Consumer Health Data Privacy Policy | The RX Index

This Consumer Health Data Privacy Policy explains how The RX Index collects, uses, shares, and protects consumer health data.

The RX Index is a pricing intelligence and comparison resource for GLP-1 telehealth providers. We are not a medical provider, pharmacy, insurer, or prescribing clinician. This policy applies to consumer health data we collect through The RX Index, including the Find My Path quiz, contact forms, email interactions, and consent-based website analytics.

This policy supplements our main Privacy Policy. If there is a conflict between this policy and our main Privacy Policy regarding consumer health data, this Consumer Health Data Privacy Policy controls.

1. What consumer health data means

“Consumer health data” means personal information that is linked or reasonably linkable to a consumer and that identifies or could be used to infer the consumer's past, present, or future physical or mental health status.

On The RX Index, consumer health data may include quiz answers, health-related preferences, condition selections, medication-interest signals, body-composition inputs, and browsing inferences that could suggest interest in a health condition, treatment category, or provider pathway.

An email address, IP address, cookie ID, or device identifier is not health data by itself. However, when that information is linked to health-related quiz answers, guide views, provider recommendations, or other health-related activity, we treat it as consumer health data.

2. Categories of consumer health data we collect

We collect only the consumer health data needed to provide the site, operate the Find My Path quiz, respond to requests, improve our content, and maintain security.

The categories we may collect are:

Quiz answers and matching inputs, including medication preference, insurance or cash-pay preference, provider-route preference, and other answers you submit through the Find My Path quiz.
Health markers and condition selections, including selections related to Type 2 diabetes, prediabetes, PCOS, sleep apnea, pregnancy, breastfeeding, trying to conceive, MTC/MEN2 history, pancreatitis, gallbladder issues, allergies, insulin use, current GLP-1 use, or other clinician-relevant factors you choose to disclose.
Body-composition or eligibility inputs, including height, weight, BMI-related inputs, or similar information you enter into a quiz, calculator, or form.
Contact information linked to health-related activity, including the email address you provide to receive your quiz result, saved route, checklist, or response from us.
Provider-route and recommendation data, including the provider category, medication pathway, or route recommendation generated from your quiz answers.
Health-related browsing inferences, including the health-condition guides, medication guides, provider pages, or quiz pages you visit, but only when this information is collected through analytics, cookies, pixels, session-replay tools, or similar technologies with your consent.
Communications you send us, including health-related details you voluntarily include when emailing us or submitting a form.

We do not intentionally collect precise geolocation data for the purpose of identifying or tracking visits to health care facilities.

3. Sources of consumer health data

We collect consumer health data from the following sources:

You, when you answer quiz questions, submit a form, email us, use a calculator, or otherwise provide information directly to The RX Index.
Your use of the website, when you view health-related pages, interact with the quiz, click buttons, or use site features.
Cookies and similar technologies, but only where required consent has been obtained. These may include analytics or session-replay tools that help us understand how users interact with our site.
Inferences we create from your activity on The RX Index, such as a likely interest in a GLP-1 medication, provider type, payment route, or health-related guide based on pages viewed or quiz answers submitted.

We do not buy consumer health data from data brokers.

4. How we use consumer health data

We use consumer health data for the following purposes:

To operate the Find My Path quiz and generate a route recommendation based on the answers you provide.
To send you your quiz result, saved route, checklist, or related information when you provide your email address.
To respond to your requests, questions, privacy requests, or support inquiries.
To improve the quiz, matching logic, provider-route explanations, and health-related content on The RX Index.
To maintain aggregate or de-identified analytics about which guides, tools, and quiz paths are useful.
To debug, secure, monitor, and protect the website, database, forms, and email systems.
To comply with applicable law, legal process, or enforceable governmental requests.

We do not use consumer health data to target advertising to you.

We do not sell consumer health data.

We do not use consumer health data to make automated decisions that produce legal or similarly significant effects.

5. How consumer health data is processed

Consumer health data may be collected through forms, quiz flows, cookies, analytics tools, session-replay tools, email tools, and website logs.

When you submit the Find My Path quiz, your answers may be stored in our quiz lead database and associated with the email address you provide. We may use that information to generate and deliver your route recommendation.

When you consent to analytics or session-replay cookies, website interaction data may be processed to understand page performance, improve usability, diagnose errors, and improve the clarity of our content and quiz experience.

When we use service providers, they process consumer health data only to provide services to us, such as hosting, email delivery, analytics, form handling, database storage, security, and site operations.

6. Categories of consumer health data we share

We may share the following categories of consumer health data only as described in this policy:

Quiz answers and matching inputs, when necessary for service providers to operate, store, process, or deliver your quiz result.
Contact information linked to a quiz result or health-related request, when necessary for email delivery, form processing, or responding to your request.
Website interaction and analytics data, when collected with your consent and processed by analytics, cookie, or session-replay service providers.
Technical and security data, such as IP address, device information, browser information, logs, and similar data, when necessary for hosting, security, fraud prevention, debugging, or site operations.

We do not share your quiz answers with affiliate partners when you click a recommended provider link.

When you click an affiliate or provider link, you leave The RX Index and go to that provider's website. The provider may receive referral information, such as the fact that you came from The RX Index, through standard link tracking or referral parameters. Any information you provide directly to that provider is governed by that provider's own privacy policy.

7. Third parties and affiliates with whom we share consumer health data

We may share consumer health data with the following categories of third parties:

Hosting and cloud infrastructure providers that store or process our website, database, and related systems.
Email service providers that help us send quiz results, saved routes, checklists, or responses to your inquiries.
Analytics and session-replay providers that help us understand site usage, improve user experience, and diagnose technical issues, but only where required consent has been obtained.
Form, database, and automation providers that help us receive, store, organize, and process quiz submissions, contact requests, and privacy requests.
Security, debugging, and fraud-prevention providers that help us protect the website and related systems.
Professional advisers, legal service providers, or compliance support providers when needed to respond to legal, compliance, security, or rights requests.
Government authorities, courts, regulators, or other parties when disclosure is required by law, court order, subpoena, search warrant, or other lawful process.

Specific affiliates with whom we share consumer health data: none.

We do not share consumer health data with advertisers or data brokers.

8. Third-party collection over time and across websites

If you consent to analytics, cookies, pixels, session-replay tools, or similar technologies, third-party service providers may collect information about your activity on The RX Index over time and across pages of our website.

Some third-party providers may also collect information across different websites or online services, depending on their own technologies and privacy practices.

You can withdraw cookie consent or change cookie preferences at any time by selecting “Cookie Settings” in the footer of our website.

9. Consent and withdrawal of consent

Where consent is required, we ask for your affirmative consent before collecting or sharing consumer health data for that purpose.

You may withdraw consent at any time.

For the Find My Path quiz or email-linked quiz data, email privacy@therxindex.com with the subject line “Withdraw Consumer Health Data Consent.”
For cookies, analytics, pixels, or session-replay tools, select “Cookie Settings” in the footer of our website and update your preferences.

Withdrawing consent does not affect processing that occurred before withdrawal, but we will stop future collection or sharing that depends on your consent after we process your request.

10. Your consumer health data rights

Depending on your state and applicable law, you may have the right to:

Confirm whether we are collecting, sharing, or selling consumer health data about you.
Access the consumer health data we have about you.
Receive a list of third parties and affiliates with whom we have shared or sold your consumer health data, if applicable.
Withdraw consent for future collection or sharing of consumer health data.
Request deletion of consumer health data we maintain about you.
Request changes or corrections to consumer health data you believe is inaccurate.
Appeal a denial of a consumer health data request.

We do not sell consumer health data. If that ever changes, we will not sell consumer health data without a valid authorization where required by law.

11. How to exercise your rights

To exercise your rights, email privacy@therxindex.com with the subject line “Consumer Health Data Request.”

Please include the email address you used on The RX Index and describe the request you are making.

We will use reasonable steps to authenticate your request before providing, deleting, changing, or disclosing consumer health data.

We will respond within 45 days of receiving your request. If reasonably necessary, we may extend the response period once by an additional 45 days. If we need an extension, we will tell you within the first 45 days.

We will not charge a fee for responding to your request unless permitted by applicable law.

12. Appeals

If we deny your request, you may appeal by emailing legal@therxindex.com with the subject line “Consumer Health Data Appeal.”

Please include the email address you used on The RX Index, the original request, and why you believe the decision should be reconsidered.

We will respond to your appeal within 45 days.

If your appeal is denied, we will explain the reason for the denial and provide information about how you may submit a complaint to the appropriate regulator where required by applicable law.

13. Deletion

You may request deletion of consumer health data we maintain about you by emailing privacy@therxindex.com with the subject line “Delete Consumer Health Data.”

After we authenticate your request, we will delete consumer health data as required by applicable law.

Deletion may not apply to information we are required or permitted to keep for legal, security, fraud-prevention, compliance, debugging, or recordkeeping purposes.

We may retain aggregate or de-identified information that does not identify you and is not reasonably linkable to you.

14. Data retention

We keep consumer health data only as long as reasonably necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law.

Quiz lead records are retained only as long as needed to provide the requested quiz result, respond to user requests, operate the site, maintain compliance records, improve the matching experience, and protect the security and integrity of our systems.

You may request deletion at any time by emailing privacy@therxindex.com.

15. Security

We use administrative, technical, and physical safeguards designed to protect consumer health data against unauthorized access, disclosure, alteration, and destruction.

These safeguards include access controls, limited internal access, encryption in transit, encryption at rest where supported by our systems, secure hosting practices, and service-provider restrictions.

No website, database, or electronic transmission is completely secure. If we learn of a security incident involving consumer health data, we will respond as required by applicable law.

16. Material changes to this policy

If we make material changes to how we collect, use, share, or process consumer health data, we will update this policy and the “Last updated” date above.

Where required by law, we will notify affected consumers and obtain consent before applying material changes to consumer health data we already maintain.

17. Contact

The RX Index

Privacy requests: privacy@therxindex.com
Appeals: legal@therxindex.com