Privacy

Scope and Applicability

This Privacy Policy describes how One-Stop Script Junction ("OSSJ," "we," "us," or "our") collects, uses, discloses, and safeguards personal information when you access or use ossj.org and related services in the United States. It applies to information we collect online and offline, including through our website, tools, communications, and customer support. This Policy is intended to comply with applicable U.S. federal and state privacy laws.

About Us

One-Stop Script Junction is owned and operated by Leslie Jones. Mailing address: 115 South Ave, Rochester, NY 14604, United States. Contact email: [email protected].

Notice at Collection (California and Similar State Laws)

Categories of Personal Information We Collect

• Identifiers and contact information (e.g., name, email address, IP address, device identifiers).
• Commercial and preference information (e.g., saved drugs, price alerts, items you view, comparison histories).
• Internet/network activity (e.g., pages viewed, clicks, referring/exit pages, timestamps, browser and device data).
• Approximate geolocation (derived from IP or as provided by you).
• User-generated content (e.g., inquiries, feedback, reviews).
• Inferences drawn from the above (e.g., predicted preferences or interests related to medications or savings).
• Sensitive personal information (only if you choose to provide it), such as health-related information about conditions, medications, or treatment preferences. We do not collect Social Security numbers, driver’s license numbers, or precise geolocation unless explicitly provided by you for a specific feature.

Purposes for Collection and Use

• Provide, maintain, and improve our services and tools.
• Price comparison, generic/brand evaluations, and content personalization at your request.
• Customer support and communications, including responding to inquiries.
• Analytics, research, and service optimization.
• Marketing and outreach, including interest-based advertising where permitted by law.
• Security, fraud prevention, debugging, and legal compliance.
• To honor opt-out preferences and manage consent.

Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described, including to comply with legal, accounting, or reporting requirements. Typical retention periods may include: account and preference data until deletion; support communications for up to 5 years; analytics and event logs for approximately 24 months; and cookies for 1 to 24 months depending on their purpose. We may retain de-identified or aggregated information without time limits.

Sale or Sharing of Personal Information

We do not sell personal information for money. We may "share" personal information (as defined under California law) with third parties for cross-context behavioral advertising or engage in targeted advertising under certain state laws. Categories potentially shared include identifiers and internet/network activity. You may opt out as described in the "Your Privacy Rights" and "Opt-Out Preferences and Global Privacy Control" sections below. We do not use or disclose sensitive personal information for purposes other than those permitted by applicable law (e.g., to provide requested services, ensure security, or perform short-term, transient uses).

HIPAA and Medical Information

OSSJ is not a healthcare provider, pharmacy, health plan, or a business associate as those terms are defined under the Health Insurance Portability and Accountability Act (HIPAA). Information you provide to us is governed by this Privacy Policy and not by HIPAA. Do not submit protected health information intended for clinical diagnosis or treatment. Our tools are informational and not a substitute for the professional judgment of your healthcare provider.

Sources of Personal Information

• Directly from you (e.g., when you search, save preferences, contact us, or subscribe).
• Automatically from your device and browser through cookies and similar technologies.
• Service providers and partners (e.g., analytics providers, advertising partners, affiliate networks).
• Publicly available sources or data enrichment services, where permitted by law.

How We Use Personal Information

• To operate, deliver, and improve our services, including medication comparison and educational content.
• To personalize content and remember preferences.
• To communicate with you about features, updates, and administrative matters.
• For security, fraud prevention, debugging, and quality assurance.
• To comply with legal obligations and enforce our terms.
• For research, analytics, and de-identified/aggregated reporting.

Cookies and Tracking Technologies

We and our service providers use cookies, web beacons, SDKs, and similar technologies to operate the site, remember preferences, analyze traffic, and, where permitted, to provide interest-based advertising. You can control certain cookies through your browser settings. If you block or delete cookies, some features may not function properly.

Online Advertising, Analytics, and Affiliate Relationships

We may use analytics services to understand site usage and performance. We may work with advertising and affiliate partners that collect or receive information about your interactions with our services and other sites to provide measurement and, where permitted, interest-based ads or to attribute referrals. These activities may constitute "sharing" or a "sale" under some state laws. You can opt out as described below.

We may earn commissions when you visit or transact with third-party pharmacies or merchants via our links or tools. Those third parties have their own privacy practices, which we do not control.

Disclosure of Personal Information

• Service providers and processors that perform services on our behalf (e.g., hosting, analytics, security, communications, customer support).
• Advertising, measurement, and affiliate partners, where permitted by law and subject to your choices.
• Business transfers in connection with a merger, acquisition, reorganization, or sale of assets.
• Legal, compliance, and safety purposes (e.g., to comply with law or protect rights, property, or safety).
• With your direction or consent (e.g., when you use a feature that shares information).

We may disclose de-identified or aggregated information that does not reasonably identify you.

Your Privacy Rights

U.S. State Privacy Rights (e.g., CA, CO, CT, UT, VA)

• Right to know/access: Request the categories and specific pieces of personal information we have collected about you.
• Right to data portability: Receive certain information in a portable format.
• Right to delete: Request deletion of personal information, subject to legal exceptions.
• Right to correct: Request correction of inaccurate personal information.
• Right to opt out: Opt out of the sale or sharing of personal information and out of targeted advertising or profiling where applicable.
• Right to limit use/disclosure of sensitive personal information (CA): Request that we limit use of sensitive personal information to permitted purposes.
• Non-discrimination: We will not discriminate against you for exercising your rights.
• Appeal (CO/CT/VA and others): If we deny your request, you may appeal our decision.

How to Exercise Your Rights

You may submit requests by emailing [email protected] or by mail to: Privacy Request, One-Stop Script Junction, 115 South Ave, Rochester, NY 14604, United States. Please provide your name, the nature of your request, the state of residence, and sufficient information for us to verify your identity (and the identity of any authorized agent). We may request additional information solely to verify and process your request. We will respond within the timeframes required by applicable law and will honor opt-out requests as promptly as required.

Opt-Out Preferences and Global Privacy Control

You may opt out of sale/sharing/targeted advertising by contacting us as described above. Where required by law, we recognize a browser-based Global Privacy Control (GPC) signal as a request to opt out for that browser. Additional cookie controls may be available via your browser settings.

Nevada Residents

Nevada residents may submit a request to opt out of the sale of personal information by emailing [email protected] with the subject line "Nevada Do Not Sell Request." We do not currently sell personal information as defined under Nevada law.

Children’s Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it. Parents or guardians who believe we may have collected information from a child under 13 may contact us at [email protected].

Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain personal information as described in the "Notice at Collection" section and as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, we take steps to delete, de-identify, or aggregate information consistent with applicable law and our data governance practices.

Third-Party Sites and Services

Our services may link to or integrate with third-party websites, pharmacies, tools, or services that we do not control. Their practices are governed by their own privacy policies. We encourage you to review those policies before providing information or transacting with third parties.

International Users (EEA/UK/Switzerland and Others)

If you access our services from outside the United States, you acknowledge that your information will be processed in the United States, where data protection laws may differ from those in your jurisdiction. Where required, we rely on appropriate legal bases for processing (e.g., consent, performance of a contract, legitimate interests, legal obligations) and implement appropriate transfer safeguards for cross-border transfers. You may have rights under applicable laws in your country (such as access, deletion, correction, and objection/withdrawal of consent). To exercise these rights, contact us at [email protected].

Accessibility and Alternative Formats

If you need this Privacy Policy in an alternative format due to a disability, please contact us at [email protected] and we will provide a reasonable accommodation.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post the updated Policy with a new effective date. Your continued use of our services after an update constitutes acceptance of the revised Policy.

Contact Us

For questions or requests regarding this Privacy Policy, please contact: One-Stop Script Junction, Attn: Privacy, 115 South Ave, Rochester, NY 14604, United States; Email: [email protected].

Effective date: September 25, 2025.