Privacy Policy

1. Who We Are

VORA RX, INC. (VORA, we, us, or our) operates a technology and administrative platform that helps adults access independent licensed healthcare providers, pharmacies, laboratories, wellness resources, and membership benefits. VORA is not a healthcare provider or pharmacy and does not control independent clinical judgment.

2. Information We Collect

• Identity and contact information, including name, date of birth, address, email, and telephone number.
• Account, transaction, subscription, and payment information.
• Health and intake information submitted for clinician review, including conditions, medications, treatment history, and laboratory information.
• Device and usage data, including IP address, browser type, cookies, referring URLs, and interaction data.
• Communications with support, providers, pharmacies, and program partners.

3. How We Use Information

We use information to operate and secure the Services; facilitate care, prescriptions, fulfillment, payment, and support; verify identity and eligibility; maintain records; comply with law; prevent fraud; improve services; and communicate about accounts, treatment logistics, and, when authorized, marketing.

4. Disclosures

Information may be disclosed to independent medical groups and clinicians, pharmacies, laboratories, payment processors, hosting and security vendors, customer-support providers, professional advisers, regulators, law enforcement, and other parties as required by law, or with your direction or authorization.

5. Health Information and HIPAA

Independent medical groups and clinicians may be HIPAA covered entities. VORA may act as a business associate or service provider in certain relationships. Protected health information is governed by applicable law, contracts, and the relevant provider Notice of Privacy Practices. Not every piece of information collected by VORA is protected by HIPAA, although other privacy laws may apply.

6. Cookies and Marketing

We may use cookies and similar technologies for essential functions, analytics, fraud prevention, preferences, and advertising measurement. We do not knowingly use protected health information for marketing without a valid authorization.

7. Your Rights

Depending on applicable law, you may request access, correction, deletion, portability, restriction, or an accounting of certain disclosures; withdraw a marketing authorization; opt out of promotional email; or appeal a privacy decision. Identity verification and legal exceptions may apply.

8. State Privacy Rights

Residents of states with comprehensive privacy laws may have additional rights, including rights to know, delete, correct, or obtain a copy of personal data and to opt out of certain targeted advertising, sales, or profiling. We do not discriminate for exercising applicable rights.

9. Security and Retention

We use administrative, technical, and physical safeguards designed to protect information, but no system is completely secure. We retain information as reasonably necessary for legal, clinical, accounting, fraud-prevention, and contractual requirements.

10. Children, External Services, and Changes

The Services are intended for adults age 18 or older. Third-party services have their own policies. We may update this policy and will post the revised effective date. You may also file a HIPAA complaint with the U.S. Department of Health and Human Services Office for Civil Rights without retaliation.