Privacy And Security

PHARMACY PRIVACY NOTICE

Last updated: April 14, 2023

This Privacy Notice (“Notice”) describes the Personal Information (defined below) collected by or on behalf of the following pharmacies: Meds Pharmacy, LLC, National Treatment Delivery and Care LLC, Curexa Pharmacy LLC (each a “Pharmacy” and collectively the “Pharmacies”) during the provision of pharmacy services (the “Services”) and how Personal Information is used and shared. If you have questions or concerns about this Notice, please contact your Pharmacy as set forth below.

This Privacy Notice only applies to Pharmacies and their privacy practices.

Pharmacies Collect Data You Provide

Pharmacies will require information that personally identifies you (“Personal Information”) such as your name, email, mailing address, or phone number. Pharmacies will collect, use, and share it pursuant to this Notice and applicable law.

Pharmacies are not “covered entities” under the Health Insurance Portability and Accountability Act of 1996, as amended (“HIPAA”) and Personal Information does not constitute “protected health information” under HIPAA. It is important to note that HIPAA does not necessarily apply to an entity or person simply because there is health information involved, and HIPAA does not apply to Services or communications with Pharmacies. However, any medical or health information that you provide that is subject to specific protections under applicable state or federal laws will be used and disclosed in accordance with such applicable laws.

Personal Information will be collected from you through one or more service providers and vendors engaged by Providers (as defined here) and Pharmacies to provide technology and other platforms used to provide you with services. Specifically, Pharmacies obtain data about individuals from BlueChew.com (“BlueChew”) and Providers. This includes the information populated into a BlueChew account and collected by Providers. Pharmacies will use this data to provide you Services. Data from BlueChew and Providers does not constitute protected health information under HIPAA. Please visit BlueChew’s Privacy Policy for additional information on how BlueChew uses your Personal Information here. Please visit Providers’ Privacy Policy for additional information on how Providers use your Personal Information here.

How Pharmacies Use & Share Personal Information

Beyond the uses and sharing described above, Pharmacies may use and share Personal Information as described below. Pharmacies do not sell or rent Personal Information except as stated in this Notice and as permitted by applicable law.

Purpose Collected & Communication with You. Pharmacies use and share Personal Information for the purpose for which it was collected. For example, if you contact Pharmacies for support or assistance, they may use Personal Information to contact you and assist you with your request. Pharmacies may send you information via your email registered with BlueChew. Any correspondence with your Pharmacies will be via that email address. You may request a copy of your pharmacy record from your Pharmacies at any time, but understand and acknowledge that such pharmacy record may be provided to you via unencrypted email.

Vendors, & Other Partners. Pharmacies may share Personal Information with their third-party vendors, service providers, suppliers, consultants, agents, sales representatives, and other partners (including technology management and hosting, marketing and public relations, identity verification, and email services, such as BlueChew) or otherwise process Personal Information for purposes described in this Notice or communicated to you when Providers or Pharmacies collect such data. The parties described in this paragraph are authorized and may use and disclose Personal Information as needed to provide the applicable services to Providers and Pharmacies, and in the case of BlueChew, as otherwise set forth in its Privacy Policy here.

Aggregated Data. Pharmacies may use Personal Information to create anonymous aggregate data. Pharmacies may use and share such aggregate data with their affiliates, vendors, and other third parties to: (a) analyze, develop, and improve the Services that Pharmacies make available, (b) inform business strategies, (c) understand patient demographics and user preferences, (d) customize user experiences, and (e) for other lawful purposes.

Security & Protection of Rights. Pharmacies may use Personal Information and share it with third parties if they believe it is needed to provide the Services or to protect their rights or the rights of others, including sharing data needed to identify, contact, or bring legal action if contracts, terms, or policies are violated or if required by law.

Business Transactions. If Pharmacies undergo a change or contemplated change in control, acquisition, merger, reorganization, or asset sale, all Personal Information may be transferred, sold, shared, or otherwise shared with potential and actual successors, which will be bound by this Notice as it applies to Personal Information.

With Your Consent. With your consent, Pharmacies may use or share Personal Information in ways not specifically described in this Notice.

Data Pharmacies Do Not Intend to Collect

Special Information. Pharmacies do not intend to collect any data that reveals your racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, or that involves genetic or biometric data or data concerning sexual orientation. Pharmacies do collect certain Personal Information consisting of health information used to provide pharmacy services. Pharmacies only use this Personal Information for pharmacy services.

Minors. Pharmacies are committed to protecting children’s privacy. Pharmacy services are not directed at minors under 18 years of age. Pharmacies do not knowingly collect, use, or share data from minors under 18. If a parent or legal guardian learns their child provided Pharmacies with Personal Information without consent, please contact Pharmacies as set forth below.

Data Security

Pharmacies use commercially reasonable technical and organizational measures to help secure all Personal Information against loss, misuse, and alteration. While Pharmacies cannot guarantee it, they use industry-standard protections to help safeguard against such occurrences.

YOU UNDERSTAND THAT NO DATA TRANSMISSION OVER THE INTERNET CAN BE GUARANTEED TO BE 100% SECURE. WHILE PHARMACIES STRIVE TO PROTECT YOUR PERSONAL INFORMATION, THEY DO NOT GUARANTEE THE SECURITY OF PERSONAL INFORMATION AND YOU PROVIDE PERSONAL INFORMATION AT YOUR OWN RISK.

Access from Outside the United States

Pharmacies are only licensed to practice pharmacy within their particular state such that their services are operated and maintained from the United States and are intended solely for a United States audience and patients within the states they reside. If you attempt to access Pharmacy services from outside the United States, please be aware that Personal Information will be transferred to, stored in, and processed in the United States. U.S. data protection and related laws may not be as comprehensive as those from where you reside.

Third-Party Sites

The Pharmacies may link to, or be linked to, websites not controlled by Pharmacies. Pharmacies are not responsible for third-parties’ privacy policies or practices. This Notice does not apply to any third-party websites or to any data that you provide to third parties. You should read the privacy policy for each website that you visit.

Access & Update Your Personal Information

To access or update your Personal Information as it exists in our records, please contact us using the information below.

If you have questions or concerns regarding this Notice, contact us at support@bluechew.com