Privacy Policy

Who controls personal information

The intended operator is PharmaVia Rx Ltd. The final policy must identify the legal controller or controllers for the public site, individual cases, employer programs, and contact services, including any distinct roles of licensed or contracted partners.

Public website

The static public site does not contain a public intake form and should not collect prescriptions, diagnoses, identity documents, payment information, or other sensitive case evidence. Standard server and security logs may be processed by the approved hosting provider and must be documented in the final policy.

General email and contact forms

General email and the optional LiveAgent contact form are limited to non-clinical questions. Users are instructed not to include sensitive information. LiveAgent contact tools remain subject to consent, vendor, data-location, retention, transfer, access, security, DPA, and BAA applicability reviews.

Portal and case records

The planned MVP portal supports credential creation, case-entry tickets, and correspondence. Before activation, the final policy must explain account data, ticket content, authentication, purposes, legal bases, recipients, retention, rights, transfers, safeguards, and whether LiveAgent is permitted to receive any health information.

Purposes and lawful bases

Potential purposes include providing requested services, account and case administration, customer communications, security, fraud prevention, legal and regulatory compliance, quality and complaint handling, and employer-program administration. The approved lawful basis for each purpose and jurisdiction must be documented before collection.

Recipients and international transfers

Potential recipients may include hosting, customer-contact, security, licensed supply-chain, fulfillment, courier, payment, professional-adviser, employer-plan, and government recipients as appropriate to an approved case. Each category and transfer mechanism must be verified and disclosed.

Retention and security

Final schedules must distinguish public logs, marketing or cookie preferences, support tickets, case evidence, quality records, complaints, financial records, and regulated records. Controls should include least privilege, strong authentication, encryption where appropriate, logging, review, incident response, and secure disposal.

Rights and choices

The final policy must explain applicable access, correction, deletion, restriction, objection, portability, consent withdrawal, complaint, appeal, and non-discrimination rights, together with identity-verification and response procedures.

Cookies, local storage, and the optional contact form

The public site is designed to work without analytics, advertising pixels, personalization, or retargeting cookies. The LiveAgent contact form remains optional and loads only after an affirmative choice.

Contact-form preference

A local browser preference may record whether the optional form was accepted or declined so the site can honor that choice. The production notice must list the exact cookies or storage technologies, providers, purposes, and durations after the LiveAgent configuration is approved.

Necessary technology

Approved hosting and security infrastructure may use technology that is necessary to deliver or protect the site. The final inventory and applicable legal basis must be verified with each provider before launch.

Changing a preference

The production release must provide a persistent settings control for changing or withdrawing the optional contact-form preference and performing any required vendor-side withdrawal. Clearing browser site data will also remove a locally stored preference.

General inquiries are not a sensitive-data channel

Choosing the optional LiveAgent contact form does not make it an approved clinical or regulated channel. Do not share prescriptions, diagnoses, identity documents, payment details, or regulated evidence through this general contact tool.

Contact

Privacy questions may be sent to info@pharmaviarx.com without including sensitive case information until a dedicated verified privacy channel is published.