THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

At OnPoint Pharmacy, we are committed to protecting the privacy and security of your protected health information (“PHI”). This Notice of Privacy Practices (“Notice”) explains how we may use and disclose your PHI, your rights regarding your PHI, and our responsibilities under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).

1. Our Responsibilities

OnPoint Pharmacy is required by law to:

• Maintain the privacy of your PHI.
• Provide you with this Notice describing our legal duties and privacy practices.
• Notify you following a breach of unsecured PHI when required by law.
• Follow the terms of the Notice currently in effect.

2. How We May Use and Disclose Your PHI

We may use or disclose your PHI without your written authorization for the following purposes:

Treatment
We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. For example, we may communicate with your physician or other healthcare provider regarding your prescriptions, medications, allergies, or other information necessary to provide appropriate care.

Payment
We may use or disclose your PHI to obtain payment for services we provide. For example, we may provide information to your health plan or insurance company to process prescription claims or determine coverage.

Healthcare Operations
We may use or disclose your PHI as necessary for our healthcare operations, including activities such as quality assessment, employee training, compliance activities, auditing, and business management.

Individuals Involved in Your Care
When appropriate, we may disclose relevant PHI to a family member, caregiver, or other person you identify who is involved in your healthcare or payment for your healthcare, unless you object or disclosure is otherwise prohibited by law.

Required by Law
We may use or disclose your PHI when required to do so by federal, state, or local law.

Public Health
We may disclose PHI for public health activities permitted or required by law, such as reporting certain diseases, adverse medication events, or product problems.

Health Oversight
We may disclose PHI to government agencies authorized to conduct healthcare oversight activities, including investigations, inspections, audits, and licensing activities.

Judicial and Administrative Proceedings
We may disclose PHI in response to a court or administrative order and, in certain circumstances, in response to a subpoena or other lawful process.

Law Enforcement
We may disclose PHI to law enforcement officials when permitted or required by applicable law.

Serious Threats to Health or Safety
We may use or disclose PHI when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, when permitted by law.

Workers’ Compensation
We may disclose PHI as authorized by and to the extent necessary to comply with laws relating to workers’ compensation and similar programs.

3. Uses and Disclosures Requiring Your Authorization

Most uses and disclosures of psychotherapy notes, uses and disclosures for marketing purposes, and disclosures that constitute a sale of PHI require your written authorization unless an exception under applicable law applies.

Other uses and disclosures of your PHI not described in this Notice will generally require your written authorization.

If you provide authorization, you may revoke it in writing at any time, except to the extent we have already relied upon the authorization.

4. Your Rights Regarding Your PHI

You have the following rights regarding your protected health information, subject to certain limitations under applicable law.

Right to Inspect and Obtain a Copy
You may request to inspect or obtain a copy of your PHI maintained by OnPoint Pharmacy. We may charge a reasonable, cost-based fee where permitted by law.

Right to Request an Amendment
You may request that we amend PHI that you believe is incorrect or incomplete. We may deny your request in certain circumstances permitted by law.

Right to Request Restrictions
You may request restrictions on how we use or disclose your PHI. We are not required to agree to every restriction request. However, if you request that PHI not be disclosed to a health plan for payment or healthcare operations purposes when you have paid for the healthcare item or service completely out of pocket, we will generally honor that request unless disclosure is otherwise required by law.

Right to Request Confidential Communications
You may request that we communicate with you about your healthcare in a particular way or at a particular location. For example, you may request that we contact you at a different telephone number or address.

Right to Receive a Paper Copy
You may request a paper copy of this Notice at any time, even if you have agreed to receive the Notice electronically.

5. Our Privacy Practices

We take reasonable administrative, technical, and physical safeguards to protect your PHI from unauthorized access, use, or disclosure.

Only individuals who have a legitimate need to access PHI as part of their duties will be permitted to access it, consistent with applicable law and our policies.

6. Changes to This Notice

OnPoint Pharmacy reserves the right to change this Notice. We reserve the right to make the revised Notice effective for PHI we already maintain as well as information we receive in the future, to the extent permitted by law.

7. Questions and Complaints

If you have questions about this Notice or believe your privacy rights have been violated, please contact our Privacy Officer:

OnPoint Pharmacy
Address: 401B Old Country Road, Carle Place, NY 11514
Telephone: (516) 340-4733
Email: compliance@onpointpharmacy.com

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint.