Effective date: October 19, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
When this Notice of Privacy Practices (the "Notice") refers to "we," "us" or "our," it means Health Buy Inc, operating as HealthBuy Telehealth, together with the licensed healthcare professionals, the pharmacists and staff of the affiliated pharmacies, and the business associates that provide care, dispense medication and support you through HealthBuy Telehealth, the prescription weight-loss service offered through healthbuy.com. This Notice explains how protected health information ("PHI") that we receive, create or maintain in connection with HealthBuy Telehealth may be used and disclosed, what your rights are, and the duties we have under the Health Insurance Portability and Accountability Act ("HIPAA"). A healthcare professional or pharmacy in our network may also give you its own notice, which applies alongside this one.
We are required by law to maintain the privacy of your PHI, to give you this Notice of our legal duties and privacy practices, to follow the Notice currently in effect, and to notify you if a breach of your unsecured PHI occurs. We reserve the right to change this Notice and to make the revised Notice effective for PHI we already hold. If we make a material change, we will post the revised Notice on healthbuy.com and make a copy available on request.
This Notice does not cover the retail supplements, skin care and personal care products sold on healthbuy.com. Information collected when you shop is covered by our Privacy Policy.
I. How we may use and disclose your PHI
We may use and disclose your PHI for treatment, payment and health care operations without your written authorization. We may also use or disclose PHI for other purposes that the law permits or requires. Any use or disclosure not described in this Notice will be made only with your written authorization, which you may revoke in writing at any time, except to the extent we have already relied on it.
A. Treatment
We may use and disclose your PHI so that the licensed healthcare professionals, pharmacies and support staff involved in your care can review your intake, decide whether treatment is appropriate, prescribe and dispense medication, ship it to you, and follow up with you. For example, your intake responses are made available to the provider who reviews your request, and your prescription is sent to the pharmacy that fills it.
B. Payment
We may use and disclose your PHI to bill and collect payment for the services and medication you receive, including processing your card payment, confirming your order and handling refunds or disputes.
C. Health care operations
We may use and disclose your PHI to run HealthBuy Telehealth, for example for quality review, training, compliance audits, customer support, fraud prevention and general administration.
D. Refill reminders, treatment alternatives and health-related services
We may contact you to remind you about a refill or renewal, to tell you about treatment options or alternatives, or to tell you about health-related services that may be of interest to you. You may opt out of these communications at any time by contacting us.
E. Family members, relatives and close friends
Unless you object, we may disclose PHI that is directly relevant to a person's involvement in your care or payment for your care to a family member, relative, close friend or other person you identify. If you are not present or able to agree or object, we will use professional judgment to decide whether the disclosure is in your best interest and will share only what is relevant.
F. Other permitted and required uses and disclosures
We may use or disclose your PHI without your authorization and without offering you the chance to agree or object in the following situations, each only as permitted by law:
- as required by federal, state or local law;
- to a public health authority for activities such as preventing or controlling disease, reporting adverse reactions to medications or problems with products, and reporting abuse or neglect;
- to a health oversight agency for audits, inspections, investigations and licensing activities authorized by law;
- in judicial and administrative proceedings, in response to a court order, subpoena, discovery request or other lawful process, provided that efforts have been made to tell you about the request or to obtain a protective order;
- to law enforcement officials for purposes the law allows, such as responding to a warrant or court order, identifying a suspect, fugitive, missing person or witness, or reporting a crime;
- to a coroner, medical examiner or funeral director as necessary to carry out their duties;
- to organ procurement organizations to facilitate donation and transplantation;
- for research, when an institutional review board or privacy board has approved the research and appropriate safeguards are in place;
- to prevent or lessen a serious and imminent threat to the health or safety of a person or the public;
- for specialized government functions, including military and veterans activities, national security and intelligence activities, protective services for the President, and correctional institutions or law enforcement custody; and
- to comply with workers' compensation and similar laws.
G. Uses and disclosures that require your written authorization
We will obtain your written authorization before using or disclosing psychotherapy notes, using your PHI for marketing purposes, or selling your PHI. We do not sell PHI, and we do not use PHI for fundraising.
II. Your rights regarding your PHI
A. Right to request restrictions
You have the right to ask us to restrict how we use or disclose your PHI for treatment, payment or health care operations, or to limit what we share with people involved in your care. We are not required to agree to a requested restriction, except that we must agree not to disclose PHI to a health plan for payment or operations purposes when you have paid for the item or service in full out of pocket and the disclosure is not otherwise required by law. Your written request must say what information you want restricted, whether you want to limit use, disclosure or both, and to whom the restriction applies.
B. Right to confidential communications
You have the right to ask us to communicate with you about your PHI in a particular way or at a particular location, for example by email only or at an address other than your home. Send your request in writing to the Privacy Officer at the address below. We will accommodate all reasonable requests.
C. Right to inspect and copy
You have the right to inspect and obtain a copy of the PHI we maintain about you, including an electronic copy where we hold the information electronically, with limited exceptions permitted by HIPAA. Where your clinical record is maintained by the healthcare professional or pharmacy that treated you, we will tell you how to contact them. We may charge a reasonable, cost-based fee for copies and postage. If we deny your request, we will tell you why in writing and explain how you can ask for the denial to be reviewed.
D. Right to an accounting of disclosures
You have the right to receive a list of certain disclosures of your PHI made by us or our business associates during the six years before your request, other than disclosures for treatment, payment or health care operations and certain other exceptions. The first accounting in any twelve-month period is free; we may charge a reasonable, cost-based fee for additional requests, and we will tell you the cost before we proceed so you can withdraw or modify your request.
E. Right to request an amendment
If you believe PHI we hold about you is incorrect or incomplete, you may ask us in writing to amend it for as long as we maintain the information, and you must give a reason for the request. We may deny the request if, for example, the information was not created by us, is not part of the records we keep, or is accurate and complete. If we deny the request, you may file a written statement of disagreement, we may respond to it, and you may ask that your request, our denial, your statement and our response be included with any future disclosure of the information.
F. Right to a paper copy of this Notice
You have the right to receive a paper copy of this Notice at any time, even if you agreed to receive it electronically. Request one in writing from the Privacy Officer at the address below.
G. Right to be notified of a breach
You have the right to be notified if a breach of your unsecured PHI occurs.
H. Right to opt out of fundraising and marketing
Your PHI will not be used for fundraising or sold, and it will not be used for marketing without your written authorization.
III. Questions, requests and complaints
To exercise any of the rights in this Notice, or if you have questions about it, contact our Privacy Officer:
Privacy Officer
Health Buy Inc (HealthBuy)
1309 Coffeen Avenue, Ste 1200
Sheridan, WY 82801
United States
Email: support@healthbuy.com
Phone: +1 (302) 684-6186, Monday to Friday, 6:30 a.m. to 5:00 p.m. Pacific Time
If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer at the address above or with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue SW, Washington, DC 20201, or online at hhs.gov/ocr/complaints. We will not retaliate against you for filing a complaint.
