Notice of Privacy Practices

About This Notice

Parm Rx Express (“we,” “us,” or “our”) is a licensed pharmacy and a “covered entity” under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and its implementing regulations at 45 CFR Parts 160 and 164. We are required by law to maintain the privacy of your Protected Health Information (“PHI”), to provide you with this Notice of Privacy Practices (“Notice”), and to abide by the terms of the Notice currently in effect.

PHI includes information that identifies you and relates to your past, present, or future physical or mental health, the provision of healthcare to you, or the payment for healthcare services, including prescription drug information, insurance information, and demographic details.

I. How We May Use and Disclose Your Health Information

The following describes the ways we may use and disclose your PHI. Not every use or disclosure in a category will be listed; however, all permitted uses and disclosures will fall within one of these categories.

A. For Treatment

We may use your PHI to provide, coordinate, or manage your pharmacy services. For example, our licensed pharmacists will use your prescription information and health records to dispense medications and provide pharmacist counseling. We may also share your PHI with other healthcare providers involved in your care (e.g., your prescribing physician) for treatment purposes.

B. For Payment

We may use and disclose your PHI to obtain payment for services we provide. For example, we may disclose your PHI to your health insurance plan or other payer to obtain reimbursement for your prescriptions. We may also use your PHI to determine whether your insurance plan will cover a particular medication.

C. For Healthcare Operations

We may use and disclose your PHI for our internal pharmacy operations, including: quality assurance and improvement activities; staff training and competency evaluations; auditing functions; business planning and management; and activities necessary to maintain our pharmacy license.

D. As Required by Law

We will disclose your PHI when required to do so by applicable federal, state, or local law, including reporting requirements of the Drug Enforcement Administration (DEA) and state pharmacy boards, and in response to valid legal process such as a court order or subpoena.

E. Other Permitted Uses and Disclosures

We may also use or disclose your PHI, without your authorization, for:

• Public health activities: Reporting adverse drug events or medication errors to the FDA or other public health authorities.
• Health oversight activities: Audits, inspections, or investigations by government agencies overseeing pharmacy practice.
• Law enforcement purposes: In response to a court order, warrant, or subpoena, or to report suspected drug diversion.
• Serious threats to health or safety: To prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
• Decedents: To coroners, medical examiners, or funeral directors as permitted by applicable law.

F. Uses and Disclosures Requiring Your Authorization

Uses and disclosures of your PHI not described in this Notice require your written authorization. This includes most uses and disclosures of psychotherapy notes, uses and disclosures for marketing purposes, and any sale of your PHI. You may revoke an authorization at any time in writing; however, revocation does not affect uses and disclosures we already made in reliance on the authorization.

II. Your Rights Regarding Your Health Information

You have the following rights with respect to your PHI. To exercise any of these rights, please submit a written request to our Privacy Officer (contact information below).

A. Right to Access Your PHI (45 CFR §164.524)

You have the right to inspect and obtain a copy of your PHI that we maintain in a designated record set, including prescription records and billing records. We will provide access within 30 days of your request; if we need more time we may take one additional period of up to 30 days and will tell you in writing why. We may charge a reasonable, cost-based fee for copies. We may deny your request in certain limited circumstances; if denied, you may request a review of the denial.

B. Right to Request an Amendment (45 CFR §164.526)

You have the right to request that we amend PHI in your designated record set if you believe it is inaccurate or incomplete. We may deny your request if we determine the information is accurate and complete, was not created by us, is not part of the designated record set, or is not information you would be permitted to inspect and copy. If we deny your request, you may submit a statement of disagreement.

C. Right to an Accounting of Disclosures (45 CFR §164.528)

You have the right to receive an accounting of certain disclosures of your PHI that we made in the six years prior to the date of your request. This right applies to disclosures made for purposes other than treatment, payment, or healthcare operations, and does not include disclosures made pursuant to a valid authorization.

D. Right to Request Restrictions (45 CFR §164.522)

You have the right to request that we restrict certain uses and disclosures of your PHI for treatment, payment, or healthcare operations. We are not required to agree to your requested restriction, except: we must agree to a restriction on disclosure of PHI to a health plan for payment or operations if the PHI pertains solely to healthcare for which you (or someone on your behalf) paid out of pocket in full.

E. Right to Request Confidential Communications (45 CFR §164.522)

You have the right to request that we communicate with you about your PHI in a different manner or at a different location (e.g., contact you only at a specific phone number or address). We will accommodate reasonable requests without requiring you to explain the reason for the request.

F. Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice at any time, even if you agreed to receive it electronically. Contact our Privacy Officer to request a paper copy.

G. Right to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services (HHS). To file a complaint with HHS, visit hhs.gov/hipaa/filing-a-complaint. We will not retaliate against you for filing a complaint.

III. Our Duties

• Maintain the privacy of your PHI in accordance with HIPAA and applicable state law.
• Provide you with this Notice of our legal duties and privacy practices with respect to PHI.
• Abide by the terms of this Notice currently in effect.
• Notify you of a breach of your unsecured PHI as required by 45 CFR §164.400 et seq.

We reserve the right to change the terms of this Notice and to make the revised Notice effective for PHI we already maintain. The current version of this Notice will always be posted on this website at Notice of Privacy Practices and is available on request from our Privacy Officer.

IV. Contact Our Privacy Officer

To exercise any of your rights described in this Notice, to request a paper copy, or to file a privacy complaint with us, please contact:

We do not accept requests about your health information by e-mail. Please call, write, or come in, so that your information stays with us.

We will respond to written requests regarding your rights within 30 days. If we need more time, we may take one additional period of up to 30 days and will tell you in writing why and when to expect our response.

V. Effective Date and Revisions

This Notice is effective as of June 1, 2026. We may revise this Notice at any time. The most current version will always be available on this website. If we make a material change to this Notice, we will post the revised Notice on this website and make paper copies available at the pharmacy, and the revised Notice will apply to health information we already hold.