Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective date: This notice was first effective January 1, 2022. This version is effective October 13, 2026.

Looking for how this website handles analytics and cookies? See Website privacy below.

At OnPoint Pharmacy, we are committed to protecting the privacy and security of your protected health information (“PHI”). This Notice of Privacy Practices (“Notice”) explains how we may use and disclose your PHI, your rights regarding your PHI, and our responsibilities under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).

1. Our Responsibilities

OnPoint Pharmacy is required by law to:

• Maintain the privacy of your PHI.
• Provide you with this Notice describing our legal duties and privacy practices.
• Notify you following a breach of unsecured PHI when required by law.
• Follow the terms of the Notice currently in effect.

2. How We May Use and Disclose Your PHI

We may use or disclose your PHI without your written authorization for the following purposes:

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. For example, we may communicate with your physician or other healthcare provider regarding your prescriptions, medications, allergies, or other information necessary to provide appropriate care.

Payment

We may use or disclose your PHI to obtain payment for services we provide. For example, we may provide information to your health plan or insurance company to process prescription claims or determine coverage.

Healthcare Operations

We may use or disclose your PHI as necessary for our healthcare operations, including activities such as quality assessment, employee training, compliance activities, auditing, and business management.

Individuals Involved in Your Care

When appropriate, we may disclose relevant PHI to a family member, caregiver, or other person you identify who is involved in your healthcare or payment for your healthcare, unless you object or disclosure is otherwise prohibited by law.

Required by Law

We may use or disclose your PHI when required to do so by federal, state, or local law.

Public Health

We may disclose PHI for public health activities permitted or required by law, such as reporting certain diseases, adverse medication events, or product problems.

Health Oversight

We may disclose PHI to government agencies authorized to conduct healthcare oversight activities, including investigations, inspections, audits, and licensing activities.

Judicial and Administrative Proceedings

We may disclose PHI in response to a court or administrative order and, in certain circumstances, in response to a subpoena or other lawful process.

Law Enforcement

We may disclose PHI to law enforcement officials when permitted or required by applicable law.

Serious Threats to Health or Safety

We may use or disclose PHI when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, when permitted by law.

Workers’ Compensation

We may disclose PHI as authorized by and to the extent necessary to comply with laws relating to workers’ compensation and similar programs.

3. Uses and Disclosures Requiring Your Authorization

Most uses and disclosures of psychotherapy notes, uses and disclosures for marketing purposes, and disclosures that constitute a sale of PHI require your written authorization unless an exception under applicable law applies.

Other uses and disclosures of your PHI not described in this Notice will generally require your written authorization.

If you provide authorization, you may revoke it in writing at any time, except to the extent we have already relied upon the authorization.

4. Your Rights Regarding Your PHI

You have the following rights regarding your protected health information, subject to certain limitations under applicable law.

Right to Inspect and Obtain a Copy

You may request to inspect or obtain a copy of your PHI maintained by OnPoint Pharmacy. We may charge a reasonable, cost-based fee where permitted by law.

Right to Request an Amendment

You may request that we amend PHI that you believe is incorrect or incomplete. We may deny your request in certain circumstances permitted by law.

Right to Request Restrictions

You may request restrictions on how we use or disclose your PHI. We are not required to agree to every restriction request. However, if you request that PHI not be disclosed to a health plan for payment or healthcare operations purposes when you have paid for the healthcare item or service completely out of pocket, we will generally honor that request unless disclosure is otherwise required by law.

Right to Request Confidential Communications

You may request that we communicate with you about your healthcare in a particular way or at a particular location. For example, you may request that we contact you at a different telephone number or address.

Right to an Accounting of Disclosures

You may ask for a list of the times we shared your PHI in the six years before your request, who we shared it with and why. This list does not include disclosures for treatment, payment or health care operations, or disclosures you asked us to make. We provide one list a year free and may charge a reasonable, cost-based fee for additional lists within 12 months.

Right to Be Notified of a Breach

You have the right to be notified if a breach of your unsecured PHI occurs.

Right to Choose Someone to Act for You

If you have given someone medical power of attorney, or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.

Right to Receive a Paper Copy

You may request a paper copy of this Notice at any time, even if you have agreed to receive the Notice electronically.

5. Special Protections Under Other Laws

Some types of health information have extra protection under federal and New York law. Where those laws are stricter than HIPAA, we follow them. This includes information about HIV and AIDS, mental health, genetic testing, and substance use disorder treatment.

Substance use disorder treatment records

If we receive records from a substance use disorder treatment program covered by federal rules at 42 CFR Part 2, we protect them as those rules require.

• These records, and testimony describing what is in them, will not be used or shared in any civil, criminal, administrative or legislative proceeding against you unless you give written consent or a court orders it after you are notified and given a chance to be heard.
• Substance use disorder counseling notes have extra protection and generally may be used or shared only with your written permission.
• We do not use these records, or any of your PHI, for fundraising.

Information shared with others

When we share your information as this notice allows, the person or organization that receives it may share it again, and it may no longer be protected by federal privacy law.

6. Our Privacy Practices

We take reasonable administrative, technical, and physical safeguards to protect your PHI from unauthorized access, use, or disclosure.

Only individuals who have a legitimate need to access PHI as part of their duties will be permitted to access it, consistent with applicable law and our policies.

7. Changes to This Notice

OnPoint Pharmacy reserves the right to change this Notice. We reserve the right to make the revised Notice effective for PHI we already maintain as well as information we receive in the future, to the extent permitted by law.

8. Questions and Complaints

If you have questions about this Notice or believe your privacy rights have been violated, please contact our Privacy Officer:

OnPoint Pharmacy
401B Old Country Road, Carle Place, NY 11514
Telephone: (516) 340-4733
Email: compliance@onpointpharmacy.com

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, by mail at 200 Independence Avenue SW, Washington, DC 20201, by phone at 1-877-696-6775, or online at hhs.gov/ocr/complaints. You will not be retaliated against for filing a complaint.

Free language help and help for people with disabilities are available. See our nondiscrimination notice and language help.

---

Website privacy

Updated October 13, 2026. This section covers onpointpharmacy.com. Health information you send us through the site is protected by the Notice of Privacy Practices above.

What you send us

When you fill in a patient form, such as a refill, transfer, new patient or update form, it goes through Jotform's HIPAA-compliant service to the pharmacy you choose. We use it to fill your prescriptions and contact you. When you text or call a store, your message goes to that store's pharmacy team. Standard message and data rates may apply. Tell your store if you would rather not get texts.

Analytics

On general pages, we use Google Analytics to count visits and see which pages are useful, such as pages viewed, device and browser type, approximate city and how you found the site. Google Analytics uses cookies for this. We turned off Google's advertising features and do not use analytics for advertising. We do not load Google Analytics on our patient form pages (refills, transfer, new patient and update my information). You can block it with your browser's privacy settings or the Google Analytics opt-out add-on.

Your chosen store

If you pick a store on the site, your browser remembers it so the next page shows the right phone number. This stays on your device and is not sent to us. Clearing your browser data removes it.

What we do not do

We do not sell your personal information or share it for targeted advertising. This website is not directed to children under 13.

Other websites

Links to other services, such as RxLocal, Google Maps or Jotform, follow those companies' privacy policies.

Questions

Email compliance@onpointpharmacy.com or call 516-340-4733.