TIMBERVILLE DRUG STORE INC HIPAA NOTICE OF PRIVACY PRACTICES THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. When this Notice of Privacy Practices (�Notice�) refers to �we� or �us� it is referring to TIMBERVILLE DRUG STORE INC. and all other pharmacists who provide health care services and the employees of our pharmacy. We are required by law to maintain the privacy of your protected health information (�PHI�), to follow the terms of this Notice and to give you this Notice setting forth our legal duties and the privacy practices concerning your PHI. This Notice describes how we may use and disclose your PHI. Additionally, this Notice explains the rights you have with respect to your PHI and certain obligations we must abide by in accordance with the law. We reserve the right to amend this Notice. If we make any material revisions to this Notice, we will post a copy of the revised Notice in the pharmacy or otherwise provide a copy to you. I. USE AND DISCLOSURE OF YOUR PHI- We will use your PHI for treatment, payment, and health care operations. We may also use your PHI for other purposes that are permitted and/or required by law and pursuant to your written authorization. The following lists examples of how we may use and/or disclose your PHI. Any other uses not described in this Notice will only be made with your explicit written authorization, which you may revoke at any time by providing us with written notice of your revocation. A. For treatment- we may use and disclose your PHI in order to provide you with prescription and supply services. We may disclose your PHI to other pharmacists, pharmacy technicians and health care providers that are involved in taking care of you. B. For payment-we will also use and disclose your PHI in order to obtain payment for the health care services we provided to you. We may also need to disclose your PHI to receive prior approval from your health plan or to determine if your health plan will cover certain prescriptions or services. C. For health care operations- we may disclose your PHI in connection with the management of our pharmacy. For example, we can also use your PHI to conduct or arrange for audits, including fraud and abuse detection and compliance programs. Additionally, we may use your PHI for our business management and general administrative activities. D. For prescription refill reminders, treatment alternatives or health-related benefits- We may use and disclose your PHI to contact you to remind you about prescription refills, to tell you about treatment alternatives, or about health-related benefits or services that may be of interest to you. E. To family members, relatives or close friends-Unless you object to such disclosures, we may disclose your PHI to your family members, relatives or close friends, or any other person identified by you as being involved in your treatment or payment for your medical care. if you are not present to agree or object our disclosure to a family member or friend, we may exercise our professional judgment to determine whether the disclosure is in your best interest. If we decide to disclose your PHI to your family, relative or close friend, or other individual identified by you, we will only disclose the PHI that is relevant to your treatment or payment. F. Other permitted and required uses and disclosures- We may use your PHI without obtaining your authorization and without offering you the opportunity to object as follows: * As required by law, provided however, that the disclosure will be made in compliance with applicable law; * To a public health authority that is authorized by law to collect or receive such information, or to a foreign government agency that is acting in collaboration with a public health authority; * To a health oversight agency for oversight activities authorized by law, including audits and inspections, and civil, administrative or criminal investigations; proceedings or actions; * To a public health authority or government authority authorized to receive reports of abuse, neglect or domestic violence; * For judicial or administrative proceedings or law enforcement purposes; * To a coroner or medical examiner to perform duties authorized by law; * To funeral directors, consistent with applicable law, as necessary to carry out their duties; * To organ procurement organizations or similar entities for the purpose of facilitating organ, eye or tissue donation and transplantation; * For research purposes; * To avert serious threat to health and safety, so long as the disclosure is only to a person who is reasonably able to prevent or lessen such threat; * For specialized government functions, such as national security activities; * To a correctional institution or law enforcement custodian; * To the extent necessary to comply with laws relating to workers� compensation. II. YOUR RIGHTS AS OUR PATIENT- As our patient, you have a number of rights associated with you PHI. The following describes your specific rights. A. You have the right to request restrictions or limitations on how we are allowed to use and disclose your PHI; however, we do not have to agree to your requested restriction or limitation (except to the extent required by the Recovery Act for certain cash transactions). Your written request must specify: (1) if you would like to restrict or limit our use, or both; (2) what information you would like to restrict or limit; and (3) to whom you want the restriction to apply. If we agree to a restriction or limitation of your PHI, the restriction or limitation will not prevent us from disclosing your PHI as follows: (1) to you if you request access to your PHI or if you request an accounting of disclosures; (2) for purposes required to permitted by law; or (3) in the case of emergency. B. You have the right to request receipt of PHI from us by alternative means or vial alternative locations. For example, you may want to receive communications related to your prescriptions as a different address other than your home address. If you wish to receive confidential communications via alternative means or locations, please submit your request in writing to the Privacy Officer and set forth the alternative means by which you wish to receive communications or the alternative locations which you wish to receive such communications. We will accommodate all reasonable requests. C. You have the right to access and inspect or copy your PHI; provided, however, you are not entitled to access certain PHI exempted under HIPAA. If we do not have your PHI in our possession, we will provide you with the appropriate contact information when your request is received. If you request a copy of your PHI, you will receive a response to your request in a timely fashion but may be charged a reasonable, cost-based fee to cover copy costs and postage. In some limited circumstances your request may be denied in which case you may request the denial be reviewed. If access is ultimately denied, you will be entitled to written explanation of the reasons for the denial. We may charge you for the costs of your request. D. You have the right to receive an accounting of disclosures of your PHI made by us, including disclosures to or by our business associates, for the period of 6 years prior to the date on which you request an accounting of disclosures, or such lesser period as you indicate; provided, however, you are not entitled to receive an accounting of disclosures that occurred prior to April 14, 2003. You will receive one request annually free of charge and, thereafter, we may charge you a reasonable, cost-based fee for each subsequent request for an accounting of disclosures within the same 12-month period. We will notify you of the cost for an accounting of disclosures and you may choose to withdraw or modify your request before we charge you. E. If you believe we have PHI about you that is incorrect or incomplete, you may make a written request to us stating the reasons that support any requested amendment. You have the right to request an amendment to your PHI for so long as we maintain your PHI. If we do not have your PHI in our possession, we will provide you with the appropriate contact information when we receive your request. We will respond to your request for an amendment no later than sixty days after we receive the request. However, we may deny your request if, for example, we determine that the PHI you requested was not created by us or is already accurate and complete. You may respond to our denial by filing a written statement of disagreement, but we have the right to rebut your statement. If this occurs, you have the right to request that your original request, our denial, your statement of disagreement, and our rebuttal be included in future disclosures of your PHI. F. You have the right at any time to obtain a paper copy of this Notice, even if you receive the Notice electronically. If you have received an electronic copy of this Notice but wish to obtain a paper copy, please send your request to the Privacy Officer at the address listed below. G. If you need any additional information about this Notice or which to exercise and of your rights set forth in this Notice, please contact the Privacy Officer at the following address: TIMBERVILLE DRUG STORE INC, 305 SOUTH MAIN STREET, TIMBERVILLE, VA 22853, PHONE: 540-896- 3171, FAX: 540-896-3145. H. If you believe your privacy rights have been violated, you may file a complaint with us or with the secretary of the Department of Health and Human Services without retaliation. Effective Date April 14, 2003. Last updated April 1, 2009.