HIPAA Policy

Notice of Privacy Practices

Effective Date: October 20, 2022

This notice explains how your medical and personal information may be used and shared, as well as your rights regarding that information. It also describes how you can access and review your information. Please read this notice carefully.

When you use Medi-Trade's pharmacy services, website, mobile application, products, or other technology platforms (collectively, the “Services”), you may share health information and other information that can identify you. When this information is combined, it is referred to as Protected Health Information (“PHI”).

Under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), Medi-Trade is required to provide this Notice of Privacy Practices (“Notice”). This Notice explains how we may use and disclose your PHI for purposes such as treatment, payment, and healthcare operations, as well as how you can access the PHI we maintain about you.

Please review this Notice carefully. It applies to you on or after the Effective Date, depending on when you access or use our Services.

Your Rights

You have the right to:

  • Access and receive a copy of your health and claims records
  • Request corrections to your health and claims information
  • Ask for confidential communications
  • Request limits on how we use or share your information
  • Receive a list of certain disclosures of your information
  • Obtain a copy of this Notice of Privacy Practices
  • Designate a person to act on your behalf
  • File a complaint if you believe your privacy rights have been violated

Your Choices

You have choices regarding how we use and share your information when we:

  • Communicate with family members or friends about your care
  • Assist with disaster relief efforts
  • Market our services or share information as permitted by law

How We Use and Share Information

We may use and disclose your information to:

  • Support and coordinate your healthcare treatment
  • Operate and manage our organization
  • Process payment for health services
  • Administer health plans and related services
  • Address public health and safety matters
  • Conduct research as permitted by law
  • Comply with legal and regulatory requirements
  • Facilitate organ and tissue donation requests
  • Work with medical examiners, coroners, or funeral directors
  • Respond to workers’ compensation, law enforcement, and other government requests
  • Respond to lawsuits and legal proceedings

Your Rights

You have the right to:

  • Access and receive a copy of your health and claims records
  • Request corrections to your health and claims information
  • Ask for confidential communications
  • Request limits on how we use or share your information
  • Receive a list of certain disclosures of your information
  • Obtain a copy of this Notice of Privacy Practices
  • Designate a person to act on your behalf
  • File a complaint if you believe your privacy rights have been violated

Your Rights

You have important rights when it comes to your health information. This section explains those rights and how we support you in exercising them.

Access Your Health Information

You may request to see or receive a copy of your health and claims records, as well as other health information we maintain about you. We will provide a copy or summary—typically within 30 days of your request. A reasonable, cost-based fee may apply.

Request Corrections

If you believe your health or claims records are incorrect or incomplete, you may request a correction. We will review your request and respond in writing within 60 days. If we cannot make the requested change, we will explain why.

Request Confidential Communications

You may ask us to contact you in a specific way or at a specific location, such as by phone or mail at an alternate address. We will accommodate all reasonable requests and will honor your request if you tell us that not doing so could put you at risk.

Request Limits on Use or Sharing

You may ask us to limit how we use or share certain health information for treatment, payment, or healthcare operations. While we are not required to agree to all requests, we will carefully consider them and may decline if a restriction would affect your care.

Receive a Disclosure List

You may request a list of certain instances in which we have shared your health information during the six years prior to your request, including who we shared it with and why. This list does not include disclosures made for treatment, payment, healthcare operations, or disclosures you authorized. One list per year is provided at no cost; additional requests within a 12-month period may incur a reasonable fee.

Obtain a Copy of This Notice

You may request a paper copy of this Notice of Privacy Practices at any time, even if you have agreed to receive it electronically. We will provide it promptly.

Designate Someone to Act on Your Behalf

If you have granted medical power of attorney or have a legal guardian, that individual may exercise your rights and make decisions regarding your health information. We will verify their authority before taking action.

File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with Medi-Trade using the contact information provided. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by mail, phone, or online. We will not retaliate against you for filing a complaint.

Your Choices

You have choices about how certain health information is shared. If you have a preference in the situations below, please let us know. We will follow your instructions whenever possible.

You may choose to allow us to:

  • Share information with your family members, close friends, or others involved in paying for your care
  • Share information during disaster relief efforts

If you are unable to communicate your preference—such as in an emergency—we may share your information if we believe it is in your best interest. We may also share information when necessary to prevent a serious and immediate threat to health or safety.

We will never share your information without your written permission for:

  • Marketing purposes
  • The sale of your information

How We Use and Share Your Health Information

We typically use or share your health information in the following ways:

To Support Your Care

We may use and share your information with healthcare professionals involved in your treatment.

Example: A provider shares information with us so we can coordinate services.

To Operate Our Organization

We may use and disclose information to manage our operations and improve our services.

Example: Using information to evaluate and improve programs.

To Process Payment

We may use and share information to pay for healthcare services.

Example: Coordinating payment with a health or dental plan.

To Administer Health Plans

We may share limited information with plan sponsors for administrative purposes.

Example: Providing summary data to explain plan costs.

Your Rights

You have important rights when it comes to your health information. This section explains those rights and how we support you in exercising them.

Other Permitted Uses and Disclosures

We may also use or share your information when required or allowed by law, typically to serve the public good.

Public Health & Safety

This includes activities such as:

  • Preventing disease
  • Supporting product recalls
  • Reporting adverse medication reactions
  • Reporting suspected abuse or neglect
  • Preventing serious threats to health or safety

Research

We may use or share information for approved health research, as permitted by law.

Legal & Regulatory Requirements

We may share information to comply with state or federal laws, including reviews by the U.S. Department of Health and Human Services.

Organ Donation & Post-Death Matters

We may share information with organ procurement organizations or with medical examiners, coroners, or funeral directors when necessary.

Government & Law Enforcement Requests

We may share information for:

  • Workers’ compensation claims
  • Law enforcement purposes
  • Health oversight activities
  • Certain government functions (such as military or national security)

Legal Proceedings

We may share information in response to court orders, subpoenas, or administrative requests.

Our Responsibilities

We are required by law to protect the privacy and security of your Protected Health Information (PHI). We will:

  • Notify you promptly if a breach occurs
  • Follow the privacy practices described in this Notice
  • Provide you with a copy of this Notice

We will not use or share your information for purposes not described here unless you give us written permission. You may revoke that permission at any time in writing.

Privacy Officer

If you have questions about this Notice, want to exercise your privacy rights, believe your rights have been violated, or disagree with a decision regarding access to your information, you may contact our Privacy Officer:

Email: privacy@meditrade.com

Mail:

Medi-Trade
21 W 46th St 16th Flr
New York, NY 10036


Attention: Privacy Officer & Legal Department

Changes to This Notice

We may update this Notice from time to time. Any changes will apply to all information we maintain about you. The updated Notice will be available upon request and on our website, and we may mail a copy to you.