PRIVACY POLICY
Notice of Privacy Practices
Effective Date: January 1, 2025
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Our Commitment to Your Privacy
HB Pharmacy is dedicated to maintaining the privacy and security of your Protected Health Information (PHI). We are required by law to provide you with this notice outlining our legal duties and privacy practices concerning your PHI. We are obligated to:
- Maintain the confidentiality of your PHI.
- Provide you with this notice detailing our legal duties and privacy practices regarding your PHI.
- Abide by the terms of this notice currently in effect.
How We May Use and Disclose Your Health Information
The following categories describe different ways we may use and disclose your PHI. Not every use or disclosure in a category is listed, but all the ways we are permitted to use and disclose information will fall within one of these categories:
Treatment: We may use and disclose your PHI to provide, coordinate, or manage your health care and related services. This includes communication with other health care providers regarding your treatment and coordinating and managing your health care with others. For example, we may disclose your PHI to your physician to ensure they have the necessary information to treat you.
Payment: We may use and disclose your PHI to obtain payment for the health care services we provide you. This includes activities such as determining eligibility or coverage under a plan, billing, and collection activities, and utilization review. For example, we may contact your health insurer to certify that you are eligible for benefits and to obtain payment for services provided.
Health Care Operations: We may use and disclose your PHI for our health care operations, including activities that improve the quality of care we provide and reduce health care costs. These activities may include training programs, accreditation, certification, licensing, or credentialing activities. For example, we may use your PHI to review our treatment and services and evaluate the performance of our staff in caring for you.
Appointment Reminders: We may use and disclose your PHI to contact you to remind you of an appointment for treatment or medical care.
Health-Related Benefits and Services: We may use and disclose your PHI to inform you about health-related benefits or services that may be of interest to you.
Individuals Involved in Your Care or Payment for Your Care: We may disclose your PHI to a family member, friend, or other person you identify who is involved in your medical care or payment for your care. We will only disclose PHI that is directly relevant to their involvement. If you are unable to agree or object to such a disclosure, we may disclose the information as necessary if we determine that it is in your best interest based on our professional judgment.
Business Associates: We may disclose your PHI to our business associates who perform functions on our behalf or provide us with services if the information is necessary for such functions or services. All of our business associates are obligated to protect the privacy of your information and are not allowed to use or disclose any information other than as specified in our contract.
As Required by Law: We will disclose your PHI when required to do so by federal, state, or local law.
Public Health Activities: We may disclose your PHI for public health activities, such as preventing or controlling disease, injury, or disability; reporting births and deaths; and reporting suspected abuse or neglect.
Health Oversight Activities: We may disclose your PHI to a health oversight agency for activities authorized by law, such as audits, investigations, and inspections.
Lawsuits and Disputes: If you are involved in a lawsuit or a dispute, we may disclose your PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process.
Law Enforcement: We may release PHI if asked to do so by a law enforcement official in response to a court order, subpoena, warrant, summons, or similar process; to identify or locate a suspect, fugitive, material witness, or missing person; or to provide information about the victim of a crime.
Coroners, Medical Examiners, and Funeral Directors: We may release PHI to a coroner or medical examiner to identify a deceased person or determine the cause of death. We may also release PHI to funeral directors as necessary to carry out their duties.
Organ and Tissue Donation: We may disclose PHI to organizations that handle organ procurement or transplantation or to an organ donation bank, as necessary to facilitate organ or tissue donation and transplantation.
Research: Under certain circumstances, we may use and disclose your PHI for research purposes. All research projects are subject to a special approval process, and we will obtain your written authorization before using your PHI for research.
To Avert a Serious Threat to Health or Safety: We may use and disclose your PHI when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person. Any disclosure would only be to someone able to help prevent the threat.
Military and Veterans: If you are a member of the armed forces, we may release PHI as required by military command authorities. We may also release PHI about foreign military personnel to the appropriate foreign military authority.
National Security and Intelligence Activities: We may release your PHI to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized by law.
Protective Services for the President and Others: We may disclose PHI to authorized federal officials for the provision of protective services to the President, other authorized persons, or foreign heads of state, or to conduct special investigations.
Your Rights Regarding Your PHI
You have the following rights concerning your PHI:
Right to Inspect and Copy: You have the right to inspect and obtain a copy of your PHI that may be used to make decisions about your care. This includes medical and billing records but does not include psychotherapy notes. To request access to your PHI, you must submit a written request to our Privacy Officer. We may charge a reasonable fee for the costs of copying, mailing, or other supplies associated with your request.
Right to Amend: If you believe that your PHI is incorrect or incomplete, you may request an amendment. To request an amendment, you must submit a written request to our Privacy Officer, along with a reason supporting the request.
Right to an Accounting of Disclosures: You have the right to request a list of certain disclosures we have made of your PHI, excluding disclosures made for treatment, payment, or health care operations.
Right to Request Restrictions: You have the right to request a restriction or limitation on the use or disclosure of your PHI for treatment, payment, or health care operations. We are not required to agree to your request, but if we do, we will comply unless the information is needed to provide you emergency treatment.
Right to Request Confidential Communications: You may request that we communicate with you about medical matters in a specific way (e.g., by mail or at a specific phone number). We will accommodate all reasonable requests.
Right to a Paper Copy of This Notice: You may request a paper copy of this notice at any time, even if you have agreed to receive this notice electronically.
Changes to This Notice
We reserve the right to change this notice and make the new notice effective for all PHI we maintain. We will post a copy of the current notice at our pharmacy and on our website.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the Department of Health and Human Services. To file a complaint with us, contact our Privacy Officer at:
HB Pharmacy Privacy Officer
John Bellitti – pharmacist@hbpharmacy.com
98 Ridge Rd North Arlington, NJ 07031
Phone: 201-997-2010
Contact Information
For questions or more information, please contact: pharmacist@hbpharmacy.com
Inmates or Individuals in Custody: If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may disclose your PHI to the correctional institution or law enforcement official as necessary for your care, the safety and security of others, or the administration of the institution.
Website Privacy Statement
SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?
When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.
When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.
Email marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.
SECTION 2 – CONSENT
How do you get my consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only. If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.
How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at vgbellitti@hbpharmacy.com or mailing us at:
HB Pharmacy
98 Ridge Road
North Arlington, NJ 07031
SECTION 3 – DISCLOSURE
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
SECTION 4 – GODADDY
Our store is hosted on GODADDY. Your data is stored through GoDaddy’s data storage, databases and the general GoDaddy application. They store your data on a secure server behind a firewall.
SECTION 5 – THIRD-PARTY SERVICES
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.
Links
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
Google analytics:
Our store uses Google Analytics to help us learn about who visits our site and what pages are being looked at
SECTION 6 – SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
SECTION 7 – COOKIES
Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not.
_session_id, unique token, sessional, Allows us to store information about your session (referrer, landing page, etc).
_shopify_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits
_shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer.
cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart.
_secure_session_id, unique token, sessional
storefront_digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access.
PREF, persistent for a very short period, Set by Google and tracks who visits the store and from where
SECTION 8 – AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.
SECTION 9 – CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at pharmacist@hbpharmacy.com or by mail at:
HB Pharmacy / Gaspar’s Best
John Belitti/ Privacy Compliance Officer
98 Ridge Road
North Arlington, NJ 07031