Privacy Policy

1. What this document reaches

Everything described below concerns hardrxs.com only. The merchant's checkout, the prescribing practice and the dispensing pharmacy each run their own operations under their own policies. The instant you follow an order link you have left us, and whatever you type on the far side — medical answers, card numbers, shipping details — is governed there. It never reaches our systems in any form.

2. Information you actively supply

The only thing we collect directly is an email address, and only when you type one into the newsletter box in our footer. There is no contact form, no account, and no questionnaire on this site. We ask for no medical detail, no prescription record, no identity document and no payment information anywhere, and we would rather you did not send any of it to us.

3. Information gathered as pages load

Standard web infrastructure records technical details automatically: the IP address making the request, browser name and version, operating system, device class, viewport size, the referring address, which pages were served, and timestamps. We look at this in aggregate to understand traffic volumes, locate broken pages and judge which articles earn their place. No attempt is made to resolve it back to a named individual.

4. Cookies and equivalents

Three categories are in use here. Essential cookies keep basic functionality working. Measurement cookies count visits and page reads. Referral cookies record that a visitor arrived at the merchant from this site, so that any commission is credited correctly; these expire after a defined period.

Every mainstream browser lets you refuse or erase cookies through its settings, and measurement providers publish their own opt-out mechanisms. Refusing some categories may alter how parts of this site behave. Where a Global Privacy Control signal is technically detectable, we act on it.

5. Purposes

Sending the emails you asked for. Measuring and improving what we publish. Attributing referrals so commissions land correctly. Identifying fraud, abuse and security incidents. Meeting obligations imposed on us by law. Nothing here is fed into automated decision-making that produces legal or comparably significant consequences for you.

6. Selling and sharing

Personal information is not sold, and it is not shared for cross-context behavioural advertising, using those phrases as California's statutes define them. Disclosure happens only to processors acting for us under written contract — hosting, email delivery, analytics and the affiliate network — and where compelled by law, a court order or a legitimate governmental demand, or where genuinely necessary to protect rights, property or someone's safety. A transfer of the business could pass information to a successor bound by the same commitments.

7. Retention periods

Newsletter addresses persist until you unsubscribe, at which point they are removed. Measurement data is held in de-identified aggregate form. Access logs rotate out after a short operational window. Because the categories we hold are so narrow, there is very little to retain in the first place.

8. Rights available to you

Residents of California hold rights under the CCPA as amended by the CPRA, and residents of a growing list of other states hold comparable rights under their own statutes. Broadly these cover knowing what is held, obtaining a copy, correcting inaccuracies, requesting erasure, opting out of sale or sharing (neither of which we do), and not being penalised for exercising any of them.

Send requests to CustomerService@hard.health using "Privacy Request" as the subject line. Verification is performed against the address on file and we respond inside the statutory window. An authorised agent may act for you on production of written authorisation.

9. Safeguards

Pages are delivered exclusively over HTTPS and reasonable administrative and technical controls protect the limited data we hold. Absolute security cannot be promised by anyone operating online. The mitigating factor here is scope: since no health or financial data is collected, the material at risk amounts to a list of email addresses.

10. Minors

Nothing on this site is aimed at anyone under 18 and we do not knowingly gather information from minors. Tell us if you believe a minor has submitted something and it will be deleted.

11. Do Not Track

No consistent industry standard exists for interpreting Do Not Track headers, and browsers differ in how they emit them, so we do not act on that signal. Global Privacy Control signals are honoured where detectable.

12. Revisions

Practices change and so does the law, so this document will be updated from time to time. The date at the head of the page marks the latest revision, and material changes will be reflected there.

Anything unclear on this page? Write to CustomerService@hard.health or call 855-927-0390.