HIPAA Privacy Policy

1. Overview of Our Privacy Practices

At Benjamin's Pharmacy, we respect your privacy and are dedicated to maintaining the confidentiality of your health information. This policy applies to both our online platforms (website, mobile apps) and physical locations (office, clinic, store, etc.). By using our services or visiting our premises, you agree to the practices outlined in this Privacy Policy.

2. What is Protected Health Information (PHI)?

PHI refers to any health information, including demographic details, that can be used to identify you and is related to your health, healthcare services, or payment for healthcare services. This information includes:

• Name, address, phone number, email address
• Medical history, diagnosis, treatments, prescriptions
• Insurance information
• Other details that could reveal your identity in relation to your health

3. Use and Disclosure of PHI

We will use and disclose your PHI only in the following situations:

For Treatment, Payment, and Healthcare Operations

• Treatment: PHI may be used to provide you with healthcare services or coordinate care between different healthcare providers.
• Payment: We may use PHI to process insurance claims or other payment-related tasks.
• Healthcare Operations: PHI may be used for activities such as quality improvement, staff training, or legal compliance.

For Other Purposes with Your Authorization

We will obtain your written authorization for uses or disclosures of your PHI not covered by this policy, such as marketing or research.

Without Your Authorization

In certain situations, PHI may be disclosed without your permission, such as:

• As required by law (e.g., legal proceedings, public health reporting)
• To prevent harm or injury to others
• For law enforcement, national security, or military purposes

4. Online Privacy

When interacting with our website, mobile apps, or other online platforms, we collect data such as:

• Personal Identification Information: Name, email, phone number, address, etc.
• Health Information: Any information you provide for treatment, appointment scheduling, or customer support.
• Payment Information: Credit/debit card details for payment processing.

We use this data to:

• Provide healthcare services (e.g., virtual consultations, prescriptions)
• Improve your online experience and service delivery
• Communicate with you regarding appointments, reminders, and healthcare-related information

Security Measures for Online Interactions

• Encryption: We use SSL encryption to protect your data when transmitted over the internet.
• Access Control: We ensure that only authorized personnel have access to your PHI.
• Authentication: Secure login methods for patient portals and mobile apps to protect your account.

5. In-Store Privacy Practices

When you visit our physical locations (e.g., clinic, store, office), we collect and protect your PHI in the following ways:

• Health Information: During in-person visits, we collect your medical history, diagnoses, and treatment information.
• Insurance Details: We may collect your insurance information to verify eligibility and process claims.
• Payment Information: Payment details are collected and processed securely for services rendered.

Security Measures for In-Store Interactions

• Physical Safeguards: We maintain secure storage and access controls for physical health records.
• Staff Training: Employees are trained in HIPAA compliance to ensure PHI is handled appropriately.
• Confidential Communication: We provide privacy for conversations involving sensitive health information, such as in exam rooms or consultation areas.

6. Patient Rights Under HIPAA

You have the following rights concerning your PHI:

• Right to Access: You may request copies of your health information.
• Right to Amend: If you believe any information is incorrect, you may request a correction.
• Right to Restrict Disclosure: You may ask us not to disclose your PHI for certain purposes.
• Right to Confidential Communication: You may request communication through specific means (e.g., email, phone).
• Right to Receive a Copy of This Privacy Policy: You can request a copy of this Privacy Policy at any time.

7. Safeguarding Your Information

We implement appropriate administrative, technical, and physical safeguards to protect your PHI. These include:

• Secure online portals with encryption for data in transit.
• Controlled access to physical spaces and records to limit unauthorized viewing.
• Regular audits and staff training on HIPAA compliance.

8. Breach Notification

In the unlikely event of a breach that compromises your PHI, we will notify you as soon as possible, per HIPAA requirements. We will provide information on what happened, what actions we are taking, and how you can protect yourself.

9. How to Contact Us

If you have any questions about this Privacy Policy, or if you wish to exercise any of your rights regarding your PHI, please contact us at:

To Report a Problem

Complaints: If you believe your privacy rights were violated, you can file a complaint with the:

• Benjamin's Pharmacy & Surgical Privacy Officer
• Secretary of the U.S. Department of Health and Human Services

Submit all complaints in writing. We won't penalize you or retaliate against you in any way if you file a complaint.

10. Policy Updates

We reserve the right to update or amend this Privacy Policy to reflect changes in our practices or regulations. We will notify you of significant changes by posting a notice on our website or in-store.