Privacy Policy
Last Updated: June 5, 2025
- Introduction
Welcome to Hightouch Pharmacy. We are committed to protecting the privacy and security of your personal information, especially your protected health information (PHI). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at hightouchpharmacy.com, use our online services, or interact with us in our pharmacy.
Your privacy is paramount, and we adhere to strict standards, including the Health Insurance Portability and Accountability Act (HIPAA) and other applicable federal and state laws regarding health information and data privacy.
Please read this Privacy Policy carefully. By accessing or using our services, you agree to the terms outlined herein. If you do not agree with the terms, please do not use our services.
- Your Protected Health Information (PHI) and HIPAA
As a healthcare provider, Hightouch Pharmacy is subject to the Health Insurance Portability and Accountability Act (HIPAA) and its regulations concerning Protected Health Information (PHI). This Privacy Policy includes a summary of how we handle your PHI.
For a detailed description of our practices regarding your Protected Health Information (PHI) and your rights under HIPAA, please refer to our separate and comprehensive. This document outlines our legal duties and your rights concerning your PHI, including how we may use and disclose your medical information, your rights to access and amend your PHI, and how you can file a complaint.
- Information We Collect
We collect various types of information from and about you, including personal information and, significantly, protected health information.
- Information You Provide Directly To Us: This includes information you provide when you:
- Register for an account on our website.
- Submit prescription requests or refills.
- Make payments for services or products.
- Fill out forms, surveys, or questionnaires.
- Communicate with us via email, phone, or online chat.
- Sign up for newsletters or promotional materials.
- Participate in any online health screening or information services.
- Provide feedback or customer support inquiries.
Categories of Personal Information You May Provide:
- Contact Information: Name, mailing address, email address, phone number.
- Account Information: Username, password, security questions and answers.
- Demographic Information: Date of birth, gender.
- Payment Information: Credit card details, billing address (processed by secure third-party payment processors – we do not store full credit card numbers on our servers).
- Health and Prescription Information (PHI):
- Prescription details (drug name, dosage, prescribing physician, date).
- Insurance policy information (provider, group number, member ID).
- Relevant medical history, allergies, or health conditions necessary for safe dispensing and pharmacist consultation.
- Communication records related to your health or prescriptions.
- Other Information: Any other information you choose to provide.
- Information We Collect Automatically: When you visit our website, we may automatically collect certain information about your device, Browse actions, and patterns. This information helps us improve our website and services.
- Device and Usage Information: IP address, browser type and version, operating system, unique device identifiers, referring URLs, pages viewed, time spent on pages, access times, clickstream data.
- Location Information: General location derived from your IP address.
- Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect information about your interactions with our website.
- Strictly Necessary Cookies: Essential for website functionality (e.g., remembering items in a cart).
- Analytical/Performance Cookies: To understand how visitors use our website, improve performance, and identify popular content.
- Functionality Cookies: To remember your choices and personalize your experience.
- Targeting/Advertising Cookies: Used by us or third-party advertisers to deliver relevant ads (we will detail our advertising practices in Section 5).
- How We Use Your Information
We use the information we collect for various purposes, primarily to provide pharmacy services, improve our website, and comply with legal obligations.
- To Provide Pharmacy Services:
- Process and fulfill prescription orders and refills.
- Verify identity and insurance eligibility.
- Process payments and manage billing.
- Communicate with you regarding your prescriptions, appointments, and other pharmacy services (e.g., pickup reminders, refill alerts).
- Provide pharmacist consultations and medication therapy management.
- Coordinate care with your healthcare providers (in accordance with HIPAA).
- To Manage Your Account:
- Create and maintain your online account.
- Facilitate secure logins and password resets.
- To Improve Our Services and Website:
- Analyze website usage and trends to enhance user experience and functionality.
- Troubleshoot technical issues and ensure website security.
- Develop new features and services.
- For Communication and Marketing:
- Send you administrative emails (e.g., order confirmations, policy updates).
- Send you promotional emails, newsletters, or offers about our products and services, only if you have opted in. You can opt-out at any time.
- Respond to your inquiries and provide customer support.
- For Legal and Security Purposes:
- Comply with applicable laws, regulations (including HIPAA), and legal processes (e.g., subpoenas).
- Protect our rights, property, and safety, as well as the rights, property, and safety of our users and the public.
- Prevent fraud and detect security incidents.
- Enforce our Terms and Conditions and other agreements.
- How We Share Your Information
We understand the sensitivity of your information and share it only under specific circumstances as permitted by law and as necessary to provide our services.
- Healthcare Operations and Treatment (PHI):
- With your prescribing physicians or other healthcare providers to coordinate your care.
- With your health insurance provider for billing and eligibility purposes.
- With our pharmacy staff to process and dispense prescriptions.
- Service Providers: We engage trusted third-party service providers who perform functions on our behalf, such as:
- Payment Processors: To securely handle payment transactions.
- Shipping/Delivery Companies: To deliver your prescriptions or products.
- IT and Hosting Providers: For website operation, data storage, and technical support.
- Analytics Providers (e.g., Google Analytics): To help us understand website usage. These providers typically use aggregated or anonymized data.
- Marketing and Advertising Partners: If we use third-party platforms for targeted advertising, we will only share non-PHI data (e.g., anonymized demographic data) and will explain how you can opt-out.
- Email Communication Services: To send emails on our behalf.
- Legal Requirements and Law Enforcement:
- When required by law, regulation, subpoena, or other legal process. * To respond to valid requests from public authorities (e.g., to prevent fraud or protect safety).
- Business Transfers:
- In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
- With Your Consent:
- We may share your information for any other purpose with your explicit consent.
We do not sell your Protected Health Information (PHI) or personal information to third parties.
- Data Security
We implement reasonable and appropriate physical, technical, and administrative safeguards designed to protect your personal information and PHI from unauthorized access, use, alteration, and disclosure. These measures include:
- Encryption: Using SSL/TLS encryption for data transmission on our website.
- Access Controls: Limiting access to your information to authorized personnel only.
- Secure Servers: Storing data on secure servers in controlled facilities.
- Regular Security Assessments: Periodically reviewing our security practices.
- [Mention other specific security measures you can disclose, e.g., "use of secure payment gateways," "employee training on data privacy." Be careful not to reveal sensitive security details that could be exploited.]
However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.
- Your Privacy Rights and Choices
You have certain rights regarding your personal information. These rights may vary based on your location and applicable laws (e.g., HIPAA, CCPA, GDPR).
- Access and Correction: You have the right to request access to and correction of your personal information, including your PHI. (Refer to our "Notice of Privacy Practices" for full details on accessing and amending your PHI).
- Opt-Out of Marketing Communications: You can opt-out of receiving promotional emails from us by following the unsubscribe instructions provided in those emails. Please note that even if you opt-out of marketing emails, we may still send you non-promotional communications related to your accounts or services (e.g., order confirmations).
- Cookie Preferences: Most web browsers are set to accept cookies by default. You can usually modify your browser setting to decline cookies or to notify you when a cookie is being placed. However, if you disable cookies, some features of our website may not function properly.
- Do Not Track: Some web browsers may transmit "Do Not Track" signals. We currently do not respond to "Do Not Track" signals.
- Data Deletion (Right to Erasure): You may have the right to request the deletion of your personal data, subject to certain legal exceptions (e.g., retention requirements for medical records under HIPAA).
To exercise any of these rights, please contact us using the "Contact Us" details provided below. We may need to verify your identity before fulfilling your request.
- Children's Privacy
Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If we become aware that we have inadvertently received personal information from a child under 13 without appropriate consent, we will delete such information from our records. If you believe we might have any information from or about a child under 13, please contact us immediately.
- International Data Transfers
Hightouch Pharmacy primarily operates within the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our services, you consent to the transfer of your information to the United States.
- Links to Third-Party Websites
Our website may contain links to third-party websites or services that are not owned or controlled by Hightouch Pharmacy. We are not responsible for the privacy practices or the content of these third-party sites. We encourage you to review the privacy policies of any third-party websites you visit.
- Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.
- Contact Us
If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:
Hightouch Pharmacy
344 W Grand St,
Elizabeth, NJ 07202
(908) 353-2000
htrxnj@gmail.com
