Privacy Policy

1. Introduction & Applicability

This Privacy Policy explains how MedFront LLC ("MedFront", "we", "our", or "us") collects, uses, protects, and discloses personal information and Protected Health Information (PHI) obtained through our pharmacy facility in Dallas, Texas, our website (medfront.zinsolutionsltd.com), digital prescription refill and transfer forms, and telephone or electronic communications.

By utilizing our pharmacy services, requesting compounded prescriptions, or interacting with our digital tools, you acknowledge the terms set forth in this Privacy Policy.

2. Health Information & HIPAA Notice

Where HIPAA provides greater privacy protection or patient rights than general privacy laws, HIPAA standards strictly apply to your medical and pharmacy records.

3. Information We Collect

We collect information necessary to fulfill pharmaceutical compounding orders, verify patient identity, and ensure safety:

• Personal Identification Data: Full legal name, date of birth, mailing address, delivery address, phone number, and email address.
• Clinical & Prescription Records: Prescription numbers (Rx #), prescribing practitioner's name, NPI, medication history, allergies, dosage formulations, clinical diagnoses, and refill history.
• Billing & Payment Data: Payment card details, billing address, health insurance policy numbers, group numbers, and claim adjudication records. Payment card data is processed through PCI-DSS Level 1 compliant gateways and is never stored in plain text on our servers.
• Digital Usage Information: IP address, device type, browser settings, and session interaction metrics collected via secure cookies to ensure portal functionality and security.

4. How We Use Your Information

MedFront LLC uses collected data strictly for lawful healthcare operations, including:

• Compounding, dispensing, verifying, and packaging customized patient prescriptions.
• Consulting with prescribers and healthcare providers regarding drug interactions, dosage vectors, or ingredient substitutions.
• Processing insurance claims, prior authorizations, and patient co-payments.
• Coordinating local DFW courier delivery or tracked postal shipment within Texas.
• Sending vital service alerts, refill reminders, and order status notifications.
• Complying with regulatory obligations established by the Texas State Board of Pharmacy (TSBP), the Drug Enforcement Administration (DEA), and the FDA.

5. Information Sharing & Non-Sale Commitment

We do not sell, rent, lease, or monetize your personal or health data under any circumstances.

We disclose information only to authorized parties under strict contractual and regulatory safeguards:

• Prescribing Clinicians & Healthcare Facilities: To discuss therapeutic regimens and fulfill prescription requests.
• HIPAA Business Associates: Certified IT infrastructure vendors, secure dispensing software, and merchant processors bound by Business Associate Agreements (BAAs).
• Delivery Couriers: Name, delivery address, and contact phone number necessary to execute secure, chain-of-custody delivery.
• Legal Authorities: When required by court order, subpoena, Texas Prescription Monitoring Program (PMP) mandates, or applicable law.

6. Data Security & Encryption

We maintain robust administrative, physical, and technical safeguards engineered to protect PHI against unauthorized access, loss, or alteration. All web interactions occur over 256-bit Transport Layer Security (TLS) encryption, and digital databases are encrypted at rest with multi-factor authentication and role-based access restrictions.

7. Your Privacy Rights

You have legal rights regarding your health and personal records, including:

• The right to inspect and obtain copies of your pharmacy records.
• The right to request corrections or amendments to inaccurate records.
• The right to request confidential communications via specific channels or alternative addresses.
• The right to receive an accounting of disclosures made outside of treatment, payment, and healthcare operations.