Privacy Policy

We at Limitless Consulting are committed to protecting the privacy and security of our clients' data. The Pharmacy Stewardship Program (the "Program") is designed to help employers optimize their pharmacy benefits while maintaining strict confidentiality and compliance. This Privacy Policy explains how Limitless Consulting Group LLC ("Limitless," "we," or "us") collects, uses, and safeguards information in connection with the Program. By participating in our Program or using our services, you acknowledge that you have read and understood this Privacy Policy.

Information We Collect
We only collect information necessary to perform pharmacy benefit analyses and related consulting services. Specifically, the Program may request deidentified pharmacy claims data and health plan design information. "Deidentified" means that all personal identifiers (such as patient names, dates of birth, member IDs, or any information that could identify an individual) have been removed or masked, so the data cannot be linked to any specific person. We do not require or store any personally identifiable information (PII) or protected health information (PHI) about your employees or health plan members for the Program. In addition, we do not collect sensitive personal data like Social Security numbers, addresses, or medical records tied to identified individuals. The information you provide is purely analytical and administrative in nature, used solely for evaluating and improving your pharmacy benefit strategy.

How We Use Your Data
We use the deidentified data you provide to conduct detailed pharmacy benefit analyses and to identify opportunities for cost savings and plan optimization. This includes analyzing prescription drug claim patterns, pricing arrangements, and plan design features to generate insights and recommendations. The primary goal is to help your organization achieve more competitive pharmacy pricing and improved benefit performance without compromising compliance or quality of care. For example, we may model different pharmacy benefit scenarios, compare your plan's drug costs to benchmarks, or pinpoint areas of high cost in which alternative sourcing or plan adjustments could reduce spending. All data is handled in aggregate form, and any reports or recommendations we produce for you contain no personally identifying information. We will not use the data we collect for any purpose outside of providing our Pharmacy Stewardship Program services to you, unless we obtain your explicit permission or are required to do so by law.

Data Sharing and Disclosure
We understand that the confidentiality of your data is paramount. Limitless Consulting does not sell, rent, or disclose the data you provide to any third parties for marketing or unrelated purposes. The only instances where we share data are limited and strictly for fulfilling the services you have requested.

Specifically, we may share the deidentified pharmacy claims data and plan information with a small number of trusted, contracted vendors or partners who assist us in delivering the Program’s services. For example, we might engage specialized pharmacy benefit management consultants, data analysts, or bidding platforms to help generate competitive pharmacy benefit bids or to perform advanced pricing analyses on medications.

Any vendor or partner we work with is bound by contractual obligations to maintain the confidentiality and security of your data, and they are permitted to use the data only for the purposes we specify (such as evaluating bids or identifying pricing improvements). We carefully vet all such third parties to ensure they adhere to high privacy and security standards.

Aside from these service providers, the only other circumstances in which we would disclose your information would be if required by applicable law, regulation, or legal process (for instance, a court order), and even then, we would only disclose the minimum necessary information and, whenever legally permissible, notify you of such requirements.

Data Security and Compliance
Protecting your data is a top priority for Limitless Consulting. We implement robust administrative, technical, and physical safeguards to protect the information submitted to the Program from unauthorized access, alteration, loss, or disclosure. These measures include secure data storage solutions, encryption of data in transit and at rest, access controls limiting data to authorized personnel, and regular privacy training for our staff.

Because Limitless Consulting is based in the United States and operates in the healthcare consulting sector, we align our data handling practices with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable privacy laws and industry best practices. While the data we handle under the Program is deidentified and thus not considered PHI under HIPAA, we still treat it with the same level of care and protection as if it were sensitive health information. Our internal policies and procedures are designed to ensure confidentiality and integrity of client data. We also regularly review our security practices and update them as needed to address emerging threats or to comply with new regulations. You can trust that we maintain full compliance with all relevant privacy standards, giving you confidence that your data is in safe hands.

Data Retention and Deletion
We retain the deidentified data you provide only for as long as it is necessary to fulfill the purposes outlined in this Policy or as required by law. In practice, this means we keep your data for the duration of our consulting engagement and for a reasonable period thereafter in case you have any additional questions or to comply with legal, accounting, or reporting requirements.

However, we recognize that the data belongs to you, and we respect your right to control it. You may request deletion of your submitted data at any time. If you decide that you want us to purge the data you have provided from our systems, you can simply notify us (as described in the "Contact Us" section below). Upon receiving such a request, we will promptly delete or irreversibly anonymize the data in our possession, except to the extent we are required to retain certain minimal information for legal compliance or legitimate business purposes. For example, we might retain a basic log indicating that a data analysis was performed (for audit or record keeping), but we will not keep the detailed data itself.

If any retention is required for a valid reason, we will inform you what data must be retained and why; otherwise, we will proceed to permanently erase your data from our active databases and backups within a reasonable timeframe. We will also direct any relevant service providers who received your data to delete it from their systems.

Your Choices and Rights
Because we purposefully limit the data we collect to information that does not identify any individual, many traditional consumer privacy rights (such as those related to personal data access or correction under laws like the GDPR or CCPA) may not directly apply. However, we want to ensure you remain in control. You have the right to choose not to provide certain data to us, understanding that it may affect our ability to deliver the full benefits of the Program. Importantly, as noted above, you always have the right to request that we delete the data you have submitted, and we will comply with such requests. We will not retaliate or deny you services for exercising any privacy choices. 

If you have any questions about what information we may have or how it’s being used, you are welcome to contact us at any time and we will be transparent about our data practices.

Children's Privacy
Our services and the Pharmacy Stewardship Program are intended for business use by employers and are not directed at children or minors. We do not knowingly collect any information from children under the age of 13 (or the applicable age of a minor in your jurisdiction), and the data we work with does not contain personal details about any identifiable individuals, including minors. If we were ever to inadvertently receive personal information about a child, we would delete it immediately.

Changes to This Privacy Policy
We may update or revise this Privacy Policy from time to time to reflect changes in our practices, to incorporate new services, or to ensure compliance with legal requirements. If we make material changes to the way we handle your data, we will provide notice to our clients (for example, by posting the updated policy on our website with a new effective date, and/or by sending a notification to active clients).

We encourage you to periodically review this policy whenever you interact with us to stay informed about how we are protecting your information. The "Effective Date" at the end of this policy indicates when the latest revisions were made. Your continued use of our services after any changes to the Privacy Policy constitutes your acceptance of the updated terms.

Contact Us
Your trust is extremely important to us, and we welcome any questions or concerns about privacy and data security. If you have any questions about this Privacy Policy, or if you wish to request access to or deletion of your data, please contact us. You can reach the Limitless Consulting team by email at Support@LimitlessRxSolutions.com or by phone at (719) 789-2268. Alternatively, you may send correspondence to our headquarters at: Limitless Consulting LLC, Colorado Springs, CO, United States. We will respond promptly to address your inquiry or fulfill your request.

Effective Date: July 1, 2025.