FOR CLINIC & TELEHEALTH DILIGENCE

    Pharmacy HIPAA
    Compliance

    How we handle protected health information as the compounding partner behind clinics, med spas, and telehealth platforms — written for the person doing the diligence.

    PCAB accredited · licensed in all 50 states + DC

    Licensed in all 50 states + DCPCAB accreditedNamed Privacy Officer423-975-0597

    WHY IT MATTERS

    Why this matters
    to your operations team.

    When your clinic or platform sends a prescription to an outside pharmacy, patient data moves with it. The pharmacy you choose becomes part of how your organization meets its privacy obligations, so it is reasonable to ask how that pharmacy receives, stores, and limits access to protected health information before the first order.

    This page summarizes our practices in plain language. The formal, legally operative document is our HIPAA Notice of Privacy Practices.

    HOW WE PROTECT PATIENT DATA

    How we protect patient data.

    Secure prescription intake

    Prescriptions reach us through e-prescribing, our practitioner portal, or secure fax rather than open email. Patient-facing forms on this site submit over encrypted connections to our internal systems.

    Data handling and minimum necessary

    Protected health information is used to fill and support the prescription, obtain payment, and run pharmacy operations. Staff access what their role requires, and other uses require the patient's written authorization.

    Workforce training

    Pharmacy staff are trained on privacy obligations as part of onboarding and ongoing competency requirements, alongside the compounding competency testing described on our quality page.

    Breach procedures

    We are required by law to maintain the privacy of protected health information and to notify affected individuals following a breach of unsecured protected health information. Our Privacy Officer is the named point of contact for privacy questions and incidents.

    PATIENT RIGHTS

    Patient rights we support.

    Patients your organization sends to us keep every right described in our Notice of Privacy Practices. Your support staff can point patients to us directly for any of the following:

    • Request a restriction on the use and disclosure of their information
    • Request confidential communication by alternate method or location
    • Inspect and copy their protected health information
    • Request an amendment to incomplete or incorrect information
    • Request an accounting of uses and disclosures
    • Receive a paper copy of our Notice of Privacy Practices

    We are a PCAB accredited 503A compounding pharmacy licensed in all 50 states and the District of Columbia. See compliance and licensure and quality.

    FREQUENTLY ASKED QUESTIONS

    Frequently asked
    questions.

    Do you sign a business associate agreement with telehealth partners?

    Talk to our provider support team about the paperwork your organization requires as part of onboarding. We will review your agreement and confirm what we can execute before your first order.

    How should our clinic send prescriptions to you?

    Use e-prescribing, our practitioner portal, or secure fax. Please do not send protected health information by ordinary email.

    Who is your privacy contact?

    Our Privacy Officer is Perry Ripple, Pharm.D., reachable at ProCompounding Pharmacy, 527 N State of Franklin Rd, Johnson City, TN 37604, (423) 975-0597.

    Where can I read your formal privacy notice?

    Our HIPAA Notice of Privacy Practices is published in full on our HIPAA page, which describes patient rights and our legal duties in detail.

    TALK WITH OUR TEAM

    Have a diligence questionnaire for us?

    Send it over and we'll route it to the right person.