HIPAA Notice

THIS NOTICE EXPLAINS HOW YOUR MEDICAL INFORMATION MAY BE USED AND SHARED, AND HOW YOU CAN ACCESS IT. PLEASE READ IT THOROUGHLY.

When this Notice of Privacy Practices (“Notice”) refers to “we” or “us,” it includes Meds1 and all pharmacists providing health care services, along with our pharmacy staff. We are legally required to safeguard the privacy of your protected health information (“PHI”), follow the terms of this Notice, provide you with this Notice explaining our legal duties and privacy practices, and notify affected individuals in the event of a breach involving unsecured PHI. This Notice describes how your PHI may be used and disclosed, your rights regarding that information, and our legal responsibilities. We may revise this Notice at any time. If material changes occur, we will post the updated version in the pharmacy, on our website, and make it available upon request.

I. USE AND DISCLOSURE OF YOUR PHI

We may use and disclose your PHI for treatment, payment, and health care operations. In certain cases, we may also use your PHI for other purposes permitted or required by law, or with your written authorization. Below are examples of how your PHI may be used or shared. Any use not described here requires your explicit written consent, which you may revoke at any time in writing.

A. Treatment – We may use and disclose your PHI to provide you with prescription services and related care. This may include sharing information with pharmacists, pharmacy staff, and other health care professionals involved in your treatment. You will receive separate notice and an opportunity to opt out of any subsidized treatment-related communications.

B. Payment – Your PHI may be used or disclosed to obtain payment for services provided. This may include sharing information with your health plan for authorization, billing, or verification of coverage.

C. Health Care Operations – We may use and disclose your PHI for operational purposes such as quality improvement, compliance monitoring, staff training, audits, and general administrative functions.

D. Prescription Refill Reminders, Treatment Alternatives or Health-Related Benefits – We may contact you using your PHI to remind you about prescription refills, inform you about alternative treatments, or share information about health-related products or services that may be beneficial.

E. Family Members, Relatives or Close Friends – Unless you object, we may share relevant portions of your PHI with family members, relatives, close friends, or others you designate who are involved in your care or payment. If you are unavailable, we may use our professional judgment to determine whether sharing limited information is in your best interest.

F. Other Permitted and Required Uses and Disclosures – We may use or disclose your PHI without your authorization or opportunity to object in the following situations:

• When required by law, in accordance with applicable regulations;
• To public health authorities (and, where applicable, foreign agencies) for activities such as disease control, reporting deaths, adverse drug events, product issues, communicable diseases, or certain cases of abuse or neglect;
• To health oversight agencies for authorized activities such as audits, inspections, and investigations;
• For judicial or administrative proceedings, including compliance with subpoenas or court orders, after making reasonable efforts to notify you or obtain a protective order;
• To law enforcement for purposes such as reporting injuries, complying with legal orders, identifying individuals, or reporting suspected crimes;
• To coroners or medical examiners for identifying deceased individuals or determining cause of death;
• To funeral directors as necessary and in accordance with the law;
• To organ procurement organizations to support donation or transplantation activities;
• For research purposes when appropriate safeguards are in place;
• To prevent or lessen a serious threat to health or safety, limited to individuals who can assist in addressing the threat;
• For military or veterans’ activities, including eligibility and mission support;
• For lawful national security or intelligence activities;
• To protect government officials such as the President or foreign leaders;
• To correctional institutions or law enforcement if you are in custody;
• To comply with workers’ compensation or work-related injury laws.

II. YOUR RIGHTS AS OUR PATIENT

You have important rights regarding your PHI as our patient, including the following:

A. You may request restrictions on how your PHI is used or disclosed. While we are not required to agree (except in certain fully self-paid situations), we will consider your request. Requests must be submitted in writing and should specify: (1) the restriction requested; (2) the information involved; and (3) to whom it applies. If approved, restrictions will not apply to disclosures required by law, for your own access requests, or in emergencies.

B. You may request that we communicate your PHI using alternative methods or at different locations (for example, sending information to a different address). Submit your request in writing to the Privacy Officer, and we will accommodate reasonable requests.

C. You have the right to access, inspect, and obtain copies of your PHI, including electronic records where applicable, except for certain information exempt under HIPAA. If we do not maintain the requested records, we will direct you accordingly. Reasonable fees may apply for copying or mailing. In some cases, access may be denied, but you may request a review of certain denials.

D. You may request an accounting of disclosures of your PHI (including those made by business associates) for up to six years prior to your request. One request per year is free; additional requests within a 12-month period may incur reasonable fees, with prior notice provided.

E. If you believe your PHI is incorrect or incomplete, you may request an amendment in writing, including a reason for the request. We may deny requests under certain conditions, such as if the information was not created by us or is already accurate. If denied, you may submit a written statement of disagreement, and we may include a response.

F. You may request a paper copy of this Notice at any time, even if you previously received it electronically, by contacting the Privacy Officer.

G. You have the right to opt out of fundraising communications. We do not use your PHI for fundraising purposes or sell it without your prior authorization.

III. Additional Information/Questions or Complaints

A. For additional information about this Notice, to exercise your rights, or to ask questions, please contact the Privacy Officer at:

7123 East Orange Blossom Lane Paradise Valley, AZ, 85253 [email protected] (or appropriate contact if different)

If you believe your privacy rights have been violated, you may file a complaint without fear of retaliation by contacting our Privacy Officer or the Secretary of the Department of Health and Human Services, 200 Independence Avenue SW.