Effective Date: 2/12/2004

Custom Formulary ("Custom Formulary," "we," "us," or "our") is a U.S.-based online pharmacy that operates in compliance with applicable federal laws and the privacy and data protection laws of all U.S. states in which we are licensed or provide services. We are committed to protecting the privacy, confidentiality, and security of your personal and health information.

This Privacy Policy explains how we collect, use, disclose, and protect information obtained through our website, pharmacy services, communications, and related online services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read and understand this Privacy Policy.

1. Information We Collect

We collect information necessary to operate an online pharmacy, comply with legal obligations, and provide safe and effective services.

a. Personal Information

Full name, date of birth, and gender

Shipping and billing address

Email address and telephone number

Account login credentials and authentication information

b. Health and Prescription Information (Protected Health Information – PHI)

Prescription and medication information

Health information provided by you, your healthcare provider, or your insurer

Pharmacy records required by federal and state law

c. Insurance and Payment Information

Insurance details, if applicable

Payment information processed through PCI-compliant third-party payment processors

d. Technical and Usage Information

IP address, browser type, device identifiers, and operating system

Website usage data, cookies, and similar technologies

2. How We Use Your Information

We use collected information for purposes that include:

Dispensing prescriptions and providing pharmacy services

Verifying prescriptions, identity, and eligibility

Processing payments and insurance claims

Shipping medications and custom formulations

Communicating regarding orders, refills, service updates, and customer support

Maintaining required pharmacy records

Ensuring security, fraud prevention, and quality assurance

Complying with federal and state laws, regulations, and accreditation standards

3. HIPAA and State Health Privacy Laws

Custom Formulary is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). We protect your Protected Health Information (PHI) in accordance with HIPAA, the HITECH Act, and applicable state health privacy laws.

We use and disclose PHI only as permitted or required for treatment, payment, healthcare operations, or as otherwise authorized by law. Where state law provides greater privacy protections than federal law, we comply with the more stringent standard.

You may receive a separate Notice of Privacy Practices that further explains our HIPAA-related obligations and your rights regarding PHI.

4. Information Sharing and Disclosure

We do not sell your personal or health information. We disclose information only as permitted by law, including:

Healthcare Providers: To coordinate care, verify prescriptions, and ensure patient safety

Service Providers: Vendors that perform services on our behalf (e.g., shipping, payment processing, IT, customer support) under contractual confidentiality and security obligations

Regulatory and Legal Authorities: As required by federal or state law, regulation, licensing requirements, audits, or court orders

Business Transactions: In the event of a merger, acquisition, or sale of assets, subject to applicable privacy protections

5. Cookies and Online Tracking

We use cookies and similar technologies to:

Operate and secure our website

Enable essential functionality

Analyze website performance and usage

You may control cookies through your browser settings. Disabling cookies may limit certain features of the Services.

6. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal and health information against unauthorized access, loss, misuse, or disclosure. These safeguards include encryption, access controls, monitoring, and employee training.

No system can be guaranteed to be 100% secure; however, we implement protections consistent with federal and state pharmacy, healthcare, and data security requirements.

7. Data Retention

We retain personal and health information for the period required by applicable federal and state laws, pharmacy regulations, and business needs. Retention periods may vary based on record type and jurisdiction.

8. Your Privacy Rights (U.S. Residents)

Depending on your state of residence and applicable law, you may have the right to:

Access and receive a copy of your personal information

Request correction of inaccurate or incomplete information

Request restrictions on certain uses or disclosures

Request deletion of certain personal information, where permitted by law

Opt out of certain non-essential communications

We will not discriminate against you for exercising your privacy rights.

Requests may be subject to identity verification and legal limitations, particularly where pharmacy or healthcare laws require record retention.

9. State-Specific Privacy Rights

Custom Formulary complies with applicable state privacy laws, including but not limited to:

California Consumer Privacy Act (CCPA/CPRA)

Virginia Consumer Data Protection Act (VCDPA)

Colorado Privacy Act (CPA)

Connecticut Data Privacy Act (CTDPA)

Utah Consumer Privacy Act (UCPA)

We do not sell personal information or share it for targeted advertising. State-specific rights requests may be submitted using the contact information below.

10. Children’s Privacy

Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children except as permitted under applicable healthcare laws and with appropriate parental or guardian involvement.

11. Third-Party Websites

Our Services may contain links to third-party websites. We are not responsible for the privacy practices or content of those third parties, and their policies govern any information you provide to them.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect legal, regulatory, or operational changes. Updates will be posted on this page with a revised effective date. Continued use of the Services constitutes acceptance of the updated policy.

13. Contact Information

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

Custom Formulary
1341 Mockingbird Ln. Suite. 304W
Dallas, TX 75247
Phone: 310-453-2335  This Privacy Policy is intended to comply with applicable U.S. federal and state privacy laws. It does not constitute legal advice. Custom Formulary should consult legal counsel to ensure ongoing compliance with evolving state and federal requirements.