HIPAA Notice

Effective Date: [January 8, 2026]

Please review this notice carefully

This Notice explains how health information about you may be used and disclosed, how you can access and control certain information, and CarePoint’s responsibilities for protecting it.

This Notice applies to CarePoint Healthcare Solutions LLC, doing business as CarePoint Infusion Pharmacy (“CarePoint”), and to CarePoint workforce members who create, receive, maintain, or transmit protected health information (“PHI”) in connection with CarePoint’s covered healthcare operations.

PHI is information that identifies you, or could reasonably identify you, and relates to your health, healthcare services, or payment for healthcare. We are required by law to protect the privacy and security of PHI, provide you with this Notice, and follow the Notice currently in effect.

When another federal or state law provides greater privacy protection than HIPAA, CarePoint will follow the more protective law when it applies.

Your Rights

You have rights concerning your health information. The sections below explain those rights and some of CarePoint’s responsibilities.

Get an electronic or paper copy of your health information

You may ask to inspect or receive an electronic or paper copy of health information we maintain about you. Ask us how to make the request.

We will generally provide a copy or summary within 30 days of your request. We may charge a reasonable, cost-based fee when permitted by law.

Certain limited information may be excluded from access when permitted by law.

Ask us to correct your health information

You may ask us to correct health information you believe is inaccurate or incomplete.

We may deny a request in some circumstances. If we deny it, we will explain the decision in writing within the time required by law, generally within 60 days.

Request confidential communications

You may ask us to contact you in a particular way or at a particular location, such as using a specific phone number or mailing address.

We will accommodate reasonable requests as required by law.

Ask us to limit certain uses or disclosures

You may ask us not to use or disclose certain health information for treatment, payment, or healthcare operations. We are not always required to agree.

If you pay out of pocket in full for a healthcare item or service, you may ask us not to disclose information about that item or service to your health plan for payment or healthcare operations. We will honor the request when required by law unless another law requires the disclosure.

Get a list of certain disclosures

You may request an accounting of certain disclosures of your health information made during the six years before your request.

The accounting will not include every disclosure. For example, certain disclosures for treatment, payment, healthcare operations, or disclosures you authorized are excluded by law.

One accounting in a 12-month period is provided without charge. A reasonable cost-based fee may apply to additional requests during the same period.

Get a copy of this Notice

You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically. We will provide a paper copy promptly.

Choose someone to act for you

If another person has legal authority to act for you, such as a legal guardian or a person holding an applicable healthcare power of attorney, that person may exercise your rights to the extent permitted by law.

We may verify the person’s authority before taking action.

File a complaint

You may complain if you believe your privacy rights have been violated by contacting CarePoint using the information at the end of this Notice.

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. CarePoint will not retaliate against you for filing a complaint.

Your Choices

For certain information, you may have choices about how we use or disclose it. Tell us your preference and we will follow your instructions as required by law.

  • Family, friends, caregivers, and others involved in your care or payment. Unless you object or a law requires otherwise, we may share information relevant to a person’s involvement in your care or payment for your care. If you cannot tell us your preference, we may act in your best interest or share information to reduce a serious and imminent threat when permitted by law.
  • Disaster relief. We may share limited information with organizations assisting in disaster relief when permitted by law.
  • Marketing and sale of PHI. We will obtain your written authorization before using or disclosing PHI for marketing or sale of PHI when authorization is required by law.
  • Fundraising. CarePoint does not currently use PHI for fundraising communications. If that practice changes, we will provide any notices and opt-out rights required by law.

How We May Use and Disclose Your Health Information

We may use or disclose PHI without your written authorization when HIPAA or another applicable law permits or requires it. Common examples are described below.

Treatment

We may use and disclose PHI to provide, coordinate, or manage pharmacy care. For example, we may communicate with your prescriber, another pharmacist, a hospital, a home infusion team, a nurse, a caregiver involved in your care when appropriate, or another healthcare professional involved in treatment.

Payment

We may use and disclose PHI to bill for and obtain payment for pharmacy services. This may include communications with health plans, insurers, pharmacy benefit managers, patients, guarantors, and billing or payment service providers.

Healthcare Operations

We may use and disclose PHI to operate the pharmacy and improve services. Examples include quality assessment, patient safety, compliance, auditing, training, licensing, accreditation, legal services, business administration, fraud prevention, and related operational activities.

Business Associates

We may disclose PHI to contractors or vendors that perform services for CarePoint when access to PHI is necessary. When required, those parties must agree to protect the information in accordance with applicable law.

Public Health and Safety

We may use or disclose PHI for activities permitted or required by law, such as disease prevention, product recalls, reporting adverse events or product problems, reporting suspected abuse or neglect, and preventing or reducing a serious threat to health or safety.

Health Oversight

We may disclose PHI to health oversight agencies for activities authorized by law, such as audits, inspections, investigations, licensing reviews, accreditation, and disciplinary proceedings.

Complying With Law

We may use or disclose PHI when federal or state law requires it. We may also disclose information to the U.S. Department of Health and Human Services when necessary to demonstrate compliance with federal privacy requirements.

Research

We may use or disclose PHI for research only as permitted by applicable law and subject to required approvals, waivers, or authorizations.

Organ and Tissue Donation

We may disclose PHI to organ procurement organizations or similar entities when permitted by law.

Coroners, Medical Examiners, and Funeral Directors

We may disclose PHI to a coroner, medical examiner, or funeral director when permitted or required by law.

Workers’ Compensation

We may disclose PHI as permitted or required by workers’ compensation laws and similar programs.

Law Enforcement and Government Requests

We may disclose PHI when legally permitted or required for law-enforcement purposes, judicial or administrative proceedings, health oversight, military or veterans’ activities, national security, and other authorized government functions.

Lawsuits and Legal Proceedings

We may disclose PHI in response to a valid court order, administrative order, subpoena, discovery request, or other lawful process as permitted or required by law.

Special Protection for Certain Substance Use Disorder Records

To the extent CarePoint receives or maintains substance use disorder patient records protected by 42 CFR Part 2, we will apply the additional protections required by that law. We will not use or disclose information from those records in civil, criminal, administrative, or legislative investigations or proceedings against you unless you provide the written consent required by law or the use or disclosure is authorized by a court order and subpoena as applicable.

If CarePoint ever uses Part 2 information for fundraising communications, we will provide the advance notice and choice required by law. CarePoint does not currently use PHI for fundraising.

Uses and Disclosures That Generally Require Written Authorization

Uses or disclosures not described in this Notice will generally be made only with your written authorization when authorization is required by law. If you provide an authorization, you may revoke it in writing at any time. Revocation will not affect actions already taken in reliance on the authorization.

Our Responsibilities

  • We are required by law to maintain the privacy and security of PHI.
  • We must provide you with notice of our legal duties and privacy practices and follow the Notice currently in effect.
  • We will notify affected individuals following a breach of unsecured PHI when required by law.
  • We will not use or disclose PHI other than as described in this Notice or otherwise permitted by law unless we obtain written authorization when authorization is required.

Changes to This Notice

We may change the terms of this Notice. Changes may apply to all PHI we maintain, including information created or received before the change. When we make a material change, we will make the revised Notice available on our website, at our pharmacy location, and upon request. The current Notice will show its effective date.

Contact Information

For questions, requests, or complaints related to this Notice, contact:

CarePoint Infusion Pharmacy

CarePoint Healthcare Solutions LLC d/b/a CarePoint Infusion Pharmacy

4732 Sugar Grove Blvd, Suite 101

Stafford, TX 77477

Phone: 832-592-1776

Fax: 832-592-1966

Email: sales@carepointinfusionrx.com

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. Information about filing a complaint is available at https://www.hhs.gov/hipaa/filing-a-complaint/. You may also contact HHS at 200 Independence Avenue, S.W., Washington, D.C. 20201 or 1-877-696-6775.

CarePoint will not retaliate against you for filing a complaint.