Pillmaxx Rx — HIPAA Notice of Privacy Practices (NPP)

Effective Date: January 30, 2026

THIS NOTICE DESCRIBES HOW MEDICAL/HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Responsibilities

We are required by law to:

Maintain the privacy and security of your Protected Health Information (PHI)
Provide you with this Notice of Privacy Practices
Follow the terms of this Notice currently in effect
Notify you following a breach of unsecured PHI, as required by law

How We May Use and Disclose PHI Without Your Authorization

We may use and disclose your PHI for the following purposes:

Treatment: To fill prescriptions; coordinate care with your prescribers, other pharmacies, or healthcare professionals; contact you about therapy management, refills, substitutions (where permitted), or delivery.
Payment: To bill you or a third party (e.g., your health plan/PBM); verify benefits and coverage; obtain prior authorizations; determine eligibility; and obtain payment for products/services.
Healthcare Operations: For quality assessment and improvement, staff training, accreditation, auditing, compliance, fraud and abuse detection, customer service, and other operations.
Appointment/Delivery Reminders and Health‑Related Communications: To contact you about refills, deliveries, recalls, or services that may be of interest related to your care. We will not use PHI for marketing where HIPAA requires your authorization.
Individuals Involved in Your Care/Payment: With your permission or when permitted by law, we may disclose limited PHI to a family member, friend, or another person involved in your care or payment.
As Required by Law: We will use/disclose PHI when required by federal, state, or local law.

Special Situations Permitted or Required by Law

Public Health & Safety: Reporting adverse events, product recalls, communicable diseases, suspected abuse/neglect (including vulnerable adults), or to prevent/lessen a serious and imminent threat.
Health Oversight Activities: Inspections, audits, investigations, licensing, and other activities.
Judicial and Administrative Proceedings: Court orders, warrants, subpoenas (with required safeguards).
Law Enforcement: As permitted by law for locating suspects, missing persons, or reporting crimes.
Coroners/Medical Examiners/Funeral Directors: For identifying a deceased person or determining cause of death.
Organ and Tissue Donation: For organ procurement and transplantation.
Research: Under IRB/Privacy Board approval or with your authorization.
Workers’ Compensation: As authorized to comply with workers’ compensation laws.
Specialized Government Functions: Military, national security, protective services, correctional institutions.

Uses and Disclosures Requiring Your Written Authorization

We will obtain your written authorization for:

Most marketing communications if they involve financial remuneration from a third party
Any sale of PHI
Psychotherapy notes (if we maintain any), with limited exceptions
Any other uses/disclosures not described in this Notice

You may revoke your authorization in writing at any time, except to the extent we have already acted in reliance on it.

Your Rights Regarding PHI

You have the right to:

Access: Inspect or get a copy of your PHI, including pharmacy records and billing records, in paper or electronic format (with reasonable fees permitted by law).
Amend: Request an amendment to PHI you believe is incorrect or incomplete (we may deny in certain cases; we’ll explain why in writing).
Accounting of Disclosures: Request a list of certain disclosures of PHI (not including disclosures for treatment, payment, and operations).
Request Restrictions: Ask us to restrict disclosures of PHI for treatment, payment, or healthcare operations. We are not required to agree, except we must comply when you request that we not disclose PHI to your health plan for a healthcare item/service that you (or someone on your behalf) paid for in full out‑of‑pocket.
Confidential Communications: Request we contact you at a specific location or by a specific method (we will accommodate reasonable requests).
Paper Copy: Get a paper copy of this Notice at any time, even if you agreed to receive it electronically.
File a Complaint: If you believe your privacy rights were violated, you can file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights (HHS/OCR). We will not retaliate for filing a complaint.

Contact for HIPAA Requests/Complaints

PILLMAXX RX — Privacy Officer
2061 N Los Robles Ave, Suite 103, Pasadena, CA 91104

Email: hipaa@pillmaxx.com
Phone: 626-900-8694

HHS/OCR: https://www.hhs.gov/ocr/privacy/hipaa/complaints/