THE COMPOUNDING SHOPPE NOTICE OF PRIVACY PRACTICES

For Treatment - We may use your PHI to treat you. For example, if you are being treated for an injury, we may share your PHI with your primary physician so they can provide proper care. We may also use it to send you information about products or services that may be of interest to you.

For Payment - We may use and disclose your PHI to collect payment for products and services. For example, we may contact your third party payor (i.e. insurer) to determine whether your program will pay for your prescription. We will bill you and/or a third party payor for the cost of the prescription dispensed to you. The information on or accompanying the bill may include your identification, as well as the prescriptions you are taking.

For Health Care Operations - We will use and disclose PHI to carry out health care operations. For example, we may use information in your health record to monitor the quality of our pharmacists performance, to train pharmacy personnel, or to ship prescriptions to you. · As Required by Law We will disclose your PHI when required to do so by local, state or federal law, including workers’ compensation laws.

Public Health and Safety Risks - We may use and disclose your PHI to an authorized public health authority or individual to (1) protect public health and safety; (2) prevent or control disease, injury, or disability; (3) report vital statistics such as births or deaths; (4) investigate or track problems with prescription drugs, foods, supplements and other health products; (5) post marketing surveillance to enable product recalls, repairs or replacements; and (6) to government entities authorized to receive reports regarding abuse, neglect, or domestic violence.

Oversight Agencies - We may use and disclose your PHI to health oversight agencies for certain activities such as audits, investigations, inspections, and licenses.

Legal Proceedings - We may disclose your PHI in the course of any legal proceeding in response to an order of a court or administrative agency and, in certain cases, in response to a subpoena, discovery request, or other lawful process.

Law Enforcement - We may disclose your PHI to law enforcement officials in limited circumstances for law enforcement purposes. For example, disclosures may be made to identify or locate a suspect, witness, or missing person; to report a crime; or to provide information concerning victims of crimes.

Military Activity and National Security - We may disclose your PHI to the military as required by military command authorities when the patient is a member of the armed forces; to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized by law; and to authorized federal officials so they may provide protection to the president, other authorized persons, or foreign heads of state or conduct special investigations.

Business Associates - Some of our services are offered through companies termed “Business Associates.” HIPAA requires us to enter into Business Associate contracts to safeguard your PHI as required by The Compounding Shoppe and by law

You have the right to request that we restrict how your PHI is used or disclosed in carrying out treatment, payment, or health care operations. We are not required to agree to the requested restrictions, but will accommodate reasonable requests. If we do agree to the requested restrictions, that agreement will be binding on us.

You have the right to inspect and copy your PHI for as long as we maintain the health information. We may charge a reasonable fee for the costs of copying, mailing, or other supplies that are necessary to grant your request. In certain situations we may deny your request and will tell you why we are denying it. In some cases you may have the right to ask for a review of our denial.

If you feel that the PHI we maintain about you is incomplete or incorrect, you may request that we amend it. You may request an amendment for as long as we maintain the PHI. You must include a reason that supports your request. In certain cases, we may deny the request. If the request for amendment is denied, you have the right to file a statement of disagreement with the decision, and we may give a rebuttal to your statement. We will include a copy of both statements in your file.

You have the right to receive an accounting of disclosures of your PHI that we have made after April 14, 2003 for purposes other than (1) for The Compounding Shoppe’s treatment, payment, or health care operations, (2) to you or based upon your authorization and (3) for certain government functions. The right to receive an accounting is subject to certain other exceptions, restrictions, and limitations. The time period for the requested accounting must be specified and it may not be longer than six years. The first accounting you request within a 12-month period will be provided free of charge, but you may be charged for the cost of additional accountings within that period. We will notify you of the cost involved and you may choose to withdraw or modify the request at that time.

You have the right to request that our communications to you concerning your PHI be made by alternative means or to alternative locations. For example, you may wish us to communicate in some way other than calling your home telephone number. We will comply with a reasonable request for such an alternative.