Privacy Policy for OTPharmacy.com

Last Updated: October 5, 2026

1. Introduction

Welcome to OTPharmacy.com (“we,” “us,” “our,” or “the Site”). Your privacy is of the utmost importance to us. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal and health information when you visit or use OTPharmacy.com, including our website, mobile application, and all related services (collectively, the “Services”).

Because we operate as a licensed online pharmacy offering both Over-the-Counter (OTC) medications and prescription drugs, we handle sensitive medical information. We are committed to protecting that information in accordance with applicable laws, including:

  • HIPAA (Health Insurance Portability and Accountability Act) – where applicable
  • GDPR (General Data Protection Regulation) – for users in the EU/EEA
  • CCPA/CPRA (California Consumer Privacy Act / California Privacy Rights Act)
  • Other applicable federal, state, and international privacy laws

By using OTPharmacy.com, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our Services.

2. Information We Collect

We collect several categories of information to provide and improve our Services.

2.1 Personal Identification Information

  • Full name
  • Date of birth
  • Gender
  • Email address
  • Phone number
  • Billing and shipping address
  • Government-issued ID (for prescription verification, where required)

2.2 Health and Medical Information

  • Prescriptions and prescription history
  • Medical conditions and treatment information
  • Medication allergies and reactions
  • Physician and healthcare provider details
  • Insurance information
  • Pharmacist consultation records

2.3 Payment and Financial Information

  • processed via secure third-party gateways
  • Billing address
  • Insurance claim data
  • Transaction history

2.4 Technical and Usage Information

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited, time spent, and clickstream data
  • Cookies and similar tracking technologies
  • Referring URLs

2.5 Communication Information

  • Emails, chats, and phone call recordings with customer support
  • Feedback, reviews, and survey responses

3. How We Collect Information

We collect information through:

  • Direct Interactions: When you create an account, place an order, upload a prescription, or contact us.
  • Automated Technologies: Cookies, web beacons, pixels, and analytics tools.
  • Third Parties: Healthcare providers, insurance companies, payment processors, and verification services.
  • Public Sources: Where permitted by law.

4. How We Use Your Information

We use your information for the following purposes:

4.1 To Provide Our Services

  • Process and fulfill OTC and prescription orders
  • Verify prescriptions with licensed pharmacists and prescribing physicians
  • Deliver medications to your address
  • Manage your account and order history
  • Provide pharmacist consultations

4.2 To Ensure Safety and Compliance

  • Prevent fraud, forgery, and misuse of prescriptions
  • Comply with legal, regulatory, and licensing requirements
  • Verify your identity where required by law

4.3 To Communicate With You

  • Order confirmations, shipping updates, and refill reminders
  • Responses to inquiries and customer support
  • Important notices about policy changes

4.4 To Improve Our Services

  • Analyze usage trends and optimize user experience
  • Develop new features and products
  • Conduct internal research and quality assurance

4.5 Marketing (With Consent)

  • Promotional emails, newsletters, and offers
  • You may opt out at any time via the unsubscribe link or account settings.

5. Legal Basis for Processing (GDPR Users)

If you are located in the EU/EEA, we process your personal data under the following legal bases:

  • Consent: For marketing and non-essential cookies.
  • Contractual Necessity: To fulfill orders and provide Services.
  • Legal Obligation: To comply with pharmaceutical and healthcare regulations.
  • Vital Interests: To protect your health in emergencies.
  • Legitimate Interests: To improve our Services and prevent fraud.

6. How We Share Your Information

We do NOT sell your personal or health information. We may share your information only in the following circumstances:

6.1 With Healthcare Providers

  • Prescribing physicians and licensed pharmacists for prescription verification and consultation.

6.2 With Service Providers

  • Payment processors, shipping carriers, IT providers, and analytics partners — all bound by strict confidentiality agreements.

6.3 With Insurance Companies

  • To process claims and verify coverage (only with your consent).

6.4 For Legal and Regulatory Compliance

  • To comply with court orders, subpoenas, or lawful requests from authorities.
  • To report suspected fraud, abuse, or illegal activity.

6.5 Business Transfers

  • In the event of a merger, acquisition, or sale of assets, your information may be transferred. You will be notified of any such change.

6.6 With Your Consent

  • For any other purpose, only with your explicit permission.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Keep you logged in
  • Remember your preferences
  • Analyze site traffic and performance
  • Deliver relevant advertising

Types of Cookies We Use:

  • Essential Cookies: Required for the Site to function.
  • Performance Cookies: Help us understand how users interact with the Site.
  • Functional Cookies: Remember your settings and preferences.
  • Marketing Cookies: Used for targeted advertising (with consent).

Managing Cookies: You can control or disable cookies through your browser settings. Note that disabling essential cookies may affect Site functionality.

8. Data Retention

We retain your personal and health information only as long as necessary to:

  • Fulfill the purposes outlined in this Policy
  • Comply with legal, regulatory, and pharmaceutical record-keeping requirements (typically 5–10 years, depending on jurisdiction)
  • Resolve disputes and enforce agreements

After the retention period, your data is securely deleted or anonymized.

9. Data Security

We implement industry-standard administrative, technical, and physical safeguards to protect your information, including:

  • 256-bit SSL/TLS encryption for all data transmission
  • HIPAA-compliant storage and access controls
  • Role-based access — only authorized personnel can access medical data
  • Regular security audits and penetration testing
  • Two-factor authentication for account access
  • Secure, PCI-DSS compliant payment processing

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

In the event of a data breach, we will notify affected users and relevant authorities as required by law.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

10.1 General Rights

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your data (subject to legal retention requirements).
  • Restriction: Request that we limit processing of your data.
  • Portability: Request your data in a portable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw Consent: Withdraw consent at any time (without affecting prior lawful processing).

10.2 California Residents (CCPA/CPRA)

  • Right to know what personal information is collected, used, or shared.
  • Right to delete personal information.
  • Right to opt out of the “sale” or “sharing” of personal information (we do not sell data).
  • Right to non-discrimination for exercising your rights.

10.3 EU/EEA Residents (GDPR)

  • Right to lodge a complaint with your local supervisory authority.
  • Right to data portability and erasure (“right to be forgotten”).

To exercise any of these rights, contact us at privacy@otpharmacy.com. We will respond within 30 days (or as required by law).

11. Children’s Privacy

Our Services are not intended for individuals under 18 years of age.

  • We do not knowingly collect personal information from children.
  • Minors may only use our Services under the direct supervision of a parent or legal guardian.
  • If we learn that we have collected data from a child without verification of parental consent, we will delete it promptly.

If you believe a child has provided us with personal information, contact us at privacy@otpharmacy.com.

12. International Data Transfers

Your information may be transferred to and processed in countries outside your own, including the United States, where our servers are located.

  • We ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses for EU data transfers).
  • By using our Services, you consent to such transfers, subject to applicable law.

13. Third-Party Links and Services

OTPharmacy.com may contain links to third-party websites or integrate third-party services (e.g., payment gateways, telehealth platforms).

  • We are not responsible for the privacy practices of these third parties.
  • We encourage you to review their privacy policies before providing any information.

14. Do Not Track Signals

Some browsers offer a “Do Not Track” (DNT) feature. Because there is no industry consensus on how to interpret DNT signals, we do not currently respond to DNT requests. You may manage tracking via cookie settings.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

  • Our practices
  • Legal or regulatory requirements
  • Technology and security standards

We will notify you of material changes via email or a prominent notice on the Site. The “Last Updated” date at the top indicates when the Policy was last revised.

Continued use of our Services after changes constitutes acceptance.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

OTPharmacy.com — Privacy Office
📧 Email: privacy@otpharmacy.com
🔒 Data Protection Officer (DPO): dpo@otpharmacy.com

For HIPAA-related inquiries, please contact: compliance@otpharmacy.com

17. Summary of Key Points

TopicSummary
Data We CollectPersonal, health, payment, and technical information
Why We Collect ItTo fulfill orders, verify prescriptions, and improve Services
Do We Sell Your Data?No
Who We Share WithPharmacists, doctors, insurers, and service providers
Your RightsAccess, correct, delete, and port your data
SecuritySSL encryption, HIPAA compliance, and access controls
ChildrenServices not intended for users under 18
Contactprivacy@otpharmacy.com

By using OTPharmacy.com, you acknowledge that you have read, understood, and agreed to this Privacy Policy.