Privacy Policy

1. Scope and Acceptance

This Privacy Policy (“Policy”) describes how MatticRX (“MatticRX,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit www.matticrx.com; create or use an account; communicate with us; purchase or receive products or services; or use websites, applications, patient portals, and other services that link to this Policy (collectively, the “Services”).

By using the Services or providing information to us, you acknowledge the practices described in this Policy. If you use the Services on behalf of another person, you represent that you are authorized to act for that person.

This Policy does not replace a healthcare provider’s Notice of Privacy Practices. The third-party Medical Group supporting the Services is an independent healthcare affiliate and is responsible for its own Notice of Privacy Practices and for providing that notice to patients as required by law. Individual Providers, pharmacies, and laboratories may also provide separate privacy notices. When MatticRX handles protected health information for a HIPAA-regulated entity, that information is governed by the applicable Notice of Privacy Practices and our legal obligations to that entity.

2. Information We Collect

Information you provide.

We may collect your name, date of birth, postal and email addresses, telephone number, account credentials, identity-verification information, demographic details, payment and transaction information, electronic signatures, communications, customer-support requests, preferences, and any other information you submit.

Health and care information.

To facilitate evaluation and treatment, we and the healthcare entities supporting the Services may collect medical history, symptoms, diagnoses, medications, allergies, treatment preferences, questionnaire responses, photographs or videos submitted for care, Provider communications, prescriptions, laboratory orders and results, treatment plans, adverse-event information, and related health information.

Order and fulfillment information.

We may collect information about consultations, subscriptions, purchases, prescriptions, pharmacy and laboratory orders, shipping, delivery status, replacements, refunds, and customer-service activity.

Device and usage information.

When you use the Services, we may automatically receive IP address, browser and device type, operating system, device identifiers, referring and exit pages, pages and features viewed, links clicked, approximate location derived from IP address, dates and times of access, session activity, and diagnostic or security information.

Cookies, analytics, and advertising technologies.

On public portions of the Services, we and our service providers may use cookies, pixels, software development kits, local storage, log files, and similar tools, including Meta Pixel and Google advertising and analytics services. These tools help us remember preferences, protect accounts, understand website use, measure campaign performance, and advertise MatticRX. We do not place or permit advertising technologies in authenticated patient areas, and we do not permit them to access patient–Provider communications, treatment information, or medical information submitted through intake or clinical forms.

3. Sources of Information

We collect information directly from you; automatically from your browser or device; from the Medical Group and Providers; and from pharmacies, laboratories, payment processors, identity-verification providers, fulfillment and shipping partners, customer-support systems, analytics providers, communications vendors, and other service providers involved in the Services. We may also receive information from a person legally authorized to act for you or from public or lawful commercial sources used for fraud prevention, identity verification, or compliance.

4. How We Use Information

We may use information to:

• create, authenticate, administer, and secure accounts;
• verify identity, age, eligibility, and location;
• connect you with the Medical Group and Providers and facilitate telehealth services;
• support clinical intake, prescriptions, laboratory work, pharmacy fulfillment, shipping, and treatment-related communications;
• process payments, subscriptions, cancellations, replacements, and verified refunds;
• provide customer support and respond to requests;
• send operational messages about care, appointments, orders, billing, security, and delivery;
• send marketing communications when permitted by law and honor communication preferences;
• operate, personalize, troubleshoot, analyze, and improve the Services;
• protect patients, Providers, MatticRX, and others; detect fraud, misuse, security incidents, or unlawful activity; and
• comply with legal, regulatory, licensing, recordkeeping, reporting, and enforcement obligations.

5. How We Disclose Information

We may disclose information as reasonably necessary to provide and operate the Services, subject to applicable law:

• to the Medical Group and Providers for evaluation, treatment, clinical communication, and recordkeeping;
• to pharmacies, laboratories, fulfillment partners, and shipping carriers for prescriptions, testing, orders, and delivery;
• to payment processors, identity-verification providers, hosting and security vendors, customer-support platforms, communications providers, analytics providers, and other processors acting for us;
• to affiliates and professional advisers for lawful business, accounting, audit, insurance, compliance, and legal purposes;
• when you direct or authorize the disclosure;
• in connection with a corporate transaction described in Section 15; and
• when required or permitted by law, legal process, licensing requirements, safety needs, fraud prevention, or protection of legal rights.

6. Protected Health Information

HIPAA applies only to covered entities, business associates, and protected health information within HIPAA’s scope. It does not automatically apply to every health-related service or every item of information collected by MatticRX. MatticRX may act as a business associate when performing services for a HIPAA-regulated Medical Group or Provider and will handle protected health information in accordance with the applicable agreements and law.

The independent Medical Group and its Providers are responsible for their Notice of Privacy Practices, which explains permitted uses and disclosures of protected health information and patient rights. MatticRX does not publish or adopt that separate notice as its own. If this Policy conflicts with an applicable Notice of Privacy Practices regarding protected health information, the Notice of Privacy Practices controls for that information.

MatticRX does not sell protected health information. We do not use medical information submitted for diagnosis or treatment for targeted advertising. De-identified information that cannot reasonably identify an individual is not protected health information and may be used for lawful analytics, research, quality improvement, and business purposes.

7. Consumer Health Data Notice

Certain state consumer-health laws may apply to health information that is not regulated by HIPAA. “Consumer Health Data” generally means personal information that identifies or can reasonably be linked to a consumer and identifies the consumer’s past, present, or future physical or mental health status, care, treatment, diagnosis, medication, reproductive or sexual health, biometric information used for identification, precise location associated with healthcare, or similar health-related activity.

The Consumer Health Data we may collect includes the health, care, identity, demographic, communication, order, prescription, laboratory, and device information described in Section 2, to the extent it qualifies under applicable law. We collect it from the sources in Section 3 and use it for the purposes in Section 4, including to facilitate requested care, fulfill orders, provide support, maintain security, comply with law, and improve the Services.

We may disclose Consumer Health Data to the Medical Group, Providers, pharmacies, laboratories, and processors necessary to provide requested Services, and to other recipients when you direct or authorize us or when law permits or requires disclosure. We do not sell Consumer Health Data, and we do not use treatment information for targeted advertising. We will obtain consent or authorization when applicable law requires it for a collection, use, or disclosure not necessary to provide a product or service you requested.

Depending on your state, you may have rights to confirm whether we collect or share Consumer Health Data; access it; obtain a list of certain third parties; withdraw consent; and request deletion. You may exercise these rights using the process in Section 12. If we deny a request, residents of states providing an appeal right may appeal by replying to our decision or contacting us with “Privacy Appeal” in the subject line.

8. Payments

Payments are processed by third-party payment processors. MatticRX may receive transaction identifiers, payment status, billing address, and limited payment-card details, but the processor may collect and retain full payment credentials under its own privacy policy and security obligations.

9. Communications

We may use your contact information for account, care, appointment, prescription, laboratory, billing, order, security, and shipping communications. By providing contact information, you authorize these operational communications from MatticRX and entities assisting with your Services, as permitted by law.

When you provide the required consent during checkout, we may send marketing communications in accordance with the checkout disclosure and applicable law. You can unsubscribe from marketing email using the link in the message and can reply STOP to eligible text messages. A marketing opt-out does not prevent non-marketing communications necessary to provide the Services, respond to you, protect an account, or comply with law.

10. Cookies, Analytics, and Privacy Signals

You may control cookies through browser or device settings, but disabling necessary cookies may limit the Services. Meta, Google, and other advertising or analytics providers may receive identifiers and activity from public website pages and process that information under their own privacy policies. They do not receive treatment information from MatticRX for targeted advertising. Some browsers transmit “Do Not Track” signals, and there is no uniform industry standard for responding to them. Where required by applicable law and supported by our systems, we will process recognized opt-out preference signals, such as Global Privacy Control, as requests to opt out of qualifying sharing or targeted advertising for the associated browser or device.

11. Data Retention and Security

We retain information for as long as reasonably necessary for the purposes described in this Policy, including providing Services, maintaining medical and business records, completing transactions, resolving disputes, enforcing agreements, meeting tax and accounting obligations, preventing fraud, and complying with legal retention requirements. Retention periods vary by information type, purpose, legal obligation, and relationship with healthcare entities.

We use administrative, technical, and physical safeguards designed to protect information. No security measure or transmission method is completely secure, and we cannot guarantee absolute security. You are responsible for protecting account credentials and notifying us promptly of suspected unauthorized access.

If a reportable breach occurs, MatticRX and the applicable healthcare entities will provide notices required by HIPAA, the Federal Trade Commission’s Health Breach Notification Rule, state law, or other applicable requirements.

12. Your Privacy Choices and Rights

You may update certain account information through the Services or contact us to request access, correction, deletion, or a copy of personal information, or to exercise another right available under applicable law. We may need to verify your identity and authority before acting. Certain information may be retained or excluded from a request when permitted or required by law, including medical records maintained by a Provider, transaction records, security records, and information needed to complete a requested service.

To submit a privacy request, email support@mattichealth.com, call 925-501-5814, or write to the address in Section 17. Describe the right you wish to exercise and the state where you reside. An authorized agent may submit a request when legally permitted, but we may require proof of authorization and verification of the consumer’s identity.

We will not unlawfully discriminate against you for exercising a privacy right. If applicable law allows an appeal and we deny your request, you may appeal by contacting us with “Privacy Appeal” in the subject line. You may also contact the attorney general or privacy regulator in your state.

For protected health information maintained by a Medical Group, Provider, pharmacy, or laboratory, submit your request directly to that entity using the contact information in its Notice of Privacy Practices.

13. Children and Minors

The Services are intended for adults age 18 and older and are not directed to children. We do not knowingly collect personal information directly from a child under 13 through the Services. If you believe a child has provided information to us, contact us so we can review and take appropriate action. This provision does not alter medical-record retention duties or the rights of parents, guardians, or minors under applicable healthcare law.

14. Third-Party Services

The Services may link to or integrate with third-party websites, portals, pharmacies, laboratories, payment services, identity-verification tools, and delivery services. Their privacy practices are governed by their own notices. We encourage you to review those notices before providing information directly to a third party.

15. Business Transfers and Legal Requirements

Information may be transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, subject to applicable health-privacy restrictions. We may preserve or disclose information when we reasonably believe it is necessary to comply with law or legal process; protect the rights, safety, or security of patients, Providers, MatticRX, or others; investigate fraud or misuse; or enforce agreements.

16. Changes to This Policy

We may update this Policy to reflect changes in the Services, our practices, or law. We will post the revised Policy and update the “Last Updated” date. If a change is material, we will provide additional notice or request consent when required by law.

17. Contact Us

MatticRX

1309 Coffeen Avenue, Suite 1200
Sheridan, Wyoming 82801

Website: www.matticrx.com
Email: support@mattichealth.com
Telephone: 925-501-5814