PRIVACY AND SECURITY POLICY

Effective Date: August 24, 2026 | Last Updated: August 24, 2026

Lucky Rx LLC ("Lucky Rx," "we," "us," or "our") values your privacy and the security of your information.

Lucky Rx operates a technology and administrative platform that facilitates user access to educational content, account management services, payment-related administrative services, customer support functions, and operational coordination among users, independent healthcare providers, pharmacies, and other service providers supporting the Services.

Lucky Rx does not practice medicine, provide medical advice, diagnose medical conditions, prescribe medications, independently review medical intake responses, or make treatment eligibility decisions.

This Privacy and Security Policy (the "Policy") describes how Lucky Rx collects, uses, discloses, stores, and otherwise processes individually identifiable information and other information described in this Policy (collectively, "Personal Information") collected through our website, mobile experiences, online platforms, and related digital properties (collectively, the "Site") and through the products, services, features, content, account functionality, and technology offerings made available through the Site (collectively, the "Services"). This Privacy Policy applies to information we collect about individual consumers, such as general website visitors (“Individuals”) as well as information we collect about the personnel of our business partners, including vendors and business customers, in business-to-business interactions (“Business Contacts”). However, this Privacy Policy does not apply to information about our current/former employees, applicants, and other individuals who interact with us for employment-related purposes. This Privacy Policy also does not apply to data that we handle on behalf of and under the instructions of our business customers (as a processor).

Please review this Policy carefully. By visiting the Site or using the Services, you acknowledge that your information may be collected, used, disclosed, and otherwise processed as described in this Policy.

This Privacy and Security Policy is incorporated into our Terms and Conditions.

In states with laws applicable to consumer health data (e.g., Washington, Connecticut and Nevada), our Consumer Health Data Privacy Policy also applies.

Privacy laws and guidelines are part of a constantly changing environment. We reserve the right, in our discretion, to modify, revise, add to, or remove portions of this Policy at any time. Material changes will be posted on the Site or otherwise communicated where required by law. Changes become effective upon posting unless otherwise required by applicable law.

Supplemental State Privacy Notices

California Residents: If you are a California resident, please see the "California Privacy Rights Notice" section below for additional rights and information that may apply to you.

Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia: Please see the "State Supplemental Privacy Notice" section below for additional rights and terms that may apply to you.

PROTECTED HEALTH INFORMATION

When you create an account with Lucky Rx, you provide information such as your name, email address, shipping address, phone number, and certain transactional information. This account and administrative information is not "protected health information" as defined under HIPAA.

However, in using certain components of the Services, you may provide certain sensitive, health, or medical information that may be protected under applicable laws. Lucky Rx is not a "covered entity" under HIPAA. Lucky Rx may in some circumstances be a "business associate" of an independent healthcare provider, affiliated healthcare entity, or pharmacy, and solely in that capacity may be subject to certain HIPAA provisions with respect to protected health information ("PHI"). Any information that constitutes PHI will be used and disclosed only in accordance with applicable law.

Independent healthcare providers, pharmacies, and affiliated healthcare entities maintain their own privacy practices and Notices of Privacy Practices. Lucky Rx does not use PHI for advertising or marketing purposes, but may use other information as described more fully in this policy.

Information you provide to Lucky Rx that is not used solely for diagnosis and treatment by independent healthcare providers or prescription fulfillment by pharmacies is not PHI and is subject to this Privacy Policy and applicable state privacy laws. Account registration information (name, date of birth, email address, shipping address, and phone number) is not PHI. However, certain account and transactional information may constitute "Consumer Health Data" or "Sensitive Personal Information" under applicable state laws and will be treated in accordance with those laws and our Consumer Health Data Privacy Policy where applicable.

INFORMATION WE COLLECT ABOUT YOU

We may collect Personal Information directly from you and from third parties, as well as automatically through your use of the Site or our Services.

We may collect the following types of Personal Data about you. Except as otherwise specified, we may collect this Personal Data from both Individuals and Business Contacts.

Identifiers, such as your name, email address, physical address, telephone number, business contact information, and device identifiers (e.g., cookie IDs and IP address).
Records about you, such as signatures; physical characteristics or a description of you; the content, timing and method of communications you have with us, such as online chats, calls, and emails; and information you share with or upload to our Digital Properties, such as reviews and comments.
Demographic information, such as age (including birthdates) and gender.
Commercial information, such as information related to your transactions; products or services purchased, obtained, or considered; subscription information; or other purchasing or consuming histories or tendencies.
Internet or other electronic network activity information, such as your browsing history, search history, preference information (including marketing and purchasing preferences), account settings (including any default preferences), and other information regarding your interactions with and use of the Digital Properties. For more information about cookies and other device data, please see the Personal Data Collected Through and Use of Automatic Data Collection Technologies and Cookies section below.
Non-precise geolocation data, such as your location as derived from your IP address.
Audio, electronic, visual, or other sensory information, such as photographs and audio/video recordings.
Professional or employment-related information (for Business Contacts), such as job title; organization; professional licenses, credentials, or affiliations; and other professional information.
Education information (for Business Contacts).
Inferences drawn from any of the information we collect about your preferences or behavior, including to assess the level of interest in our products and services based on frequency of visits and contact and determine your preferred frequency for receiving offers.

Sensitive Personal Data, including the following:

Social Security number, driver’s license number, or passport number.
Account log-in information.
Precise geolocation.
Racial or ethnic origin, political opinions, religious or philosophical beliefs, or union membership.
Content of mail, email, and text messages where we are not the intended recipient (such as messages that we host as a Controller but are not sent to us).
Genetic data.
Biometric data processed for the purpose of uniquely identifying you.
Information about your health.
Medical or health insurance information, including insurance policy number.
Information concerning your sex life or sexual orientation.
Citizenship, citizenship status, or immigration status.

How We Collect Your Personal Data

We collect Personal Data about you from the following sources:

Directly from you. We may collect Personal Data you provide to us directly, such as when you contact us through our platform and Services; interact with us in person or online; sign up for offers or newsletters; communicate with us; place or customize orders; or sign up for an account or other services.
Data collected automatically and through tracking technologies. We may automatically collect information or inferences about you; such as through cookies and other tracking technologies, when you interact with our Digital Properties. This may include information about how you use and interact with our Digital Properties, information about your device, and internet usage information. For more information about cookies and other tracking technologies, please see information related to cookies and other tracking technologies.
From third parties. We may collect Personal Data from third parties, such as service and content providers, our affiliated companies and subsidiaries, business partners, data brokers, social media companies or other parties who interact with us.
From publicly available sources. We may collect Personal Data about you from publicly available sources, such as public profiles and websites.

We may combine information that we receive from the various sources described in this Privacy Policy, including third party sources, and use or disclose the combined information for the purposes identified within.

Personal Data Collected Through and Use of Automatic Data Collection Technologies and Cookies

Like many websites and online services, Lucky Rx and our service providers may automatically collect information regarding use of the Site and Services through cookies, scripts, pixels, web beacons, software development kits ("SDKs"), local storage technologies, and similar technologies (collectively, "Tracking Technologies").

We and the third parties that we authorize may use the following Tracking Technologies:

Cookies, which are a type of technology that install a small amount of information on a user’s computer or other device when they visit a website. Some cookies exist only during a single session and some are persistent over multiple sessions over time.
Pixels, web beacons, and tags, which are types of code or transparent graphics. In addition to the uses described below, these technologies provide analytical information about the user experience and help us customize our marketing activities. In contrast to cookies, which are stored on a user’s computer hard drive, pixels, web beacons, and tags are embedded invisibly on web pages.
Session replay tools, which record your interactions with our Digital Properties, such as how you move throughout our Digital Properties and engage with our webforms. In addition to the uses described below, this information helps us improve our Digital Properties and identify and fix technical issues visitors may be having with our Digital Properties.
Embedded scripts and SDKs, which allow us to build and integrate custom apps and experiences on our Digital Properties.

Information collected through Tracking Technologies may include:

browser type and operating system;
IP address and device identifiers;
internet service provider information;
approximate geographic location;
pages viewed and links clicked;
referring and exit URLs;
dates, times, and duration of visits;
interactions with Site features and content; and
usage, performance, diagnostic, and analytics information.

Health-Related Advertising Technologies

Lucky Rx uses advertising and analytics technologies to understand website performance, improve customer experience, measure advertising effectiveness, and evaluate campaign activity.

Technologies may include cookies, pixels, server-side conversion APIs, affiliate identifiers, campaign parameters, click identifiers, analytics tools, and attribution technologies.

These technologies may be operated by advertising, analytics, affiliate, or social media providers including Google, Meta, TikTok, Reddit, and affiliate partners.

Lucky Rx does not use information submitted for clinical evaluation, treatment decision-making, or designated record sets maintained by independent healthcare providers or pharmacies for advertising purposes.

Certain disclosures involving advertising technologies may be considered a "sale" or "sharing" under certain state privacy laws even where no money changes hands.

Lucky Rx has a process for honoring Global Privacy Control (GPC) signals and other universal opt-out preference signals as required by applicable state law. You may exercise your opt-out rights by contacting [email protected].

Ad Networks

Lucky Rx may use third-party advertising and marketing providers to help deliver, personalize, measure, and improve advertising and promotional campaigns across websites, mobile applications, email communications, social media platforms, and other digital channels. We may disclose information to third parties or allow third parties to directly collect information using these technologies on our Digital Properties, such as social media companies, advertising networks, companies that provide analytics including ad tracking and reporting, security providers, and others that help us operate our business and Digital Properties.

Additional opt-out resources may be available through www.networkadvertising.org, www.aboutads.info, and www.allaboutcookies.org.

Analytics

Lucky Rx uses analytics technologies to understand website usage, improve Site and Service functionality, evaluate performance, troubleshoot technical issues, and improve user experience. Certain analytics providers may permit users to opt out directly through their tools, including Google's Analytics Opt-Out Browser Add-On: https://tools.google.com/dlpage/gaoptout.

Social Media

We maintain a presence on social media platforms including Facebook, Instagram, TikTok, X (formerly Twitter), and similar platforms. Information you voluntarily submit on Social Media platforms may become publicly visible depending upon platform functionality and your privacy settings.

HOW WE USE OR DISCLOSE YOUR INFORMATION

Lucky Rx may use Personal Information for the following purposes:

Administer user accounts and provide customer support and transactional services;
Coordinate payment processing, order administration, fulfillment coordination, and account-related operations;
Facilitate operational communications and workflow coordination among users, independent healthcare providers, pharmacies, service providers, and other third parties;
Verify identity, maintain account security, and help prevent fraud, abuse, unauthorized activity, or misuse of the Services;
Communicate with you regarding your account, purchases, customer support requests, billing matters, service updates, technical notices, and other administrative communications;
Provide, operate, maintain, troubleshoot, analyze, personalize, and improve the Site and Services;
Understand how users interact with the Site and evaluate performance, functionality, and user experience;
Tailor content, Site functionality, support experiences, and service offerings based on user preferences and interactions;
Measure advertising effectiveness, attribution activity, campaign performance, and marketing engagement;
For our internal business purposes, such as operating our Digital Properties and customizing the content; maintaining internal business records, such as accounting, document management and similar activities; enforcing our policies and rules; management reporting; auditing; and IT security and administration;
For marketing and targeted advertising, such as marketing our products or services or those of our affiliates, business partners, or other third parties. For example, we may use Personal Data we collect to personalize advertising to you (including by developing product, brand, or services audiences and identifying you across devices/sites); to analyze interactions with us or our Digital Properties; or to send you newsletters, surveys, questionnaires, promotions, or information about events or webinars. You can unsubscribe to our email marketing via method described in the Opting Out of Marketing Communications section below;
For our internal research and product improvement purposes, such as verifying or maintaining the quality or safety of our products or services; improving our products or services; designing new products and services; evaluating the effectiveness of our advertising or marketing efforts; and debugging and repairing errors with our systems, networks, and equipment;
Protect the rights, safety, security, property, and operations of Lucky Rx, our users, and third parties; and
Carry out any other purpose disclosed at the time information is collected or otherwise with your consent.

Or to the following categories of recipients described below:

Affiliates and subsidiaries, including parent entities, corporate affiliates, subsidiaries, business units, and other companies that share common ownership.
Service providers that work on our behalf to provide the products and services you request or support our relationship with you, such as IT providers, internet service providers, web hosting providers, data analytics providers, and companies that provide business support services, financial administration, or event organization.
Professional consultants, such as accountants, lawyers, financial advisors, and audit firms.
Vendors necessary to complete transactions you request, such as shipping companies and logistics providers.
With pharmacies and other entities involved in prescription fulfillment, order administration, and operational coordination associated with Services made available through the Site.
Law enforcement, government agencies, and other recipients, when required by law, for legal, security, or safety purposes, such as when we share information to comply with law or legal requirements, to enforce or apply our Terms of Service and other agreements or policies; and to protect ours, our customers’, or third parties’ safety, property, or rights.
Other entities in connection with a corporate transaction, such as if we acquire, or sell or transfer all or a portion of our business or assets including through a sale in connection with bankruptcy and other forms of corporate change.
Business partners that may use Personal Data for their own purposes, such as:
- Advertisers, ad platforms and networks, and social media platforms;
- Third parties whose cookies and tracking tools we use as described in the tracking technologies section above;
- Commercial data partners to whom we make information available for their own marketing purposes; and
- Partners who work with us on promotional opportunities, including co-branded products and services.

Where required by law, we will obtain your consent prior to disclosing your Personal Data to our business partners. Where recipients use your Personal Data for their own purposes independently from us, we are not responsible for their privacy practices or personal data processing policies. You should consult the privacy notices of those third-party services for details on their practices. We do not control the collection and use of your information collected by third parties as described in our Terms. These third parties may aggregate the information they collect with information from their other customers for their own purposes.

The public, such as when you have an opportunity to make comments regarding us or our products that we may share with the public, including comments on our blog posts and reviews on our product pages. Any Personal Data in comments, reviews, or other content that you share in public areas of our Digital Properties may be read, collected, or used by other users or the public.

Entities to which you have consented to the disclosure.

The following chart provides general examples of categories of recipients, the purposes of disclosure, and categories of information that may be disclosed:

Recipient Category	Purpose	Categories of Information
Advertising providers	Campaign measurement and attribution	Browser information, device identifiers, campaign interactions
Analytics providers	Website and service performance analysis	Usage information and device information
Affiliate partners	Referral attribution and campaign tracking	Click identifiers and referral information
Payment processors	Transaction processing and payment administration	Billing and transaction information
Service providers	Operational and technical support	Account and service information

We may use anonymized, de-identified, or aggregated information for any purpose permitted by law.

OPTING OUT OF MARKETING COMMUNICATIONS

You may opt out of receiving marketing or promotional emails from Lucky Rx at any time by clicking the "unsubscribe" link included in a Lucky Rx marketing email or by following other unsubscribe instructions provided in the communication.

Please note that opting out of marketing communications does not affect our ability to send transactional, administrative, operational, security-related, or account-related communications necessary to provide the Services, maintain your account, process transactions, respond to customer service requests, provide important notices, or comply with legal obligations.

CHILDREN UNDER 18

Minors Under the Age of 18

The Site and Services are intended only for individuals who are at least eighteen (18) years of age. Lucky Rx does not knowingly collect Personal Information directly from individuals under the age of 18.

If we become aware that Personal Information has been submitted by or collected from an individual under the age of 18, we may take steps to delete such information and terminate associated accounts where appropriate.

If you believe that we may have received information from or about an individual under the age of 18, please contact us at [email protected].

SAFEGUARDING PERSONAL INFORMATION

Information transmitted over the Internet is not completely secure, but we do our best to protect your Personal Data. The safety and security of your information also depends on you. Where you have chosen a password for the use of the Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

We have implemented measures designed to secure your Personal Data from accidental loss and from unauthorized access, use, alteration, and disclosure. We use encryption technology for information sent and received by us.

Although we do our best to protect your Personal Data, we cannot guarantee the security of your Personal Data transmitted to the Services. Any transmission of Personal Data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Services or in your operating system.

PROTECTING YOUR OWN INFORMATION

Your cooperation is essential in safeguarding your Personal Information. Choose your account password carefully; anyone with access to your account credentials may be able to assume your online identity, view or modify your information, access your account and account-related information, submit requests through your account, or communicate with Lucky Rx while impersonating you.

It is your responsibility to maintain the confidentiality of your password and account credentials, prevent disclosure to others, and promptly change your password if you believe its security may have been compromised.

ACCESSING, CORRECTING, UPDATING, AND DELETING YOUR INFORMATION

You may access, review, update, or modify certain account information through your account settings or profile page after logging into your account, where functionality is available.

You may also request access to, correction of, updating of, or deletion of certain Personal Information by contacting Lucky Rx at [email protected].

Lucky Rx will make reasonable efforts to review and respond to requests in accordance with applicable law. In certain circumstances, we may decline or limit a request where permitted by law, including where we determine that fulfilling the request could violate legal obligations, compromise security, interfere with fraud prevention efforts, infringe upon the rights of others, or otherwise result in inaccurate or improper processing.

REPORT VIOLATIONS

If you believe there has been unauthorized access to your account, misuse of Personal Information, a suspected security incident, or a potential violation of this Privacy and Security Policy, please contact Lucky Rx promptly at: [email protected].

QUESTIONS

If you have questions, concerns, requests, or comments regarding this Privacy and Security Policy or Lucky Rx's privacy practices, please contact us at:

Lucky Rx LLC
Email: [email protected]
Website: www.luckyrx.com
1311 Seven Hills Dr., Henderson, NV 89052

STATE SUPPLEMENTAL PRIVACY NOTICES

California Privacy Rights Notice

This section applies solely to California residents and supplements the other provisions of this Privacy and Security Policy. The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act and implementing regulations (collectively, the "CCPA"), provides California residents with certain rights and additional disclosures regarding the collection, use, disclosure, retention, and processing of Personal Information.

Personal Information Collected in the Last 12 Months

Depending on your interactions with the Site and Services, Lucky Rx may have collected the following categories of Personal Information during the previous 12 months:

Identifiers, such as name, mailing address, email address, account credentials, IP address, and online identifiers;
Information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, their name, signature, physical characteristics or description, address, telephone number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information;
Characteristics of protected classifications under California or federal law;
Commercial information (e.g., records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies);
Biometric information;
Internet or other electronic network activity information (e.g., browsing history, search history, and information regarding a consumer’s interaction with an Internet Website, application, or advertisement);
Geolocation data;
Audio, electronic, visual, thermal, olfactory, or similar information;
Professional or employment-related information;
Inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes; and
Sensitive Personal Information.

Retention

Lucky Rx retains Personal Information for periods reasonably necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, enforce agreements, maintain security, prevent fraud, and support legitimate business operations.

Information Category	Examples	Retention Purpose	Retention Criteria
Account information	Name, email, credentials	Account administration	Retained for the duration of the active account and for a reasonable period thereafter as necessary to comply with legal obligations, resolve disputes, and enforce agreements
Order information	Transactions	Legal and tax obligations	Retained for the period required by applicable tax, financial reporting, and legal record-keeping obligations
Customer support	Communications	Operational purposes	Retained for the period reasonably necessary to support customer service functions, resolve disputes, and maintain operational records
Marketing identifiers	Cookies and attribution IDs	Analytics and advertising	Retained for the period reasonably necessary to support analytics, advertising measurement, and campaign attribution, subject to applicable opt-out requests and platform-specific data retention settings
Security information	Fraud logs	Legal and security purposes	Retained for the period reasonably necessary to support fraud prevention, security monitoring, and legal compliance obligations

Sale or Sharing of Personal Information

Lucky Rx does not sell Personal Information for monetary compensation. However, certain disclosures involving cookies, pixels, advertising technologies, analytics technologies, affiliate technologies, or related online tracking tools may constitute a "sale" or "sharing" under California law, even where no money is exchanged.

Lucky Rx does not have actual knowledge that it has sold or shared Personal Information of individuals under sixteen (16) years of age.

How Your Personal Information is Collected. We collect most of this personal information directly from you—in person, by telephone, text or email and/or via our website and apps. See How We Collect Your Personal Data and Personal Data Collected Through and Use of Automatic Data Collection Technologies.

Why We Use Your Personal Information. We collect and/or share consumer personal information for the business purposes described in How We Use Your Personal Data and Disclosure of your Personal Data.

Who We Share Your Personal Information With. In the preceding 12 months, we have sold or shared consumers’ personal information as described in Disclosure of your Personal Data.

Categories of Personal Information We Sold or Shared. In the preceding 12 months, we have sold or shared the following categories of personal information: identifiers; Information that identifies, relates to, describes, or is capable of being associated with, a particular individual as described in Disclosure of your Personal Data. While we do not intentionally sell your personal information for monetary consideration, it is possible that some of our data sharing practices could be deemed a sale under the CCPA.

Categories of Personal Information We Disclosed for a Business Purpose. In the preceding 12 months, we have disclosed the following categories of personal information for a business purpose: identifiers; Information that identifies, relates to, describes, or is capable of being associated with, a particular individual as described in Disclosure of your Personal Data.

How Long Your Personal Information Will Be Kept. We will keep your personal information while you have an account with us or while we are providing Services to you. Thereafter, we will keep your personal information for as long as is necessary:

To respond to any questions, complaints or claims made by you or on your behalf;
To show that we treated you fairly; or
To keep records required by law.

We will not retain your personal information for longer than necessary for the purposes set out in this policy. Different retention periods apply for different types of personal information.

When it is no longer necessary to retain your personal information, we will delete or anonymize it.

Your Rights Under the CCPA. You have the right under the California Consumer Privacy Act of 2018 (CCPA), and certain other privacy and data protection laws, as applicable, to exercise free of charge:

California Privacy Right	Description
Disclosure of Personal Information We Collect About You	You have the right to know, and request disclosure of: The categories of personal information we have collected about you, including sensitive personal information; The categories of sources from which the personal information is collected; Our business or commercial purpose for collecting, selling, or sharing personal information; The categories of third parties to whom we disclose personal information, if any; and The specific pieces of personal information we have collected about you. Please note that we are not required to: Retain any personal information about you that was collected for a single one-time transaction if, in the ordinary course of business, that information about you is not retained; Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information; or Provide the personal information to you more than twice in a 12-month period.
Disclosure of Personal Information Sold, Shared, or Disclosed for a Business Purpose	In connection with any personal information we may sell, share, or disclose to a third party for a business purpose, you have the right to know: The categories of personal information about you that we sold or shared and the categories of third parties to whom the personal information was sold or shared; and The categories of personal information that we disclosed about you for a business purpose and the categories of persons to whom the personal information was disclosed for a business purpose. You have the right to opt-out of the sale of your personal information or sharing of your personal information for targeted behavioral advertising. If you exercise your right to opt-out of the sale or sharing of your personal information, we will refrain from selling or sharing your personal information, unless you subsequently provide express authorization for the sale or sharing of your personal information. To opt-out of the sale or sharing of your personal information, contact us at [email protected].
Right to Limit Use of Sensitive Personal Information	You have the right to limit the use and disclosure of your sensitive personal information to the use which is necessary to: Perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services; To perform the following services: (1) Helping to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for these purposes; (2) Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer’s current interaction with the business, if the consumer’s personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with the business; (3) Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business; and (4) Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business; and As authorized by further regulations. You have a right to know if your sensitive personal information may be used, or disclosed to a service provider or contractor, for additional, specified purposes.
Right to Deletion	Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will: Delete your personal information from our records; and Direct any service providers or contractors to delete your personal information from their records. Direct third parties to whom the business has sold or shared your personal information to delete your personal information unless this proves impossible or involves disproportionate effort. Please note that we may not delete your personal information if it is reasonably necessary to: Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us; Help to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for those purposes; Debug to identify and repair errors that impair existing intended functionality; Exercise free speech, ensure the right of another consumer to exercise their right of free speech, or exercise another right provided for by law; Comply with the California Electronic Communications Privacy Act; Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent; Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us; Comply with an existing legal obligation; or Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
Right of Correction	If we maintain inaccurate personal information about you, you have the right to request us to correct that inaccurate personal information. Upon receipt of a verifiable request from you, we will use commercially reasonable efforts to correct the inaccurate personal information.
Protection Against Retaliation	You have the right to not be retaliated against by us because you exercised any of your rights under the CCPA. This means we cannot, among other things: Deny goods or services to you; Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; Provide a different level or quality of goods or services to you; or Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services. Please note that we may charge a different price or rate or provide a different level or quality of Services to you, if that difference is reasonably related to the value provided to our business by your personal information. We may also offer loyalty, rewards, premium features, or discounts consistent with these rights or payments as compensation, for the collection of personal information, the sale of personal information, or the retention of personal information.

Submitting a California Privacy Request

To submit a request regarding your California privacy rights, contact Lucky Rx at: [email protected]

Lucky Rx will respond to verified requests within forty-five (45) days of receipt. If additional time is reasonably necessary, Lucky Rx may extend the response period by up to an additional forty-five (45) days, provided that Lucky Rx notifies you of the extension and the reason within the initial period. There is no fee to submit a privacy rights request.

To exercise your rights, you will need to provide us with:

Enough information to identify you (e.g., your full name, address, and account information);
Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
A description of what right you want to exercise and the information to which your request relates.

We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person’s behalf.

Any personal information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification.

Additional State Supplemental Privacy Notice

Applicable to residents of: Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with applicable privacy laws, where required.

Depending upon your state of residence and subject to applicable exceptions and limitations, you may have some or all of the following rights regarding your Personal Information:

Right to Access - request access to Personal Information we maintain about you;
Right to Data Portability - request a copy of certain Personal Information in a portable and readily usable format;
Right to Know - request information regarding categories of Personal Information collected, sources of collection, purposes of use, and categories of disclosures;
Right to Correct - request correction of inaccurate Personal Information;
Right to Delete - request deletion of certain Personal Information;
Right to Opt Out - request to opt out of the sale of Personal Information, targeted advertising, profiling in furtherance of decisions producing legal or similarly significant effects, or certain other processing activities where required by law; and
Right to Non-Discrimination - not receive discriminatory treatment for exercising privacy rights.

Submitting a Request

To submit a request regarding your privacy rights, please contact Lucky Rx at: [email protected]

Opting Out of Targeted Advertising

You may opt out of certain targeted advertising activities by using the privacy controls available on the Site, or contacting us at [email protected].

Appeals

If permitted by applicable law and we deny your request, you may appeal our decision by responding to our communication or contacting Lucky Rx at [email protected].

State-Specific Supplemental Disclosures

Texas Residents

Lucky Rx does not sell medical intake responses, healthcare records, or treatment-related information. Certain disclosures involving cookies, pixels, analytics technologies, advertising technologies, affiliate technologies, or related online tracking tools may be considered a "sale," "sharing," or targeted advertising activity under certain state privacy laws, even where no money is exchanged.

Maryland Residents

Lucky Rx does not use Sensitive Personal Information for targeted advertising purposes where prohibited by applicable law, including as required under Maryland privacy laws.

De-Identified Information

Lucky Rx may create, use, disclose, and maintain aggregated or de-identified information as permitted by applicable law.

Lucky Rx will not attempt to re-identify de-identified information except as permitted or required by applicable law.

Changes to Our Privacy Policy

We may change this Privacy Policy at any time. If we make material changes to how we treat our Users’ Personal Data, we will notify you by email to the email address specified in your account and/or through a notice on the Services’ home page and invite you to review (and accept, if necessary) the changes. The date this Privacy Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you and for periodically visiting the Services and reviewing this Privacy Policy to check for any changes.