notice of privacy practices (npp) & SMS Opt-In Disclosure

Effective Date: 02/02/2026

At ACRx Specialty Pharmacy, we are committed to protecting your privacy and maintaining the confidentiality of your Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act and applicable Nevada state privacy laws.

Our Legal Duties

We are required by law to maintain the privacy of your protected health information, to provide you with this Notice describing our legal duties and privacy practices, and to notify you in the event of a breach of unsecured PHI.

We are also required to follow the terms of this Notice currently in effect and to provide you with a copy upon request.

Third-Party Sharing

We respect your privacy. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
All the above categories exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties.

SMS Opt-In Disclosure

By providing your mobile number and opting in, you consent to receive SMS text messages from ACRx Specialty Pharmacy regarding prescription reminders, refill alerts, health updates, and other information related to your care. Message frequency may vary. Standard message and data rates may apply.

Opt-Out: You may opt out of receiving SMS messages at any time by replying “STOP.” For assistance, reply “HELP” or contact us directly at the number below.

Privacy: Your consent, opt-in data, and mobile information will never be shared with third parties or affiliates for marketing or promotional purposes.

Your Rights Under HIPAA

When it comes to your health information, you have certain rights. This section explains those rights and our responsibilities.

You have the right to:

• Access your medical records (paper or electronic).
• Request amendments if you believe your records are inaccurate or incomplete.
• Request confidential communications (e.g., specify contact method or address).
• Request limitations on how your information is used or shared for treatment, payment, or operations.
• Restrict disclosure to your health insurer when you pay out-of-pocket in full.
• Receive an accounting of disclosures of your PHI.
• Request a paper copy of this Notice at any time, even if you agreed to electronic delivery.
• Choose someone to act for you if you have a legal guardian or medical power of attorney. We will verify that person’s authority before taking action.
• File a complaint if you believe your rights have been violated.

You may exercise these rights by submitting a written request to our Privacy Officer at the contact information listed below.

Your Choices

You have choices about how we use and share certain information.

In these cases, you have both the right and choice to tell us to:

• Share information with family members, close friends, or others involved in your care or payment.
• Share information for disaster-relief purposes.

If you have a clear preference for how we share your information, please tell us. We will follow your instructions whenever possible.

We will never use or share your information without your written authorization for:

• Marketing purposes
• The sale of your information
• Most uses of psychotherapy notes

How We Use and Disclose Your Information

We may use and disclose your PHI for the following purposes:

Treatment: Sharing information with other healthcare providers to ensure you receive appropriate care.
Payment: Processing payment for services and billing.
Healthcare Operations: Quality assessment, staff training, licensing, and business planning.

We may also use or share your health information in other situations as permitted or required by law, including:

• Public Health and Safety: Preventing disease, reporting adverse reactions or suspected abuse, and helping with recalls.
• Research: Using or sharing data for approved health research.
• Compliance with the Law: Responding to lawful requests by U.S. Department of Health and Human Services Office for Civil Rights or other agencies.
• Organ and Tissue Donation: Responding to organ-donation requests.
• Coroners and Funeral Directors: Assisting with identification or other lawful duties.
• Workers’ Compensation, Law Enforcement, and Government Requests: Addressing claims, investigations, and other lawful activities.
• Lawsuits and Legal Actions: Responding to court orders, subpoenas, or administrative proceedings.

To the extent we maintain any substance-use-disorder records, we comply with federal confidentiality rules under 42 CFR Part 2. We will not share those records for legal or investigative purposes without your written consent or a valid court order and subpoena.

Other disclosures will only be made with your written authorization unless otherwise permitted or required by law.

Breach Notification

If a breach of unsecured PHI occurs, we will notify you as required by HIPAA. Notifications will include:

• A brief description of what happened
• The types of PHI involved
• Steps you should take to protect yourself
• What we are doing to investigate and mitigate the breach

Safeguards We Use

We maintain administrative, physical, and technical safeguards to protect your health information:

• Administrative: Staff training and access controls
• Physical: Secure facilities and locked storage
• Technical: Encryption, secure email, and password-protected systems

We also comply with the Minimum Necessary Standard, using only the least amount of PHI needed to perform a task.

Our Responsibilities

• We are required by law to maintain the privacy and security of your protected health information.
• We will notify you promptly if a breach occurs that may have compromised your information.
• We must follow the duties and privacy practices described in this Notice and provide you a copy upon request.
• We will not use or share your information other than as described here unless you give us written permission. You may revoke permission in writing at any time.
• We will not retaliate against you for filing a complaint.

For more information or to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights, visit https://www.hhs.gov/hipaa/filing-a-complaint/index.html or call 1-877-696-6775.

State Law: Nevada Consumer Health Data Privacy Act

In addition to the federal HIPAA privacy protections described above, Nevada has enacted the Nevada Consumer Health Data Privacy Law, which provides additional safeguards for health-related information collected from Nevada residents.

Under this law, Nevada residents may have additional rights concerning the collection, use, and sharing of consumer health data, including the ability to provide or withdraw consent for specific uses or disclosures. Where applicable, ACRx Specialty Pharmacy will comply with these state-law requirements. Information already protected under HIPAA may be exempt from certain provisions of this law.

Nevada law may also provide additional privacy protections for certain types of health information, including mental-health, substance-use, and HIV-related records. We will comply with those state-specific requirements where applicable.

Changes to This Notice

We may change the terms of this Notice, and the changes will apply to all information we have about you. The revised Notice will be available upon request, in our office, and on our website.

Contact Information & Privacy Officer

If you have questions, requests, or concerns about this Notice, your privacy rights, or SMS communications, please contact our Privacy Officer:

Cody Schuster
Privacy Officer
ACRx Specialty Pharmacy
Phone: (702) 800-6448
Address: 8440 W. Lake Mead Blvd, Las Vegas, NV 89128

Service Area Notice

In compliance with state pharmacy regulations, ACRx Specialty Pharmacy is authorized to dispense medications only to patients residing within the state of Nevada.

‍