HOTUBPRESCRIPTION.COM (LOTARX, LLC)
Privacy Policy
LotaRx, LLC DBA HotTubPrescription.com Last Updated: July 26, 2026 | www.hottubprescription.com/privacy-policy
1. Introduction and Scope
LotaRx, LLC d/b/a Hot Tub Prescription, a Florida limited liability company (“Hot Tub Prescription,” “Company,” “we,” “us,” or “our”), is an independent platform that connects adult customers with independent licensed healthcare providers practicing in all 50 U.S. states. The Services enable a customer to submit a clinical request for independent review; if clinically appropriate, a licensed provider may issue a prescription and/or Letter of Medical Necessity for a wellness device (such as a hot tub, swim spa, cold plunge, or sauna) that the provider determines is medically necessary for that individual.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit www.hottubprescription.com, submit a request for services, communicate with us, or otherwise interact with services that link to this policy (collectively, the “Services”).
The Services are intended only for adults age 18 or older who are submitting a request for themselves. The Services do not permit a parent, guardian, caregiver, or other person to submit a clinical request on behalf of a minor or another adult unless we expressly authorize a legally compliant process in writing.
This policy applies to information collected through the Services, including through website forms, email, text messages, payment and transaction interactions, and advertising or analytics technologies that link to or are described in this policy. It does not apply to third-party websites, applications, or services that maintain their own privacy policies.
Hot Tub Prescription is independent of the licensed clinicians who review requests. Clinical determinations, the evaluation of questionnaire responses, and the decision whether to issue a prescription or Letter of Medical Necessity are made solely by the independent licensed healthcare provider (under the professional responsibility and liability of that provider and the Chief Medical Officer overseeing the clinical network). Hot Tub Prescription does not practice medicine and does not make clinical decisions.
Customers sometimes use an issued Letter of Medical Necessity in connection with HSA/FSA reimbursement requests or federal tax deductions. Eligibility for any such use varies by individual circumstances, plan rules, and tax law. Hot Tub Prescription does not provide tax, legal, or reimbursement advice. You should consult your own tax advisor, accountant, attorney, or plan administrator regarding any HSA/FSA or tax matters.
2. Health Information, HIPAA, and Clinician Privacy Notices
Some information you submit may be used by an independent licensed healthcare provider to evaluate your request. When information qualifies as protected health information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”), that PHI is governed by HIPAA and, where applicable, by the privacy practices and Notice of Privacy Practices of the healthcare provider or other HIPAA covered entity responsible for the clinical services.
Hot Tub Prescription may receive, maintain, or transmit PHI on behalf of a healthcare provider only to the extent permitted by applicable law and any required written agreement (including a Business Associate Agreement where required). Information that is not PHI, including information collected before a provider-patient relationship is established, website activity, marketing data, and information maintained outside a HIPAA-covered workflow, is governed by this Privacy Policy and other applicable privacy laws.
3. No User Accounts
The Services do not currently require or provide user accounts. You cannot access or update information by logging in. To request access, correction, deletion, or another privacy right, use the contact methods listed in Section 15.
4. Notice at Collection: Categories of Personal Information
We may collect the following categories of personal information. The examples are illustrative and may not apply to every user.
Category Examples Purposes Sources Identifiers and contact information Name, mailing address, email address, telephone number, IP address, device identifiers Provide Services; communicate; verify requests; security; marketing where permitted Directly from you; devices; service providers; marketing partners Commercial and transaction information Products or services requested, retailer, order details, payment status, refunds, transaction history Process requests, payments, documentation, customer service, accounting, fraud prevention Directly from you; payment processors; retailers or service providers Health and medical information Intake questionnaire responses, reported symptoms or conditions, medical history, supporting records, clinician determinations, prescriptions, Letters of Medical Necessity Clinical review by independent licensed providers; issue and maintain documentation; comply with healthcare and recordkeeping obligations Directly from you; licensed providers; authorized sources Internet and network activity Browsing activity, pages viewed, links clicked, referring URL, cookie and pixel data, browser and device information Operate and secure the Website; analytics; attribution; marketing and advertising subject to your choices Automatically from devices; cookies, pixels, analytics and advertising partners Geolocation information Approximate location inferred from IP address or device settings Security; localization; analytics; legal compliance Automatically from devices and service providers Inferences and marketing data Likely interests, audience segments, campaign attribution, or information associated with an email address by advertising or identity-resolution vendors Measure campaigns; personalize communications; targeted advertising where permitted Analytics, advertising, data, and identity-resolution partners Communications and survey information Emails, text messages, customer-service communications, feedback, survey responses Respond to inquiries; support; improve Services; maintain records Directly from you Sensitive personal information Health information, account credentials if ever created, precise geolocation if enabled, and other data treated as sensitive by law Provide requested Services; comply with law; security. We do not use sensitive personal information to infer characteristics except as necessary to provide the Services Directly from you; providers; devices; authorized sources
5. Information You Provide
Information you enter into forms, including your name, contact details, requested product or service, retailer information, and responses to eligibility or intake questions.
Health-related information and supporting records submitted for independent clinical review by a licensed healthcare provider.
Payment and transaction information. Payment card details may be collected directly by a third-party payment processor; we may receive transaction status and limited payment-related information.
Correspondence, support requests, complaints, feedback, and survey responses.
Any other information you choose to provide or authorize another source to provide to us.
You must provide accurate information about yourself. Do not submit information about a minor or another person through the clinical request process.
6. Automatic Collection, Cookies, and Tracking Technologies
When you use the Website, we and our service providers may automatically collect information about your device, browser, network, and activity through cookies, web beacons, pixels, software development kits, server logs, and similar technologies. This information may be linked to identifiers or contact information received from you or from third parties.
Some advertising, analytics, or identity-resolution vendors may use these technologies to associate activity on the Website or in our emails with information they or others maintain, including an email address, and to support campaign measurement, marketing communications, or interest-based advertising. You may opt out of Retention.com-related matching at https://app.retention.com/optout and may use industry opt-out tools offered by the Network Advertising Initiative (NAI). Browser settings may also allow you to block or delete cookies, although some Website functions may not work properly.
7. How We Use Personal Information
Provide, administer, and improve the Services and Website.
Receive and route requests to independent licensed healthcare providers for clinical review.
Process transactions, payments, refunds, and customer-service requests.
Create, maintain, and deliver prescriptions, Letters of Medical Necessity, or other issued documentation (issued solely by the independent licensed provider).
Communicate with you about your request, the Services, policy changes, and support matters.
Prevent fraud, protect security, debug, maintain functionality, and enforce our agreements.
Comply with legal, regulatory, tax, accounting, healthcare, and recordkeeping obligations.
Measure and improve marketing campaigns and, where permitted by law and subject to your choices, deliver or facilitate targeted advertising.
Use information for another purpose disclosed at collection or with your consent.
Licensed healthcare providers (under the professional responsibility and liability of the reviewing clinician and the Chief Medical Officer) make all clinical determinations using their independent professional judgment. Hot Tub Prescription does not use automated decision-making or artificial intelligence to make final clinical determinations and does not practice medicine.
8. How We Disclose Personal Information
We may disclose personal information as follows:
To independent licensed healthcare providers and their authorized personnel for review and administration of your request.
To contractors and service providers that support hosting, communications, analytics, payments, security, customer service, document delivery, compliance, and other business operations, subject to appropriate contractual restrictions.
To affiliates and subsidiaries for purposes consistent with this policy.
To government agencies, regulators, courts, law enforcement, or other parties when required by law or when reasonably necessary to protect rights, safety, security, or prevent fraud.
In connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to applicable law.
At your direction, with your consent, or for another purpose disclosed when you provide the information.
9. Retailer Sharing
If a prescription and/or Letter of Medical Necessity is issued and you authorize retailer sharing on the request form, we may share only the issued documentation (the prescription and/or Letter of Medical Necessity), your name, and the basic order details needed to match the documentation to your purchase with the retailer you identify or purchase from. This disclosure is made solely so the retailer can prepare or submit tax-exemption or other paperwork connected to your purchase.
Your questionnaire responses, medical history, and any records you upload are not shared with your retailer.
You may decline retailer sharing or revoke your authorization for future disclosures at any time by emailing info@hottubprescription.com. Revocation will not affect disclosures already made in reliance on your authorization.
10. Sale, Sharing, Targeted Advertising, and Your Choices
We do not sell personal information for money. However, certain uses of advertising, analytics, or identity-resolution technologies may be considered a “sale,” “sharing,” or use for targeted advertising under some state privacy laws, even when no money is exchanged. Depending on the technologies in use and the law that applies to you, you may have the right to opt out.
You may submit an opt-out request by emailing info@hottubprescription.com with the subject line “Privacy Opt-Out.” You may also use the Retention.com opt-out at https://app.retention.com/optout and available industry opt-out tools, including those offered by the NAI. We will process applicable requests as required by law.
Where required by applicable law and technically supported by the Website, we will treat a recognized browser-based opt-out preference signal, such as Global Privacy Control, as a request to opt out for the browser or device sending the signal.
We do not sell or share sensitive personal information or health information for targeted advertising.
11. Retention
We retain personal information for as long as reasonably necessary for the purposes described in this policy, including to provide the Services, complete transactions, maintain business and compliance records, resolve disputes, enforce agreements, protect security, and satisfy legal, tax, accounting, and regulatory obligations.
Records relating to clinical review, prescriptions, Letters of Medical Necessity, and other issued documentation are retained for at least the period required by applicable medical-records and professional-practice laws. We may be unable to delete those records during the required retention period, even if you request deletion. Other information is retained according to the nature of the information, the purpose for which it was collected, legal requirements, and operational need, and is deleted or deidentified when no longer reasonably necessary.
12. Security
We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for using a secure device and connection when submitting sensitive information.
13. State Privacy Rights
Depending on your state of residence and subject to legal exceptions, you may have rights regarding personal information, including the rights to know or access, correct, delete, obtain a portable copy, opt out of sale, sharing, targeted advertising, or certain profiling, limit certain uses of sensitive personal information, withdraw consent, and appeal a denied request. We will not unlawfully discriminate against you for exercising a privacy right.
Jurisdiction Summary California Rights to know/access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and non-discrimination, where the CCPA/CPRA applies. Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with comprehensive privacy laws Rights vary by state and may include access, correction, deletion, portability, opt-out, consent withdrawal, and appeal rights, subject to applicability thresholds and exemptions. Washington and Nevada consumer health laws Residents may have additional rights regarding consumer health data, including access, deletion, withdrawal of consent, and restrictions on collection or sharing, where applicable. Nevada Residents may submit applicable sale opt-out requests under Nevada law.
14. Exercising Your Rights
To submit a privacy request, email info@hottubprescription.com or write to the address in Section 15. Please describe the right you wish to exercise and provide enough information for us to identify the relevant records and verify your request. We may request additional information when reasonably necessary to verify identity or authority. Authorized agents may submit requests where permitted by law, but the underlying clinical request itself must be submitted by the adult requesting services for themselves.
We will respond within the time required by applicable law. We may deny or limit a request where an exception applies, including when records must be retained under medical-records, tax, fraud-prevention, security, or other legal requirements. Where required, our response will explain how to appeal a denied request.
15. Children and Eligibility
The Services are not directed to persons under 18, and no person under 18 may submit information through the Services. We do not knowingly collect personal information from persons under 18 through the clinical request process. A parent, guardian, caregiver, or other person may not use the Services to submit a request on behalf of a minor or another adult unless we expressly provide a separate legally compliant process. If we learn that information was submitted in violation of this section, we may delete it, subject to legal retention obligations.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last Updated” date at the top. Your continued use of the Services after the revised policy becomes effective is subject to the updated policy, to the extent permitted by law. Please review this page periodically for changes.
17. Contact Information
To ask questions, submit a privacy request, appeal a decision where applicable, or comment on our privacy practices, contact:
LotaRx, LLC d/b/a Hot Tub Prescription
info@hottubprescription.com
Phone: (239) 310-9060