Ecommerce OS · Online Pharmacy8 min readUpdated November 3, 2026

The Online Pharmacy Tech Stack: Checkout, Subscriptions, Email and Tracking

The 8 layers of an online pharmacy stack, from prescription review to checkout, refills, email and tracking, and the 3 choices that are hard to undo.

Article summary

TL;DR

An online pharmacy stack has eight layers: storefront, prescription intake and review, pharmacy system, checkout, payments, refills, email and SMS, and tracking. Most tools can be swapped later. Three choices cannot: where health data lives, which processor accepts you, and when the card is charged. Make those three first, then add tools by stage.

  • Stripe lists "Online pharmacies" as a restricted business that needs extra due diligence (page updated September 22, 2026).
  • Shopify Payments does not support "prescription drugs"; Square's US terms exclude internet pharmacies (updated July 30, 2026).
  • Shopify's Acceptable Use Policy does not support uploading HIPAA Protected Health Information.
  • Since early 2025, Meta has limited lower-funnel conversion events for some health advertisers, as reported by Haus.
  • The FTC's Health Breach Notification Rule, amended in July 2024, treats unauthorized sharing of health data as a breach for the businesses it covers.
Want to go further? AskChatGPTClaudePerplexityGrok
On this page

This guide is part of our hub on the best ecommerce platform for online pharmacies. The general guide, for any business: custom ecommerce checkout. For brands rather than pharmacies, Tagada Rx bundles storefront, doctors, pharmacy and payments, open by application.

The 8 layers of an online pharmacy stack

Each layer has one job. The third column is what changes when you sell prescription medications.

LayerIts jobWhat a pharmacy needsExamples of tools
1. StorefrontCatalog, account, contentNoMedication claims; licensing details shownShopify, WooCommerce, headless front end
2. Prescription intake and reviewCollect or receive the prescription, let a pharmacist verify itNothing ships before reviewE-prescribing network, upload and approval workflow
3. Pharmacy systemDispensing, labels, inventory, recordsLicensed in every state you ship toPharmacy management software
4. CheckoutTurn visits into ordersA clear line that payment is not approvalNative checkout, checkout and funnel tools
5. PaymentsTake the moneyA processor that accepts pharmacies, plus a backupStripe (after review), high-risk processors
6. Refills and subscriptionsRecurring ordersCharge tied to dispensing, within the prescriptionSubscription billing tools
7. Email and SMSRefill reminders, order updatesNoHealth details in marketing messagesTools whose acceptable use policy allows pharmacies; Klaviyo's does not11Klaviyo, Acceptable Use Policy, updated April 9, 2026
8. Tracking and attributionTell ad platforms what soldPurchase signal without health dataServer-side tracking, attribution tools

Fig. 1The pharmacy side and the commerce side

Pharmacy side, layers 2 and 3

  1. 2. Prescription reviewA pharmacist verifies it
  2. then3. Pharmacy systemWhere health data lives: hard to undo

Pharmacy software: nothing ships before review

Commerce side, layers 4 to 8

  1. 4. CheckoutWhen the card is charged: hard to undo
  2. then5. PaymentsWhich processor accepts you: hard to undo
  3. then6. RefillsCharge tied to dispensing
  4. then7. Email and SMSNo health details
  5. then8. TrackingPurchase signal without health data

Covered in this guide

Three choices take months to unwind.

Illustrative example, from the table above.

Layers 2 and 3 are pharmacy software. This guide covers the commerce side, layers 4 to 8, and how they connect to the pharmacy side.

The 3 decisions that are hard to undo

You can change your SMS tool in a week. These three take months to unwind.

1. Where health data lives

2. Which processor accepts you

ProviderPosition on online pharmacies
StripeRestricted"Online pharmacies, including SaaS platforms" need additional due diligence1Stripe, Prohibited and restricted businesses, last updated September 22, 2026, read November 2, 2026
Shopify PaymentsNot supported: "prescription drugs" are listed as regulated products2Shopify Help Center, Shopify Payments eligibility, read November 2, 2026
Square (US)Excluded: "internet/mail order/telephone order pharmacies"3Square, General Terms of Service (US), section 3, last updated July 30, 2026

Fig. 2Three providers, three positions on online pharmacies

Your online pharmacyWho accepts you
  1. StripeRestricted: additional due diligence
  2. Shopify PaymentsNot supported
  3. Square (US)Excluded
Stripe, Shopify and Square policies, as cited in the table above.

Shopify lets you add a third-party provider when you are not eligible for Shopify Payments2Shopify Help Center, Shopify Payments eligibility, read November 2, 2026. Plan for it from day one. More in does Stripe allow prescription drugs.

3. When the card is charged

Fig. 3Hold at checkout, capture on approval

approved declined or closed routing step

  1. CheckoutAuthorization hold
  2. sent toPharmacist reviewPrescription checked
  3. approvedCapturedOnly once approved; voided if notApproved

Declined at review: the hold is voided, nothing to refund.

Illustrative example.

How the layers connect

Data should flow from the place where the order is paid, and health data should stay on the pharmacy side.

FromToWhat flowsWhat must not flow
CheckoutPharmacy systemOrder, patient identity, shipping address
Pharmacy systemCheckout or billingApproved or declined, shippedPrescription details
BillingEmail and SMSRefill due, payment failed, order shippedMedication names in marketing copy
CheckoutAd platformsA purchase event, deduplicated8Meta for Developers, Deduplicate Pixel and server events, read October 26, 2026Product names, health answers
EverythingAttributionOrders and ad costsHealth data

Watch out

Two systems that can both bill the same patient for a refill cause double charges, and double charges become disputes. Give refill billing to one system only.

The stack by stage

Add tools when the stage needs them, not before.

StageAddSkip for now
LaunchStorefront, prescription review, one processor that accepts pharmacies, a checkout with an authorization hold, order and shipping emailsLoyalty programs, complex attribution
RefillsRefill billing tied to shipping, failed payment retries, refill reminders by email and SMSOne tool per channel
ScaleA backup processor and routing, A/B tests, server-side tracking, attributionAnything that duplicates billing or puts health data in marketing tools

Stage details: how to start and scale an online pharmacy.

Warning signs your stack is costing you

  1. Refunds before shipping

    Cards charged, then orders declined at review.

  2. Renewals fail quietly

    No one sees failed refill payments until patients stop ordering. See failed payment recovery for online pharmacies.

  3. Health data in the wrong place

    Product or prescription names in pixel events or email properties.

  4. Reports disagree

    Your store, Meta and your attribution tool show three revenue numbers. See server-side tracking for online pharmacies.

  5. One account holds everything

    A single processor carries all sales and all refills. See payment routing and backup processors.

How Tagada helps

Layers 4 to 8 around a prescription that is reviewed first

For prescription brands, Tagada Rx puts storefront, doctors, pharmacy and payments in one stack, with LegitScript included.

The card is held at checkout and captured only once a doctor approves; if the doctor declines, the hold is released and the patient pays nothing. Refills rebill on the day the pharmacy ships, and Tagada never stores PHI10Tagada docs, Tagada Rx introduction, read November 2, 2026. Tagada Rx serves US patients only and is open by application to a selected group of brands.

Tagada covers the commerce layers, 4 to 8, standalone or on top of Shopify, WooCommerce or headless.

LayerWhat Tagada does
CheckoutOne-page checkout, order bumps, one-click upsells, A/B tests, Apple Pay and Google Pay
PaymentsRouting across TagadaPay and processors such as Stripe, NMI and Airwallex, with one logic; cascade to another processor when one is down or times out, never after a bank decline; or bring your own processor and keep the acquiring relationship
Refills and subscriptionsBilling cycles, retries and automatic recovery
TrackingServer-side events to Meta, Google and TikTok
Layers 4 to 8 around a prescription that is reviewed first

Nick Bonnassies

CMO at Tagada

CMO at Tagada. Before Tagada, Nick built direct-to-consumer brands that generated over $115M in sales, raised over $25M in crowdfunding and sold two of them. He also works as a fractional CMO on marketing operations and AI systems.

Frequently asked questions

What software does an online pharmacy need?

Pharmacy software for prescriptions and dispensing, plus commerce software: a storefront, a checkout, a processor that accepts pharmacies, refill billing, email and SMS, and tracking. The commerce tools should receive order status from the pharmacy side, never the prescription itself.

Can I build an online pharmacy on Shopify?

You can use Shopify as a storefront, but Shopify Payments does not support prescription drugs, so you need a third-party processor. Shopify also does not support storing HIPAA health information. See Shopify or a sales funnel for your online pharmacy.

Can I use Stripe for an online pharmacy?

Possibly. Stripe lists online pharmacies as restricted, not prohibited: you provide extra information, such as licenses, and Stripe decides. Approval can be modified or revoked later, so plan a backup processor.

Can I hold payment until a prescription is approved?

Yes, with an authorization hold: the amount is reserved at checkout, captured once the order is approved, and released if it is not. Your checkout and processor both need to support separate authorization and capture.

Can I use the Meta pixel on a pharmacy site?

Only with care. Keep product names and health answers out of events, send purchases server-side with deduplication, and expect limits: Meta has restricted lower-funnel events for some health advertisers since early 2025, as reported by Haus.

Sources

Checked November 3, 2026
  1. Stripe, Prohibited and restricted businesses, last updated September 22, 2026, read November 2, 2026
  2. Shopify Help Center, Shopify Payments eligibility, read November 2, 2026
  3. Square, General Terms of Service (US), section 3, last updated July 30, 2026
  4. Shopify, Acceptable Use Policy, read November 2, 2026
  5. 42 U.S.C. § 1320d-8 (Social Security Act, section 1179)
  6. FTC, Complying with the FTC's Health Breach Notification Rule, rule amended July 2024, read November 2, 2026
  7. Haus, on Meta's health and wellness conversion restrictions, November 25, 2024 (secondary source)
  8. Meta for Developers, Deduplicate Pixel and server events, read October 26, 2026
  9. Shopify Community, merchant thread on prescription approval at checkout, November 28, 2024
  10. Tagada docs, Tagada Rx introduction, read November 2, 2026
  11. Klaviyo, Acceptable Use Policy, updated April 9, 2026

Tagada Rx

Get the layers that are hard to undo right first

Tagada Rx runs the stack behind your brand. Open by selection: every application is reviewed, and we reply to each one.

  1. 01Tell us about your brand
  2. 02We review every application
  3. 03Go live under your brand after review