HIPAA Notice of Privacy Policy
HIPAA NOTICE OF PRIVACY PRACTICES
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Effective Date: October 1st, 2025
We create and maintain records about the medications and services we provide to you. This Notice of Privacy Practices ("Notice") describes how we may use and disclose your Protected Health Information ("PHI") and your rights regarding that information.
PHI is information that identifies you and relates to your past, present, or future physical or mental health or condition, the provision of health care products and services to you, or payment for such services.
We are required by law to:
- Maintain the privacy of your PHI;
- Give you this Notice of our legal duties and privacy practices; and
- Follow the terms of the Notice that is currently in effect.
HOW WE MAY USE AND DISCLOSE YOUR PHI
The following sections describe different ways we may use or disclose your PHI. Not every possible use or disclosure is listed, but all of the ways we are permitted to use and disclose information will fall within one of these categories.
Treatment
We may use and disclose your PHI to provide, coordinate, or manage your health care and any related services. For example:
- We may share information with your prescribing provider or other healthcare professionals involved in your care to clarify prescriptions or discuss your therapy.
- We may contact you or your provider to discuss your medication, potential interactions, or alternative therapies.
Payment
We may use and disclose your PHI to obtain payment for the products and services we provide to you. For example:
- We may share information with your health plan, pharmacy benefit manager, or other payor to determine coverage, obtain prior authorization, or process claims.
- We may send your statements to your provider regarding amounts due for your prescriptions.
Health Care Operations
We may use and disclose your PHI for our health care operations. These uses and disclosures are necessary to run our pharmacy and to make sure that you receive quality care. For example:
- Quality assessment and improvement activities;
- Reviewing the competence and qualifications of our staff;
- Internal training and audits;
- Licensing, accreditation, and regulatory compliance activities;
- Business planning and management.
OTHER USES AND DISCLOSURES WITHOUT YOUR AUTHORIZATION
In certain situations, we are allowed or required to use or disclose your PHI without your written authorization, as permitted or required by law. Examples include:
As Required by Law
We will disclose PHI about you when required to do so by federal, state, or local law.
Public Health Activities
We may disclose PHI to public health or legal authorities charged with preventing or controlling disease, injury, or disability or to report adverse events with medications.
Health Oversight Activities
We may disclose PHI to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, and licensure.
Judicial and Administrative Proceedings
We may disclose PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process, when certain conditions are met.
Law Enforcement
We may disclose PHI for certain law enforcement purposes, such as in response to a court order, warrant, or similar process, or to report certain crimes.
Coroners, Medical Examiners, and Funeral Directors
We may disclose PHI to a coroner or medical examiner for purposes such as identifying a deceased person or determining the cause of death, and to funeral directors as necessary to carry out their duties.
Organ and Tissue Donation
We may disclose PHI to organizations involved in procuring, banking, or transplanting organs and tissues, as allowed by law.
To Avert a Serious Threat to Health or Safety
We may use or disclose PHI when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, consistent with applicable law.
Military and National Security
If you are a member of the armed forces, we may disclose PHI as required by military command authorities. We may also disclose PHI to authorized federal officials for national security and intelligence activities.
Workers' Compensation
We may disclose PHI as authorized by, and to the extent necessary to comply with, laws relating to workers' compensation or similar programs.
Inmates
If you are an inmate of a correctional institution or in the custody of a law enforcement official, we may disclose PHI to the institution or official when necessary for your health or the health and safety of others.
Victims of Abuse, Neglect, or Domestic Violence
We may disclose PHI to a government authority if we reasonably believe you are a victim of abuse, neglect, or domestic violence, but only as permitted by law.
USES AND DISCLOSURES THAT REQUIRE YOUR AUTHORIZATION
Other uses and disclosures of PHI not covered by this Notice or by applicable law will be made only with your written authorization. For example, we will generally need your authorization to:
- Use or disclose your PHI for marketing purposes (other than certain limited face-to-face communications or promotional gifts of nominal value);
- Sell your PHI to third parties; or
- Use or disclose psychotherapy notes (if applicable to our services), beyond what is permitted by law.
If you provide us with an authorization, you may revoke that authorization in writing at any time. We will then no longer use or disclose your PHI as described in the authorization, except to the extent we have already relied on it.
YOUR RIGHTS REGARDING YOUR PHI
You have the following rights regarding the PHI we maintain about you. Some of these rights may be subject to limitations under applicable law.
Right to Inspect and Obtain a Copy
You have the right to inspect and obtain a copy of PHI that may be used to make decisions about your care, usually including prescription and billing records. We may charge a reasonable, cost-based fee as permitted by law. In limited circumstances, we may deny your request; if we do, you may have the right to have the denial reviewed.
Right to Request an Amendment
If you believe that PHI we have about you is incorrect or incomplete, you may request that we amend the information. Your request must be in writing and include a reason for the amendment. We may deny your request in certain circumstances (for example, if we did not create the information or if it is already accurate and complete), but we will tell you in writing within a reasonable time if we deny your request.
Right to an Accounting of Disclosures
You have the right to request a list (an "accounting") of certain disclosures of your PHI made by us in the six years before your request, except for disclosures for treatment, payment, and health care operations, and certain other disclosures (such as those you authorized). The first accounting in a 12-month period will be provided at no charge; we may charge a reasonable fee for additional requests.
Right to Request Restrictions
You have the right to request restrictions on our use or disclosure of your PHI for treatment, payment, or health care operations, or to individuals involved in your care. We are not required to agree to your request, except in limited circumstances required by law (for example, if you have paid in full out-of-pocket for a service and request that we not disclose that information to a health plan for payment or operations). If we agree to a restriction, we will honor it except in an emergency or as required by law.
Right to Request Confidential Communications
You have the right to request that we communicate with you about your PHI in a specific way or at a specific location (for example, by mail rather than phone, or at a different address). We will accommodate reasonable requests.
Right to a Paper or Electronic Copy of This Notice
You have the right to receive a paper copy of this Notice at any time, even if you have agreed to receive it electronically. You may also request an electronic copy by contacting us.
Right to Choose a Personal Representative
If you have given someone medical power of attorney or if someone is your legal guardian, that person may exercise your rights under this Notice to the extent allowed by law.
Right to File a Complaint
If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below. You also have the right to file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, for example through the OCR Complaint Portal or by calling 1-800-368-1019 (TDD: 1-800-537-7697).
We will not retaliate against you for filing a complaint.
OUR DUTIES
- We are required by law to maintain the privacy and security of your PHI.
- We will promptly notify you if a breach occurs that may have compromised the privacy or security of your PHI, as required by law.
- We must follow the duties and privacy practices described in this Notice and provide you with a copy of it.
- We reserve the right to change the terms of this Notice and to make the new Notice provisions effective for all PHI we maintain. If we make a material change, we will post the revised Notice on our website and make it available upon request.
CONTACT INFORMATION
If you have any questions about this Notice, want to exercise your rights, or need to file a complaint with us, please contact: