PRIVACY POLICY

MedsDirectRx LLC (“MedsDirectRx,” “we,” “us,” or “our”) is committed to protecting your privacy and the security of your personal and health information. This Privacy Policy describes how we collect, use, share, and protect information obtained through our website at http://www.MedsDirectRx.com (the “Site”) and related services.

By using the Site or our services, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please do not use the Site.

MedsDirectRx operates within the 340B Drug Pricing Program and may act as a Business Associate (“BA”) as defined under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Our privacy practices are designed to comply with HIPAA, including the Privacy Rule (45 C.F.R. Parts 160 and 164), and applicable state privacy laws.

1. Information We Collect

We collect the following categories of information in connection with your use of the Site and our services:

a. Personal Information

Identifiable information you provide directly, including your name, email address, phone number, mailing address, date of birth, and payment information.

b. Protected Health Information (PHI)

Health-related information that may identify you, including prescription details, medical history, diagnosis codes, and other data necessary to process your orders and provide pharmacy or healthcare-related services. PHI is collected and handled in accordance with HIPAA and any applicable Business Associate Agreement (“BAA”) in place between MedsDirectRx and the relevant Covered Entity.

c. Usage Data

Technical information automatically collected when you access the Site, including your IP address, browser type and version, operating system, pages visited, time and date of access, and other diagnostic data. This information is used to monitor and improve Site performance and does not directly identify you.

d. Communication Data

Records of communications between you and our customer service or clinical support team, including emails, phone calls, and secure messages, to the extent permitted by applicable law.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Process Transactions – To fulfill prescription orders, coordinate with covered entities and pharmacies, manage member enrollment, and process payments.
• Provide Customer and Clinical Support – To respond to inquiries, manage your account, resolve issues, and provide assistance related to your medications or enrollment status.
• Administer the 340B Program – To support 340B program compliance, including coordination with covered entities, contract pharmacies, and third-party administrators.
• Improve Our Services – To analyze usage data, identify operational trends, and enhance the functionality and user experience of the Site.
• Communicate with You – To send account updates, prescription status notifications, program announcements, and – where you have opted in – promotional communications.
• Legal and Regulatory Compliance – To comply with applicable federal and state laws, including HIPAA, and to protect the legal rights and interests of MedsDirectRx and our partners.
• Security and Fraud Prevention – To detect, investigate, and prevent unauthorized access, fraudulent activity, or other misuse of the Site or our services.

 

3. HIPAA Compliance and Use of Protected Health Information

MedsDirectRx takes its obligations under HIPAA seriously. Where we receive, maintain, or transmit PHI on behalf of a Covered Entity, we do so only as authorized under a BAA and in accordance with HIPAA’s minimum necessary standard.

Your PHI will only be used or disclosed:

• For treatment, payment, and healthcare operations purposes as permitted under HIPAA;
• As required by law, including responses to valid legal process or regulatory inquiries;
• With your written authorization, for any other purpose not otherwise permitted under HIPAA; or
• As otherwise permitted under the HIPAA Privacy Rule.

You have the right to request access to, amendment of, or an accounting of disclosures of your PHI, to the extent such rights are available under HIPAA and applicable law. To exercise these rights, please contact us using the information in Section 9.

4. Sharing Your Information

MedsDirectRx does not sell or rent your personal information to third parties. We may share your information only under the following circumstances:

• Service Providers – Third-party vendors and contractors who assist us in operating the Site, processing transactions, providing technology infrastructure, or supporting customer service, subject to appropriate confidentiality and data protection obligations.
• Healthcare Partners – Covered entities, contract pharmacies, third-party administrators (TPAs), and other healthcare partners as necessary to fulfill prescriptions, coordinate care, and administer the 340B program. Where such sharing involves PHI, it is governed by a BAA or other HIPAA-compliant agreement.
• Legal and Regulatory Authorities – Government agencies, regulators, or law enforcement where disclosure is required by law, court order, or valid legal process, or where necessary to protect the rights, property, or safety of MedsDirectRx, our members, or the public.
• Business Transfers – In connection with a merger, acquisition, sale of assets, or other business transaction, your information may be transferred to a successor entity, subject to the same privacy protections described in this policy.

We require all third parties with whom we share personal or health information to maintain appropriate safeguards and to use the information only for the purposes for which it was shared.

5. Security of Your Information

MedsDirectRx implements administrative, physical, and technical safeguards designed to protect your personal information and PHI from unauthorized access, use, disclosure, alteration, or destruction. These safeguards are consistent with industry standards and HIPAA Security Rule requirements for electronic PHI (“ePHI”).

Despite our efforts, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure. If you have reason to believe that your information has been compromised, please contact us immediately using the information in Section 9.

In the event of a breach of unsecured PHI, MedsDirectRx will notify affected individuals and, where applicable, the U.S. Department of Health and Human Services (HHS), in accordance with the HIPAA Breach Notification Rule (45 C.F.R. Part 164, Subpart D).

6. Your Rights and Choices

Depending on your relationship with MedsDirectRx and applicable law, you may have the following rights regarding your information:

• Access and Correction – You may request access to the personal information we hold about you and ask us to correct any inaccuracies.
• Opt-Out of Marketing Communications – You may unsubscribe from promotional emails at any time by clicking the unsubscribe link in any marketing message or by contacting us directly. Opting out of marketing communications does not affect our ability to send you service-related or transactional messages.
• Deletion – You may request deletion of your personal information, subject to our legal, regulatory, and operational obligations to retain certain records.
• HIPAA Rights – If you are a patient whose PHI is handled by MedsDirectRx in its capacity as a Business Associate, you may have additional rights under HIPAA, which should be exercised through the relevant Covered Entity (e.g., your healthcare provider).

To exercise any of the rights described above, please contact us using the information in Section 9. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

7. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your browsing experience, analyze Site traffic, and deliver content relevant to your interests. Cookies are small data files stored on your device that help us recognize you and remember your preferences.

The types of cookies we use include:

• Essential Cookies – Required for the Site to function properly. These cannot be disabled without affecting Site functionality.
• Analytics Cookies – Used to collect information about how visitors use the Site, such as pages visited and time spent. This data is used in aggregate to improve the Site.
• Preference Cookies – Used to remember your settings and preferences to improve your experience on return visits.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may limit your ability to use some features of the Site. We do not currently respond to “Do Not Track” signals from browsers; however, we will update this policy if our practices change.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make changes, we will post the revised policy on the Site with an updated effective date. For material changes, we will provide advance notice through a prominent notice on the Site or via email. We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of the Site following the posting of any changes constitutes your acceptance of the updated Privacy Policy.

 

9. Contact Us

If you have any questions or concerns about this Privacy Policy, our data practices, or your rights under HIPAA or applicable state law, please contact us at:

MedsDirectRx LLC

15 E. Main St, Suite 300  |  Carmel, IN 46032

Email: sales@medsdirectrx.com

Phone: 317-698-6900

For HIPAA-related privacy concerns or to submit a complaint, you may also contact the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr/privacy.

By using our website and services, you agree to the terms of this Privacy Policy.