Privacy Policy

GenoGenRx, LLC  |  Last Updated: April 2, 2026

1. Scope of This Policy

This Privacy Policy applies to the website www.genogenrx.com (the "Site") and to the pharmacy services provided by GenoGenRx, LLC ("GenoGenRx," "we," "us," or "our"), a 503A compounding pharmacy located at 1200 S. Rogers Circle, Suite 11, Boca Raton, FL 33487. This policy describes how we collect, use, disclose, and protect both personal information gathered through the Site and protected health information (PHI) related to the pharmacy services we provide.

This Privacy Policy works in conjunction with our HIPAA Notice of Privacy Practices, which provides additional detail about how we use and disclose PHI and the rights you have regarding your health information.

2. Information We Collect

Information You Provide

We may collect personal information that you voluntarily submit through the Site or in connection with our pharmacy services, including:

• Name, email address, phone number, and mailing address
• Information submitted through contact forms or provider onboarding forms
• Professional licensing information (for healthcare providers establishing accounts)
• Prescription information, healthcare provider details, and clinical information necessary for compounding and dispensing services
• Insurance or payment information related to pharmacy transactions

Information Collected Automatically

When you visit the Site, we may automatically collect limited technical information, including:

• IP address and approximate geographic location
• Browser type and version
• Device information and operating system
• Pages visited, referring URLs, and website usage data

This technical data is collected to improve website functionality, analyze usage trends, and ensure security. It is not linked to your health information.

3. Protected Health Information (PHI)

As a HIPAA-covered entity, GenoGenRx collects, creates, maintains, and transmits protected health information in the course of providing compounding pharmacy services. PHI includes individually identifiable health information related to your past, present, or future physical or mental health conditions; the provision of healthcare services to you; and past, present, or future payment for such services.

Examples of PHI we may handle include:

• Prescription records and compounding formulation details
• Patient demographic information associated with prescriptions
• Prescriber information and clinical notes provided with prescription orders
• Billing and payment records related to pharmacy services
• Communications between GenoGenRx and prescribing providers regarding patient care

PHI is handled in strict accordance with HIPAA, the HITECH Act, and applicable Florida law. Our use and disclosure of PHI is governed by our HIPAA Notice of Privacy Practices.

4. How We Use Information

General Personal Information

We may use the personal information you provide to:

• Respond to inquiries and requests submitted through the Site
• Process provider account applications and verify professional credentials
• Improve website functionality and user experience
• Send communications you have opted into, such as service updates
• Comply with legal and regulatory obligations

Protected Health Information

We use and disclose PHI only as permitted or required by law, including for:

• Treatment: To compound, dispense, and deliver prescribed medications and to coordinate care with your prescribing provider
• Payment: To bill for pharmacy services and to work with insurers or third-party payers when applicable
• Healthcare Operations: To support quality assessment, staff training, compliance auditing, and other internal operations necessary to run our pharmacy

PHI may also be used or disclosed as required by law, for public health activities, to avert a serious threat to health or safety, and in other limited circumstances described in our HIPAA Notice of Privacy Practices.

5. Sharing of Information

We do not sell your personal information or your PHI.

We may share information with third parties only in the following circumstances:

• Business Associates: We may share PHI with trusted service providers who perform functions on our behalf (such as technology vendors, shipping and delivery services, or billing services). All business associates are required to sign a Business Associate Agreement (BAA) and are contractually obligated to safeguard PHI in accordance with HIPAA.
• Healthcare Providers: We may share PHI with your prescribing provider or other healthcare professionals involved in your treatment, as permitted by HIPAA.
• As Required by Law: We may disclose information when required to do so by applicable federal, state, or local law, including in response to court orders, subpoenas, or regulatory investigations.
• Website Service Providers: We may share non-PHI technical data (such as website analytics) with third-party providers that assist with website hosting, analytics, and functionality. These providers do not receive PHI.

We do not share mobile contact information with third parties or affiliates for marketing or promotional purposes. Information may be shared with subcontractors in support services, such as customer service. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

6. HIPAA Compliance & Safeguards

GenoGenRx has implemented a comprehensive HIPAA compliance program that includes the following elements:

• Privacy Officer: GenoGenRx has designated the company's Director of Pharmacy as its Privacy Officer, responsible for overseeing compliance with HIPAA privacy requirements, handling privacy-related complaints, and serving as the point of contact for privacy inquiries.
• Administrative Safeguards: Written privacy and security policies and procedures; workforce training on HIPAA requirements; sanctions for policy violations; regular risk assessments.
• Technical Safeguards: Access controls and user authentication for electronic systems that store or transmit PHI (ePHI); encryption of ePHI in transit and at rest where required; audit logging and monitoring of system access.
• Physical Safeguards: Facility access controls; workstation security; proper disposal of media and documents containing PHI.
• Business Associate Agreements: Written agreements with all third-party vendors and service providers who access, store, or transmit PHI on our behalf, requiring them to comply with HIPAA standards.
• Minimum Necessary Standard: We limit the use, disclosure, and request of PHI to the minimum amount necessary to accomplish the intended purpose, except for treatment purposes.

7. Florida State Privacy Law

In addition to HIPAA, GenoGenRx complies with Florida state laws governing the confidentiality of medical records and health information, including:

• Florida Statutes §456.057 — Establishes ownership and control requirements for patient records, requires written authorization before medical records may be disclosed to third parties (with limited exceptions), and prohibits the use of patient information for solicitation or marketing without specific written release.
• Florida Statutes §465.016 — Sets standards of conduct for pharmacies and pharmacists, including obligations related to patient record confidentiality.
• Florida Constitution, Article I, §23 — Provides a constitutional right to privacy, which Florida courts have recognized as applying to medical records.

Where Florida law imposes stricter requirements than HIPAA, GenoGenRx follows the more protective standard. For example, under Florida law, medical records generally may not be disclosed without written patient authorization except in limited circumstances (such as pursuant to a court-issued subpoena), even where HIPAA might otherwise permit a broader disclosure.

8. Breach Notification

In the event of a breach of unsecured PHI, GenoGenRx will comply with the HIPAA Breach Notification Rule (45 CFR §§164.400–414) and the HITECH Act, as well as any applicable Florida breach notification requirements (Florida Statutes §501.171). Specifically:

• Affected individuals will be notified without unreasonable delay and no later than 60 days from discovery of the breach.
• If a breach affects 500 or more individuals, the U.S. Department of Health and Human Services (HHS) and prominent media outlets serving the affected area will be notified simultaneously.
• Breaches affecting fewer than 500 individuals will be logged and reported to HHS annually.

9. Cookies & Tracking Technologies

Our website may use cookies and similar technologies to enhance user experience, understand how visitors interact with the Site, and analyze website performance. Cookies are small data files stored on your device by your web browser.

We may use the following types of cookies:

• Essential cookies that enable core website functionality
• Analytics cookies that help us understand how visitors use the Site

Cookie data is not linked to your PHI. You may disable cookies through your browser settings, though doing so may affect Site functionality.

10. Children's Privacy

This Site is not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13 through the Site. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

11. Your Privacy Rights

HIPAA Rights

With respect to your PHI, you have the following rights under HIPAA:

• Right to Access: You may request copies of your PHI that we maintain.
• Right to Amend: You may request that we amend your PHI if you believe it is incorrect or incomplete.
• Right to an Accounting of Disclosures: You may request a list of certain disclosures of your PHI that we have made.
• Right to Request Restrictions: You may request restrictions on certain uses and disclosures of your PHI.
• Right to Confidential Communications: You may request that we communicate with you about your health information in a particular way or at a particular location.
• Right to a Paper Copy of the Notice: You may request a paper copy of our HIPAA Notice of Privacy Practices at any time.
• Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

Florida Privacy Rights

Under Florida law, you have the right to request access to your medical records and to receive copies. You also have the right to receive a copy of your medical records within a reasonable time after making a written request.

General Privacy Rights

Depending on your state of residence, you may have additional rights regarding personal information (distinct from PHI), including the right to request access to, correction of, or deletion of personal data, where applicable by law.

12. Changes to This Privacy Policy

GenoGenRx may update this Privacy Policy periodically to reflect changes in our practices, applicable laws, or regulatory requirements. When we make changes, the updated policy will be posted on this page with a revised effective date. We encourage you to review this page periodically. Material changes that affect the handling of PHI will be reflected in an updated HIPAA Notice of Privacy Practices.

13. Contact Information

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is handled, please contact:

If you believe your privacy rights have been violated, you may also file a complaint with: