THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Medix Infusion Clinics
Effective Date: June 1, 2016
Revised Date: December 30, 2022
We value your privacy and trust. To serve you, we need personal information from you and your healthcare provider. This includes things like your name, mental and physical health conditions, address, and other things that identify you. This information is called protected health information. We will abbreviate protected health information in the rest of this document by calling it PHI. The law requires us to protect your PHI. We take that requirement seriously. We use and disclose PHI only as allowed by law. For example, when we provide you your prescriptions, we will use and disclose your PHI.
The law also requires us to let you know how we use and protect your PHI. We have put together this document, called a Notice of Privacy Practices to help you understand how we use, protect, and disclose your PHI. We will abbreviate Notice of Privacy Practices in the rest of this document by calling it NOPP. The NOPP helps us tell you that you have legal rights related to your PHI. We will tell you what your rights are and how to exercise them. The law also requires us to give you a copy of this NOPP.
We are going to ask that you acknowledge you have received, read, and understand this NOPP. Your PHI will only be used and disclosed as described in the NOPP. If we need to use and disclose your PHI in a way not described, we will get your written authorization before the use and disclosure. We might need to change this NOPP in the future. If this happens, we will give you the new NOPP within 60 days of changing it.
SECTION A: Uses and Disclosures of Protected Health Information
For treatment: The law lets us use and disclose your PHI for treatment. We get information from your doctor or other health care provider to provide your prescriptions and keep track of your treatment. We keep records about our management of your medication and information that helps us do that. This means that we are communicating with your healthcare team to treat you and provide your medication. For example, the pharmacist may talk to your doctor about your medications, treatment, condition, or other information like how you are doing with your treatment. We may use and disclose your PHI, without your authorization when the pharmacy needs to contact a physician or physician’s staff. We may use and disclose your PHI if we are contacted by another pharmacy who tells us they have your request and consent to transfer pharmacy records to them.
Storage and Backup: We store your PHI electronically. We backup our electronic records frequently and securely. We store the backups off site. We also use other precautions to reasonably safeguard your PHI. Even with those safeguards, a computer crash, disaster, technological failure, or emergency could cause the loss of your PHI.
Other Communication: We may contact you to provide refill reminders, health screenings, wellness events, inoculations, vaccinations or information about treatment alternatives or other health-related benefits and services that may be of interest to you.
Business Associates: Sometimes, our Pharmacy works with other companies or people to operate our business who are not directly employed by us. These are people or companies who work with us under contract or as we need them. If those companies or people have access to your PHI, they are called Business Associates. Shredding companies, records storage providers, and medical transcriptionists are examples of business associates. Business associates may use, change or create PHI. We require business associates to protect your PHI in the same way we do. We have agreements with our business associates where they promise to keep your PHI private. We only give business associates the information they need to do their jobs.
Other Disclosures: There are other times that we can use or disclose your PHI without your authorization. However, we may never have reason to make these disclosures.
To Communicate with Individuals Involved in Your Care: We may disclose to a family member, other relative, close friend, or any other person you identify, PHI that helps the person care for you.
Food and Drug Administration (FDA): We may disclose to the FDA, or people working for the FDA, PHI about adverse events involving drugs, foods, supplements, products and product defects, or post-marketing surveillance information that helps the FDA do product recalls, repairs, or replacements.
Worker’s Compensation: We may disclose your PHI to the extent authorized by and to the extent necessary to comply with worker’s compensation or other similar programs established by law.
Public Health: As required by law, we may disclose your PHI to public health or legal authorities who work to prevent or control disease, injury, or disability.
Law Enforcement: We may disclose your PHI to law enforcement as required by law or in response to a subpoena or court order.
Health Oversight Activities: We may disclose your PHI to an oversight agency for activities like audits, investigations, inspections, and credentialing, as necessary for licensure and for the government to monitor the health care system, government programs, and civil rights laws.
Judicial and Administrative Proceedings: If you are involved in a lawsuit or dispute, we may disclose your PHI if we get a court or administrative order. We may also disclose health information about you if we get a subpoena, discovery request, or other lawful process instituted by someone else, but only if efforts have been made, either by the requesting party or us, to tell you about the request or to obtain an order protecting the information requested.
Research: We may disclose your PHI to researchers when their research has been approved by an institutional review board or privacy board that has reviewed the research proposal and established protocols to ensure the privacy of your information.
Coroners, Medical Examiners, and Funeral Directors: We may release your PHI to a coroner or medical examiner. This may be necessary, for example, to identify a deceased person or determine the cause of death. We may also disclose PHI to funeral directors to allow them to carry out their duties.
Organ or Tissue Procurement Organizations: We may disclose your PHI to organ procurement organizations or other entities engaged in the procurement, banking, or transplantation of organs for the purpose of tissue donation and transplant.
Notification: We may use or disclose your PHI to notify or assist in notifying a family member, personal representative, or another person responsible for your care, regarding your location and general condition.
Fundraising: You may opt out of fundraising communications at any time.
Correctional Institution: If you are or become an inmate of a correctional institution, we may disclose to the institution or its agents PHI necessary for your health and the health and safety of other people.
To Avert a Serious Threat to Health and Safety: We may use and disclose your PHI when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.
Military and Veterans: If you are a member of the armed forces, we may release PHI about you as required by military command authorities. We may also release PHI about foreign military personnel to the appropriate foreign military authority.
National Security, Intelligence Activities and Protective Services for the President and Others: We may release PHI about you to federal officials for intelligence.
Victims of Abuse or Neglect: We may disclose PHI about you to a government authority if we reasonably believe you are a victim of abuse or neglect. We will only disclose this type of information to the extent required by law. If you agree to the disclosure, or if the disclosure is allowed by law and we believe it is necessary to prevent serious harm to you or someone else.
Other uses and disclosures: These may be made only with your written authorization and include, but are not limited to: most uses and disclosures of psychotherapy notes; uses and disclosures of PHI for marketing; disclosures that involve sale of your PHI; payment for products and services; healthcare operations. You may revoke your authorization by notifying us as described in Section C.
Your filled prescription contains PHI: We will use our judgment and experience regarding your best interest in allowing people to pick-up filled prescriptions, or other similar forms of PHI.
SECTION B: Your PHI RIGHTS
You may ask us to restrict uses and disclosures of your PHI to carry out treatment, or to restrict uses and disclosures to family members, relatives, friends, or other persons identified by you who are involved in your care. However, we are not required to agree to your request if we think it is unreasonable. If you want us to restrict uses and disclosures, please request this in writing and let us know the information to be restricted, (ii) the type of restriction being requested (for example, on the use of information, the disclosure of information, or both), and (iii) to whom the limits should apply.
You have the right to request the following with respect to your PHI: (i) inspection and copying; (ii) amendment or correction; (iii) an accounting of the disclosures of this information by us (we are not required to account to you for disclosures made for treatment, disclosures to you, disclosures to your caregivers, for notifications otherwise excluded by law); and (iv) the right to receive a paper copy of this notice upon request. We may require you to pay for this request to cover our costs of copying, labor, and postage.
You may request, and we must accommodate the request, if reasonable, to receive communications of PHI by alternative means or at alternative locations. To make this request please contact, in writing:
Medix Infusion Services
Attn: Privacy Officer
15301 Spectrum Dr Ste 330
Addison, TX 75001
You have the right to get notice of a security breach. We are required to notify you by first class mail or by e-mail (if you have indicated a preference to receive information by e-mail), of any breach of your Unsecured Protected Health Information as soon as possible, but in any event, no later than 60 days after we discover the breach. “Unsecured Protected Health Information” is PHI that has not been made unusable, unreadable, and undecipherable to unauthorized users. The notice will give you the following information:
If the breach involves 10 or more patients whose contact information is out of date, we will post a notice of the breach on our website or in a major print or broadcast media.
If you are paying for your prescriptions yourself, and not claiming reimbursement from your insurance company, you may ask that we not disclose your PHI to your insurance company. We are required to honor that request. If you are a minor who has lawfully provided consent for treatment, and you wish for Medix Infusion Services to treat you as an adult for purposes of access to and disclosure of records related to such treatment, please notify a staff member, pharmacist, or the Privacy Officer.
If you believe that your privacy rights have been violated, you may complain to us at the location described in Section C or to the: Secretary of the Department of Health and Human Services, Hubert H. Humphrey Building, 200 Independence Avenue SW, Washington, DC 20201. You will not be retaliated against for filing a complaint.
SECTION C: Contacting Us
You may contact us for further information at:
Medix Infusion Services
Attn: Privacy Officer
15301 Spectrum Dr Ste 330
Addison, TX 75001
Hours: Monday to Friday 8:30am-5pm CST Closed: Saturdays, Sundays, and major holidays
After Hours: Urgent Issues: Call 972-661-2273; follow prompts to reach the on-call pharmacist or nurse
Last updated: 25 January 2023
This policy applies to Medix Infusion’s internet website, MedixInfusion.com.
We are committed to protecting your online privacy. In general, you can visit MedixInfusion.com’s internet webpages without revealing any personal information. However, you may be asked to provide personal information to gain access to some of our content and services. This information helps us to better address the health care needs and concerns of site visitors.
Any personally identifiable data that you enter on this site is not sold to third parties.
Personally Identifiable Information
Personally identifiable information (PII) refers to information which can be used to distinguish or trace an individual’s identity, such as their name, address, date and place of birth, mother’s maiden name, social security number, biometric records, etc.
Medix Infusion does not collect PII unless you choose to provide it. If you create a user account, fill out an online form, or use certain tools on the website, Medix Infusion collects PII. This information is collected in order to provide the services you have requested.
For example, if you request or express interest in services, newsletters, or for someone to personally contact you, you will be asked to provide PII so that Medix Infusion can deliver those services. These types of PII could include your name, email address or mobile phone number. Medix Infusion only collects the minimum amount of PII necessary in order to deliver the requested service. You can opt out of these communications at any time by following the instructions on the communication.
Medix Infusion only uses PII to deliver the requested services and for internal purposes, such as monitoring, quality control, and process improvement. Medix Infusion does not sell PII entered into MedixInfusion.com. PII provided to Medix Infusion through MedixInfusion.com will be protected by this policy (or subsequent privacy policies) for as long as it is retained.
Other Types of Information We Collect
Medix Infusion automatically collects other limited information from visitors who read, browse and/or download information from emoryhealthare.org. This information is not PII. For example, when you browse MedixInfusion.com, we, and in some cases our third-party service providers, can collect the following types of information about your visit, including:
We use this information to measure the number of visitors to our site and its various sections, to help make our site more useful to visitors and to improve our public education and outreach through digital advertising. Also, this information is sometimes used to personalize the content we show to you.
Using Third-Party Tools for Website Analytics
Medix Infusion uses a variety of third-party tools to collect basic information about visits to MedixInfusion.com. This information is then used to analyze use of MedixInfusion.com and to maintain the website including monitoring site stability, measuring site traffic, optimizing site content and may help make the site more useful to visitors.
The Medix Infusion staff analyzes the data collected from these tools. The reports are available only to Medix Infusion managers, teams who implement digital marketing programs, members of the Medix Infusion communications and web teams and other designated staff and contractors who need this information to perform their duties.
We use analytics tools and other third-party technologies, such as Google Analytics and Hotjar, to collect non-personal information regarding you in the form of various usage and user metrics when you use our online website and services. These tools and technologies collect and analyze certain types of information, including cookies, partial-IP addresses, device and software identifiers, referring and exit Uniform Resource Locators (“URLs”), mouse clicks, mouse movements, scrolling activity, media access control address (“MAC address”), mobile unique device ID, geographical location, demographic and interest data, and other similar information.
You may opt out of the Google advertising cookies by visiting the Google advertising opt-out page or you may opt out of Google Analytics by visiting the Google Analytics opt-out page. Google has additional information available about their Remarketing Privacy Guidelines, and Restrictions. Likewise, you may opt out of Hotjar by visiting the Hotjar opt-out page.
Using Third-Party Tools for Outreach through Digital Advertising
Medix Infusion uses third-party web services to conduct outreach and education through the use of digital advertising. These services may receive your PII as part of outreach, education, or other communications authorized by Medix Infusion. These third-party services may collect information through the use of web beacons that are located on our pages. A web beacon is a see-through graphic image (usually 1 pixel x 1 pixel) that is placed on a web page and, in combination with a cookie, allows us to collect information regarding the use of the web page that contains the web beacon.
We use web beacons to tell when a user is redirected to MedixInfusion.com because of Medix Infusion advertisement that we ran on another website was clicked on or otherwise interacted with (known as “click tracking” or “conversion tracking”) and to better target advertisements (known as “retargeting”).
Medix Infusion uses third-party tools to help deliver advertising, and the companies that operate these tools may receive your PII as part of advertising authorized by Medix Infusion. Vendors that operate the third-party tools may also gather information about your visits to third-party sites outside of MedixInfusion.com. Medix Infusion does not track your individual-level activity on the Internet outside of MedixInfusion.com.
The outreach and education analytics tools provide reports which aggregate data, such as the number of clicks on advertisements. The reports are available only to Medix Infusion managers, teams who implement digital marketing programs, members of the MedixInfusion.com communications and web teams, and other designated staff and contractors who need this information to perform their duties.
When you visit a website, its server may generate a piece of text known as a “cookie” to place on your device. The cookie, which is unique to your browser, allows the server to “remember” specific information about your visit while you are connected. The cookie makes it easier for you to use the dynamic features of Web pages.
Any PII that you enter into the online forms on MedixInfusion.com is not associated with cookies on MedixInfusion.com.
There are two types of cookies: single session (temporary) and multi-session (persistent). Single session cookies last only as long as your Web browser is open. Once you close your browser, the session cookie disappears. Persistent cookies are stored on your device for longer periods. Both types of cookies create an ID that is unique to your device.
Links to Other Sites
MedixInfusion.com may link to other websites. We link to other websites solely for your convenience and education. When you follow a link to an external site, you are leaving MedixInfusion.com and are subject to the external site’s privacy and security policies.
Medix Infusion uses Social Media Sites in order to increase transparency, enhance information sharing, promote patient engagement and encourage collaboration.
Medix Infusion does not own, manage or control Social Media Sites. In addition, Medix Infusion does not collect, maintain or disseminate information posted by visitors to those sites. If you choose to provide information to a Social Media Site through registration or other interaction with the site, the use of any information you provide is controlled by your relationship with the Social Media Site. For example, any information that you provide to register on Facebook is voluntarily contributed and is not maintained by Medix Infusion. This information may be available to Medix Infusion Social Media Page Administrators in whole or part, based on a user’s privacy settings on the Social Media Site. Although you may voluntarily contribute to a Social Media Site with the intent to share the information with others on an Medix Infusion Social Media Page, to protect your privacy, please do not disclose personally identifiable information about yourself or others on these sites. Medix Infusion will not disclose any PII you provide to MedixInfusion.com to Social Media Sites.
Medix Infusion uses appropriate security safeguards to guard against risks such as loss, unauthorized access or use, destruction, modification, or unintended or inappropriate disclosure of PII. Emory has been assured that third-parties that may receive your PII, as described above, likewise use appropriate security safeguards to guard against risks such as loss, unauthorized access or use, destruction, modification, or unintended or inappropriate disclosure of PII.
You agree that you will not submit any false information or any illegal or damaging content to our website. We reserve the right to terminate access to or the ability to interact with our website in response to any concerns we may have about false, illegal, or damaging content, or for any other reason, in our sole discretion.
Additional Terms and Policies
Please note that specific web pages maintained by Medix Infusion may have additional terms and policies applicable to their use.
Revisions to this Policy
Medix Infusion reserves the right to update this policy at any time. The most up to date version of this policy will always be available on our website. Any updates or other changes to this policy will apply retroactively to any information earlier submitted to us.
If you have a complaint or problem, or if you believe your privacy rights have been violated, you may contact us. Please share the reason you are reaching out. Our customer service department will forward your concerns to the appropriate Medix Infusion department for response or resolution.