NOTICE OF PRIVACY PRACTICES
As part of the federal Health Insurance Portability and Accountability Act of 1996, known as HIPAA, the Facility has created this Notice of Privacy Practices (Notice). This Notice describes the Facility’s privacy practices and the rights you, the individual, have as they relate to the privacy of your Protected Health Information (PHI). Your PHI is information about you, or that could be used to identify you, as it relates to your past and present physical and mental health care services. The HIPAA regulations require that the Facility protect the privacy of your PHI that the Facility has received or created.
This Facility will abide by the terms presented within this Notice. For any uses or disclosures that are not listed below (Including Marketing and Selling of PHI), the Facility will obtain a written authorization from you for that use or disclosure, which you will have the right to revoke at any time, as explained in more detail below. The Facility reserves the right to change the Facility’s privacy practices and this Notice
HOW THE FACILITY MAY USE AND DISCLOSE YOUR PHI
The following is an accounting of the ways that the Facility is permitted, by law, to use and disclose your PHI.
Uses and disclosures of PHI for Treatment: We will use the PHI that we receive from you to fill your prescription and coordinate or manage your health care.
Uses and disclosures of PHI for Payment: The Facility will disclose your PHI to obtain payment or reimbursement from insurers for your health care services.
Uses and disclosures of PHI for Health Care Operations: The Facility may use the minimum necessary amount of your PHI to conduct quality assessments, improvement activities, and evaluate the Facility workforce.
The following is an accounting of additional ways in which the Facility is permitted or required to use or disclose PHI about you without your written authorization.
Uses and disclosures as required by law: The Facility is required to use or disclose PHI about you as required and as limited by law.
Uses and disclosure for Public Health Activities: The Facility may use or disclose PHI about you to a public health authority that is authorized by law to collect for the purpose of preventing or controlling disease, injury, or disability. This includes the FDA so that it may monitor any adverse effects of drugs, foods, nutritional supplements and other products as required by law.
Uses and disclosure about victims of abuse, neglect or domestic violence: The Facility may use or disclose PHI about you to a government authority if it is reasonably believed you are a victim of abuse, neglect or domestic violence.
Uses and disclosures for health oversight activities: The Facility may use or disclose PHI about you to a health oversight agency for oversight activities which may include audits, investigations, inspections as necessary for licensure, compliance with civil laws, or other activities the health oversight agency is authorized by law to conduct.
Disclosures to Individuals Involved in your Care: The Facility may disclose PHI about you to individuals involved in your care.
Disclosures for judicial and administrative proceedings: The Facility may disclose PHI about you in the course of any judicial or administrative proceedings, provided that proper documentation is presented to the Facility.
Disclosures for law enforcement purposes: The Facility may disclose PHI about you to law enforcement officials for authorized purposes as required by law or in response to a court order or subpoena.
Uses and disclosures about the deceased: The Facility may disclose PHI about a deceased, or prior to, and in reasonable anticipation of an individual’s death, to coroners, medical examiners, and funeral directors.
Uses and disclosures for cadaveric organ, eye or tissue donation purposes: The Facility may use and disclose PHI for the purpose of procurement, banking, or transplantation of cadaveric organs, eyes, or tissues for donation purposes.
Uses and disclosures for research purposes: The Facility may use and disclose PHI about you for research purposes with a valid waiver of authorization approved by an institutional review board or a privacy board. Otherwise, the Facility will request a signed authorization by the individual for all other research purposes.
Uses and disclosures to avert a serious threat to health or safety: The Facility may use or disclose PHI about you, if it believed in good faith, and is consistent with any applicable law and standards of ethical conduct, to avert a serious threat to health or safety.
Uses and disclosures for specialized government functions: The Facility may use or disclose PHI about you for specialized government functions including; military and veteran’s activities, national security and intelligence, protective services, department of state functions, and correctional institutions and law enforcement custodial situations.
Disclosure for workers’ compensation: The Facility may disclose PHI about you as authorized by and to the extent necessary to comply with workers’ compensation laws or programs established by law.
Disclosures for disaster relief purposes: The Facility may disclose PHI about you as authorized by law to a public or private entity to assist in disaster relief efforts and for family and personal representative notification.
Disclosures to business associates: The Facility may disclose PHI about you to the Facility’s business associates for services that they may provide to or for the Facility to assist the Facility to provide quality health care. To ensure the privacy of your PHI, we require all business associates to apply appropriate safeguards to any PHI they receive or create.
The Facility may contact you for the following purposes:
Information about treatment alternatives: The Facility may contact you to notify you of alternative treatments and/or products.
Health related benefits or services: The Facility may use your PHI to notify you of benefits and services the Facility provides.
Fundraising: If the Facility participates in a fundraising activity, the Facility may use demographic PHI to send you a fundraising packet, or the Facility may disclose demographic PHI about you to its business associate or an institutionally related foundation to send you a fundraising packet. No further disclosure will be allowed by the business associates or an institutionally related foundation without your written authorization. You will be provided with an opportunity to opt-out of all future fundraising activities.
FOR ALL OTHER USES AND DISCLOSURES
The Facility will obtain a written authorization from you for all other uses and disclosures of PHI, and the Facility will only use or disclose pursuant to such an authorization. In addition, you may revoke such an authorization in writing at any time. To revoke a previously authorized use or disclosure, please contact Henry Herring to obtain a Request for Restriction of Uses and Disclosures.
YOUR HEALTH INFORMATION RIGHTS
The following are a list of your rights in respect to your PHI. Please contact Henry Herring for more information about the below.
Request restrictions on certain uses and disclosures of your PHI: You have the right to request additional restrictions of the Facility’s uses and disclosures of your PHI. The Facility is not required to accommodate a request, except that the Facility is required to agree to a request to restrict disclosures to health insurance plans related to products and services you pay out-of-pocket for.
The right to have your PHI communicated to you by alternate means or locations: You have the right to request that the Facility communicate confidentially with you using an address or phone number other than your residence. However, state and federal laws require the Facility to have an accurate address and home phone number in case of emergencies. The Facility will consider all reasonable requests.
The right to inspect and/or obtain a copy your PHI: You have the right to request access and/or obtain a copy of your PHI that is contained in the Facility for the duration the Facility maintains PHI about you. There may be a reasonable cost-based charge for photocopying documents. You will be notified in advance of incurring such charges, if any.
The right to amend your PHI: You have the right to request an amendment of the PHI the Facility maintains about you, if you feel that the PHI the Facility has maintained about you is incorrect or otherwise incomplete. Under certain circumstances we may deny your request for amendment. If we do deny the request, you will have the right to have the denial reviewed by someone we designate who was not involved in the initial review. You may also ask the Secretary, United States Department of Health and Human Services (“HHS”), or their appropriate designee, to review such a denial.
The right to receive an accounting of disclosures of your PHI: You have the right to receive an accounting of certain disclosures of your PHI made by the Facility.
The right to receive additional copies of the Facility’s Notice of Privacy Practices: You have the right to receive additional paper copies of this Notice, upon request, even if you initially agreed to receive the Notice electronically
Notification of Breaches: You will be notified of any breaches that have compromised the privacy of your PHI.
REVISIONS TO THE NOTICE OF PRIVACY PRACTICES
The Facility reserves the right to change and/or revise this Notice and make the new revised version applicable to all PHI received prior to its effective date. The Facility will also post the revised version of the Notice in the Facility.
If you believe your privacy rights have been violated, you may file a complaint with the Facility and/or to the Secretary of HHS, or his designee. If you wish to file a complaint with the Facility, please contact Henry Herring if you wish to file a complaint with the Secretary, please write to:
The Facility will not take any adverse action against you as a result of your filing of a complaint.
If you have any questions on the Facility’s privacy practices or for clarification on anything contained within the Notice, please contact:
MEDICAL CENTER PHARMACY
912 S 16TH STREET
WILMINGTON, NC 28401
When ordering or registering on our site, as appropriate, you may be asked to enter your name, email address, mailing address, phone number, demographic information or other details to help you with your experience.
We collect information from you when you register on our site, subscribe to a newsletter, fill out a form or enter information on our site.
We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:
Our website is scanned on a regular basis for security holes and known vulnerabilities in order to make your visit to our site as safe as possible. We use regular Malware Scanning. We do not need an SSL because we are not accepting payments online.
You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser (like Internet Explorer) settings. Each browser is a little different, so look at your browser’s Help menu to learn the correct way to modify your cookies.
If you disable cookies off, some features will be disabled. It won’t affect the user’s experience that make your site experience more efficient and some of our services will not function properly.
However, you can still place orders.
We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when it’s release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property or safety.
However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
We do not include or offer third-party products or services on our website.
Google’s advertising requirements can be summed up by Google’s Advertising Principles. They are put in place to provide a positive experience for users. https://support.google.com/adwordspolicy/answer/1316548?hl=en
We use Google AdSense Advertising on our website.
We along with third-party vendors, such as Google use first-party cookies (such as the Google Analytics cookies) and third-party cookies (such as the DoubleClick cookie) or other third-party identifiers together to compile data regarding user interactions with ad impressions and other ad service functions as they relate to our website.
Users can set preferences for how Google advertises to you using the Google Ad Settings page. Alternatively, you can opt out by visiting the Network Advertising initiative opt out page or permanently using the Google Analytics Opt Out Browser add on.
Users are able to change their personal information by emailing us
We honor do not track signals and do not track, plant cookies, or use advertising when a Do Not Track (DNT) browser mechanism is in place.
It’s also important to note that we allow third-party behavioral tracking
When it comes to the collection of personal information from children under 13, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, the nation’s consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online.
We do not specifically market to children under 13.
The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.
We will notify the users via in-site notification within 7 business days.
We also agree to the Individual Redress Principle, which requires that individuals have a right to pursue legally enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.
The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.