HIPAA Privacy Policy

Vytal Notice of Privacy Practices

Last Updated: Feb 12th, 2021


This Notice applies to Vytal Pharmacy and it affiliated companies, including its subsidiaries. If after reading this Notice, you have any questions, please contact the Vytal Pharmacy Privacy Office at privacy@vytal.care or 2503 E 54th St. N, STE 101 SF, SD 57104.

Vytal Pharmacy is required by the Health Insurance Portability and Accountability Act (“HIPAA”) to maintain the privacy of Protected Health Information (“PHI”). PHI is the information we receive to provide services to you that identifies you or could be used to identify you and relates to your past, present, or future physical or mental health, treatment, or your payment for treatment. PHI also includes your medication history, medical conditions, health insurance information, and other information we use to provide you your prescriptions.

Vytal Pharmacy is also required by HIPAA to provide you with this Notice, which describes how we may use and disclose PHI to carry out treatment, payment, or health care operations and for other specified purposes that are permitted or required by law. The Notice also describes your rights with respect to your PHI, and how you can get access to this information.

By using Vytal Pharmacy services, you are consenting to the practices described in this Notice.

Vytal Pharmacy maintains physical, electronic, and procedural safeguards that meet state and federal regulations. Access to PHI is limited only to people that need the information for authorized pharmacy purposes.


The following categories describe the typical ways that we may use and disclose your PHI with your written authorization:

  • For Treatment – PHI obtained by Vytal Pharmacy will be used to dispense your prescription medications and provide the treatment and services you receive. We may disclose PHI about you to doctors, nurses, or other health care providers. We may also seek PHI about you from other health care providers and health information networks. For example, in order to fill your prescription we may need to request your medical records from your doctor or disclose PHI to your doctor.
  • Family Members – Except in the case of minors (described below), we will not share your PHI with a family member unless you have provided consent to us to do so. Please note, however, we may exercise our professional judgment to determine whether sharing your information with one or more of these individuals is in your best interest.
  • For Payment – We may use or disclose your PHI in order to bill and collect payment for products or services we provided to you. For example, we may contact your insurance company, health plan, or another third-party to obtain payment for your prescriptions.

We may also use and disclose your Protected Health Information without your written authorization as follows:

  • For Treatment – We may disclose PHI about you to doctors, nurses, or other health care providers as long as you have an existing relationship with them and they have informed you of their own privacy practices.
  • Business Associates – We may contract with third parties to perform certain services for us, such as accounting services, consulting services, or information technology services. In some cases, these third-party service providers, called Business Associates, may need to access your PHI to perform services for us. They are required by law and contract to protect your PHI.
  • Disclosures to Parents or Legal Guardians – We may release a minor’s PHI to their parents or legal guardians consistent with applicable laws. For example, parents may order prescriptions on behalf of a minor child and access the child’s prescription history.
  • For Health Care Operations -We may use and disclose your PHI for our day-to-day health care operations. For example, we may use your PHI to monitor the performance of the staff and pharmacists providing treatment and services to our customers or to improve the quality and the effectiveness of the health care services we provide.
  • To Avert a Serious Threat to Health or Safety – We may use and disclose your PHI to prevent a serious threat to your health and safety or the health and safety of the public or another person, such as:
    • Preventing disease or telling people when they may have been exposed to or may be at risk of contracting a disease.
    • Reporting reactions to medications, problems with products, or product recalls.
    • Reporting information to your employer if we provide health care services to you at the request of your employer.
    • Providing proof of immunization to your school if you are a student or prospective student at the school.
    • Notifying a government authority if we reasonably believe you are a victim of abuse or neglect. We will only disclose this type of information to the extent required by law, if you agree to the disclosure, or if we believe it is necessary to prevent serious harm to you or someone else.
  • Health Oversight Activities – We may disclose PHI to a health oversight agency for activities authorized by law. These oversight activities may include audits, investigations, inspections, and licensure. These activities help the government monitor the health care system, government programs, and compliance with civil rights laws.
  • Judicial and Administrative Proceedings – If you are involved in a lawsuit or a dispute, we may disclose PHI about you in response to a court or administrative order. We may also disclose PHI about you in response to a subpoena, discovery request, or other lawful process by someone else involved in the dispute, but only if efforts have been made to tell you about the request or to obtain an order protecting the information requested.
  • As Required by Law/Law Enforcement – We will disclose your PHI when required to do so by applicable law. We may also disclose your PHI to the police or other law enforcement officials as required by law or in compliance with a court order.
  • Merger, Sale or Acquisition – We may disclose your PHI in the event of a merger, sale or acquisition involving all or part of Vytal Pharmacy, or as part of a corporate reorganization or stock sale or other change in corporate control.

Any other uses and disclosures of PHI that are not mentioned above will be made only with your written authorization, including the use or disclosure of psychotherapy notes (to the extent we have any), use or disclosure of PHI for marketing, and for the sale of PHI (except in limited circumstances where applicable law allows such uses or disclosure without your authorization). If you provide us authorization to use or disclose your PHI, you may revoke that authorization in writing at any time by sending a revocation request to the address listed at the end of this Notice. If you revoke your authorization, we will no longer use or disclose PHI about you for the reasons covered by your written authorization. We are unable to take back any disclosures we have already made based on your authorization.

We may also disclose information that does not identify you to third parties we work with, such as the time period in which a prescription was dispensed, the amount of medication dispensed, and whether the medication was purchased using cash or insurance. We remove any information that identifies you from the information we share with these parties using one of two methods permitted by HIPAA – either the HIPAA expert determination method or the HIPAA safe harbor method.


You have the following rights regarding your PHI:

  • Access – With a few exceptions, you have the right to review and copy your PHI by submitting a written request to the Privacy Office.
  • Amendment – If you feel that PHI in your record is incorrect or incomplete, you may ask us to amend the information by submitting a written request to the Privacy Office. You must provide a reason for your request. If we deny your request for an amendment, we will provide you with a written explanation of why we denied it.
  • Accounting of Disclosures – You have the right to ask us for a list (accounting) of the times we have shared your PHI in the six years prior to the date you ask, including with whom we shared it with and why, by submitting a written request to the Privacy Office. We will include all the disclosures we made except for those about treatment, payment, and health care operations, and certain other disclosures (such as any disclosures you asked us to make).
  • Restricting or Limiting Disclosure – You have the right to request additional restrictions on our use or disclosure of your PHI by sending a written request to the Privacy Office. We are not required to agree to the restrictions, except in the case where the disclosure is to a health plan for purposes of carrying out payment or health care operations, the disclosure is not otherwise required by applicable law, and the PHI pertains solely to a health care product or service for which you, or a person on your behalf, has paid in full.
  • Alternate Communications – You have the right to request that we communicate with you about health matters in a specific way by submitting a written request to the Privacy Office. For example, you may ask that we only call you at a certain phone number. Your request must specify how or where you wish to be contacted. We will accommodate all reasonable requests.
  • Receiving a Paper Copy of This Notice – You have the right to a paper copy of this Notice at any time by contacting the Privacy Office, even if you have agreed to receive the Notice electronically. You may always obtain a copy of this Notice at our website.
  • Notification in the Event of a Breach – We are required by law to maintain the privacy and security of your PHI. We will notify you if a breach occurs that may have compromised the privacy or security of your PHI.


We reserve the right to change this Notice, including for PHI we already have about you as well as any PHI we receive in the future. We will post a copy of the revised Notice on our website with the date that any updates were made


We take your privacy seriously and welcome your questions and feedback. If you believe your privacy rights have been violated, you may file a complaint with Vytal Pharmacy or with the Secretary of the U.S. Department of Health and Human Services. To file a complaint with Vytal Pharmacy, contact the Privacy Office. All complaints must be submitted in writing. You will not be penalized or retaliated against for filing a complaint.


All correspondence related to this Notice must be submitted to the Vytal Pharmacy Privacy Office at the address below. You may also reach the Vytal Pharmacy Privacy Office at: privacy@vytal.care.

Vytal Pharmacy Privacy Office Address: 2503 E 54th St. N, STE 101 SF, SD 57104.