Privacy policy
Last updated: [06/10/2025]
Care Right At Home Rx is committed to protecting your health information in compliance with the Health Insurance Portability and Accountability Act (HIPAA).
1. Information We Collect
We collect personal and health-related information voluntarily submitted by users through intake forms, consultation requests, and secure messaging.
2. How We Use Information
We use this information solely to deliver pharmacist-led consultations, respond to your inquiries, and maintain internal records of service delivery.
3. Data Security
We use HIPAA-compliant tools for communication and data storage. Your information is encrypted and securely stored. We do not share or sell your personal data.
4. Your Rights
You may request access to, correction of, or deletion of your personal information by contacting us at [insert contact email].
✅ California-Only Service Disclaimer
Care Right At Home Rx currently offers services exclusively to residents of California. By booking a consultation or submitting an intake form, you confirm that you are physically located in the state of California at the time of the session.
We reserve the right to deny service to individuals located outside of California, in accordance with professional licensure laws.
HIPAA-Compliant Privacy Policy
Effective Date: 02/01/2025
Last Updated: 02/12/2025
[CareRightAtHomeRX] (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring the security of your personal and health-related information. This Privacy Policy outlines how we collect, use, disclose, and protect your data in compliance with the California Consumer Privacy Act (CCPA) and the Health Insurance Portability and Accountability Act (HIPAA).
By using our online pharmacy consultation services at [www.yourpharmacy.com] (the “Site”), you acknowledge and agree to the practices described in this Privacy Policy. If you do not agree, please refrain from using our services.
1. Information We Collect
We collect both personal and protected health information (PHI) to provide safe and effective pharmacy services.
a. Personal Information (as per CCPA)
The following categories of personal information may be collected:
• Name, date of birth, and contact details (email, phone number, address)
• Payment and billing information (processed securely via third-party payment processors)
• Device and browsing information (IP address, browser type, cookies)
b. Protected Health Information (PHI) (as per HIPAA)
As a pharmacy, we collect PHI, which includes but is not limited to:
• Medical history, current medications, and allergies
• Prescription details and pharmacist consultation records
• Insurance provider and billing details
c. Automatic Data Collection
When you use our Site, we may collect non-identifiable information via cookies and tracking technologies, such as:
• Website usage patterns
• Pages visited and time spent on the Site
• IP address and device information
2. How We Use Your Information
We use your personal and health information for the following purposes:
• To provide online consultations: Ensuring appropriate medication management and pharmacist recommendations
• To fulfill prescription orders: Processing, verifying, and delivering medications
• To comply with legal and regulatory requirements: Maintaining health records as required under California law and HIPAA
• To process payments: Using secure third-party payment services
• To enhance security: Detecting and preventing fraud, cyber threats, or unauthorized access
• To improve our services: Conducting analytics and monitoring website usage
We will not use your personal information for marketing purposes without your consent.
3. How We Share Your Information
We do not sell or rent personal or health information. However, we may share your data under the following circumstances:
a. HIPAA-Compliant Disclosures
We only share PHI with authorized entities, including:
• Healthcare providers and pharmacists: To ensure continuity of care
• Insurance providers: To process claims and verify prescription coverage
• Legal and regulatory authorities: If required under federal or California law
(e.g., California Board of Pharmacy, FDA, DEA)
b. CCPA-Required Disclosures
Under the California Consumer Privacy Act (CCPA), California residents have the right to know how their personal information is shared. We may disclose certain data to:
• Service providers (e.g., cloud storage, payment processing) who assist in running our business
• Law enforcement or public health agencies in cases of fraud, abuse, or public safety concerns
4. Data Security Measures
We implement HIPAA-compliant security practices to safeguard your information, including:
• Encryption: Data transmission and storage are encrypted to prevent unauthorized access
• Secure Access Controls: Restricted access to PHI based on role-based permissions
• Regular Security Audits: Periodic reviews of our security policies and practices
While we take extensive measures to protect your data, no system is entirely immune to breaches. Please safeguard your login credentials.
5. Your Rights Under HIPAA and CCPA
As a California resident, you have the following rights under CCPA:
Right to Know: Request details on what personal information we collect and share
Right to Access: Obtain a copy of your stored personal information
Right to Delete: Request deletion of your personal information (exceptions apply for legally required records)
Right to Opt-Out: Decline the sale of personal information (though we do not sell
data)
As a patient under HIPAA, you have additional rights:
Right to Access Your PHI: Request a copy of your medical records
Right to Request Amendments: Correct inaccuracies in your PHI
Right to Restrict Disclosures: Limit how your PHI is shared in certain circumstances
To exercise these rights, contact us at [your contact email] or call [your support phone number]. We will respond to CCPA requests within 45 days and HIPAA requests within 30 days.
6. Cookies and Tracking Technologies
We use cookies to improve site functionality and user experience. You can adjust cookie settings in your browser.
7. Retention of Data
We retain your medical records and PHI for a minimum of six (6) years as required under HIPAA.
Personal data collected under CCPA is retained only as long as necessary for its intended purpose.
8. Children’s Privacy
Our services are not intended for individuals under 18 years of age. If we learn that a minor’s data was collected without parental consent, we will delete it.
9. Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect legal changes or improvements to our services. The latest version will always be available on this page.
10. Contact Information
If you have any questions regarding this Privacy Policy, your privacy rights, or wish to file a complaint, please contact us at:
[CareRightAtHomeRX]
Email: [email protected]
For HIPAA-related concerns, you may also contact the U.S. Department of Health & Human Services – Office for Civil Rights (OCR) at www.hhs.gov/hipaa.
Acknowledgment & Consent
By using our website and services, you acknowledge that you have read and understood this Privacy Policy and consent to our data collection and processing practices.
This policy ensures compliance with HIPAA and CCPA, covering both health data protection and consumer privacy rights in California. Let me know if you need further adjustments based on specific state pharmacy regulations or business needs.
