Last updated October 8, 2026. This Privacy Policy explains how GLP.directory collects, uses, and shares information when you visit the site, compare providers, contact us, or subscribe to the GLP Access & Price Alert.

Who operates this site

GLP.directory is an editorial publication and provider-comparison service. It is not a medical practice, pharmacy, health plan, or emergency service. Please do not send medical records, diagnoses, prescription details, insurance identifiers, or other sensitive health information through the newsletter form or editorial email addresses.

Information you provide

When you subscribe, we collect your email address and affirmative consent. WordPress stores the address, a one-way lookup hash, the consent time and text version, confirmation and delivery status, and provider message identifiers. A confirmation link must be used before the address is placed into the active newsletter segment. If you contact us, we receive the information in your message.

Information collected automatically

The site and its infrastructure may process IP address, device and browser information, referring page, requested URL, timestamps, and security or diagnostic logs. A one-way derivative of the IP address is used temporarily to limit abusive signup and event attempts. Optional audience analytics are off by default and can be allowed or turned off using the footer control. Browser Do Not Track and Global Privacy Control preferences keep them off. After opt-in, a first-party glpd_aid cookie stores a random session identifier for up to 30 days so we can count page views on the directory and acquisition routes and outbound provider clicks. Those events do not include health answers, comparison selections, or advertising pixels. Provider-comparison selections stay in your browser’s local storage.

How we use information

  • Deliver and operate the site and requested newsletter.
  • Confirm consent, honor unsubscribe requests, and maintain suppression records.
  • Secure, debug, measure, and improve the service.
  • Respond to corrections, privacy requests, and business inquiries.
  • Comply with law and protect the rights, safety, and integrity of readers, partners, and the service.

Processors and disclosures

Railway processes website, database, and infrastructure data for the current hosted deployment. Resend processes email addresses, contact and segment records, newsletter content, and delivery events for confirmation and newsletter delivery. Those vendors may process information in the United States and other locations under their own privacy and security terms. We may also disclose information to professional advisers, authorities, or counterparties when reasonably necessary for legal compliance, security, or a business transaction.

We do not sell the newsletter list. The current site does not use cross-context behavioral advertising or advertising pixels. Opt-in audience events stay on GLP.directory and are used to measure page views and outbound clicks. Activity is not linked to newsletter email addresses or used to create email retargeting lists. Reporting exports contain aggregate counts only. A third-party provider or affiliate destination receives data under its own policy when you choose to follow an external link; this may include your IP address and referring page.

Retention and security

Audience events are deleted after 30 days by scheduled cleanup. Turning analytics off deletes the events associated with the current browser identifier and removes that identifier. The preference cookie lasts up to 30 days.

We keep other information only as long as reasonably needed for the purposes above, including consent records, operational security, legal obligations, and suppression of unwanted email. No system is perfectly secure, but access controls and limited collection are used to reduce risk.

Your choices and rights

Every newsletter includes a one-click unsubscribe link managed by Resend. Depending on where you live, you may also have rights to request access, correction, deletion, or a copy of certain information, subject to applicable exceptions. Send requests to privacy@glp.directory. We may need to verify that the address belongs to you.

Children

The site and newsletter are intended for adults and are not directed to children under 18. We do not knowingly collect newsletter subscriptions from children.

Changes and questions

We may update this policy as the service or law changes. The date above shows the latest revision. Material changes will be posted here. Questions may be sent to privacy@glp.directory.