Privacy Policy

SCRIPTLINKRX.COM LLC PRIVACY POLICY

Effective Date: 12/01/2024


SCRIPTLINKRX.COM LLC (“SCRIPTLINKRX,” “we,” “us,” or “our”) is committed to maintaining the privacy, confidentiality, and security of your Protected Health Information (“PHI”) as defined by the Health Insurance Portability and Accountability Act of 1996 (HIPAA). This Privacy Policy explains how we collect, use, disclose, and protect your PHI and other personal information when you use https://scriptlinkrx.com (the “Site”) and related services (collectively, the “Service”). It also describes your rights and how you can exercise those rights regarding your PHI.


This Privacy Policy, including the integrated Notice of Privacy Practices below, applies to all individuals who interact with SCRIPTLINKRX and is made available on our Site in accordance with HIPAA requirements.


1. Definitions

  • Protected Health Information (PHI): PHI includes any individually identifiable health information that we maintain or transmit in any form or medium (including electronic, oral, or written) that relates to your past, present, or future physical or mental health condition, the healthcare services you receive, or payment for those services.
  • Personal Data: Information such as your name, email address, phone number, and pharmacy identifiers (NCPDP number, address) that you may provide when using our Site or Service.

When PHI and Personal Data overlap, we treat all such information with the heightened protections required by HIPAA.


2. How We Collect PHI and Personal Information

We may collect PHI and other personal information about you directly from you, through your use of our Service, from healthcare providers or pharmacies authorized to share information with us, or from third parties as permitted by law. This may include:


  • Identifying Information: Name, email address, phone number, and pharmacy information.
  • Medical/Health Information (PHI): Prescription information, medication history, pharmacist or prescribing practitioner information, and other data necessary to facilitate dispensing of medications or to provide related healthcare services.
  • Usage Data: IP address, browser type, pages visited, and other data that helps us improve our Service.
  • Cookies and Tracking Technologies: Used to enhance your user experience, remember preferences, and analyze Site usage.

3. How We Use Your PHI and Personal Information


We use your PHI and personal information to:

  • Provide and Coordinate Your Care:This includes processing prescription orders, verifying and dispensing medications, communicating with your healthcare providers, and ensuring that healthcare professionals involved in your care have the necessary information.
  • Payment and Operations: We may use PHI for billing and payment activities, verifying insurance coverage, and improving the quality and effectiveness of our services.
  • Healthcare Operations: These activities can include internal administration, quality assessments, compliance audits, staff training, and accreditation processes.
  • Communications: To notify you about changes to our Service, respond to inquiries, send service-related updates, and provide customer support.
  • Legal and Regulatory Requirements: To comply with applicable laws, regulations, licensing requirements, and standards set forth by accrediting bodies or as required by LegitScript Healthcare Merchant Certification Terms and Conditions.
  • Security and Fraud Prevention: To detect, prevent, and address technical or security issues, potential fraud, and misuse of our Services.

4. Disclosures of Your PHI and Personal Information


We may disclose your PHI and personal information only as permitted or required by HIPAA and other applicable laws, including:

  • To You or Your Authorized Representative: Upon your request.
  • For Treatment Purposes: Sharing PHI with healthcare professionals involved in your care.
  • For Payment Activities: To health plans, payers, or insurers to ensure proper billing and reimbursement.
  • For Healthcare Operations: To evaluate and improve the quality and effectiveness of our services.
  • As Required by Law: To comply with legal obligations, such as responding to subpoenas, court orders, or government investigations.
  • To Prevent Harm: If necessary to reduce a serious and imminent threat to health or safety.
  • Organ and Tissue Donation, Public Health, and Research:As permitted by HIPAA and other regulations.
  • With Your Written Authorization: For purposes not otherwise described in this policy, we will obtain your explicit authorization before using or disclosing your PHI. You may revoke that authorization in writing at any time.

We do not sell your PHI or share it for marketing purposes without your written permission, where required by law.


5. Patient Rights Regarding Your PHI


Under HIPAA, you have certain rights regarding your PHI. These rights include:

  • Right to Inspect and Copy: You may request to see or obtain a copy of your PHI in electronic or paper form. We will usually respond within 30 days.
  • Right to Request Amendments: If you believe your PHI is incorrect or incomplete, you may request that we amend it. We may decline your request, but we will provide an explanation in writing within 60 days.
  • Right to Request Restrictions: You may request that we limit how we use or disclose your PHI for treatment, payment, or operations. We are not always required to agree, but we will consider all reasonable requests. If you pay for a service out-of-pocket in full, you can request that we not share that information with your insurer.
  • Right to Confidential Communications: You may request that we communicate with you in a certain way or send mail to a different address.
  • Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your PHI (other than for treatment, payment, or healthcare operations) for the last six years.
  • Right to a Paper Copy of This Notice: You can request a paper copy of this Privacy Policy, including the Notice of Privacy Practices, at any time.
  • Right to File a Complaint: If you believe we have violated your privacy rights, you can file a complaint with us or with the U.S. Department of Health and Human Services.

To exercise any of these rights, please contact our Privacy Official using the contact information listed below.


6. Our Duties and Responsibilities


  • Legal Compliance: We are required by law to maintain the privacy and security of your PHI and follow the duties and privacy practices described in this policy.
  • Breach Notification: We will notify you in a timely manner if a breach occurs that may have compromised the privacy or security of your PHI.
  • No Retaliation: We will not retaliate against you for filing a complaint or exercising your HIPAA rights.

7. Security of Your PHI and Personal Information


We use administrative, technical, and physical safeguards, including Secure Socket Layer (SSL) technology, to protect the confidentiality, integrity, and security of your PHI. However, no method of transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee its absolute security.

8. Changes to This Privacy Policy


We may update our Privacy Policy and Notice of Privacy Practices from time to time. When we make significant changes, we will post the revised notice on our Site and update the effective date. Your continued use of our Service indicates your acceptance of any changes.

9. Privacy Official Contact Information


If you have questions about this Privacy Policy, would like to exercise your rights under HIPAA, or believe your privacy rights have been violated, please contact our designated Privacy Official:


Privacy Official: Hivzi Rabushaj
Email: privacy@scriptlinkrx.com
Phone: 917-284-8124
Address: SCRIPTLINKRX.COM LLC,

99-27 62nd Rd

Flushing, NY 11374


You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at:

200 Independence Avenue, S.W.

Washington, D.C. 20201

1-877-696-6775

www.hhs.gov/ocr/privacy/hipaa/complaints/


We will not retaliate against you for filing a complaint.


By using the Service, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy and our Notice of Privacy Practices.