Effective date: September 2, 2025
At RxReg, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use RxReg.
This Policy applies to visitors and registered users of RxReg. RxReg is a tool for pharmacovigilance literature review and reporting. It is not intended to receive or process patient-identifiable information. Please avoid uploading any personal or special category data (e.g., health data about identifiable individuals) to the platform.
| Purpose | Examples | Legal Basis |
|---|---|---|
| Provide the service | Account management, running searches, generating reports | Performance of a contract (Art. 6(1)(b)) |
| Security & fraud prevention | 2FA, rate limiting, audit & access logs | Legitimate interests (Art. 6(1)(f)) and/or legal obligations (Art. 6(1)(c)) |
| Payments & billing | Process payments, receipts, invoices | Performance of a contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)) |
| Product improvement | Diagnostics, error tracking, usage patterns | Legitimate interests (Art. 6(1)(f)) |
| Analytics (optional where consented) | GA4 pageviews & events | Consent (Art. 6(1)(a)), where required |
| Communications | Service notifications, 2FA, critical updates | Performance of a contract (Art. 6(1)(b)) / Legitimate interests (Art. 6(1)(f)) |
RxReg uses Google Analytics 4 to understand aggregate usage and improve the product. GA4 may set cookies or use similar technologies. You can control cookies in your browser and opt out of Google Analytics via the GA opt-out add-on.
If your jurisdiction requires consent for analytics cookies, we will rely on your consent and only run analytics after you consent (via our banner or settings, where applicable).
Payments are processed securely by Stripe. RxReg never sees or stores your full card number or security code. For details on Stripe’s processing, see Stripe’s Privacy Policy.
We do not sell or rent personal data. We share data only with:
We use appropriate Data Processing Agreements and, where relevant, Standard Contractual Clauses (SCCs) for international transfers.
We primarily process data in the EU/EEA where feasible. If personal data is transferred outside the EU/EEA, we rely on lawful transfer mechanisms (e.g., SCCs) and implement additional safeguards where appropriate.
If you are in the EU/EEA or a similar jurisdiction, you may have rights to: access, rectification, erasure, restriction, portability, and to object to processing (including objecting to processing based on legitimate interests), and to withdraw consent at any time (where processing is based on consent). You also have the right to lodge a complaint with your local authority (e.g., in Denmark: Datatilsynet).
To exercise rights, contact us at contact@rxreg.com. We may need to verify your identity and confirm account ownership.
We implement industry-standard measures (encryption in transit, access controls, least-privilege, auditing). No online system is 100% secure; please use a strong, unique password and enable 2FA.
RxReg is not directed to children under 16 and should not be used by them.
We may update this Policy from time to time. Material changes will be indicated by updating the “Effective date” above. Continued use of RxReg after changes means you accept the updated Policy.
Questions or requests: contact@rxreg.com.