As required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), Trousdale Pharmacy has prepared this Notice of Privacy Practices (“Notice”). It describes our duties and your rights regarding Protected Health Information (PHI), information that identifies you and relates to your past, present, or future physical or mental health, the care you receive, or payment for that care. We are legally obligated to protect the privacy and security of PHI we create or receive.

We will follow the terms of this Notice. For any use or disclosure not described here, we will obtain your written authorization, which you may revoke at any time in writing. We may change our privacy practices and this Notice; updated versions will be available in our pharmacy and on our website.

How We May Use and Disclose Your PHI

• Treatment: To fill prescriptions, coordinate care with your prescribers, provide immunizations, and offer services like MTM and Med Sync.

• Payment: To bill you or your health plan/PBM, verify benefits, process claims, and manage prior authorizations.

• Health Care Operations: For quality assessment and improvement, training, auditing, licensing, fraud prevention, and other operations necessary to run our pharmacy.

Other Uses and Disclosures Allowed Without Authorization

We may use or share PHI without your written permission as permitted or required by law, including:

• As required by law (including state pharmacy and prescription-monitoring program reporting).

• Public health activities, such as reporting adverse events, product recalls, or vaccinations.

• Victims of abuse, neglect, or domestic violence (to appropriate authorities).

• Health oversight activities, including inspections, audits, and compliance reviews.

• Judicial and administrative proceedings and law enforcement requests.

• Deceased individuals, including disclosures to coroners, medical examiners, and funeral directors.

• Organ, eye, or tissue donation organizations.

• Research approved by an IRB/privacy board or otherwise permitted by law.

• To avert a serious threat to health or safety.

• Specialized government functions, national security, and protective services.

• Workers’ compensation and similar programs.

• Disaster relief and to identify or locate individuals in emergencies.

• Business associates that perform services for us under contracts requiring them to safeguard PHI.

• Immunization disclosures to schools with your consent (which may be verbal when allowed).

Communications With You

We may contact you about refill reminders, care coordination, treatment alternatives, or other health-related benefits and services.If we ever contact you for fundraising, you may opt out of future contacts. We do not use or disclose PHI for marketing or sell your PHI without your written authorization.

All Other Uses and Disclosures

Any other use or disclosure of your PHI will require your written authorization.You may revoke an authorization in writing at any time, except to the extent we have already relied on it.

Your Health Information Rights

You have the right to:

• Request restrictions on certain uses/disclosures for treatment, payment, or operations. (We are not required to agree to all requests.)

• Request confidential communications (for example, contact you at a different phone number or address).

• Inspect and obtain a copy of your PHI (including an electronic copy when available). Reasonable, cost-based fees may apply as allowed by law.

• Request an amendment to your PHI if you believe it is incorrect or incomplete.

• Receive an accounting of certain disclosures made in the past six years (excluding those for treatment, payment, and operations, and other exclusions).

• Restrict disclosure to your health plan for a specific item/service when you pay for it in full out-of-pocket, if required by law.

• Receive a paper copy of this Notice at any time, even if you agreed to receive it electronically.

Revisions to This Notice

We may change this Notice and make the revised version effective for all PHI we maintain. The current Notice will be posted in our pharmacy and on our website.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with Trousdale Pharmacy or with theU.S. Department of Health and Human Services, Office for Civil Rights (OCR).We will not retaliate against you for filing a complaint.