Legal
Privacy Policy
Last updated: May 2025
1. Information We Collect
RXtrader collects information necessary to operate a licensed B2B pharmaceutical procurement platform: account registration details (legal name, company name, DEA registration number, state license numbers, contact information); transaction data (purchase orders, invoices, shipping records, escrow activity); identity verification documents; usage data; and device and network information for security monitoring.
2. How We Use Your Information
- Operate the marketplace and process transactions through our hub-and-spoke verification model
- Verify DEA registration and state licensure prior to enabling transactions
- Comply with DEA record-keeping requirements, state pharmacy board regulations, and federal pharmaceutical distribution law
- Detect and prevent fraud, unauthorized access, and regulatory violations
- Send transactional communications including order confirmations and compliance notices
3. Sharing of Information
We do not sell personal data. Information is shared only between verified transaction parties to fulfill an order; with our hub inspection partner(s); with Authorize.net for payment processing; with DEA and state regulatory agencies as required by law; and with law enforcement when legally compelled.
4. Data Retention
Transaction records, identity verification documents, and DEA-reportable activity logs are retained for a minimum of seven (7) years in compliance with federal pharmaceutical distribution regulations. Account data is retained for the duration of the account relationship and for two years following account closure.
5. Security
All data is encrypted in transit (TLS 1.2+) and at rest. Access to sensitive records is role-restricted and logged. We conduct periodic security reviews consistent with the sensitivity of pharmaceutical distribution data.
6. Contact
Privacy inquiries: privacy@rxtrader.com
RXtrader, Inc. • Licensed B2B Pharmaceutical Marketplace