Covered Entity: ScriptsXO — telehealth prescription platform.
This notice describes how medical information about you may be used and disclosed, and how you can access this information. Please review it carefully.
What Is Protected Health Information (PHI)?
Protected Health Information (PHI) is any information that relates to your past, present, or future physical or mental health, the healthcare services provided to you, or the payment for those services — and that can reasonably be used to identify you. This includes your name, health conditions, video recordings, and prescription history on our platform.
How We Use and Disclose Your PHI
We may use and disclose your PHI in the following ways:
Treatment
We share your PHI with providers who review your intake and video to conduct consultations and determine whether to issue a prescription. We also transmit prescription details to your designated pharmacy for fulfillment.
Payment
We may use your PHI to process payments for services rendered, including submitting information to payment processors.
Healthcare Operations
We may use your PHI for internal operations such as quality assessment, provider credentialing, compliance audits, training, and platform improvement. These uses are limited and do not permit sale of your data.
As Required by Law
We will disclose your PHI when required by federal or state law, court order, or to respond to a subpoena. We will disclose the minimum necessary information in such cases.
Public Health and Safety
We may disclose PHI to public health authorities, law enforcement, or to avert a serious and imminent threat to health or safety, as permitted by HIPAA.
Your Rights Regarding Your PHI
You have the following rights with respect to your Protected Health Information:
- Right to Access: You may request a copy of your medical records and other PHI we hold. We will provide access within 30 days of your request.
- Right to Amend: If you believe your PHI is inaccurate or incomplete, you may request that we amend it.
- Right to Restrict: You may request that we restrict how we use or disclose your PHI. We are not always required to agree to restrictions.
- Right to an Accounting: You may request a list of disclosures we have made of your PHI, subject to certain exceptions.
- Right to Portable Copy: You may request your PHI in a structured, machine-readable format.
- Right to Complain: You may file a complaint with us or with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.
- Right to a Paper Copy: You may request a paper copy of this Notice at any time.
Uses Requiring Your Authorization
The following uses and disclosures require your written authorization:
- Marketing communications (other than treatment reminders)
- Sale of your PHI to third parties
- Psychotherapy notes
- Most uses of PHI not described in this Notice
You may revoke any authorization in writing at any time.
Our Duties
We are required by law to:
- Maintain the privacy and security of your PHI
- Provide you with this Notice of Privacy Practices
- Notify you in the event of a breach of your unsecured PHI
- Abide by the terms of the Notice currently in effect
Contact Our Privacy Officer
To exercise your rights, submit a complaint, or ask questions about this Notice, contact our Privacy Officer:
Email: hipaa@scriptsxo.com
To file a complaint with the federal government:
U.S. Department of Health and Human Services
Office for Civil Rights
hhs.gov/hipaa/filing-a-complaint