HIPAA & Privacy Policies

HIPAA Notice of Privacy Practices and Privacy Policy for Yellowstone Pharmacy

Last Updated: 03/19/2025

This combined HIPAA Notice of Privacy Practices ("Notice") and Privacy Policy explains how Yellowstone Pharmacy ("we", "us", "our") collects, uses, discloses, and protects your personal and health information when you use our services, including our e-commerce store. We are committed to maintaining the privacy and security of your information in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and other applicable laws.

Please read this Notice and Privacy Policy carefully before using our services. By using our services or providing us with your personal or health information, you acknowledge that you understand and agree to the practices described in this Notice and Privacy Policy.

I. HIPAA Notice of Privacy Practices

This Notice describes how we may use and disclose your protected health information (PHI) to carry out treatment, payment, or health care operations and for other purposes permitted or required by law. It also describes your rights to access and control your PHI.

Uses and Disclosures of PHI

We may use and disclose your PHI for the following purposes:

• Treatment: We may use or disclose your PHI to provide, coordinate, or manage your health care and related services. This may include communicating with other health care providers regarding your treatment and coordinating the provision of care.
• Payment: We may use or disclose your PHI to obtain payment for the health care services we provide to you. This may include billing your insurance company or other third parties for the cost of the services.
• Health Care Operations: We may use or disclose your PHI for our health care operations, such as quality assessment and improvement, training, licensing, and other essential functions.
• As Required by Law: We may use or disclose your PHI when required to do so by federal, state, or local law.
• To Avert a Serious Threat to Health or Safety: We may use or disclose your PHI when necessary to prevent a serious threat to your health or safety or the health or safety of others.
• Public Health Activities: We may disclose your PHI to public health authorities for activities such as preventing or controlling disease, injury, or disability.
• Health Oversight Activities: We may disclose your PHI to a health oversight agency for activities authorized by law, such as audits, investigations, and inspections.
• Judicial and Administrative Proceedings: We may disclose your PHI in response to a court order, subpoena, or other lawful process.
• Law Enforcement: We may disclose your PHI to law enforcement officials for certain law enforcement purposes, such as locating a suspect, fugitive, or missing person.
• Research: We may use or disclose your PHI for research purposes, subject to certain safeguards and approvals.

Your Rights Regarding Your PHI

You have the following rights concerning your PHI:

• Right to Inspect and Copy: You have the right to inspect and obtain a copy of your PHI, with certain exceptions.
• Right to Amend: You have the right to request an amendment to your PHI if you believe it is incorrect or incomplete.
• Right to an Accounting of Disclosures: You have the right to request an accounting of disclosures of your PHI made by us, subject to certain exceptions.
• Right to Request Restrictions: You have the right to request restrictions on our use or disclosure of your PHI for treatment, payment, or health care operations.
• Right to Request Confidential Communications: You have the right to request that we communicate with you about your PHI in a certain way or at a specific location.
• Right to a Paper Copy of This Notice: You have the right to receive a paper copy of this Notice upon request.
• Right to File a Complaint: You have the right to file a complaint if you believe your privacy rights have been violated. Complaints can be filed with our Privacy Officer at the contact information below or with the U.S. Department of Health and Human Services (HHS) at:
• Office for Civil Rights
• U.S. Department of Health & Human Services
• 200 Independence Avenue, S.W.
• Washington, D.C. 20201
• Website: www.hhs.gov/ocr
• Phone: 1-800-368-1019

We will not retaliate against you for filing a complaint.

II. Privacy Policy

Information We Collect

We may collect personal information about you, including:

• Personal identification information (name, date of birth, address, phone number, email address).
• Health information (prescription details, medical history, health insurance information).
• Payment information (credit card details or other payment methods).
• Technical information (IP address, device type, browser type, usage information).

How We Use Your Information

We use your personal information for various purposes, including:

• Providing you with pharmacy services (processing prescriptions, fulfilling orders, providing consultations).
• Communicating with you about your prescriptions, appointments, and other pharmacy-related matters.
• Billing and processing payments for products and services.
• Maintaining and improving our website, services, and customer support.
• Complying with legal and regulatory requirements.
• Detecting and preventing fraud, security breaches, and other illegal activities.

Disclosure of Your Information

We may share your personal information with:

• Health care providers, insurers, and other entities involved in your care, treatment, or payment for services.
• Service providers, including payment processors, IT service providers, and shipping companies.
• Law enforcement or regulatory agencies, if required by law.

Security Measures

We take appropriate security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include secure data storage, access controls, and encryption.

Your Rights and Choices

You have the right to:

• Access, correct, or update your personal information.
• Request that we delete your personal information, subject to certain exceptions.
• Opt out of receiving marketing communications from us.

Updates to This Notice and Privacy Policy

We may update this Notice and Privacy Policy periodically. Changes will be posted on our website, with the date of the latest update indicated at the top of the document.

Contact Us

If you have any questions or concerns about this Notice, Privacy Policy, or our privacy practices, please contact our Privacy Officer at:

Yellowstone Pharmacy
Attn: Privacy Officer
1025 Main St
Forsyth, MT 59327
Phone: 406-346-2134
Email: privacy@yellowstonepharmacy.com