HIPAA & Privacy

 THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective Date: February 1, 2026

Gold Country Compounding Pharmacy (“we,” “us,” or “our”) is required by law to maintain the privacy of your protected health information (“PHI”), provide you this Notice of our legal duties and privacy practices, and notify you following a breach of unsecured PHI without unreasonable delay and no later than 60 days after discovery.

We are required to follow the terms of this Notice currently in effect.

SECTION A — USES AND DISCLOSURES OF YOUR HEALTH INFORMATION

We may use and disclose your PHI for the following purposes:

1. Treatment
We use and disclose your PHI to provide, coordinate, or manage your health care and related services. This includes sharing information with physicians, nurses, hospitals, or other providers involved in your care. We may also contact you about:

• refill reminders
   
• treatment alternatives
   
• medication adherence programs
   
• health-related benefits or services

 2. Payment

We may use and disclose your PHI to obtain payment for services provided to you. This may include:
 

• submitting claims to insurance or third parties
   
• obtaining prior authorization
   
• determining eligibility or coverage
   
• resolving claim disputes

 3. Health Care Operations

We may use and disclose PHI for operations necessary to run our pharmacy, including:
quality assurance activities

 

• staff training
   
• accreditation and licensing activities
   
• compliance programs
   
• auditing and business management

 4. Individuals Involved in Your Care

Using professional judgment, we may disclose relevant PHI to a family member, friend, or other person you identify as involved in your care or payment for care. This may include allowing someone to pick up prescriptions or medical supplies on your behalf.

5. Business Associates

We contract with third parties (“Business Associates”) to perform services for us such as claims processing or payment reconciliation. These parties are required by law and contract to safeguard your PHI.

6. Uses and Disclosures Required or Permitted by Law

We may disclose your PHI when required or permitted by federal or state law, including:
 

• public health reporting
   
• FDA safety reporting and recalls
   
• health oversight audits or inspections
   
• court orders or legal processes
   
• law enforcement requests
   
• workers’ compensation programs
   
• abuse or neglect reporting
   
• correctional institution disclosures
   
• national security or protective services activities
   
• coroner or medical examiner investigations
   
• organ donation purposes
   
• serious threats to health or safety
   
• military command authorities

 7. Emergencies or Disaster Relief

If you are unable to communicate, we may disclose PHI when necessary to lessen a serious and imminent threat or assist disaster relief efforts.

8. Fundraising Communications

We may contact you for fundraising purposes using limited demographic information. You have the right to opt out of such communications. Instructions for opting out will be included in each message.

9. Uses Requiring Written Authorization

We must obtain your written authorization for:
 

• most marketing uses of PHI involving financial remuneration
   
• sale of PHI
   
• use or disclosure of psychotherapy notes
   
• any uses not otherwise described in this Notice
  

You may revoke authorization in writing at any time, except to the extent we have already acted on it.

10. State Law

California law may provide additional privacy protections. When state law is more protective than federal law, we will follow the more protective law.

Certain California laws allow minors to consent to specific health services. When permitted by law, we may limit disclosures to parents or guardians.

SECTION B — YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

You have the following rights:

1. Right to Request Restrictions

You may request limits on how we use or disclose your PHI. We are not required to agree except when:  You request restriction of disclosure to a health plan for payment or operations purposes and the PHI relates solely to a service you paid for in full out-of-pocket.  Requests must be submitted in writing.

2. Right to Confidential Communications

You may request communications by alternative means or locations (for example, mailing to a different address). We will accommodate reasonable requests.

3. Right to Access Your Records

You have the right to inspect and obtain a copy of PHI maintained in your designated record set, including prescription and billing records.

You may:
 

• request electronic copies if records are maintained electronically
   
• request records in your preferred format if readily producible
   
• direct us to send copies to a third party you designate
   
• Reasonable cost-based fees may apply.
   
• We may deny access in limited circumstances. If denied, you may request a review.
   

 4. Right to Amend Records

If you believe your PHI is incorrect or incomplete, you may request an amendment. Requests must be in writing and include a reason.  If denied, you may submit a written statement of disagreement.

5. Right to Accounting of Disclosures

You may request a list of disclosures not related to treatment, payment, or operations for up to six years prior to your request.
 

• First request in a 12-month period: free
   
• Additional requests: reasonable fee
   

 6. Right to a Paper Copy of This Notice

You may request a paper copy at any time, even if you agreed to receive it electronically.

SECTION C — OUR DUTIES

We are required to:
 

• maintain privacy of your PHI
   
• provide this Notice
   
• abide by its terms
   
• notify you of breaches
   

We reserve the right to revise this Notice and make the new version effective for all PHI we maintain. Updated notices will be available upon request and posted in our pharmacy and on our website if applicable.

SECTION D — QUESTIONS OR COMPLAINTS

If you have questions, requests, or complaints, contact:

Privacy Officer
Janell Jones, PharmD
Gold Country Compounding Pharmacy
11990 Heritage Oak Place, Suite 2C
Auburn, CA 95603
Phone: (530) 368-2103

You may file a complaint with us or with the U.S. Department of Health and Human Services. You will not be retaliated against for filing a complaint.

File with HHS Office for Civil Rights:
U.S. Department of Health and Human Services
200 Independence Avenue SW
Washington, D.C. 20201
Complaint Portal: https://ocrportal.hhs.gov

SECTION E — ELECTRONIC COMMUNICATIONS

If you communicate with us by email or text message, you acknowledge there may be some risk that information could be accessed by unauthorized persons. You may request alternative confidential communication methods at any time.

Acknowledgment of Receipt
You may be asked to sign an acknowledgment that you received this Notice.

Version: GCC-NPP-2026-1.0