Privacy Policy

This Privacy Policy describes how Express Pharmacy DME (“we,” “our,” or “us”) collects, uses, and shares your personal and health information when you visit or make a purchase from https://expresspharmacydme.com (the “Site”).

We are committed to protecting your privacy and complying with all applicable healthcare and data protection regulations, including the Health Insurance Portability and Accountability Act (“HIPAA”).

Information We Collect

Personal Information

When you visit or use the Site, we may collect:

• Your name, billing address, shipping address, email address, and phone number.
• Payment information (including credit/debit card details).
• Information about your device (such as IP address, browser type, time zone, and cookies).
• Browsing information, including pages viewed, referring websites, and site interactions.

Health Information (Protected Health Information “PHI”)

When you request pharmacy services or products, we may collect health-related information you provide, such as:

• Prescription details.
• Medical history related to your treatment or product needs.
• Insurance information.

This information is classified as PHI under HIPAA and receives additional protections.

How We Use Your Information

We use your Personal and Health Information to:

• Fulfill and manage your orders (including payment processing, shipping, and order confirmations).
• Provide pharmacy and medical equipment services in compliance with healthcare regulations.
• Communicate with you about your prescriptions, orders, or healthcare needs.
• Verify your identity and prevent fraud or unauthorized access.
• Improve and optimize our Site, including analytics and performance monitoring.
• Comply with legal and regulatory obligations.

We do not sell or rent your PHI or Personal Information to third parties.

SMS Consent

If you provide your phone number and consent to receive SMS communications:

• SMS consent is not shared with third parties or affiliates.
• Messages may include order updates, prescription reminders, or important service notifications.
• You can opt out of SMS at any time by following the unsubscribe instructions provided in our messages.
• Mobile Opt-In, SMS consent and phone numbers collected for SMS communication purposes will not be shared with third parties and affiliates for marketing purposes.

Sharing Your Information

We may share information only in the following limited circumstances:

• Service Providers: With vendors (e.g., shipping carriers, IT providers, or payment processors) who support our operations and are contractually obligated to safeguard your information.
• Healthcare Partners: With your healthcare providers, insurers, or pharmacies where necessary to fulfill your prescription or treatment needs, in compliance with HIPAA.
• Legal Compliance: To comply with applicable laws, regulations, subpoenas, or other lawful requests.
• Analytics: With tools like Google Analytics, to help us understand website usage (you can opt out here: https://tools.google.com/dlpage/gaoptout).

Your Rights

As a patient or customer, you have the right to:

• Access, review, and request copies of your PHI and personal information.
• Request corrections to inaccurate information.
• Request restrictions on certain uses or disclosures of your information.
• Receive a record (“accounting”) of disclosures made of your PHI.
• Withdraw consent for marketing communications, including SMS or email.

To exercise these rights, please contact us at the email listed below.

Data Retention

We retain your PHI and Personal Information only as long as necessary:

• To provide services and fulfill legal/medical obligations.
• To comply with record retention laws for healthcare services.

Unless otherwise requested, your order and prescription records may be retained for at least 6 years, per HIPAA requirements.

Security

We use administrative, technical, and physical safeguards to protect your Personal Information and PHI, including:

• Encrypted data transmission (SSL/TLS).
• Secure storage and limited access controls.
• Staff training on HIPAA compliance.

Do Not Track

Our Site does not alter data collection practices in response to “Do Not Track” signals.

Minors

This Site is not intended for individuals under the age of 18. We do not knowingly collect information from minors without verified parental or guardian consent.

Changes

We may update this Privacy Policy periodically to reflect operational, legal, or regulatory updates. Updates will be posted here with the revised effective date.

Contact Us

For questions, complaints, or to exercise your privacy rights, please contact us:

Email: [email protected]
Mailing Address: 2750 S Ha milton Rd, Columbus, OH 43232, USA
Phone: (614) 495-9097