Pharmacy HIPAA Compliance
How we handle protected health information as the compounding partner behind clinics, med spas, and telehealth platforms — written for the person doing the diligence.
Why this matters to your operations team
When your clinic or platform sends a prescription to an outside pharmacy, patient data moves with it. The pharmacy you choose becomes part of how your organization meets its privacy obligations, so it is reasonable to ask how that pharmacy receives, stores, and limits access to protected health information before the first order.
This page summarizes our practices in plain language. The formal, legally operative document is our HIPAA Notice of Privacy Practices.
Secure prescription intake
Prescriptions reach us through e-prescribing, our practitioner portal, or secure fax rather than open email. Patient-facing forms on this site submit over encrypted connections to our internal systems.
Data handling and minimum necessary
Protected health information is used to fill and support the prescription, obtain payment, and run pharmacy operations. Staff access what their role requires, and other uses require the patient's written authorization.
Workforce training
Pharmacy staff are trained on privacy obligations as part of onboarding and ongoing competency requirements, alongside the compounding competency testing described on our quality page.
Breach procedures
We are required by law to maintain the privacy of protected health information and to notify affected individuals following a breach of unsecured protected health information. Our Privacy Officer is the named point of contact for privacy questions and incidents.
Patient rights we support
Patients your organization sends to us keep every right described in our Notice of Privacy Practices. Your support staff can point patients to us directly for any of the following:
- Request a restriction on the use and disclosure of their information
- Request confidential communication by alternate method or location
- Inspect and copy their protected health information
- Request an amendment to incomplete or incorrect information
- Request an accounting of uses and disclosures
- Receive a paper copy of our Notice of Privacy Practices
We are a PCAB/ACHC accredited 503A compounding pharmacy licensed in 49 states plus the District of Columbia — every state except Kansas. See compliance and licensure and quality.
Frequently Asked Questions
Have a diligence questionnaire for us?
Send it over and we'll route it to the right person.