Last modified: July 13August 4, 2023
Coxaroc, LLC, doing business as “Coxaroc” (“Coxaroc”,** the "Company", "we", “our” or “us”) respects your privacy and is committed to protecting it through our compliance with this policy. This policy explains:
This policy DOES NOT apply to information that:
We collect information from and about users of our Website:
When you access our Website or register to use our services, we may ask you to provide information by which you may be personally identified, traced, or linked to, such as your name, date of birth, email address, phone number, physical address, mailing address, a user ID and password, a government or other picture ID, or other personally identifiable information (PII) (hereinafter "personal information").
This information includes:
The email address you provide will serve as our primary means of communication concerning your account, as well as your medical information and prescriptions. By providing us with your email address, you acknowledge, understand, and agree that this specific email address will be utilized for managing your account and all correspondences related to your medical information and prescriptions. Please note that we cannot be held responsible for any unauthorized access to your email account by a third party, regardless of whether or not you authorized such access, and any resulting disclosures that may occur.
When you access our Website we may use technology to automatically collect:
If you do not want us to collect this information do not access our Website.
You will be required to complete a medical profile where you will communicate health-related information to Coxaroc, which we will pass through to the healthcare provider licensed to practice medicine in your jurisdiction, along with your personal information, such as your registration information and picture ID. The healthcare providers that currently provide healthcare services via the Coxaroc platform consist of the following provider-owned businesses: ______________________MD Integrations (each a "Provider"). Coxaroc is not responsible for any Provider's use of your personal information. We encourage you to visit the privacy notice for the Providers available here.
We also provide the technology platform pursuant to which you provide additional personal information directly to your Provider, via real-time chat and telephone, live 2-way video and audio, and secure messaging (including email and text messages). We forward the personal information you provide directly to us to your Provider via "store and forward" technology, also known as "asynchronous" technology, which involves the electronic transmission to your Provider of the health information you provide us.
If your Provider approves a prescription, Coxaroc facilitates the arrangement and delivery of that prescription to you through __________________,Precision Pharmacy or another pharmacy of your preference (each a "Pharmacy"). Coxaroc is not responsible for any Pharmacy's use of your personal information. We encourage you to visit the relevant privacy notice for the Pharmacy, which can be found here.
Information provided through the Services, whether shared with a Provider or a Pharmacy or not, is not considered "protected health information" and is not governed by the Health Insurance Portability and Accountability Act of 1996 and its related regulations and amendments (collectively referred to as "HIPAA"). It is important to note that HIPAA may not necessarily apply to an entity or individual solely based on the involvement of health information, and it does not apply to your interactions or communications with Coxaroc. However, any medical or health information you provide that is subject to specific protections under relevant state or federal laws will be used and disclosed in accordance with those applicable laws.
Coxaroc might also obtain Personal Information pertaining to you through third-party sources. These sources include social media platforms that offer lead information, as well as interest-based advertising providers and data analytics providers who may supply us with your Personal Information. Moreover, we gather additional Personal Information about you from the Providers and Pharmacies involved in your diagnosis and treatment.
We maintain an active presence on various social media platforms, such as Facebook, Twitter, Snapchat, Instagram, and similar platforms (referred to as "Social Media"). Please be aware that any content you post on Social Media will not be regarded as confidential. It is possible for us to share or repost on our Site and social media pages any comments or content that you post or share on Social Media platforms. Your interactions on Social Media are subject to the privacy policies and terms set forth by the respective providers who own and operate those platforms, rather than being governed by this Policy. We strongly recommend reviewing the privacy policies and terms of those platforms.
When you access our Website, we may use technology to automatically collect:
If you do not want us to collect this information do not access our Website or submit the optional “Get Started” form.
There is no accepted standard for how a site should respond to this signal, and we do not take any action in response to this signal. Instead, in addition to publicly available third-party tools Company is in its sole discretion to allow in the future, we offer you the choices described in this policy to manage the collection and use of information about you.
The technologies we may use for automatic information collection may include:
Please note that certain portions of this data may be considered Personal Information.
We use information that we collect about you or that you provide to us, including any Personal Information, to:
To maintain, improve, and provide our services to you we may use your data in multiple ways. This includes to:
Currently, when you use our Website, we do not disclose your information to non-Coxaroc members handling your file. However, by using our Website you understand that Coxaroc is in its sole discretion to, in the future, to disclose aggregated information about our users, and information that does not identify any individual or device, without restriction. In addition, we may disclose Personal Information that we collect, or you provide:
We do our best to provide you with choices regarding the personal information you provide to us. This Section describes the different mechanisms we provide for you to control certain uses and disclosures of over your information.
We do not control third parties' collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative ("NAI") on the NAI's website.
California, Colorado, Connecticut, Maine, Nevada, Utah, and Virginia residents may have additional personal information rights and choices. Please see Your State Privacy Rights Section below for more information.
You can stop receiving marketing emails from Coxaroc by clicking the “unsubscribe” link included at the bottom of a Coxaroc marketing email. You cannot opt out of transactional emails we need to send you relating to normal business operations (for example, updates regarding your orders and notifying you of a message from your Provider or Pharmacy). To opt out of all emails from Coxaroc, you may email firstname.lastname@example.org and cancel your Coxaroc account.
Your privacy is important to us, and we use physical, technical, and administrative safeguards designed to preserve the security of your personal information and protect it from unauthorized use or disclosure. Data collected is securely sent and stored to our password-protected email address, using industry-standard protections in an effort to prevent access from outside intruders. Access to data is limited to those individuals who need it in order to perform their business function and to those directly assisting you. Although we use appropriate security measures once we have received your personal information, the transmission of data over the internet (including by email) is never completely secure.
Although we do not currently record, store, or request your health information, by using our Website, you agree that Company may, in its sole discretion, to record, request, and/or store such information in the future. Our website, systems, and procedures will comply with the requirements of the Health Information Technology for Economic and Clinical Health Act (the “HITECH Act”) and implement regulations with respect to notifications in the event of a breach of unsecured personal health information (“PHI”). As a result, if the Company becomes aware of a potential breach of unsecured PHI, the Company shall direct and undertake an investigation and risk assessment to determine if a breach of unsecured PHI occurred and the scope of such breach. There is a reportable breach only if all of the following have occurred, as determined by the Company:
You can review, update, and change your personal information by sending us an email at email@example.com to request access to, correct, or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.
Although we do not currently record, store, or request your health information, by using our Website, you agree that Company may, in its sole discretion, record, request, and/or store such information in the future. Federal consumer privacy laws specific to the health sector may provide consumers with additional rights regarding our use of their personal information.
For more information, see https://www.hhs.gov/hipaa/for-individuals/notice-privacy-practices/index.html.
Your cooperation is of utmost importance in safeguarding your Personal Information. Please exercise caution when selecting your account password, as anyone with access to it may be able to assume your online identity, access and modify your information (including treatment details), communicate with Coxaroc and your healthcare provider via the Website, and take other actions. It is your responsibility to prevent unauthorized disclosure of your password and to promptly change it if you suspect its security has been compromised. Take necessary measures to protect against unauthorized access, such as logging out after using a shared computer, selecting a strong password, and keeping your login credentials confidential. If you believe that someone has gained access to your account or if you suspect a breach of account security, please contact us immediately using the contact information provided below.
Furthermore, you will periodically receive email communications from Coxaroc, which may contain information related to your treatment or account details. It is crucial that you safeguard your designated email address and restrict access to it.
State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information.
California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our App that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to firstname.lastname@example.org.
The California Consumer Privacy Act (“CCPA”) requires us to provide California residents with some additional information about the categories of personal information we collect and share, where we get that personal information, and how and why we use it.
In the last 12 months, we may have collected the following categories of personal information from California residents, depending on the Services used:
You can find more information about (a) what we collect and sources of that information, (b) the business and commercial purposes for collecting that information, and (c) the categories of third parties with whom we share that information in the Information We Collect and How We Collect It Section above.
The CCPA prohibits a third party from reselling personal information unless you have received explicit notice and an opportunity to opt-out of further sales.
As a California resident, you have additional rights under the CCPA, including the right to request access to or deletion of your personal information, and information about our data practices, as well as the right not to be discriminated against for exercising your privacy rights. These rights can be exercised by sending an email to us at email@example.com. Please be advised we will require collecting personal information from to confirm your identity and will respond to your request within forty-five (45) days of receipt, including the purposes for which the information was collected.
Colorado, Connecticut, Virginia, and Utah each provide their state residents with rights to:
Colorado, Connecticut, and Virginia also provide their state residents with rights to:
Nevada provides its residents with a limited right to opt-out of certain personal information sales. Residents who wish to exercise this sale opt-out rights may submit a request to firstname.lastname@example.org. However, please know we do not currently sell data triggering that statute's opt-out requirements.
Main provides its residents with the strictest state internet provider privacy law to date, the Act to Protect the Privacy of Online Consumer Information, which (i) requires internet service providers to provide customers with notice at the point of sale and disclose the provider's obligations and customers' rights under the law on its website; (ii) secures customer personal information by implementing reasonable security measures to protect it from unauthorized use, disclosure, or access; (iii) prevents providers from discriminating against consumers that choose to not consent to the use, disclosure, sale, or access of their personal information, for example by:
We may use, sell, or disclose the personal information we collect for one or more of the following purposes:
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
We store data until it is no longer necessary to provide our services, or you make a formal request to delete your information; whichever comes first. This is a case-by-case determination that depends on things like the nature of the data, why it is collected and processed, and relevant legal or operational retention needs.
To exercise your rights to know or delete described above, please submit a request by:
Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information upon verification of identity or agency relationship granting such authority.
You may also make a request to know or delete on behalf of your child by submitting a request by either:
You may only submit a request to know twice within a 12-month period. Your request to know or delete must:
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.
We will only use personal information provided in the request to verify the requestor's identity or authority to make it.
We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact our support team at email@example.com. We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.
Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance, specifically we will either mail you your information via US Mail or we will deliver it to you electronically to the email we have on file for you in a .pdf or similar format with a layer of encryption.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
This Record of Processing Activities (Record) describes how Coxroc, LLC processes personal data. Coxaroc, LLC recognizes that Article 30 of the EU General Data Protection Regulation (GDPR) imposes documentation requirements on controllers and processors. This Record is company confidential information but Coxaroc, LLC will provide it to our Website appropriate supervisory authority on request as required by Article 30.
Name: Coxaroc, LLC
Address: 475 Brickell Ave. #2913, Miami, Florida 33131
Telephone Number: [insert phone #]
Coxaroc collects personal data from the following categories of data subjects: 360VMA guests, users, and consumers that access the Coxaroc Website.
Coxaroc collects the following categories of personal data about consumers:
Coxaroc collects and processes personal data about consumers for the following purposes:
Coxaroc discloses personal data to the following categories of recipients:
Except as otherwise permitted or required by applicable law or regulation, Coxaroc only retains personal data for as long as necessary to fulfill the purposes Coxaroc collected it for, and as required to satisfy any legal, accounting, or reporting obligations, or as necessary to resolve disputes. Even if Coxaroc services are not purchased, Coxaroc may retain your personal information for internal accounting purposes only.
We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our password-protected email address, using industry-standard protections to prevent access from outside intruders. Note: The safety and security of your information also depends on you. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted through our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures we provide.
If you have any questions or comments about this notice, the ways in which the Company collects and uses your information described here, your choices and rights regarding such use, or wish to exercise your rights, please do not hesitate to contact us at: firstname.lastname@example.org.