Privacy Policy

Two different bodies of rules apply here

This site and this business handle two distinct categories of information, and they are governed differently. Keeping them separate is the only way this policy makes sense.

• Website information — what you type into a form on this site, and basic technical data your browser sends. Governed by this policy and by California consumer privacy law.
• Protected health information — your prescriptions, your dispensing history, and the records the pharmacy creates in the course of treating you. Governed by HIPAA and by California medical privacy law, and described in our Notice of Privacy Practices, which controls over this policy wherever the two touch.

What this website collects

What you give us. The referral form and the contact form collect what you type into them: names, phone numbers, email addresses, an organization, and whatever you write in the message box. The referral form also collects a patient's name and phone number, which is why it asks you to confirm you have that patient's permission before you send it.

What the host records. This site is served by Netlify. Their infrastructure logs ordinary request data — IP address, user agent, timestamps, the page requested — as any web host does. Form submissions are processed and stored by Netlify Forms and forwarded to the pharmacy.

What we do not run. No advertising trackers, no third-party analytics, no advertising or social media pixels, no session recording, and no cookies set by us. There is nothing on this site building a profile of you and nothing following you to another website.

What we do with it

• Contact you about the referral or question you sent.
• Contact the patient and the law firm named in a referral, to arrange dispensing and obtain the letter of protection.
• Keep a record of the enquiry.
• Detect and block spam submissions.

That is the entire list.

What we never do

We do not sell personal information, and we do not share it for cross-context behavioral advertising — the two things California law defines and gives you the right to opt out of. There is nothing to opt out of because we do not do either.

We do not sell, rent, trade or broker your information or a patient's information to lead buyers, marketing companies, data brokers, or anyone else. Nobody buys referrals from us and we buy none from anyone.

Who we do share it with

• Service providers who run the plumbing — our web host, our email provider, our pharmacy software vendor — only to the extent needed to operate, and under obligations that restrict what they may do with it.
• The law firm you named, where the patient has signed a HIPAA authorization naming that firm, and limited to the injury-related dispensing and billing the case needs.
• Where the law requires it — including controlled-substance dispensing reported to California's CURES database, which is a statutory obligation and not something we or you can waive.

Your California rights

Under California law you may generally ask us to tell you what personal information we hold about you, to delete it, to correct it, and to tell you what we have disclosed and to whom. To make a request, call (323) 653-4070 or email medsonliens@gmail.com. We will not treat you differently for asking.

Two honest limits. First, medical records are governed by HIPAA and California medical privacy law rather than by consumer privacy law, and those regimes have their own rules about retention and deletion — a pharmacy cannot delete a dispensing record on request. Second, we will need to verify who you are before acting on a request about someone's health information.

Text messages

If you text the pharmacy, we will text back. Standard carrier rates apply, we do not run marketing campaigns by SMS, and replying STOP ends messages from us. Please do not send clinical details or prescriptions by text — it is not a secure channel, and a prescription has to arrive from the prescriber by a lawful route.

Retention and security

Form submissions are kept as long as needed for the enquiry and our records. Pharmacy records are retained for the period pharmacy law requires. This site is served over HTTPS and submissions are encrypted in transit. No system is perfectly secure and anyone claiming otherwise is selling something.

Children

This site is not directed to children and we do not knowingly collect information from anyone under 13 through it. Minors are of course treated as patients where a parent or guardian is involved, under the ordinary rules.

Changes and contact

If this policy changes materially, the date at the top changes and the new version is posted here. Questions: (323) 653-4070, medsonliens@gmail.com, or 8314 Wilshire Blvd, Beverly Hills, CA 90211.

Note: this policy is an industry-standard draft written by the business, not by counsel. No attorney has reviewed it.