Section A
Uses and disclosures of protected health information
Treatment, payment, and health care operations
We will use your health information to provide treatment. This may involve receiving or sharing information with other health care providers such as your physician. This information may be written, verbal, electronic, or via facsimile. This includes receiving prescription orders so that we may dispense or compound prescription medications. We may also share information with other health care providers treating you to coordinate the different things you need, such as medications, lab work, or other appointments. We may also contact you to provide treatment-related services, such as refill reminders, treatment alternatives, and other health-related services that may be of benefit to you.
We may use your health information to obtain payment.
We will use your health information for our health care operations necessary to run the pharmacy. This may include monitoring the quality of care that our employees provide to you and for training purposes.
Permitted or required uses and disclosures
Our pharmacists, using their professional judgment, may disclose your protected health information to a family member, other relative, close personal friend, or other person you identify as being involved in your health care. This includes allowing such individuals to receive filled prescriptions, medical supplies, or medical records on your behalf.
We also have contracts with entities called Business Associates that provide some services for us that require access to your protected health information. We require our Business Associates to safeguard any protected health information appropriately.
Under certain circumstances, Greenwich Rx may be required to disclose health information as required or permitted by federal or state laws. These include, but are not limited to:
- Food and Drug Administration (FDA) reports relating to adverse events regarding drugs, foods, supplements, and other health products, or for post-marketing surveillance to enable product recalls, repairs, or replacement.
- Public health or legal authorities charged with preventing or controlling disease, injury, or disability.
- Law enforcement agencies as required by law or in response to a valid subpoena or other legal process.
- Health oversight agencies (such as licensing boards) for activities authorized by law such as audits, investigations, and inspections necessary for Greenwich Rx's licensure and for monitoring of health care systems.
- Court or administrative process, in response to a court order, administrative order, subpoena, discovery request, or other lawful process by another person involved in a dispute involving a patient, but only if efforts have been made to tell the patient about the request or to obtain an order protecting the requested health information.
- Workers' compensation, as authorized by and as necessary to comply with laws relating to workers' compensation or similar programs established by law.
- Other legal mandates, whenever required to do so by law.
- Coroner or Medical Examiner when necessary, for example to identify a deceased person or determine a cause of death.
- Funeral Directors to carry out their duties.
- Organ procurement organizations or other entities engaged in procurement, banking, or transplantation of organs for the purpose of tissue donation and transplant.
- Notification of family members or persons responsible for the patient's care, including the patient's location or general condition.
- Correctional institutions or their agents if a patient is or becomes an inmate of such an institution, when necessary for the patient's health or the health and safety of others.
- Serious threats to health or safety, when necessary to prevent a serious threat to the patient's health and safety or the health and safety of the public or another person.
- Military command authorities when the patient is a member of the armed forces, and to appropriate military authority about foreign military personnel.
- National security, to authorized officials for intelligence, counterintelligence, and other national security activities authorized by law.
- Protective services, to authorized federal officials so they may provide protection to the President, other authorized persons, or foreign heads of state, or to conduct special investigations.
- Abuse, neglect, or domestic violence, to a government authority such as a social service or protective services agency, if Greenwich Rx reasonably believes the patient to be a victim of abuse, neglect, or domestic violence, but only to the extent required by law, if the patient agrees to the disclosure, or if the disclosure is allowed by law and we believe it is necessary to prevent serious harm.
Authorized use and disclosure
Use or disclosure other than those previously listed or as permitted or required by law will not be made unless we obtain your written authorization in advance. You may revoke any such authorization in writing at any time. Upon receipt of a revocation, we will cease using or disclosing protected health information about you, except to the extent that we have already acted in reliance on your authorization.
More stringent laws
Greenwich Rx adheres to the confidentiality regulations of 42 CFR Part 2 for substance use disorder patient records. Part 2 information disclosed pursuant to patient consent may not be redisclosed unless further disclosure is expressly permitted by the written consent of the person to whom it pertains. Some state laws may provide more protection than federal laws, and in that case we will abide by the more restrictive statute.
Section B
Patient rights
Restriction requests
You have the right to request a restriction be placed on the use and disclosure of your protected health information for purposes of carrying out treatment, payment, or health care operations. Restrictions may include requests for not submitting claims to your insurance or third-party payer, or limitations on which persons may be considered personal representatives.
Greenwich Rx is not required to accept restrictions other than payment-related uses not required by law that have been paid in full by the individual or representative other than a health plan.
If we do agree to the requested restrictions, they shall be binding until you request that they be terminated.
Requests for restrictions or termination of restrictions must be submitted in writing to the Privacy Officer listed in Section D of this Notice.
Alternative means of communication
You have the right to receive confidential communications of protected health information by alternate methods or at alternate locations upon reasonable request. Examples may include sending information to a phone or mailing address other than your home.
Greenwich Rx shall make reasonable accommodation to honor requests.
Requests must be submitted in writing to the Privacy Officer listed in Section D of this Notice.
Access to health information
You have the right to inspect and copy your protected health information. The designated record set will usually include prescription and billing records. You have the right to request the protected health information in the designated record set for as long as we maintain your records.
You have the right to request that your protected health information be provided to you in an electronic format if available.
Requests must be submitted in writing to the Privacy Officer listed in Section D of this Notice.
Any costs or fees associated with copying, mailing, or preparing the requested records will be charged prior to granting your request.
Greenwich Rx may deny your request for records in limited circumstances. In case of denial, you may request a review of the denial for most reasons. Requests for review of a denial must also be submitted to the Privacy Officer listed in Section D of this Notice.
Amendments to health information
If you believe that your protected health information is incomplete or incorrect, you may request an amendment to your records. You may request amendment to any records for as long as we maintain your records.
Requests must be submitted in writing to the Privacy Officer listed in Section D of this Notice.
Requests must include a reason that supports the amendment to your health information.
Greenwich Rx may deny amendment requests in certain cases. In the case of denial, you have the right to submit a Statement of Disagreement. We have the right to provide a rebuttal to your statement.
Accounting of uses and disclosures
You have the right to request an accounting of uses and disclosures that are not for treatment, payment, or health care operations. This accounting may include up to the six years prior to the date of request and will not include an accounting of disclosures to yourself, your personal representatives, or anything authorized by you in writing. Other restrictions may apply as required in the Privacy Rule.
Requests must be submitted in writing to the Privacy Officer listed in Section D of this Notice.
The first accounting in any 12-month period will be provided to you at no cost. Any additional requests within the same 12-month period will be charged a fee to cover the cost of providing the accounting.
The amount will be provided to you prior to completing the request. You may choose to withdraw your request to avoid paying this fee.
Notice of Privacy Practices
You have the right to receive a paper copy of this Notice even if you previously agreed to receive a copy electronically.
Please submit a request to the Privacy Officer listed in Section D of this Notice.
Breach notification
You have the right to be notified if a breach compromises the privacy or security of your unsecured PHI. If a breach occurs, we will notify you as required by the HIPAA Breach Notification Rule, 45 CFR Part 164, Subpart D.
Section C
Greenwich Rx's duties
Greenwich Rx is required by law to maintain the privacy of protected health information, to provide individuals with notice of its legal duties and privacy practices with respect to protected health information, and to notify affected individuals following a breach of unsecured protected health information.
Greenwich Rx is required to abide by the terms of this Notice. We reserve the right to change the terms of this Notice and to make the new notice provisions effective for all protected health information that we maintain. Any such revised Notice will be made available upon request.
Section D
Contacting us
Additional questions, submitting requests, or complaints
If you have questions about this Notice or how Greenwich Rx uses and discloses your protected health information, please contact our Privacy Officer below.
You may obtain forms needed for request submission from our Privacy Officer.
If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the Secretary of Health and Human Services. You will not be retaliated against for filing a complaint.
Privacy Officer
Please contact our Privacy Officer by email at privacy@greenwichrx.org, by phone at +1 (844) 202-4446 or locally at +1 (346) 598-7654, or by mail to Greenwich Health & Wellness LLC, Attn: Privacy Officer, 9733 FM 2920 Rd, Suite 100, Tomball, TX 77375.
Secretary of Health and Human Services, Office for Civil Rights
For online complaint forms and contact information for the Regional OCR offices, visit www.hhs.gov/ocr. Email OCRComplaint@hhs.gov for assistance or questions about complaint forms.
Effective date
This Notice of Privacy Practices is effective as of May 22, 2026.
