Privacy Policy

1. Introduction

Tint-RX ("we," "us," or "our") operates the Tint-RX telemedicine evaluation platform located at https://tint-rx.com (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or use our Platform. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Platform.

2. Information We Collect

Personal Information you voluntarily provide:

• Full name, date of birth, and contact information (email, phone, mailing address)
• Arizona driver's license or vehicle registration information
• Medical history, diagnoses, and prescription medication information
• Uploaded medical records, photographs, or supporting documentation
• Payment information (processed by a PCI-compliant third-party processor; we do not store card numbers)

Automatically Collected Information:

• IP address, browser type, operating system, and referring URLs
• Pages visited, time spent, and clickstream data via cookies and similar technologies
• Device identifiers

3. How We Use Your Information

• To facilitate your clinical evaluation and deliver physician-reviewed documentation
• To communicate with you regarding your evaluation status and results
• To process payments and maintain billing records
• To comply with applicable federal and state laws, including HIPAA
• To improve Platform functionality and user experience
• To send administrative notices and policy updates

We do not sell your personal information to third parties. We do not use your medical information for advertising or marketing purposes.

4. HIPAA Notice

Medical information you submit is Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). PHI is handled in accordance with our HIPAA Notice of Privacy Practices. We maintain administrative, physical, and technical safeguards to protect your PHI.

5. Disclosure of Your Information

We may share your information with:

• Licensed Physicians: Board-certified dermatologists performing your evaluation
• Service Providers: HIPAA Business Associates providing secure hosting, form processing, and payment services under written agreements
• Legal Authorities: When required by law, court order, or to protect the rights and safety of users or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to the same privacy protections

6. California Residents — CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions
• Right to Opt-Out: We do not sell personal information. No opt-out is required, but you may contact us to confirm
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise these rights, contact us at [email protected]. We will respond within 45 days.

Do Not Sell My Personal Information: Tint-RX does not sell personal information. If our practices change, we will update this policy and provide a prominent opt-out mechanism.

7. CalOPPA — California Online Privacy Protection Act

In compliance with CalOPPA, we agree to the following: users may visit our Platform anonymously; this Privacy Policy link is accessible from our homepage; our Privacy Policy link includes the word "Privacy" and is easily findable; users will be notified of any material changes to this policy; and users may update their personal information by contacting us directly.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate the Platform and analyze usage. You may control cookie preferences through our cookie consent banner or your browser settings. Disabling certain cookies may affect Platform functionality. We do not respond to Do Not Track (DNT) signals at this time.

9. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations (including HIPAA's minimum 6-year retention requirement for medical records), resolve disputes, and enforce agreements. When retention is no longer required, we securely delete or de-identify your information.

10. Children's Privacy

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately.

11. Security

We implement industry-standard administrative, technical, and physical safeguards to protect your information, including TLS encryption in transit and AES-256 encryption at rest for PHI. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page with an updated effective date. Your continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

13. Contact Us

For questions, requests, or concerns regarding this Privacy Policy, contact us at: