Your Rights
You can ask to see or get an electronic or paper copy of your health information and prescription information that we maintain about you. Ask us how to do this. We will provide a copy or summary of your health information as required by applicable law. We may charge a reasonable, cost-based fee where permitted by law.
You can ask us to correct health information about you that you believe is incorrect or incomplete. We may deny your request in certain circumstances, but if we do, we will explain the reason in writing as required by law.
You can ask us to contact you in a specific way—for example, at a particular telephone number—or to send information to a different address. We will accommodate reasonable requests.
You can ask us not to use or share certain health information for treatment, payment, or our health care operations. We are not required to agree to every request. If you pay for a health care item or service completely out-of-pocket, you may ask us not to disclose information relating to that item or service to your health insurer for payment or health care operations, unless disclosure is required by law.
You can ask for a list of certain disclosures of your health information made during the six years before your request, subject to applicable exceptions.
You can ask for a paper copy of this Notice at any time, even if you have agreed to receive it electronically.
If you have given someone medical power of attorney or if someone is your legal guardian, that person may exercise your rights and make choices about your health information. We will verify that person’s authority before taking action.
You can complain if you believe we have violated your privacy rights. You may contact Arrow Apothecary using the information provided in this Notice. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.
Your Choices
For certain health information, you can tell us your choices about what we share. You have the right to tell us to:
- Share information with your family members, close friends, or other individuals involved in your care or payment for your care.
- Share information in a disaster-relief situation.
- Share information with an individual you designate to assist with your care or medications.
If you are unable to communicate your preference, we may share information when permitted by law if we believe doing so is in your best interest or is necessary to lessen a serious and imminent threat to health or safety.
Uses and disclosures requiring your written authorization
We will obtain your written authorization before using or disclosing your health information when an authorization is required by law, including for:
- Marketing purposes when authorization is required.
- Sale of your health information when authorization is required.
- Most uses and disclosures of psychotherapy notes.
You may revoke an authorization in writing at any time, except to the extent that we have already relied upon it.
How We May Use and Disclose Your Health Information
Provide pharmacy services and coordinate your care
We may use your health information and share it with other health care professionals involved in your care when necessary to provide pharmacy services, coordinate your treatment, or promote medication safety. For example, we may communicate with your physician or other health care provider about your prescriptions, medications, allergies, drug interactions, or other information necessary to safely provide pharmacy services.
Run our pharmacy
We may use and share your health information as necessary to operate Arrow Apothecary, improve the quality and safety of our pharmacy services, manage prescriptions and medication records, conduct quality-assurance activities, train our workforce, and contact you when necessary.
Bill for your services
We may use and share your health information to bill and receive payment from health plans, insurance companies, pharmacy benefit managers, government programs, or other entities responsible for payment. For example, we may provide information about your prescription to your health plan or pharmacy benefit manager so that a claim can be processed and paid.
How Else Can We Use or Share Your Health Information?
We are allowed or required to share your information in certain circumstances, usually in ways that contribute to public health and safety or as otherwise authorized or required by law.
We may share health information for certain public health purposes, including:
- Preventing or controlling disease.
- Reporting certain adverse reactions to medications.
- Assisting with medication or product recalls.
- Reporting suspected abuse, neglect, or domestic violence when required or permitted by law.
- Preventing or reducing a serious threat to anyone’s health or safety.
We may use or share your information for health research when permitted by applicable law and subject to required privacy protections.
We will share information about you when required to do so by federal, state, or local law. This may include disclosures to the U.S. Department of Health and Human Services when necessary to demonstrate compliance with federal privacy requirements.
We may share health information with organizations involved in organ or tissue donation and transplantation when permitted by law.
We may share health information with a coroner, medical examiner, or funeral director when permitted or required by law.
We may use or share health information:
- For workers’ compensation purposes.
- For law-enforcement purposes when permitted or required by law.
- With health oversight agencies for activities authorized by law.
- For certain specialized government functions, including military, national-security, and presidential-protective-service activities.
We may share health information in response to a court or administrative order, subpoena, or other lawful legal process when the requirements of applicable law are satisfied.
Substance Use Disorder Records
To the extent that Arrow Apothecary maintains substance use disorder patient records that are subject to 42 CFR Part 2, we will comply with the additional confidentiality protections applicable to those records. As required by law, Part 2 records generally will not be used or disclosed for investigations or legal proceedings against you without your written consent or a court order and subpoena, as applicable.
New York State Privacy Protections
Arrow Apothecary is committed to protecting the confidentiality and security of your health information and prescription information in accordance with applicable federal and New York State laws and regulations.
New York State provides additional confidentiality protections for certain types of health information. Where a New York State law provides greater privacy protection than federal law, Arrow Apothecary will comply with the applicable New York State requirements.
In particular, Arrow Apothecary will comply with applicable New York State requirements concerning the confidentiality and disclosure of prescription and patient information.
Certain categories of information may receive additional protection under New York State or federal law. These may include, where applicable, HIV-related information, substance use disorder records, mental health information, genetic information, and other specially protected health information.
Our Responsibilities
Arrow Apothecary is required by law to:
- Maintain the privacy and security of your protected health information.
- Notify you promptly if a breach occurs that may have compromised the privacy or security of your information, as required by law.
- Follow the duties and privacy practices described in this Notice.
- Provide you with a copy of this Notice upon request.
- Not use or disclose your information other than as described in this Notice or otherwise permitted or required by law, unless you provide written authorization.
If you provide us with written authorization, you may revoke that authorization in writing at any time, except to the extent that we have already relied upon it.
Changes to This Notice
Arrow Apothecary reserves the right to change the terms of this Notice. Any revised Notice will apply to all health information that we maintain, as permitted by law. The current version of this Notice will be available upon request at Arrow Apothecary and will be posted on our website.
Questions or Privacy Concerns
If you have questions about this Notice or would like to exercise any of your privacy rights, please contact:
Privacy Officer
Arrow Apothecary 📍883 9th Avenue, New York, NY 10019 📞Phone: 212-956-9111 ☎️Alternate: 212-245-8469 ✉️rx@arrowapothecary.netOffice for Civil Rights
U.S. Department of Health and Human Services 📍200 Independence Avenue, S.W., Washington, D.C. 20201 📞Phone: 1-877-696-6775 🌐Filing a complaint (hhs.gov)Arrow Apothecary will not retaliate against you for filing a complaint.
Effective Date
This Notice of Privacy Practices is effective as of September 28, 2026.