Privacy Policy & HIPAA Notice

Template notice. A HIPAA-compliant Notice of Privacy Practices has required content and formatting — have counsel finalise it.

Information we collect

Account details, shipping and billing addresses, payment information, and — for prescription orders — protected health information (PHI) including your date of birth, allergies, medical conditions, medications, prescriber details and prescription images.

How we use it

To verify and dispense your prescriptions, to perform the drug utilisation review your pharmacist is required to carry out, to fulfil and ship orders, and to meet our legal reporting obligations (including prescription drug monitoring programmes).

Who we share it with

Your prescriber (for verification), our shipping carriers, our payment processor, and state or federal regulators where the law requires it. We do not sell your personal or health information.

How we protect it

PHI is encrypted at rest and in transit. Every access to a patient record is written to an immutable audit log recording who accessed it, when, and from where.

Your rights

You may request a copy of your records, request corrections, request an accounting of disclosures, and file a complaint with us or with the HHS Office for Civil Rights. Contact [privacy officer name] at [email] or [phone].