24 months after final interaction, unless longer retention is required by law or to resolve disputes.
Cookie and analytics data: typically 13 to 26 months depending on the tool and settings.
Server logs and security records: typically 12 months.
Consent records: for the duration necessary to demonstrate compliance.

Sale or sharing of personal information

We do not sell personal information and do not share personal information for cross-context behavioral advertising. We do not collect or use sensitive personal information for inferring characteristics or for advertising; its use is limited to providing requested information or services.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our site, analyze traffic, remember preferences, and, where applicable with your consent, personalize content. You can manage non-essential cookies via your browser settings or available on-site controls. We honor applicable browser-level opt-out signals, such as Global Privacy Control, where required by law.

Essential cookies: required for core functionality and security.
Analytics cookies: help us understand how the site is used to improve content and performance.
Preference cookies: remember your settings and choices.

Disclosures to Service Providers and Others

Service providers: hosting, cloud infrastructure, security, analytics, and customer communications providers that process data on our behalf under contractual restrictions.
Legal and compliance: disclosures required by law, regulation, or legal process, or to protect rights, safety, and property.
Business changes: in the event of a restructuring or transfer of assets, personal data may be transferred in accordance with applicable laws.

International Data Transfers

Our operations are based in the United States. If you access the site from outside the U.S., your personal data may be transferred to and processed in the U.S. For transfers from the EEA or UK, we rely on appropriate safeguards such as standard contractual clauses and supplementary measures as needed to protect your data.

Data Security

We implement reasonable technical and organizational measures designed to protect personal data, including encryption in transit, access controls, and logging. No method of transmission or storage is completely secure; we encourage you to avoid sharing more information than necessary, especially any sensitive details.

General Retention Policy

We retain personal data only for as long as necessary to fulfill the purposes described in this notice, to comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods are provided in the Notice at Collection section and may vary depending on context and legal requirements.

Your Rights Under GDPR (EEA/UK)

Right of access to your personal data and information about processing.
Right to rectification of inaccurate or incomplete data.
Right to erasure in applicable circumstances.
Right to restriction of processing in applicable circumstances.
Right to data portability for data you provided to us.
Right to object to processing based on legitimate interests and to direct marketing.
Right to withdraw consent at any time where processing is based on consent.
Right to lodge a complaint with a supervisory authority in your country of residence or work, or where an alleged infringement occurred.

To exercise your rights, contact us at [email protected]. We may request information to verify your identity. We will respond without undue delay and within the time limits set by applicable law.

Your Privacy Rights in the United States

California (CCPA/CPRA)

Right to know/access the categories and specific pieces of personal information we collected, the sources, purposes, and disclosures.
Right to deletion, subject to legal exceptions.
Right to correct inaccurate personal information.
Right to opt out of sale or sharing of personal information (we do not sell or share as defined by California law).
Right to limit the use and disclosure of sensitive personal information to those uses necessary to provide requested services (we already so limit).
Right to non-discrimination for exercising your rights.

Colorado, Connecticut, Utah, and Virginia

Rights of access, correction, deletion, and portability.
Right to opt out of processing for targeted advertising, sale, or profiling in furtherance of decisions that produce legal or similarly significant effects (we do not engage in these activities for personal data on this site).
Appeal process: if we deny your request, you may appeal by replying to our decision email within 30 days; we will respond to appeals within 45 days.

How to Submit Requests, Verification, and Response Times

Submit requests by emailing [email protected]. Please include your name, the nature of your request, and sufficient details to locate your records. We will verify your identity using information we already maintain or by requesting additional details. Authorized agents may submit requests on your behalf if they provide proof of authorization and we can verify your identity. We endeavor to respond within 45 days; if additional time is needed, we will inform you of the extension and reasons. Opt-out requests, where applicable, will be honored as soon as feasibly possible and within legally required timeframes.

Children's Privacy

Our website is intended for a general audience and is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can take appropriate steps to delete the information.

Health Information Clarification

Pharma Solutions 4Rx-2 provides educational content about pharmaceuticals and health-related topics. We are not a covered entity or business associate under HIPAA, and the information you provide to us is not protected health information under HIPAA. Do not submit sensitive health information unless it is necessary for your inquiry; if you do, we will use it only to respond and will not use it for advertising or to infer characteristics.

Changes to This Notice

We may update this notice from time to time to reflect changes in our practices or legal requirements. Material changes will be indicated by updating the effective date below. Your continued use of the website after an update constitutes acceptance of the revised notice.

Contact Information

Keith Ward, Pharma Solutions 4Rx-2

160 Spear Street, San Francisco, CA 94105, United States