Privacy Policy

Effective Date: September 23, 2013

Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. It includes your rights with respect to your health information and how to file a complaint concerning a violation of the privacy or security of your health information, or of your rights concerning your information. You have a right to a copy of this notice (in paper or electronic form) and to discuss it with the Serve You Rx Privacy Officer at 800-759-3203 or CustomerService@ServeYouRx.com if you have any questions. Please review it carefully.

ABOUT US

In this Notice, we use terms like “we,” “us” or “our” to refer to Serve You Rx Home Delivery and Specialty pharmacy (“Serve You Rx”), its pharmacists, employees, staff and other personnel. Serve You Rx follows the terms of this Notice and may share health information for treatment, payment, or healthcare operations purposes and for other purposes as described in this Notice.

PURPOSE OF THIS NOTICE

This Notice describes how we may use and disclose your health information to carry out treatment, payment, or healthcare operations and for other purposes that are permitted or required by law. This Notice also outlines our legal duties for protecting the privacy of your health information and explains your rights to have your health information protected. We will create a record of the services we provide you, and this record will include your health information. We need to maintain this information to ensure that you receive quality care and to meet certain legal requirements related to providing your care. We understand that your health information is personal, and we are committed to protecting your privacy and ensuring that your health information is not used inappropriately.

OUR RESPONSIBILITIES

We are required by law to maintain the privacy of your health information and to provide you notice of our legal duties and privacy practices with respect to your health information. We are also required to notify you of a breach of your unsecured health information. We will abide by the terms of this Notice.

HOW WE MAY USE OR DISCLOSE YOUR HEALTH INFORMATION

The following categories describe examples of the way we use and disclose health information without your written authorization:

For Treatment: We may use and disclose your health information to provide you with medical treatment or services. For example, we may contact you regarding medications, therapeutic substitution (e.g., the availability of generic products), counseling and drug utilization review (DUR), product recalls, re-fill reminders or disease state management. We may disclose your health information to another pharmacist or to your prescriber for the purpose of a consultation.

For Payment: We may use and disclose your health information to others so they will pay us or reimburse you for your treatment. For example, a bill may be sent to you, your insurance company, pharmacy benefit manager or another third-party payer. The bill may contain information that identifies you, your diagnosis, and treatment or prescription medication used during treatment. We may tell your health plan about a prescription medication you are going to receive to obtain prior approval or to determine whether your health plan will cover the prescription medication.

For Healthcare Operations: We may use and disclose your health information to support our business activities. These uses and disclosures are necessary to run the home delivery pharmacy and make sure our patients receive quality care. For example, we may use your health information for quality assessment activities, reviewing the competence and qualifications of the pharmacists providing treatment to you, and for other essential activities.

You may provide a single consent for all future uses or disclosures for treatment, payment, and healthcare operations purpose.

We may also disclose your health information to third-party “business associates” that perform various services on our behalf, such as auditing, legal, billing and collection services. In these cases, we will enter into a written agreement with the business associate to ensure they protect the privacy of your health information.

Individuals Involved in Your Care or Payment for Your Care and Notification: If you verbally agree to the use or disclosure and in certain other situations, we will make the following uses and disclosures of your health information. We may disclose to your family, friends, and anyone else you identify as involved in your medical care or who helps pay for your care, health information relevant to that person’s involvement in your care or paying for your care. We may also make these disclosures after your death.

We may use or disclose your information to notify or assist in notifying a family member, personal representative or any other person responsible for your care regarding your general condition or death. We may also use or disclose your health information to disaster-relief organizations so that your family or other persons responsible for your care can be notified about your condition, status and location.

We are also allowed to the extent permitted by applicable law to use and disclose your health information without your authorization for the following purposes:

As Required by Law: We may use and disclose your health information when required to do so by federal, state or local law.

Judicial and Administrative Proceedings: If you are involved in a legal proceeding, we may disclose your health information in response to a court or administrative order. We may also release your health information in response to a subpoena, discovery request or other lawful process by someone else involved in the dispute, but only if efforts have been made to tell you about the request or to obtain an order protecting the information requested.

Health Oversight Activities: We may use and disclose your health information to health oversight agencies for activities authorized by law. These oversight activities are necessary for the government to monitor the healthcare system, government benefit programs, compliance with government regulatory programs and compliance with civil rights laws.

Law Enforcement: We may disclose your health information, within limitations, to law enforcement officials for several different purposes:

• To comply with a court order, warrant, subpoena, summons or other similar process
• To identify or locate a suspect, fugitive, material witness or missing person
• About the victim of a crime, if the victim agrees or we are unable to obtain the victim’s agreement
• About a death we suspect may have resulted from criminal conduct
• About criminal conduct we believe in good faith to have occurred on our premises
• To report a crime not occurring on our premises; the nature of a crime; the location of a crime; and the identity, description and location of the individual who committed the crime, in an emergency.

Public Health Activities: We may use and disclose your health information for public health activities, including the following:

• To prevent or control disease, injury, or disability
• To report births or deaths
• To report child abuse or neglect
• Activities related to the quality, safety or effectiveness of FDA-regulated products
• To notify a person who may have been exposed to a communicable disease or may be at risk for contracting or spreading a disease or condition as authorized by law
• To notify an employer of findings concerning work-related illness or injury or general medical surveillance that the employer needs to comply with the law if you are provided notice of such disclosure

Serious Threat to Health or Safety: If there is a serious threat to your health and safety or the health and safety of the public or another person, we may use and disclose your health information to someone able to help prevent the threat or as necessary for law enforcement authorities to identify or apprehend an individual.

Organ/Tissue Donation: If you are an organ donor, we may use and disclose your health information to organizations that handle procurement, transplantation or banking of organs, eyes or tissues.

Coroners, Medical Examiners and Funeral Directors: We may use and disclose health information to a coroner or medical examiner. This disclosure may be necessary to identify a deceased person or determine the cause of death. We may also disclose health information, as necessary, to funeral directors to assist them in performing their duties.

Workers’ Compensation: We may disclose your health information as authorized by and to the extent necessary to comply with laws related to workers’ compensation or similar programs that provide benefits for work-related injuries or illness.

Victims of Abuse, Neglect or Domestic

Violence: We may disclose health information to the appropriate government authority if we believe a patient has been the victim of abuse, neglect or domestic violence. We will only make this disclosure if you agree or when required or authorized by law.

Military and Veterans Activities: If you are a member of the Armed Forces, we may disclose your health information to military command authorities. Health information about foreign military personnel may be disclosed to foreign military authorities.

National Security and Intelligence Activities: We may disclose your health information to authorized federal officials for intelligence, counterintelligence and other national security activities authorized by law.

Protective Services for the President and Others: We may disclose your health information to authorized federal officials so they may provide protective services for the President and others, including foreign heads of state.

Inmates: If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may disclose your health information to the correctional institution or law enforcement official to assist them in providing you healthcare, protecting your health and safety or the health and safety of others, or for the safety of the correctional institution.

Research: We may use and disclose your health information for certain research activities without your written authorization. For example, we might use some of your health information to decide if we have enough patients to conduct a cancer research study. For certain research activities, an Institutional Review Board (IRB) or Privacy Board may approve uses and disclosures of your health information without your authorization.

Notification of Potential Redisclosure

Any health information we disclose, in accordance with the Privacy Rule, may be subject to redisclosure by the recipient and may no longer be protected under the Privacy Rule. This information is provided to help you make informed decisions about who has access to your health information and how it is disclosed.

Protections for Reproductive Health Information

We will not use or disclose your reproductive health information for purposes that are not explicitly permitted by law. For example, it is prohibited to use or disclose this information for the purpose of criminal, civil, or administrative investigations into reproductive health services you received.

Before disclosing your reproductive health information for certain purposes, we will obtain an attestation from the recipient confirming that the disclosure complies with applicable legal requirements. This includes ensuring that the information will not be used for prohibited purposes, such as unauthorized investigations or actions related to reproductive health."

Other Uses and Disclosures of Your Health Information that Require Written Authorization: Other uses and disclosures of your health information not covered by this Notice will be made only with your written authorization. Some examples include:

• Psychotherapy Notes: We usually do not maintain psychotherapy notes about you. If we do, we will only use and disclose them with your written authorization except in limited situations.
• Marketing: We may only use and disclose your health information for marketing purposes with your written authorization. This would include making treatment communications to you when we receive a financial benefit for doing so.
• Sale of Your Health Information: We may sell your health information only with your written authorization.

Records that are disclosed pursuant to your written consent for treatment, payment, and healthcare operations may be further disclosed by the third party without your written consent, to the extent the HIPAA regulations permit such disclosure.

If you authorize us to use or disclose your health information, you may revoke your authorization, in writing, at any time. If you revoke your authorization, we will no longer use or disclose your health information as specified by your revocation, except to the extent that we have taken action in reliance on your authorization.

Records or testimony relaying the content of health information shall not be used or disclosed in any civil administrative, criminal, or legislative proceedings against you unless based on specific written consent or a court order.

Records shall only be used or disclosed based on a court order after notice and an opportunity to be heard is provided to you or the holder of your health information.

A court order authorizing use or disclosure must be accompanied by a subpoena or other similar legal mandate compelling disclosure before the record is used or disclosed.

YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

You have the following rights regarding the health information we maintain about you:

Right to Request Restrictions: You have the right to request restrictions on how we use and disclose your health information for treatment, payment or healthcare operations. In most circumstances, we are not required to agree to your request. If we do agree, we will comply with your request unless the information is needed to provide you emergency treatment. To request restrictions, you must make your request in writing and submit it to the Privacy Officer at the address in this notice. We are required to agree to a request that we restrict a disclosure made to a health plan for payment or healthcare operations purposes that is not otherwise required by law, if you, or someone other than the health plan on your behalf, paid for the service or item in question out-of-pocket in full.

Right to Request Confidential Communications: You have the right to request that we communicate with you in a certain manner or at a certain location regarding the services you receive from us. For example, you may ask that we only contact you at work or only by mail. To request confidential communications, you must make your request in writing and submit it the Privacy Officer at the address in this notice. We will not ask you the reason for your request. We will attempt to accommodate all reasonable requests.

Right to Inspect and Copy: You have the right to inspect and copy health information that may be used to make decisions about your care. To inspect and copy your health information, you must make your request in writing by filling out the appropriate form provided by us and submitting it to the Privacy Officer at the address in this notice. You may request access to your medical information in a certain electronic form and format if readily producible or, if not readily producible, in a mutually agreeable electronic form and format. Further, you may request in writing that we transmit a copy of your health information to any person or entity you designate. Your written, signed request must clearly identify such designated person or entity and where you would like us to send the copy. If you request a copy of your health information, we may charge a cost-based fee for the labor, supplies and postage required to meet your request.

We may deny your request to inspect and copy in certain very limited circumstances. If you are denied access to your health information, you may request that the denial be reviewed by a licensed healthcare professional chosen by us. The person conducting the review will not be the person who denied your request. We will comply with the outcome of the review.

Right to Amend: If you feel that your health information is incorrect or incomplete, you may request that we amend your information. You have the right to request an amendment for as long as the information is kept by or for us. To request an amendment, you must make your request in writing by filling out the appropriate form provided by us and submitting it to the Privacy Officer at the address below.

We may deny your request for an amendment. If this occurs, you will be notified of the reason for the denial and given the opportunity to file a written statement of disagreement with us that will become part of your medical record.

Right to an Accounting of Disclosures: You have the right to request an accounting of disclosures we make of your health information. Please note that certain disclosures need not be included in the accounting we provide to you.

To request an accounting of disclosures, you must make your request in writing by filling out the appropriate form provided by us and submitting it to the Privacy Officer at the address in this notice. Your request must state a period which may not be longer than six years and which may not include dates before April 14, 2003. The first accounting you request within a 12-month period will be free. For additional accountings, we may charge you for the costs of providing the accounting. We will notify you of the costs involved and give you an opportunity to withdraw or modify your request before any costs have been incurred.

Right to a Paper Copy of This Notice: You have the right to a paper copy of this Notice at any time, even if you previously agreed to receive this Notice electronically. To obtain a paper copy of this Notice, please contact the Privacy Officer at the address in this notice. You may also obtain a paper copy of this Notice at our website, serveyourx.com.

CHANGES TO THIS NOTICE

We reserve the right to change the terms of this Notice at any time. We reserve the right to make the new Notice provisions effective for all health information we currently maintain, as well as any health information we receive in the future. If we make material or important changes to our privacy practices, we will promptly revise our Notice. Each version of the Notice will have an effective date listed on the first page. Updates to this Notice are also available at our website, serveyourx.com.

COMPLAINTS

If you have any questions about this Notice or would like to file a complaint about our privacy practices, please direct your inquiries to the Privacy Officer at the address in this notice. You may also file a complaint with the Secretary of the Department of Health and Human Services. You will not be retaliated against or penalized for filing a complaint.

QUESTIONS

If you have questions about this Notice, please contact the Privacy Officer at the address in this notice.

Privacy Officer
Serve You Rx
10201 West Innovation Drive, Suite 600
Milwaukee, WI 53226
Phone: 800-759-3203