Notice of Privacy Practices

OUR LEGAL DUTY

PostScript Pharmacy is required by law to maintain the privacy of your Protected Health Information (PHI), to provide you with this Notice of our legal duties and privacy practices, and to notify you in the event of a breach of your unsecured PHI. We are required to abide by the terms of this Notice currently in effect.

HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION

The following categories describe different ways that we use and disclose your health information without your specific authorization.

1. Treatment

We may use and disclose your PHI to provide, coordinate, or manage your pharmacy care. For example, we may use your information to:

• Dispense prescription medications to you.
• Contact your prescribing physician or other healthcare providers to clarify a prescription or discuss potential drug interactions.
• Counsel you on the proper use of your medications.

2. Payment

Because we are a cash-only pharmacy, our use of your information for payment purposes is limited to processing your direct payments. We may use your PHI to:

• Bill you directly for services and products.
• Process credit card, debit card, or other electronic payments.
• Note: We do not bill insurance companies. We will not disclose your PHI to a health insurer for payment purposes unless you specifically request it in order to seek personal reimbursement.

3. Healthcare Operations

We may use and disclose your PHI to operate our business efficiently and ensure you receive quality service. For example, we may use your information for:

• Quality assessment and improvement activities.
• Business management and general administrative activities.
• Coordinating with shipping carriers (like USPS, UPS, FedEx) to deliver your medications to your requested address.
• Working with our business associates (e.g., software vendors, IT support, payment processors) who are contractually required to safeguard your information.

4. Communication about Services and Reminders

We may use your PHI to contact you (e.g., by phone, mail, or potentially email or text message) with refill reminders, information about treatment alternatives, order status updates, or other health-related services that may be of interest to you.

• Note on Email/Text: If we use standard (unencrypted) email or text messages to communicate PHI, we will first warn you of the privacy risks and obtain your consent to use these methods.

OTHER USES AND DISCLOSURES PERMITTED OR REQUIRED BY LAW

We may also use or disclose your PHI without your authorization in the following circumstances, as required by Federal or New Hampshire law:

• Public Health Activities: To report adverse reactions to medications to the FDA, or to prevent/control disease.
• Abuse, Neglect, or Domestic Violence: To notify government authorities if we reasonably believe a patient is the victim of abuse, neglect, or domestic violence.
• Health Oversight Activities: To appropriate agencies for activities specifically authorized by law, such as audits or investigations (e.g., New Hampshire Board of Pharmacy inspections).
• Judicial and Administrative Proceedings: In response to a court or administrative order. We may also respond to a subpoena, discovery request, or other lawful process, but only if efforts have been made to notify you of the request or to obtain an order protecting the information requested.
• Law Enforcement: To law enforcement officials under certain limited circumstances (e.g., to identify or locate a suspect, fugitive, or missing person).
• To Avert a Serious Threat to Health or Safety: When necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.

USES REQUIRING YOUR AUTHORIZATION

Other uses and disclosures of your PHI not covered by this Notice will be made only with your written authorization. Specifically, we require your authorization for:

• Most uses and disclosures of psychotherapy notes (if applicable).
• Marketing purposes (e.g., communications encouraging you to purchase a product not related to your current treatment).
• Sale of your PHI (We will never sell your information).

You may revoke an authorization at any time, in writing, except to the extent that we have already taken action in reliance on it.

YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

You have the following rights regarding the PHI we maintain about you:

1. Right to Request Restrictions

You have the right to request a restriction or limitation on the PHI we use or disclose for treatment, payment, or healthcare operations.

• Your Right to Restrict Disclosure to Health Plans: Because you pay for all services at our pharmacy out-of-pocket in full, you have the absolute right to request that we not disclose information about those services to your health plan or insurer. We must agree to this request unless the disclosure is required by law.

2. Right to Request Confidential Communications

You have the right to request that we communicate with you about your medical matters in a certain way or at a certain location. For example, you may request that we only call a specific number, that we do not leave voicemails, or that we mail correspondence to a P.O. Box instead of your home. We will accommodate all reasonable requests.

3. Right to Inspect and Copy

You have the right to inspect and obtain a copy of your PHI that applies to your medical and billing records. You must submit your request in writing. If we maintain your PHI electronically, you have the right to request an electronic copy of the information. We will provide access in the electronic form and format requested, if readily producible, or in a mutually agreeable electronic format. We may charge a reasonable, cost-based fee for the costs of copying, mailing, or other supplies associated with your request.

4. Right to Amend

If you feel that medical information we have about you is incorrect or incomplete, you may ask us to amend the information. You must provide a reason that supports your request in writing.

5. Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures we made of your PHI for purposes other than treatment, payment, and healthcare operations, or for which you provided written authorization.

6. Right to a Paper Copy of This Notice

You have the right to a paper copy of this notice at any time, even if you agreed to receive it electronically. We will include a copy with your first mail order.

CHANGES TO THIS NOTICE

We reserve the right to change this Notice. We reserve the right to make the revised or changed Notice effective for PHI we already have about you as well as any information we receive in the future. We will post a copy of the current Notice on our website, www.postscriptpharmacy.com, and will include a copy with your first mail order.

COMPLAINTS

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services.

• To file a complaint with us: Contact our Privacy Officer, Donald Lansing, at (603) 788-2265.
• To file a complaint with HHS: Visit www.hhs.gov/ocr/privacy/hipaa/complaints/. You will not be penalized or retaliated against for filing a complaint.