Scope and Definitions
This Data Protection Notice ("Notice") describes how Med Options, No Worries ("MONW," "we," "us," or "our") processes personal data in connection with the website monw.org and related services (collectively, the "Site"). This Notice is designed to align with core principles of the EU/UK General Data Protection Regulation (GDPR) while complying with applicable laws of the United States of America. For purposes of this Notice, "Personal Data" means information that identifies, relates to, describes, or could reasonably be linked with an identified or identifiable individual, including analogous definitions under U.S. state privacy laws.
By using the Site, you acknowledge that your Personal Data will be processed in the United States and as described herein.
Identity of the Controller and Contact Details
Controller: Jack Chen
Postal Address: 550 Mamaroneck Ave, Harrison, NY 10528, USA
Email: [email protected]
If you have questions about this Notice or our privacy practices, please contact us using the details above.
Categories of Personal Data We Collect
Information You Provide
- Contact details (e.g., name, email address) when you submit inquiries or request information.
- Content you submit (e.g., medication names you enter into comparison charts or the interaction checker, preferences, feedback, survey responses).
- Account or profile details if we offer and you choose to create an account.
Information Collected Automatically
- Technical data such as IP address, device identifiers, browser type, operating system, referring URLs, and approximate location derived from IP.
- Usage data such as pages viewed, features used, timestamps, and diagnostic logs.
- Cookies and similar technologies used for essential functionality, analytics, preferences, and security.
Sensitive Personal Data and Health-Related Information
The Site may allow you to voluntarily input health-related information, such as medications or supplements, solely to enable features like comparison charts or interaction checking. We do not seek medical diagnoses or patient identifiers and are not a covered entity or business associate under HIPAA. Information you enter on the Site is not a medical record and is for educational purposes only. Please avoid submitting information that identifies another person without authorization.
Purposes of Processing and Legal Bases
- To provide and operate the Site and its features (including medication comparisons and interaction checking) – based on performance of a contract where applicable or our legitimate interests to deliver and maintain the Site.
- To respond to inquiries and provide customer support – based on our legitimate interests and, where required, your consent.
- To personalize content, conduct analytics, and improve the Site – based on our legitimate interests; where legally required for non-essential cookies/trackers, we rely on your consent.
- To maintain security, prevent fraud, and ensure integrity of our services – based on our legitimate interests and legal obligations.
- To comply with applicable laws, enforce our terms, and establish or defend legal claims – based on legal obligations and legitimate interests.
- To process health-related inputs you voluntarily provide solely to deliver the requested functionality – based on your explicit consent, which you may withdraw at any time.
Cookies and Similar Technologies
We use the following categories of cookies: (i) strictly necessary cookies to enable core functionality; (ii) preference cookies to remember settings; and (iii) analytics cookies to understand Site performance and usage. You may manage cookies through your browser settings. Where required by law, we obtain your consent before setting non-essential cookies. Disabling certain cookies may impair Site functionality.
Disclosures and Categories of Recipients
- Service providers (processors) that perform services on our behalf, such as hosting, cloud storage, analytics, email delivery, customer support tools, and security monitoring. These providers are bound by contractual obligations to process Personal Data only as instructed and to implement appropriate safeguards.
- Legal and compliance recipients where we are required or permitted to do so by law or to protect rights, safety, and property.
- Business transferees in connection with a merger, acquisition, reorganization, or other corporate transaction.
We do not sell Personal Data and do not share Personal Data for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws.
International Data Transfers
Our systems are hosted in the United States. If you access the Site from the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, your Personal Data will be processed in the United States, which may not provide the same level of data protection as your jurisdiction. Where GDPR applies, we implement appropriate safeguards for transfers to processors, such as standard contractual clauses and supplementary measures, as relevant.
Retention
We retain Personal Data for as long as necessary to fulfill the purposes described in this Notice, including to comply with legal, accounting, or reporting requirements, resolve disputes, and enforce agreements. Retention periods are determined by factors such as the nature and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and applicable legal requirements. In some cases, we may anonymize data so it can no longer reasonably identify you, in which case we may retain such data for longer.
Security
We implement administrative, technical, and physical safeguards designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. No method of transmission over the internet or method of electronic storage is fully secure; therefore, we cannot guarantee absolute security.
Your Privacy Rights
Rights for Individuals in the EEA/UK
Where GDPR applies, you may have the following rights, subject to conditions and limitations in the law:
- Right of access to your Personal Data and to obtain information about our processing.
- Right to rectification of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten").
- Right to restriction of processing.
- Right to data portability.
- Right to object to processing based on legitimate interests, including profiling.
- Right to withdraw consent at any time where processing is based on consent.
- Right to lodge a complaint with your data protection authority.
U.S. State Privacy Rights
Depending on your state of residence (e.g., California, Colorado, Connecticut, Utah, Virginia), you may have rights to: (i) know/access the categories and specific pieces of Personal Data we collected; (ii) correct inaccuracies; (iii) delete Personal Data; (iv) obtain a portable copy of certain data; and (v) opt out of targeted advertising, sale, or certain profiling. We do not sell Personal Data or engage in cross-context behavioral advertising. You may have the right to appeal our decision regarding your request by contacting us as described below.
Exercising Your Rights
To submit a privacy request, contact us at [email protected] or by mail: Jack Chen, 550 Mamaroneck Ave, Harrison, NY 10528, USA. Please clearly describe your request and provide the email address or other details you used with the Site so we can locate your records. We will verify your identity by matching information you provide with information we maintain or by requesting additional verification. Where permitted by law, you may designate an authorized agent to act on your behalf, subject to verification of both your identity and the agent's authority. We will respond within timeframes required by applicable law.
Automated Decision-Making
We do not use automated decision-making that produces legal effects concerning you or similarly significantly affects you.
Children's Privacy
The Site is intended for individuals aged 13 and older and is not directed to children under 13. We do not knowingly collect Personal Data from children under 13. If we learn that we have collected such data, we will take appropriate steps to delete it.
Do Not Track and Global Privacy Control
The Site does not currently respond to browser-initiated Do Not Track signals. Where legally required, we will treat a valid Global Privacy Control signal as a request to opt out of sharing or sale for residents of applicable U.S. states.
Content and Medical Disclaimer
MONW provides educational information only and does not provide medical advice, diagnosis, or treatment. Always consult your healthcare provider regarding any medical questions. We are not a covered entity or business associate under HIPAA, and information provided on the Site is not a medical record.
Changes to This Notice
We may update this Notice from time to time. Material changes will be indicated by updating the Effective Date below. Your continued use of the Site after an update constitutes acceptance of the revised Notice.
Effective Date
Effective Date: October 24, 2025
