Privacy Policy

1. Introduction

Pharmissy LLC ("Pharmissy," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

Important: Pharmissy is a technology platform that connects you with independent, licensed healthcare providers and pharmacy partners. We are not a medical provider and do not provide medical advice, diagnoses, or treatment.

2. Information We Collect

Personal Information

We collect information you provide directly, including:

• Name, email address, phone number, and mailing address
• Date of birth and biological sex
• Payment and billing information
• Account credentials

Health Information

To facilitate your connection with healthcare providers, we collect:

• Medical history and current symptoms
• Current medications and allergies
• Health assessment responses
• Information shared during provider consultations

Automatically Collected Information

When you use our services, we automatically collect:

• Device information (browser type, operating system)
• IP address and general location
• Usage data and browsing patterns
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information to:

• Connect you with licensed healthcare providers
• Facilitate prescription fulfillment through pharmacy partners
• Process payments and prevent fraud
• Communicate with you about your care and our services
• Improve and personalize our platform
• Comply with legal obligations

4. How We Share Your Information

We share your information with:

• Healthcare Providers: Licensed, independent providers who review your health information and make treatment decisions
• Pharmacy Partners: Licensed pharmacies that fulfill prescriptions
• Service Providers: Companies that help us operate our platform (payment processors, cloud hosting, analytics)
• Legal Requirements: When required by law or to protect rights and safety

We do not sell your personal information to third parties for marketing purposes.

5. HIPAA and Health Information

The healthcare providers who deliver care through our platform are covered entities under HIPAA and maintain their own privacy practices for protected health information (PHI). When you engage with a provider, their HIPAA Notice of Privacy Practices will govern how they use and disclose your PHI.

Pharmissy acts as a Business Associate to these covered entities and maintains appropriate safeguards to protect health information in accordance with HIPAA requirements.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and monitoring
• Employee training on data protection

7. Your Rights and Choices

Depending on your location, you may have the right to:

• Access and receive a copy of your personal information
• Correct inaccurate information
• Request deletion of your information (subject to legal retention requirements)
• Opt out of marketing communications
• Request your health records from providers

To exercise these rights, contact us at hello@pharmissy.com.

8. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. Health records are retained in accordance with applicable state and federal requirements, which may require retention for 7-10 years or longer.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Data Breach Notification

In the event of a data breach affecting your personal or health information, we will:

• Notify you promptly: We will notify affected individuals without unreasonable delay, and in no case later than 60 days after discovery of a breach involving unsecured protected health information
• Provide clear information: Our notification will describe what happened, the types of information involved, steps you can take to protect yourself, what we are doing to investigate and mitigate the breach, and how to contact us
• Report to authorities: We will report breaches to the U.S. Department of Health and Human Services and, where required, state attorneys general in accordance with applicable law
• Maintain records: We maintain documentation of all breach assessments and notifications for a minimum of six years

If you believe your information has been compromised, please contact us immediately at privacy@pharmissy.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: