Privacy Policy
This Privacy Policy explains how You First Agency, LLC, doing business as Dispense Flow ("Dispense Flow", "we", "us"), collects, uses and shares personal information when you visit dispenseflow.com, book a demo, use our lead forms, or operate a brand on the Dispense Flow platform (together, the "Services"). Our mailing address is 9461 Charleville Blvd #1235, Beverly Hills, CA 90212.
Scope and patient health information
This policy covers website visitors and customers: the practices, brands and companies (and their staff) that use Dispense Flow to sell prescription treatments online.
It does not cover the patients of our customers. When a patient completes intake, places an order or receives care through a storefront built on Dispense Flow, that information is Protected Health Information ("PHI") controlled by the customer, the treating provider and the dispensing pharmacy. We process it only as a business associate under our Business Associate Agreement and the customer's instructions, and it is governed by the customer's own privacy notice. If you are a patient, contact the brand you ordered from.
Information we collect
Information you give us.
- Contact and account details: name, email, phone, practice or brand name, business type, monthly patient volume, and anything you type into a form, a demo booking, the AI site builder or support conversations.
- Billing details: plan, billing address and payment status. Card numbers are collected by our payment processor, never stored by us.
- Customer content: the pages, products, questionnaires and settings you create on the platform.
Information collected automatically.
- Device and usage data: IP address, browser, operating system, pages viewed, referring URL, time on page and clicks, collected through cookies, pixels and similar technologies described below.
- Campaign data: UTM parameters and ad click identifiers (such as gclid) from the link that brought you here, stored in a first-party cookie for 90 days so we can attribute your booking or signup to its source.
Information from other sources. Scheduling data from Cal.com when you book a demo, CRM enrichment from HubSpot, and business contact data from public sources or partners.
How we use information
- Provide, secure and improve the Services, including building and hosting your storefront.
- Respond to demo requests and support, and run the demo you booked.
- Send transactional email about your account, and marketing email about the platform which you can opt out of at any time.
- Measure and attribute marketing, including which campaign led to a booking.
- Detect fraud and abuse, enforce our Terms and Acceptable Use Policy, and comply with law.
- Aggregate or de-identify data for analytics and product research. De-identified data is not personal information.
Your choices and rights
- Unsubscribe from marketing email through the link in any message. We will still send account and billing notices.
- Access, correct, export or delete your account data by emailing privacy@dispenseflow.com. Customers can export their data from the dashboard at any time.
- Opt out of targeted advertising cookies on the Do Not Sell or Share page.
California residents
Under the California Consumer Privacy Act, as amended by the CPRA, you have the right to know what personal information we collect and how it is used and shared, to delete it, to correct it, to opt out of sale or sharing, to limit use of sensitive personal information, and not to be discriminated against for exercising these rights.
In the past 12 months we have collected the categories described above (identifiers, commercial information, internet activity, professional information and inferences) for the purposes listed. We disclose them to the service providers described above. We do not sell personal information and we do not knowingly collect information from anyone under 18.
To exercise a right, email privacy@dispenseflow.com or write to 9461 Charleville Blvd #1235, Beverly Hills, CA 90212. We will verify your request by matching it to information we hold, and you may use an authorized agent with written permission. We respond within 45 days.
Other US state residents
Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with comprehensive privacy laws have similar rights of access, correction, deletion, portability and opt-out of targeted advertising. Use the same contact to exercise them, and you may appeal a decision by replying to our response.
Security
We use administrative, technical and physical safeguards appropriate to the data, including encryption in transit and at rest, access controls, audit logging and staff training. No system is perfectly secure; report suspected vulnerabilities to security@dispenseflow.com.
Retention
We keep personal information for as long as needed for the purposes above: account data for the life of the account plus a period required for legal, tax and dispute purposes; marketing data until you opt out; analytics data in aggregate. PHI is retained and returned or destroyed as set out in the BAA.
Children
The Services are for businesses and adults. We do not knowingly collect information from anyone under 18, and we delete it if we learn we have.
International visitors
We are based in the United States and process data here. If you visit from elsewhere, you consent to transfer to and processing in the United States, where privacy laws may differ from yours.
Changes
We may update this policy. The effective date at the top changes when we do, and we will notify customers of material changes by email or in the dashboard. Continued use after the effective date means you accept the update.
Contact
Controller. The entity responsible for your information is Dispense Flow, or any affiliate or successor entity that operates the Services as described in our Terms.
Dispense Flow
9461 Charleville Blvd #1235, Beverly Hills, CA 90212
privacy@dispenseflow.com