Privacy Policy

1.Definitions

• Protected Health Information (PHI)PHI includes any individually identifiable health information that we maintain or transmit in any form or medium (including electronic, oral, or written) that relates to your past, present, or future physical or mental health condition, the healthcare services you receive, or payment for those services.
• Personal DataInformation such as your name, email address, phone number, and pharmacy identifiers (NCPDP number, address) that you may provide when using our Site or Service.

When PHI and Personal Data overlap, we treat all such information with the heightened protections required by HIPAA.

2.How We Collect PHI and Personal Information

We may collect PHI and other personal information about you directly from you, through your use of our Service, from healthcare providers or pharmacies authorized to share information with us, or from third parties as permitted by law. This may include:

• Identifying InformationName, email address, phone number, and pharmacy information.
• Medical/Health Information (PHI)Prescription information, medication history, pharmacist or prescribing practitioner information, and other data necessary to facilitate dispensing of medications or to provide related healthcare services.
• Usage DataIP address, browser type, pages visited, and other data that helps us improve our Service.
• Cookies and Tracking TechnologiesUsed to enhance your user experience, remember preferences, and analyze Site usage.

3.How We Use Your PHI and Personal Information

We use your PHI and personal information to:

• Provide and Coordinate Your CareThis includes processing prescription orders, verifying and dispensing medications, communicating with your healthcare providers, and ensuring that healthcare professionals involved in your care have the necessary information.
• Payment and OperationsWe may use PHI for billing and payment activities, verifying insurance coverage, and improving the quality and effectiveness of our services.
• Healthcare OperationsThese activities can include internal administration, quality assessments, compliance audits, staff training, and accreditation processes.
• CommunicationsTo notify you about changes to our Service, respond to inquiries, send service-related updates, and provide customer support.
• Legal and Regulatory RequirementsTo comply with applicable laws, regulations, licensing requirements, and standards set forth by accrediting bodies or as required by LegitScript Healthcare Merchant Certification Terms and Conditions.
• Security and Fraud PreventionTo detect, prevent, and address technical or security issues, potential fraud, and misuse of our Services.

4.Disclosures of Your PHI and Personal Information

We may disclose your PHI and personal information only as permitted or required by HIPAA and other applicable laws, including:

• To You or Your Authorized RepresentativeUpon your request.
• For Treatment PurposesSharing PHI with healthcare professionals involved in your care.
• For Payment ActivitiesTo health plans, payers, or insurers to ensure proper billing and reimbursement.
• For Healthcare OperationsTo evaluate and improve the quality and effectiveness of our services.
• As Required by LawTo comply with legal obligations, such as responding to subpoenas, court orders, or government investigations.
• To Prevent HarmIf necessary to reduce a serious and imminent threat to health or safety.
• Organ and Tissue Donation, Public Health, and ResearchAs permitted by HIPAA and other regulations.
• With Your Written AuthorizationFor purposes not otherwise described in this policy, we will obtain your explicit authorization before using or disclosing your PHI. You may revoke that authorization in writing at any time.

We do not sell your PHI or share it for marketing purposes without your written permission, where required by law.

5.Patient Rights Regarding Your PHI

Under HIPAA, you have certain rights regarding your PHI. These rights include:

• Right to Inspect and CopyYou may request to see or obtain a copy of your PHI in electronic or paper form. We will usually respond within 30 days.
• Right to Request AmendmentsIf you believe your PHI is incorrect or incomplete, you may request that we amend it. We may decline your request, but we will provide an explanation in writing within 60 days.
• Right to Request RestrictionsYou may request that we limit how we use or disclose your PHI for treatment, payment, or operations. We are not always required to agree, but we will consider all reasonable requests. If you pay for a service out-of-pocket in full, you can request that we not share that information with your insurer.
• Right to Confidential CommunicationsYou may request that we communicate with you in a certain way or send mail to a different address.
• Right to an Accounting of DisclosuresYou may request a list of certain disclosures we have made of your PHI (other than for treatment, payment, or healthcare operations) for the last six years.
• Right to a Paper Copy of This NoticeYou can request a paper copy of this Privacy Policy, including the Notice of Privacy Practices, at any time.
• Right to File a ComplaintIf you believe we have violated your privacy rights, you can file a complaint with us or with the U.S. Department of Health and Human Services.

To exercise any of these rights, please contact our Privacy Official using the contact information listed below.

6.Our Duties and Responsibilities

• Legal ComplianceWe are required by law to maintain the privacy and security of your PHI and follow the duties and privacy practices described in this policy.
• Breach NotificationWe will notify you in a timely manner if a breach occurs that may have compromised the privacy or security of your PHI.
• No RetaliationWe will not retaliate against you for filing a complaint or exercising your HIPAA rights.

7.Security of Your PHI and Personal Information

We use administrative, technical, and physical safeguards, including Secure Socket Layer (SSL) technology, to protect the confidentiality, integrity, and security of your PHI. However, no method of transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee its absolute security.

8.Changes to This Privacy Policy

We may update our Privacy Policy and Notice of Privacy Practices from time to time. When we make significant changes, we will post the revised notice on our Site and update the effective date. Your continued use of our Service indicates your acceptance of any changes.

9.Privacy Official Contact Information

If you have questions about this Privacy Policy, would like to exercise your rights under HIPAA, or believe your privacy rights have been violated, please contact our designated Privacy Official:

We will not retaliate against you for filing a complaint.