1. INTRODUCTION

Patient Direct Pharmacy (“we,” “us,” or “our”) is a multi-state licensed pharmacy. We comply with the Health Insurance Portability and Accountability Act (HIPAA), applicable state privacy laws, and consumer protection standards. This Notice applies to all Protected Health Information (PHI) and personal data collected via pharmacy services, digital platforms, and communications.

2. DEFINITIONS

Protected Health Information (PHI): Individually identifiable health information.
Business Associates: Third parties performing services involving PHI under contract.
Minimum Necessary Standard: Limiting PHI use/disclosure to the least required.

3. INFORMATION WE COLLECT

We collect:
• Personal identifiers (name, address, DOB, contact info)
• Health data (prescriptions, providers, conditions)
• Payment data (processed securely via third parties)
• Technical data (IP, browser, device, usage analytics)

4. USE OF INFORMATION

We use PHI for treatment, payment, and healthcare operations, including:
• Prescription fulfillment and coordination of care
• Billing and insurance processing
• Compliance, auditing, and quality assurance
• Customer service and communications

5. MINIMUM NECESSARY STANDARD

We limit uses, disclosures, and requests for PHI to the minimum necessary to accomplish the intended purpose, except where otherwise permitted or required by law.

6. BUSINESS ASSOCIATES

We may share PHI with business associates who perform services on our behalf. All such parties are contractually obligated to safeguard PHI in accordance with HIPAA.

7. WEBSITE DATA, COOKIES & TRACKING

We use cookies and tracking technologies to:
• Operate and improve website functionality
• Analyze traffic and usage patterns
• Enhance user experience

Users may disable cookies through browser settings, though some features may not function properly.

8. E-COMMERCE & PAYMENT DISCLOSURES

• Payments processed via secure third-party vendors
  • No storage of full payment card data
  • Encrypted transactions using industry standards
  • Data shared only as necessary with payment processors, insurers, and shipping providers

9. COMMUNICATIONS (SMS / EMAIL)

We may contact you via phone, SMS, or email for:
• Prescription updates and refill reminders
• Order confirmations and shipping notifications

Message and data rates may apply. You may opt out at any time by following provided instructions.

10. DISCLOSURES OF INFORMATION

We may disclose information:
• To healthcare providers and insurers
• To business associates
• As required by law (court orders, public health, law enforcement)

We do NOT sell PHI or personal information.

11. YOUR RIGHTS

You have the right to:
• Access and obtain copies of records
• Request amendments
• Request restrictions
• Request confidential communications
• Receive accounting of disclosures
• Obtain a copy of this Notice

12. STATE-SPECIFIC RIGHTS

We comply with all applicable state laws. Where state law is more protective, we follow the stricter standard.

Enhanced protections may apply in:
• Illinois, New York, Maryland (sensitive health data)
• Minnesota, Wisconsin (expanded access rights)
• Pennsylvania, Virginia (behavioral health protections)
• Indiana (prescription confidentiality)

General confidentiality applies across all licensed states.

13. SUBSTANCE USE RECORDS

Certain records are protected under 42 CFR Part 2 and require specific written consent for disclosure.

14. DATA SECURITY

We implement administrative, technical, and physical safeguards including:
• Encryption
• Access controls
• Workforce training
• Secure systems monitoring

15. BREACH NOTIFICATION

We will notify affected individuals without unreasonable delay in accordance with applicable law.

16. CHILDREN’S PRIVACY

We do not knowingly collect information from children under 13 without parental consent.

17. THIRD-PARTY LINKS

We are not responsible for privacy practices of external websites linked from our platform.

18. CHANGES TO POLICY

We reserve the right to modify this Notice at any time. Updates will be posted on our website.

19. CONTACT INFORMATION

Privacy Officer
Patient Direct Pharmacy

Address: 3350 N. Hight School Rd Suite J Indianapolis, IN 46224