Notice of Privacy Practices

1. About this notice

A&A Med Solutions LLC, d/b/a A&A Family Pharmacy (“A&A Family Pharmacy,” “we,” “us,” or “our”), is committed to protecting the privacy of your Protected Health Information (“PHI”). PHI is information about you — including demographic information — that may identify you and that relates to your past, present, or future physical or mental health condition, the health care provided to you, or payment for that care.

This notice describes our privacy practices under the Health Insurance Portability and Accountability Act (“HIPAA”), as amended by the HITECH Act and the HIPAA Omnibus Rule, and applicable Florida law. We are required by law to maintain the privacy of PHI, provide you with this notice of our legal duties and privacy practices, follow the terms of the notice currently in effect, and notify you following a breach of unsecured PHI.

2. How we may use and disclose your health information

Treatment, payment, and health care operations

Treatment. We use and disclose PHI to dispense medications, counsel you on therapy, coordinate with your prescribers, and communicate with other pharmacies when you transfer a prescription.

Payment.We use and disclose PHI to bill and collect payment from you, your insurer, a pharmacy benefit manager, Medicare, Medicaid, a workers’ compensation carrier, an auto-accident carrier, or a Letter of Protection (LOP) counsel.

Health care operations. We use PHI to run the pharmacy — quality review, staff training, compliance, accreditation, audits, and legal services.

Uses required or permitted by law

We may use or disclose PHI without your authorization when required or permitted by law, including:

• as required by law (for example, mandatory reporting);
• public health activities (disease reporting, FDA-required reporting, immunization registries);
• victims of abuse, neglect, or domestic violence;
• health oversight activities (audits, investigations, licensure);
• judicial and administrative proceedings (court orders, subpoenas with required assurances);
• law enforcement purposes, subject to HIPAA limits;
• decedents — to coroners, medical examiners, and funeral directors;
• organ, eye, and tissue donation;
• research that has been approved under HIPAA;
• to avert a serious and imminent threat to health or safety;
• specialized government functions (military, national security, protective services);
• workers’ compensation, as authorized by Florida law;
• disaster relief coordination;
• disclosures to business associates who perform services for us under a written Business Associate Agreement.

Uses that give you an opportunity to object

We may share limited PHI with a family member, relative, close friend, or other person you identify who is involved in your care or payment for your care, unless you object. If you are present, we will give you the opportunity to agree or object; if you are not present or unable to agree, we will use our professional judgment in your best interest.

Appointment and refill reminders; treatment alternatives

We may contact you by phone, text, or email with refill reminders, pick-up notices, medication-adherence outreach, and information about treatment alternatives or other health-related benefits and services available to you. Tell us any time if you prefer not to receive these communications.

Uses requiring your written authorization

The following uses and disclosures require your written authorization, which you may revoke at any time except to the extent we have already acted in reliance on it:

• Marketing communications involving financial remuneration from a third party;
• Sale of PHI;
• Uses and disclosures of psychotherapy notes, if any are maintained;
• Any other use or disclosure not described in this notice.

3. Special protections

Substance Use Disorder (SUD) records under 42 CFR Part 2. Records identifying you as a patient receiving treatment for a substance use disorder receive additional protection. Following the 2024 alignment of Part 2 with HIPAA, we may use SUD records for treatment, payment, and health care operations with a single prior written consent; redisclosure is limited, and the federal prohibition-on-redisclosure notice applies.

Reproductive health care information. Consistent with the 2024 HIPAA Reproductive Health Privacy Rule, we will not use or disclose PHI to investigate or impose liability on any person for the mere act of seeking, obtaining, providing, or facilitating lawful reproductive health care. Requests for such PHI for investigative or prohibited purposes require a signed attestation, which we will evaluate before disclosing.

Genetic information. Under the Genetic Information Nondiscrimination Act (GINA), we do not use or disclose your genetic information for underwriting purposes.

Redisclosure. PHI we receive from other providers may be protected under state or federal laws beyond HIPAA and may require additional consent before we may redisclose it.

4. Your rights

You have the following rights regarding your PHI:

• Request restrictions. You may request that we restrict certain uses or disclosures of your PHI. We are not required to agree, except that we must agree to restrict disclosure to a health plan for payment or health-care operations if you or someone on your behalf has paid for the item or service in full, out of pocket and you ask us not to submit the claim.
• Confidential communications. You may ask us to communicate with you in a particular way or at a particular location (for example, only by mail at a specific address). We will accommodate reasonable requests.
• Inspect and obtain a copy. You may inspect and obtain a copy of your PHI in our designated record set, including in electronic form if we maintain it electronically, and you may direct us to send an electronic copy to a third party you designate. We may charge a reasonable cost-based fee.
• Amend. You may request that we amend PHI we maintain about you. We may deny the request in certain circumstances and will explain in writing.
• Accounting of disclosures. You may request an accounting of certain disclosures we have made in the six years before the request (excluding disclosures for treatment, payment, operations, and a few other categories).
• Paper copy. You may request a paper copy of this notice at any time, even if you have agreed to receive it electronically.
• Breach notification. You have the right to be notified if a breach of your unsecured PHI occurs.
• Revoke authorization. If you have given us a written authorization, you may revoke it in writing at any time, except to the extent we have already acted on it.
• File a complaint. You may file a complaint with us or with the U.S. Department of Health and Human Services without retaliation — see section 8.

To exercise any right, contact our Privacy Officer at the information in section 10.

5. Our duties

We are required by law to maintain the privacy and security of your PHI, provide you with this notice, abide by the terms of the notice currently in effect, notify you of a breach of unsecured PHI, and accommodate certain individual rights as described above.

6. Electronic communications and our website

We may communicate with you by phone, voicemail, text, and email about your prescriptions and care. Unencrypted email and text are not fully secure; we use those channels only with your consent and minimize the information sent.

Our website at aafamilypharmacy.com collects limited non-PHI data (such as analytics and form metadata) under our Website Privacy Policy. We do not permit third-party advertising trackers on pages where PHI is collected.

7. Changes to this notice

We reserve the right to change this notice and make the revised notice effective for PHI we already maintain as well as PHI we receive in the future. We will post the current notice in the pharmacy and on our website and update the effective date.

8. How to file a complaint

If you believe your privacy rights have been violated, you may file a complaint with us by contacting our Privacy Officer (section 10). You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights:

You will not be retaliated against for filing a complaint.

9. Accessibility and language access

A&A Family Pharmacy complies with applicable federal civil-rights laws, including Section 1557 of the Affordable Care Act, and does not discriminate on the basis of race, color, national origin, age, disability, or sex (including pregnancy, sexual orientation, and gender identity). Free aids and services are available, including qualified sign-language interpreters, written information in other formats, qualified interpreters in languages other than English, and information written in other languages. Call (954) 987-5230 to request assistance.

10. Contact information