HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective date: 2026-05-19

This Notice is provided by Pharm-Aid Pharmacy ("Pharm-Aid", "we", "us") in compliance with the federal Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and applicable state law.

Our duties

We are required by law to:

• Maintain the privacy of your protected health information ("PHI")
• Provide you with this Notice of our legal duties and privacy practices regarding PHI
• Abide by the terms of the Notice currently in effect
• Notify you if a breach of your unsecured PHI occurs

How we may use and disclose your PHI

The following describes the ways we may use and disclose your PHI without your written authorization. Not every use or disclosure in each category is listed, but all permitted uses and disclosures will fall within one of these categories.

For Treatment

We may use and disclose your PHI to fill your prescriptions, counsel you about medications, and coordinate care with your prescribers, other pharmacies, and healthcare providers. For example, we may contact your doctor to verify a prescription or recommend a therapeutic alternative.

For Payment

We may use and disclose your PHI to obtain payment for our services. For example, we may submit claims to your insurance plan or Pharmacy Benefit Manager (PBM) so that they pay for your prescriptions.

For Health Care Operations

We may use and disclose your PHI to operate our pharmacy. For example, we may use your information for quality assessment, training pharmacy staff, conducting internal audits, and managing our business.

Required by Law

We will disclose your PHI when required to do so by federal, state, or local law. For example, we may disclose PHI for public health purposes (such as reporting adverse drug events to the FDA), to report suspected abuse or neglect, or in response to a court order or subpoena.

Public Health & Safety

We may disclose PHI to public health authorities for purposes such as preventing or controlling disease, injury, or disability; to the FDA in connection with reporting adverse events; or to avert a serious threat to your health or safety or the safety of others.

Business Associates

We may disclose PHI to third parties that perform services on our behalf — for example, our pharmacy software vendor, delivery service, or billing service — provided they sign a Business Associate Agreement obligating them to protect your PHI.

Family and Friends

If you are present and do not object, we may disclose PHI relevant to your care to a family member, friend, or other person you involve in your care or payment for your care — for example, if your spouse picks up your prescription.

Appointment Reminders and Refill Notifications

We may use and disclose your PHI to contact you with appointment reminders, refill notifications, or information about treatment alternatives or other health-related benefits and services that may be of interest to you.

For legal review: confirm that opt-in/opt-out language for text messages and automated calls complies with TCPA + state law.

Other Uses Requiring Your Written Authorization

Most other uses and disclosures of your PHI not described above will be made only with your written authorization. You may revoke that authorization at any time in writing, except where we have already acted in reliance on it.

We must obtain your written authorization for:

• Most uses and disclosures of psychotherapy notes
• Uses and disclosures of PHI for marketing purposes
• Disclosures that constitute a sale of PHI

Your rights

You have the following rights regarding your PHI:

Right to Request Restrictions

You may request a restriction on certain uses and disclosures of your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request, except that we must agree to a request to restrict disclosure of PHI to a health plan if the disclosure is for payment or healthcare operations and the PHI pertains solely to a service you paid for in full out of pocket.

Right to Receive Confidential Communications

You may request that we communicate with you about your PHI in a certain way or at a certain location — for example, by mail at your work address instead of your home. We will accommodate reasonable requests.

Right to Inspect and Copy

You have the right to inspect and obtain a copy of your PHI in our designated record set, with certain limited exceptions. We may charge a reasonable, cost-based fee for copies.

Right to Amend

You have the right to request that we amend your PHI if you believe it is incorrect or incomplete. We may deny your request under certain circumstances.

Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures of your PHI we have made in the six (6) years prior to your request.

Right to a Paper Copy of This Notice

You have the right to a paper copy of this Notice. You may request one at any of our pharmacy locations even if you have received the Notice electronically.

Right to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the U.S. Department of Health and Human Services Office for Civil Rights:

• OCR online: https://www.hhs.gov/ocr/complaints
• OCR phone: 1-800-368-1019

We will not retaliate against you for filing a complaint.

Changes to this Notice

We reserve the right to change this Notice and to make the new Notice effective for all PHI we maintain. When we make a material change, we will post the revised Notice in our pharmacies and on this website, and make copies available upon request.

Contact us — HIPAA Privacy Officer

For questions about this Notice, to exercise any of your rights, or to file a privacy complaint, please contact:

Pharm-Aid Pharmacy — Privacy Officer Email: info@pharm-aidrx.com Phone: 954-544-4994 Mailing address: [PLACEHOLDER: legal mailing address of the designated Privacy Officer]

---

For legal review: this is a structural draft based on the HHS Model Notice of Privacy Practices for healthcare providers. Before publishing, a Florida pharmacy + HIPAA attorney must confirm: (1) the designated Privacy Officer, contact, and mailing address are correct; (2) any state-law additions (Florida Statute § 456.057 etc.) are properly incorporated; (3) the appointment-reminder/marketing/text-message provisions comply with TCPA and 45 CFR § 164.501; (4) the Notice is being properly distributed at first patient encounter and acknowledged in writing per § 164.520(c).