CCPA Opt-Out

Last updated: June 4, 2026

This California Privacy Notice ("Notice") is in addition to, and incorporated into, the Privacy Policy of LegacyRx and its owners and affiliates (collectively, "we," "us," or "our") and applies to personal information that we collect online or offline from California residents ("consumers" or "you" or "your").

Information We Collect

We have collected the following categories of personal information from consumers within the last twelve (12) months:

Use of Personal Information

We use this personal information for one or more of the following business purposes:

• To provide our products and services, such as to process drug claims and, for fulfilling orders.
• To provide patient care, customer service, such as to respond to inquiries and requests, verify your identity, and, to maintain your Account.
• To analyze use of our products and services as well as customize and improve them.
• For marketing, such as to provide you with email alerts about products or services offered by us and/or third parties that may be of interest to you.
• To maintain the security of our products, services and systems, such as detecting security breaches or fraudulent activity.
• To keep our website and other functioning properly, such as debugging and fixing errors.
• To comply with our legal obligations.
• To protect our rights, property, and safety or the rights, property, and safety of others.

We do not sell your personal information.

Sharing of Personal Information

We may share personal information we collect with third parties for a business purpose, such as to pharmacies to fill your prescription, marketing partners, advertising networks, clients that sponsor discount cards, and service providers that helps us operate or provide our services, including but not limited to data storage companies and internet service providers. When we share personal information with our service providers, we require that they agree to protect the personal information and use and disclose it only to provide their services to us and for limited business purposes, such as to detect security breaches and comply with their legal obligations.

In the past twelve (12) months, we have shared the following categories of personal information for a business purpose with the following categories of third parties:

Your Rights and Choices

This section describes your privacy rights and explains how to exercise them.

Right to Know

You have the right to know, subject to certain exceptions, the following about the personal information we collected about you over the past 12 months:

• The categories of the personal information;
• The categories of sources of the personal information;
• The business or commercial purpose for collecting that personal information;
• The categories of personal information shared for a business purpose; and
• The categories of third parties with whom the personal information is shared.

Right to Delete

You have the right to request that we delete the personal information that we collected from you, subject to certain exceptions.

Right to Opt-Out of the Sale of Personal Information

You have the right to opt-out of the sale of your personal information. We do not sell personal information.

The Right to Non-Discrimination

You have the right not to be discriminated against for exercising these rights.

Submitting Requests to Know and Delete Personal Information

You may submit a request to know or delete by submitting a request to us by either:

• Emailing us at support@legacyrx.net
• Visiting our website and contacting us at https://legacyrx.net/pages/contact

To process your request, we must be able to verify your identity i.e., confirm that the person making the request is the person about whom we collected the personal information, or is someone authorized to act as the authorized agent on that person's behalf. We will verify your identity by asking that you provide certain information to us that will allow us to confirm you are who you say you are, such as contact information, Account information and/or health information.

You may designate an authorized agent to make a request on your behalf. When you use an authorized agent to submit a request for access or deletion, you must provide the authorized agent with written permission to do so, and, in certain circumstances, we may ask you to verify your own identity directly with us. We may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.

Only a parent or legal guardian may submit a request to know or delete the personal information of a child under the age of 13. We may ask a requestor on behalf of a child under 13 to sign a consent form under penalty of perjury or to speak by telephone to trained personnel to confirm that the requestor is the parent or legal guardian of the child.

You may only make a request to know or delete your personal information twice within a 12-month period.

Response Timing and Format

We will confirm receipt of your request to know or delete within 10 business days and will provide information on how we will process your request, including our verification process and when you can expect a response.

Changes to Our Privacy Notice

We may change this Notice at any time, but we will not use personal information that we have already collected for a new purpose that is materially different from those stated in our Notice at the time that personal information was collected without first obtaining your explicit consent to use it for the new purpose.

Contact Information

If you have any questions or concerns about this Privacy Notice, our privacy policies and practices, you may contact us at:

Email: support@legacyrx.net

LegacyRx
163 Church Rd
Stockton GA 31649
United States