Thank you for choosing Uptown Pharmacy (“we,” “us,” or “our”). We are committed to protecting the privacy and security of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Services (in-store, online, mobile, or digital communications). By using or accessing our Services, you agree to this Privacy Policy. If you do not agree, please do not use our Services.
1. Scope & Applicability
This Privacy Policy applies to information we collect from or about you:
- When you visit or use our website(s) or mobile applications, or interact with us online.
- When you receive pharmacy or related health services (e.g. immunizations, MTM, PGx testing, wellness checks) in-person.
- When you communicate with us via text, email, phone, or other means.
- When you enroll in programs we offer (e.g. 340B, Patient Assistance Programs, manufacturer programs).
It does not govern third-party websites, apps, or services to which we link. We encourage you to review their privacy policies.
2. Information We Collect
We may collect the following categories of information:
a) Information You Provide
- Identifiers: name, address, phone number, email, date of birth, Social Security number (if needed for certain programs).
- Health information / medical data: prescription history, immunization records, clinical data, test results (e.g., PGx).
- Program enrollment data: information needed for 340B, manufacturer partnerships, PAP, etc.
- Payment and billing information: insurance details, payment card data, claim information.
- Communication content: messages, notes, patient–pharmacy texting content.
- Demographics: gender, language, etc.
b) Automatically Collected Information
When you access our website, mobile apps, or digital tools, we may collect:
- Device & browser data (IP address, device type, browser version, OS).
- Usage data: pages visited, time spent, navigation, clicks.
- Authentication logs, error logs.
- Cookies, web beacons, tracking technologies.
- Geolocation (if you permit it).
c) Information from Third Parties
We may receive information about you from:
- Insurance companies and payers.
- Health care providers.
- Laboratories or testing partners.
- Manufacturer or program partners.
- Public and commercially available sources.
d) Aggregated / De-identification
We may aggregate or de-identify personal data so it no longer identifies you; such data is not subject to this Privacy Policy.
3. Use of Your Information
We use your information for purposes including:
- Providing and managing health care services, medication dispensing, immunizations, MTM, and related clinical services.
- Billing, claims processing, insurance coordination, and payment collection.
- Operating our business: improving our services, analytics, training, audits, customer support, quality assurance.
- Communications: appointment reminders, service notifications, updates, transactional messages, patient outreach.
- Regulatory compliance: maintaining records, reporting adverse events, audits, legal obligations.
- Program administration: 340B, manufacturer programs, PAP, collaborations.
- Security, fraud detection, and protection of rights, safety, assets.
- Marketing and promotions (where allowed and with consent).
4. Disclosure of Your Information
We may share your information with:
- Service Providers & Business Associates: vendors, contractors, consultants who assist us (e.g., IT providers, lab partners, billing services), under agreements requiring confidentiality.
- Healthcare Providers & Payers: physicians, hospitals, insurers, pharmacies for coordination of care or payment.
- Program Partners: manufacturers, laboratories, program administrators for 340B, PAP, research, or testing.
- Legal, Regulatory & Governmental Entities: as required by law (e.g., mandatory reporting, subpoenas, audits, public health).
- Health Oversight Agencies: for audits, investigations, compliance.
- Emergency / Safety: to prevent serious harm to you or others.
- Transaction Counterparts: in the event of a merger, sale, reorganization, or transfer of assets.
- Your Direction or Authorization: where you authorize disclosure (e.g., to a family member, caretaker).
We will ensure recipients protect your information in a manner consistent with this policy and applicable law.
5. Your Rights & Choices
You have rights regarding your data:
- Access / Copy: Request access to your personal or health information.
- Correction / Amendment: Request correction of inaccurate or incomplete information.
- Restriction: Ask us to restrict certain uses or disclosures (where required or allowed by law).
- Confidential Communications: Request alternative communication methods (e.g., alternate phone or address).
- Accounting of Disclosures: Request a list of certain disclosures made in the past 12 months.
- Withdraw Consent: Where processing is based on your consent, you may withdraw it (though it may affect services).
- Opt-out: You may opt out of certain marketing or promotional communications (if permitted by law).
- Deletion: request deletion (“right to be forgotten”), subject to legal and regulatory retention obligations.
To exercise your rights, contact us at the contact information below. We may verify your identity before acting on your request. Some requests may be denied in whole or in part under applicable law (e.g., HIPAA, record retention requirements).
6. Data Security & Confidentiality
We use administrative, physical, and technical safeguards to protect your information (e.g., encryption, access controls, audits). However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
We will notify you and any required regulatory authority in the event of a breach of unsecured protected health information, as required by law.
7. Retention of Information
We retain your personal and health information as long as necessary to provide services, fulfill legal obligations, resolve disputes, enforce agreements, or for archival and audit purposes, in compliance with applicable law.
8. Children’s Privacy
Our Services are not intended for individuals under the age of 16 (or lower threshold where applicable). We do not knowingly collect personal information from such persons. If we learn that we have collected information from a minor without parental consent, we will delete it.
9. International Transfers
If you interact with us from outside the U.S., or we transfer your data across borders (e.g., to service providers), your information will be subject to applicable U.S. privacy laws and this Privacy Policy. We will take safeguards to protect your data consistent with legal requirements.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The “Effective Date” will indicate when the policy was last revised. If changes are material, we will notify you (e.g., via email, banner on site) and seek consent if required. Continued use after such changes means you accept them.
11. Contact Us
If you have questions, want to exercise your rights, or wish to lodge a complaint, please contact:
Uptown Pharmacy
Address: 2920 Oak Lawn Ave, Dallas, TX 75219
Phone: (214) 935-9092
Email: hello@uptownrxpharmacy.com
If you believe your privacy rights have been violated, you may also file a complaint with the U.S. Department of Health & Human Services Office for Civil Rights (OCR).
