Effective Date: January 2025
Compound Central Pharmacy ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information. This Privacy Policy explains our data handling practices for our prescription refill request system and related services.
When you submit a prescription refill request or question through our online forms, we collect the following information:
Your prescription number is considered Protected Health Information (PHI) under HIPAA. We collect this information solely to process your refill request and communicate with you about your prescription status.
Our website may collect limited technical information such as IP address and browser type through standard web analytics. We do not use cookies to track you across websites.
We use the information you provide for the following purposes:
We do not sell, rent, or share your personal information with third parties for marketing purposes.
When you check the "Text" option on our refill request form and submit it, you are explicitly consenting to receive SMS text messages from Compound Central Pharmacy. By enrolling, you understand that:
Our SMS messages include only necessary information about your prescription status. Example messages:
You can stop receiving text messages at any time by replying "STOP" to any message from us. You will receive a confirmation message, and your enrollment will be immediately terminated. You may also contact us directly at info@compoundcentralpharmacy.com or (562) 555-PHARM to opt out.
We send two messages per refill request. The frequency of messages depends on how often you submit refill requests. We do not send promotional or marketing texts.
Compound Central Pharmacy complies with the Health Insurance Portability and Accountability Act (HIPAA). Your Protected Health Information (PHI), including prescription details, is handled with appropriate administrative, physical, and technical safeguards.
Text messages containing prescription information are transmitted through Twilio, a HIPAA-compliant SMS service provider. Twilio is bound by a Business Associate Agreement (BAA) to protect your PHI in transit and at rest.
Your data is stored securely and access is restricted to authorized pharmacy personnel only. We use industry-standard security measures to protect against unauthorized access, alteration, or disclosure.
Refill Request Data: Information submitted through our prescription refill form is retained for one week to process your request and send status notifications. After seven days, all data is permanently deleted from our internal systems.
SMS Records: SMS message logs (including phone numbers, message content, and timestamps) are retained by Twilio according to their service terms and HIPAA BAA requirements, which typically range from 30 to 90 days. You may request deletion of your records by contacting us.
Manual Requests: Upon request, we will delete your personal information from our systems within a reasonable timeframe, except where we are required to retain it by law.
We do not share your personal information with third parties except in the following limited circumstances:
Twilio (SMS Provider): Twilio processes SMS messages on our behalf. Twilio is a HIPAA Business Associate and maintains appropriate safeguards for your PHI. For more information about Twilio's privacy practices, visit twilio.com/privacy.
Google Sheets (Data Storage): We use Google Sheets to temporarily store refill request data. Data is automatically purged weekly. Google Sheets is not HIPAA-compliant on its own; we use it only with technical and administrative controls to protect your information.
You have the right to request access to the personal information we hold about you. Contact us at info@compoundcentralpharmacy.com to submit an access request.
You may request that we correct inaccurate information or delete your personal information, subject to legal retention requirements. We will respond to deletion requests within a reasonable timeframe.
Reply "STOP" to any SMS message to immediately unsubscribe from text notifications.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Effective Date" at the top indicates the last update. Continued use of our services following changes constitutes your acceptance of the updated policy.
Compound Central Pharmacy
5032 Katella Ave
Los Alamitos, CA 90720
Privacy Contact: Tuan Nguyen
Email: info@compoundcentralpharmacy.com
Phone: (562) 555-PHARM
For privacy-related inquiries, data access requests, or to report a privacy concern, please contact us using the information above.
As required by HIPAA, we are providing this notice of our privacy practices. Your Protected Health Information may be used and disclosed as described in this policy. If you believe your privacy rights have been violated, you may file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.