Privacy Policy
What this website handles, why, and what you can ask us to do about it.
1. Scope
This policy covers hardrx.us alone. The merchant's checkout, the prescribing practice and the dispensing pharmacy each operate under their own policies. The moment you follow an order link you have left us, and everything you enter beyond that point — medical answers, card details, delivery information — is governed there and never reaches our systems.
2. What you give us directly
The contact form on this site collects a name, an email address and a message. The newsletter box in the footer collects an email address. That is the entire list. We ask for no medical history, no prescription record, no identity document and no payment information anywhere, and we would rather you did not send any of it.
3. What is recorded automatically
Ordinary web infrastructure logs technical details as pages load: the IP address making the request, browser and version, operating system, device class, viewport size, referring address, pages served and timestamps. We read this in aggregate to understand traffic, find broken pages and judge which articles are worth keeping. We do not try to resolve it back to a named person.
4. Cookies
Three kinds are in use. Essential cookies keep basic functionality working. Measurement cookies count visits and page reads. Referral cookies record that a visitor reached the merchant from this site so any commission is credited correctly; these expire after a set period.
Browsers allow you to refuse or delete cookies, and measurement providers publish their own opt-out tools. Refusing some categories may change how parts of this site behave. Where a Global Privacy Control signal can be detected, we act on it.
5. What we use it for
Replying to messages you send. Sending updates you asked for. Measuring and improving what we publish. Attributing referrals correctly. Detecting fraud, abuse and security incidents. Meeting legal obligations. None of it feeds automated decision-making with legal or similarly significant effects on you.
6. Selling and sharing
We do not sell personal information and we do not share it for cross-context behavioural advertising, as California's statutes define those terms. Disclosure happens only to processors acting for us under written contract — hosting, email delivery, analytics, the affiliate network — and where compelled by law, a court order or a valid governmental demand, or where necessary to protect rights, property or someone's safety. A sale of the business could pass information to a successor bound by these same commitments.
7. How long we keep it
Contact form messages are retained for up to 24 months so a conversation can be picked up, then deleted. Newsletter addresses persist until you unsubscribe. Measurement data is held in de-identified aggregate. Access logs rotate out after a short operational window.
8. Your rights
Californians hold rights under the CCPA as amended by the CPRA, and residents of a growing list of other states hold comparable rights under their own laws. In broad terms these cover knowing what is held, receiving a copy, correcting inaccuracies, requesting deletion, opting out of sale or sharing (we do neither), and not being treated worse for exercising any of them.
Send requests to [email protected] with "Privacy Request" in the subject line. We verify against the address on file and reply within the period the applicable law allows. An authorised agent may act for you on production of written authorisation.
9. Security
Pages are served over HTTPS and reasonable administrative and technical controls protect what little we hold. No online system can promise absolute security. The mitigating factor here is scope: with no health or payment data collected, the material at risk is a short list of contact details.
10. Children
Nothing on this site is directed at anyone under 18 and we do not knowingly collect information from minors. Tell us if you believe a minor has submitted something and we will delete it.
11. Do Not Track
No agreed standard exists for interpreting Do Not Track headers and browsers differ in how they emit them, so we do not act on that signal. Global Privacy Control signals are honoured where detectable.
12. Changes
Practices change and so does the law, so this document will be revised from time to time. The date at the head of the page marks the most recent revision.
Anything unclear here? Write to [email protected] or call 855-927-0390.
Your next step
Get Started Today
Fill in the health form, get a free review from a licensed doctor, and have it posted within 24 hours in a box that says nothing.