notice of privacy practices (HIPAA)

EpitomeRx , Inc.
Effective Date: April 22, 2026

This Notice explains how EpitomeRx, Inc. (“EpitomeRx,” “we,” “our,” or “us”) may use and share your health information and outlines your rights regarding that information. Please review it carefully.

We understand that your health information is personal. We are committed to protecting your information in accordance with the HIPAA Privacy Rule.

We are required to:

• Protect the privacy and security of your protected health information (PHI)
• Provide you with this Notice explaining our legal duties and practices
• Follow the terms outlined in this Notice

We may use or disclose your health information in the following ways:

Treatment
We use your information to prepare and dispense compounded medications and to communicate with your prescriber regarding your care.
Example: Clarifying a prescription or discussing formulation details with your provider.

Payment
We may use your information to process payment for pharmacy services.
Example: Generating receipts or coordinating reimbursement if applicable.

Healthcare Operations
We use your information to operate our pharmacy and ensure quality care.
Example: Internal quality review, staff training, and compliance activities.

Legal and Regulatory Requirements
We may disclose information when required by law or to regulatory authorities, including the California State Board of Pharmacy.

Public Health and Safety
We may share information to report adverse drug events, product issues, or to prevent serious threats to health or safety.

Business Associates
We may share information with vendors who support our operations (such as pharmacy software or payment processors). These parties are required to safeguard your information.

We will not use or share your information for the following without your written authorization:

• Marketing purposes
• Sale of your information
• Any use beyond what is described in this Notice

You may revoke your authorization at any time in writing.

You have the right to:

Access Your Information
Request a copy of your pharmacy records.

Request Corrections
Ask us to correct inaccurate or incomplete information.

Request Confidential Communication
Ask us to contact you in a specific way or at a specific location.

Request Restrictions
Ask us to limit how we use or share your information. We will consider your request but may not always be able to comply.

Receive an Accounting of Disclosures
Request a list of certain disclosures of your information.

Receive a Copy of This Notice
You may request a paper or electronic copy at any time.

Designate a Representative
You may authorize someone to act on your behalf.

File a Complaint
You may file a complaint if you believe your privacy rights have been violated.

We will:

• Maintain appropriate safeguards to protect your information
• Notify you if a breach occurs that may compromise your information
• Only use or share your information as described in this Notice unless you authorize additional use

We may update this Notice from time to time. The most current version will always be available upon request and on our website.

If you have questions or concerns about this Notice or your privacy rights, please contact:

Privacy Officer
EpitomeRx, Inc.
626-631-6150
contact@epitomerx.com

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

We will make a good-faith effort to obtain your acknowledgment that you have received this Notice.