Policy

Privacy Policy

Effective and last updated: July 27, 2026

This Privacy Policy explains how QuickRx LLC (d/b/a Alivia Healthcare) (“Alivia,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects information when you visit aliviameds.com, create an account, complete an intake, request support, communicate through the platform, or purchase services or products (collectively, the “Platform”).

Alivia operates the Platform and provides administrative, technology, payment, care-coordination, and customer-support services. Medical care and clinical decisions are provided by licensed clinicians employed by Beluga Health, P.A.. Prescriptions may be filled by licensed pharmacies, including Belmar Pharmacy. Alivia does not make prescribing or other clinical decisions.

Some information processed in connection with medical care may be protected health information (“PHI”) under the Health Insurance Portability and Accountability Act (“HIPAA”). When Alivia processes PHI on behalf of a covered healthcare provider or pharmacy, it does so as permitted by applicable law and the applicable business associate agreement. Information Alivia collects in its separate capacity as the operator of the Platform may not be PHI, even when it is health-related, and is governed by this Privacy Policy and other applicable privacy laws.

Beluga separately controls information it collects or maintains in connection with its clinical services. Please also review the Beluga Health Privacy Policy. If a healthcare provider gives you a separate Notice of Privacy Practices, that notice governs the provider’s use and disclosure of PHI.

The information we collect depends on how you use the Platform and may include:

  • Account and contact information: name, email address, telephone number, password credentials, account identifiers, mailing and shipping addresses, and communication preferences.
  • Demographic and eligibility information: date of birth, age, sex or gender information, state of residence, and other information needed to determine service availability.
  • Health and treatment information: symptoms, medical history, allergies, medications, health conditions, questionnaire answers, treatment interests, clinical eligibility information, prescriptions, laboratory information, treatment progress, and information you provide in photographs, documents, or other uploads.
  • Identity-verification information: government ID images, facial-liveness session information, identity-verification results, and related fraud-prevention records. Depending on applicable law, some of this information may be considered biometric or sensitive personal information.
  • Communications: messages with clinicians or support, support-chat transcripts and tickets, feedback, and other communications you send through the Platform, email, telephone, or text message.
  • Payment and transaction information: billing address, Stripe customer and payment-method identifiers, card brand, last four digits, expiration date, payment status, orders, subscriptions, discounts, refunds, and invoices. Alivia does not receive or store your full card number when you use Stripe’s payment fields.
  • Device and usage information: IP address, browser and device type, operating system, timestamps, referring pages, pages or features used, security events, and diagnostic and server log information.

We collect information:

  • directly from you when you use or communicate with the Platform;
  • from clinicians, pharmacies, laboratories, and other participants involved in services you request;
  • from payment, identity-verification, address-validation, shipping, communications, and support providers; and
  • automatically from your browser, device, cookies, local storage, session storage, and ordinary server logs.

We use information to:

  • create, authenticate, maintain, and secure your account;
  • provide the Platform and facilitate care you request, including intake, provider review, prescriptions, pharmacy fulfillment, laboratory services, delivery, follow-up, and support;
  • verify identity, age, location, and eligibility and prevent fraud, misuse, and unauthorized access;
  • process payments, subscriptions, refunds, accounting, and billing;
  • send service, clinical, transaction, security, and support communications;
  • send promotional communications when you have chosen to receive them and as permitted by law;
  • maintain, troubleshoot, analyze, and improve Platform reliability, safety, accessibility, and performance;
  • comply with legal, regulatory, licensing, professional, recordkeeping, audit, and reporting obligations; and
  • establish, exercise, or defend legal claims and enforce our terms and policies.

We disclose only the information reasonably necessary for the applicable purpose, subject to legal and contractual restrictions. We may disclose information to:

  • Clinicians and clinical organizations, including Beluga, for care delivery, clinical review, prescribing, communications, recordkeeping, and healthcare operations.
  • Pharmacies, laboratories, and fulfillment partners for dispensing, testing, order fulfillment, shipping, status updates, and patient support.
  • Infrastructure and technology providers, including Amazon Web Services, for cloud infrastructure, authentication, file storage, security, and identity-verification services. Where a provider handles PHI and a business associate agreement is required, we use one.
  • Stripe and financial-service providers for payment processing, recurring billing, refunds, fraud prevention, and financial recordkeeping.
  • Google address services. When an address is validated or completed, only the entered address text is submitted to Google. It is not submitted with your name, Alivia account identifier, questionnaire answers, treatment information, or an explanation of why the address is being checked.
  • Operational service providers supporting customer service, communications, security, auditing, legal services, accounting, data hosting, and Platform operations.
  • Government authorities or other parties when required by law, valid legal process, licensing obligations, or when reasonably necessary to protect patients, the public, the Platform, or legal rights.
  • Transaction participants in connection with a proposed or completed merger, acquisition, financing, reorganization, bankruptcy, or transfer of business assets, subject to applicable confidentiality and legal requirements.

We do not sell personal information or consumer health data. We do not provide PHI, medical questionnaire answers, identity-verification information, or clinical communications to advertising networks for targeted advertising.

We use identity verification to confirm that a person requesting treatment is an eligible adult and to protect patient accounts and clinical records. A facial-liveness check is processed using services provided within Alivia’s AWS environment, and ID images are submitted to Alivia for verification. Access is limited to authorized Alivia personnel with a business need. Authorized Beluga personnel may request access when reasonably necessary for treatment, identity confirmation, compliance, or patient safety. Service providers may process this information only to provide the supporting infrastructure and verification services.

We do not sell identity-verification or facial-liveness information or use it for advertising. We retain it only for as long as reasonably necessary for verification, fraud prevention, legal and clinical recordkeeping, dispute resolution, and other purposes permitted or required by law. Applicable law may provide additional notice, consent, access, or deletion rights for this information.

The Platform uses technologies necessary to operate the service. These include an authentication cookie, local storage, and session storage used for sign-in, language and interface preferences, support-session continuity, shopping-cart and checkout state, and questionnaire progress. Stripe, AWS, and Google may use their own necessary technologies when their services are loaded.

To preserve progress across the intake and checkout flow, questionnaire information may temporarily remain in your browser. Alivia clears the applicable intake data after a successful checkout or follow-up submission and clears browser-stored application data when you log out. If you abandon a flow or remain signed in, the data may remain until you return, log out, or clear your browser storage. You should use a private device, log out when finished, and avoid allowing others to use an authenticated browser session.

We do not currently use third-party advertising pixels on the Platform or use Platform activity for cross-context behavioral advertising. Browser “Do Not Track” settings do not affect technologies that are necessary to provide and secure the Platform.

Retention depends on the information and why it was collected. We retain information for the period reasonably necessary to provide the Platform and requested care, maintain clinical and business records, comply with healthcare, pharmacy, tax, accounting, licensing, fraud prevention, and other legal obligations, resolve disputes, and enforce agreements. Clinicians, pharmacies, laboratories, and payment processors may retain records under their own legal obligations and privacy policies. Backup copies may remain for a limited period until they are overwritten or deleted under ordinary backup procedures.

When information is no longer required, we delete it, de-identify it, or restrict further use, as appropriate and technically feasible. De-identified information that cannot reasonably identify you may be retained and used as permitted by law.

We use administrative, technical, and physical safeguards designed to protect personal and health information. Information transmitted between your browser and the Platform is encrypted in transit using Transport Layer Security (“TLS”), commonly referred to as Secure Socket Layer (“SSL”). Our safeguards also include access controls, authentication, restricted workforce access, system monitoring, contractual safeguards, and business associate agreements where required. No Internet service or storage system can be guaranteed to be completely secure. Please use a unique password, protect your device, and notify us promptly if you suspect unauthorized account access.

Depending on the information involved and where you live, you may have the right to:

  • confirm whether we process information about you;
  • access or obtain a portable copy of eligible information;
  • correct inaccurate information;
  • request deletion, subject to clinical-record, transaction, security, legal, and other permitted retention obligations;
  • obtain information about categories of recipients or specific recipients where required by law;
  • withdraw consent for future collection or disclosure when processing is based on consent;
  • opt out of promotional communications; and
  • appeal a refusal to act on a privacy request where applicable.

You may update certain account information through the Platform. To submit another privacy request, email support@aliviameds.com with “Privacy Request” in the subject line or write to the address below. Do not email medical records, ID images, or other sensitive information. We will provide a secure method if additional information is needed and may verify your identity before acting. You do not need to create a new account to make a request, and we will not discriminate against you for exercising an applicable privacy right. We will respond within the period required by applicable law. For verified requests under state consumer privacy laws, this is generally within 45 days after receipt, subject to any extension permitted by law. If an extension applies, we will notify you as required.

To the extent Washington’s My Health My Data Act, Nevada consumer health data law, or a similar state law applies to information that is not exempt PHI or otherwise exempt, this section supplements the disclosures above.

  • Categories collected and processed: treatment interests; symptoms, conditions, diagnoses, medications, and medical history; questionnaire answers; prescriptions; laboratory information; treatment progress; health-related communications; identity-verification and facial-liveness information; and information or inferences concerning eligibility for, use of, or requests for healthcare services or products.
  • Sources: you; clinicians; pharmacies; laboratories; service providers; and information generated through your requested use of the Platform.
  • Purposes: the care, fulfillment, payment, identity-verification, security, support, compliance, and Platform operations described in this Policy.
  • Categories shared: the health and treatment, account and contact, identity-verification, communications, transaction, and technical information reasonably necessary for the recipient to perform the applicable purpose described in this Policy.
  • Third-party categories: clinicians and clinical organizations, including Beluga Health, P.A.; dispensing pharmacies, including Belmar Pharmacy; laboratories; infrastructure, identity-verification, payment, communications, support, fulfillment, and professional-service providers; and authorities or other parties when permitted or required by law. Relevant processors described elsewhere in this Policy include Amazon Web Services and Stripe.
  • Affiliates: Alivia Healthcare is a trade name of QuickRx LLC, not a separate corporate affiliate. We do not currently share consumer health data with a corporate affiliate.
  • How it is processed: consumer health data is collected through the Platform or received from the sources above, transmitted using TLS/SSL, stored in access-controlled systems, accessed and used by authorized personnel and processors only as reasonably necessary for the disclosed purposes, and retained or deleted as described in the Retention section.

We collect and disclose consumer health data as reasonably necessary to provide a product or service you request, with your consent when required, or as otherwise permitted by law. We do not sell consumer health data. You may exercise applicable access, recipient-list, withdrawal, deletion, or appeal rights using the privacy-request method described above. Withdrawing consent may prevent us from providing a feature or service that depends on the affected information.

You may also use that method to ask us to review or correct consumer health data or to appeal a refusal to act on a request. If we deny an appeal, we will provide the information about further options required by applicable law. We do not permit a third party to collect consumer health data through the Platform over time and across unaffiliated websites or online services for targeted advertising. Google address services receive only address text as described above and are not provided health information or healthcare context.

We may send non-promotional communications needed for your account, requested care, orders, payments, safety, security, or support. If you choose to receive promotional email or text communications, you may opt out using the instructions in the message or by contacting us. Opting out of promotions does not stop necessary service or clinical communications. Message and data rates may apply to text messages.

The Platform’s treatment services are intended for adults age 18 or older. We do not knowingly offer treatment through the Platform to minors. If you believe a minor has submitted information, contact us so we can review and take appropriate action.

The Platform may link to or integrate services governed by their own privacy policies. This Policy does not replace the privacy policy or notice of a clinician, pharmacy, laboratory, payment processor, or other third party when that party acts independently. We encourage you to review those notices.

We may update this Policy as our services, data practices, or legal obligations change. We will post the revised Policy and update the effective date. When required, we will provide additional notice or obtain consent before a material change applies.

Questions, complaints, and privacy requests may be directed to:

QuickRx LLC (d/b/a Alivia Healthcare)
Attn: Privacy
c/o Alejandro Otaola
5052 Pope John Paul II Blvd
Suite 108, PMB 1006
Ave Maria, FL 34142
United States
support@aliviameds.com
(202)714-9779