Privacy Policy

01Who we are and what this policy covers

Perfection RX licenses the Redox technology platform, and Helivore Therapeutics Ltd. operates it for Perfection RX. Helivore Therapeutics Ltd. provides the technology operations under the Redox Smart Pen brand ("Redox," "we," "us" or "our") to receive prescription orders for Perfection RX products and facilitate payment to Perfection RX. This policy describes information handled through redoxpen.com, the prescriber portal at prescribe.redoxpen.com, and related account, order and support communications.

The Platform serves licensed prescribers and their authorized practice staff. Patients do not order directly. Perfection RX, referred to on this website as Perfect RX, is the pharmacy that compounds, sells, dispenses and fulfills prescription products ordered through the Platform. Practices and the pharmacy have their own privacy and health-record obligations.

This policy explains our practices; it is not a request for blanket consent to every use of information. Where a particular use requires consent, authorization or a separate agreement, this policy does not replace it. Our Terms & Conditions describe Platform use.

02Information from the public website

You can read product information and download the catalog without creating an account. The public website does not contain patient intake forms, payment fields, advertising pixels, session replay tools or analytics services. Fonts and site assets are hosted with the website rather than requested from third-party font services.

Our hosting infrastructure may record ordinary connection and security information, such as IP address, requested page or file, time of access, browser information, referring page and request status. This information supports delivery of the website, troubleshooting, abuse prevention and security. It is distinct from a patient medical record.

If you choose an email link, your email service opens and the information you send is received through our support email system. Following a portal or external-resource link takes you to that service. Simply browsing the public website does not submit a prescription or create a patient account.

03Account, prescription and payment information

Information associated with prescriber services depends on the user's role and the workflow. It includes:

• Account and practice information: names, professional and practice contact details, login information, practice affiliation, user roles, and information submitted in registration or account updates.
• Professional credentials: NPI numbers, state licenses and other identity or authority information requested during verification. Administrative staff do not gain prescribing authority by registering.
• Patient and prescription information: patient identifiers and contact or delivery details, prescription contents, directions, quantities, authorized refills, and clinical information supplied for pharmacy review and fulfillment.
• Order and billing information: order history, refill selections, shipping details, amounts, payment status and payment-method information supplied through the payment workflow. Payment processing services handle information needed to complete charges; the public website does not accept card details.
• Support and technical information: communications you send, account and transaction references, and access or activity information used to operate and protect the service.

Sources include you, authorized practice users, the dispensing pharmacy, payment and delivery services, and technical systems supporting your use of the Platform. Submit only information relevant to the task and for which you have appropriate authority.

04How information is used

As the technology operator for Perfection RX, Helivore Therapeutics Ltd. uses information as needed to:

• Create and administer accounts, assign permissions, verify professional authority and support authorized practice users.
• Transmit prescriptions and related information to Perfection RX for review, compounding, dispensing and direct-to-patient fulfillment.
• Facilitate payment, reconcile transactions, administer authorized refills and address order or billing issues.
• Provide account, prescription-processing, delivery and service communications.
• Respond to requests, troubleshoot problems, maintain service reliability and investigate misuse or security incidents.
• Meet applicable legal, regulatory, accounting and recordkeeping requirements and establish or defend legal claims.

Patient information must be handled for authorized service and healthcare-related purposes and as permitted by applicable law and any applicable data-protection or business associate agreement. We do not use patient prescription information to build advertising audiences or to advertise medications to patients.

05When information is shared

Information is shared as necessary for the relevant purpose, including with:

• Your practice and its authorized users, according to their roles and access permissions.
• Perfection RX, the pharmacy licensing the Platform, for prescription review, compounding, dispensing, related communications and fulfillment. The pharmacy handles its records under its own professional and legal obligations.
• Payment and delivery services, for transaction processing, fraud prevention and delivery of accepted orders.
• Service providers, such as hosting, technical support and email providers, to perform the functions needed to operate and support the service, subject to applicable confidentiality, privacy and security obligations.
• Legal or regulatory recipients, where disclosure is required by law or lawful process, or is otherwise legally permitted and reasonably necessary to address fraud, security, safety or legal claims.
• A successor business, in connection with a merger, reorganization or transfer of the relevant service, subject to applicable law and continuing privacy obligations. Patient information remains subject to applicable restrictions.

We may also disclose information at your direction where lawful. We do not sell personal information or share it for cross-context behavioral advertising. We do not permit service-related access to patient information to become a general permission to use it for unrelated marketing.

06Patient information and HIPAA

Health information can be subject to special protections, including the Health Insurance Portability and Accountability Act (HIPAA), where applicable, and state health-privacy laws. The responsibilities of Helivore Therapeutics Ltd. as technology operator, each practice and Perfection RX as the pharmacy depend on their actual roles and the information involved. Where Redox acts as a business associate, its handling of protected health information is governed by applicable HIPAA requirements and a business associate agreement, which must be in place when required.

This website policy is not a HIPAA Notice of Privacy Practices, a business associate agreement or a patient authorization. It does not replace the notice provided by a treating practice or dispensing pharmacy, and it does not itself establish HIPAA compliance.

Patients seeking access to, amendment of, or an accounting concerning a medical or pharmacy record should contact the practice or pharmacy responsible for that record. You may also contact Redox, and we will direct a request appropriately or assist as required. Account deletion does not necessarily permit deletion of a prescription or other record that must be retained.

Do not send patient records, prescription images, full payment-card details or other sensitive information to ordinary support email. Contact support first for the appropriate channel. Learn about healthcare privacy notices from HHS.

07Cookies, storage and tracking choices

The public website does not set application cookies or use browser storage for advertising, analytics or visitor profiling. The prescriber portal is a separate application; authentication and security functions may use cookies or similar storage to maintain authorized access and operate the service.

You can manage cookies and site storage through your browser. Blocking information needed for authentication may prevent portal features from working. The public website remains readable without accepting optional tracking cookies because no such tracking is installed.

We do not use public-site visits for targeted advertising, including when a browser sends a Global Privacy Control signal. Browsers may also send a Do Not Track signal; the public website does not conduct cross-site advertising tracking regardless of that setting. If our tracking practices change, we will update this policy and provide choices or obtain consent as required before introducing the relevant use.

08Retention and security

Information is retained for the period needed for its purpose, including account administration, order support, legal recordkeeping, security and dispute resolution. Relevant factors include the nature and sensitivity of the information, the account relationship, prescription and transaction requirements, and legal preservation obligations. Records controlled by a practice, pharmacy or payment provider follow that organization's applicable requirements. Closing an account does not automatically erase those records.

Security responsibilities include limiting access to authorized users and protecting information in transit and in the systems used to provide the service. The public website uses HTTPS. No internet service or communication method can guarantee absolute security. Protect your credentials, use a trusted device, and contact support promptly if you suspect unauthorized access. Do not include sensitive patient information in the initial report.

09Your privacy rights and choices

Depending on where you live, the information involved and which laws apply, you may have rights to request access to or a copy of personal information, correction, deletion, portability, or restriction of particular processing. You may also have rights to object, withdraw consent for a consent-based use, opt out of certain processing, appeal a denied request, or complain to the appropriate regulator. Withdrawing consent does not undo lawful processing that already occurred.

Send requests to support@redoxpen.com with the subject "Privacy request." Tell us the type of request and your relationship to Redox, without sending medical records or identity documents in the initial email. We may take proportionate steps to verify identity and authority, including when an authorized representative acts for you. We will respond within applicable legal time limits and explain any lawful limitation or the appropriate route for appeal.

Some information must be retained, and some requests must be handled by the practice or pharmacy controlling the record. We will not unlawfully discriminate against you for exercising privacy rights. You may update account details through available portal controls or contact support for help. If you receive optional promotional messages, use the unsubscribe instructions or contact us; essential account, security and transaction messages may continue.

10Children and geographic scope

The Platform is intended for adult healthcare professionals and authorized practice staff, not for children to register or order medication. This does not mean a practice can never submit a lawfully authorized prescription for a minor; any such information must be provided by an authorized professional and handled under the applicable healthcare and privacy requirements.

If you believe a child has submitted information directly without appropriate authorization, contact support so we can assess and address it. The prescription service is directed to United States practice workflows and is subject to pharmacy and prescriber jurisdictional requirements. Access from another country does not establish product availability there. Information may be processed where Redox and its service providers operate, subject to transfer protections required by applicable law.

11Policy updates and contact

We will update the effective date when this policy changes and provide additional notice of material changes through the website, portal or an appropriate direct communication. Where a new use requires consent or authorization, we will obtain it as required; posting a revised policy alone does not provide that authorization.

Helivore Therapeutics Ltd.
Operator of the Redox Smart Pen technology platform for Perfection RX
Privacy contact: support@redoxpen.com
Website: redoxpen.com

Use this address for privacy questions, requests or concerns. For assistance accessing this policy in another format, see our Accessibility Statement.