Legal & Privacy.

Notice of Privacy Practices (HIPAA)

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment to Your Privacy

B & B RX INC. is committed to protecting the privacy of your protected health information (PHI). We are required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) to maintain the privacy of your health information and to provide you with this Notice describing our legal duties and privacy practices.

How We May Use and Disclose Your Health Information

We may use and disclose your protected health information without your written authorization for the following purposes:

• Treatment: To dispense medications, provide consultations, administer vaccinations, and coordinate care with your doctors and other healthcare providers.
• Payment: To bill your health insurance plan, Medicare, Medicaid, or other payers for the medications and services we provide.
• Healthcare Operations: For our internal operations including quality assessment, employee training, licensing, and business management.
• Public Health Activities: To report immunizations to NYSIIS (NY State Immunization Registry), to report adverse events to the FDA's MedWatch, and as required by public health law.
• Required by Law: When required by federal, state, or local law (e.g., subpoenas, court orders, law enforcement).

Uses Requiring Your Written Authorization

We will obtain your written authorization before using or disclosing your PHI for: (1) marketing purposes, (2) sale of your health information, (3) most uses of psychotherapy notes, and (4) any other purposes not described in this Notice. You may revoke an authorization at any time in writing.

Your Rights Regarding Your Health Information

• Right to Access: You may request a copy of your medication records and other PHI we maintain.
• Right to Amend: You may request that we correct information you believe is incorrect or incomplete.
• Right to an Accounting of Disclosures: You may request a list of disclosures we have made of your PHI.
• Right to Request Restrictions: You may request restrictions on how we use or disclose your PHI.
• Right to Confidential Communications: You may request that we communicate with you in a specific way (e.g., only by phone, only at home).
• Right to a Paper Copy of This Notice: You may request a paper copy at any time.
• Right to File a Complaint: You may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights without retaliation.

How to Exercise Your Rights

To exercise any of these rights, contact our Privacy Officer at bandbrx@yahoo.com or call (718) 533-6623.

Changes to This Notice

We reserve the right to change this Notice. The revised Notice will be effective for all PHI we maintain. The current Notice will always be posted at the pharmacy and on our website at bandbrx.com/legal.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us at the contact information above, or with:
U.S. Department of Health & Human Services
Office for Civil Rights, 200 Independence Avenue, S.W., Washington, D.C. 20201
1-877-696-6775, www.hhs.gov/ocr

You will not be retaliated against for filing a complaint.

Privacy Policy

Information We Collect

When you use our website or services, we may collect:

• Personal information you provide directly (name, date of birth, address, phone, email, insurance details).
• Health information related to medications, vaccinations, and consultations (protected under HIPAA).
• Technical information automatically (IP address, browser type, device info, pages visited).
• Cookies & analytics to improve our services (see our Cookie section below).

How We Use Your Information

• To provide and improve our pharmacy services.
• To process prescriptions, transfers, deliveries, and vaccine appointments.
• To bill your insurance and process payments.
• To communicate with you about your prescriptions and appointments.
• To comply with legal obligations and respond to lawful requests.

Information Sharing

We do not sell your personal or health information. We may share information only as described in this policy and our HIPAA Notice, specifically with:

• Your healthcare providers (with your consent or as permitted by HIPAA).
• Your insurance company for billing.
• Service providers (form processing, delivery, analytics) bound by confidentiality agreements.
• Government agencies (when legally required).

Third-Party Services We Use

To run this website, we rely on the following service providers. Each is bound by their own privacy policy and contractual terms with us:

• Netlify, Inc., website hosting and content delivery. netlify.com/privacy
• Formspree, Inc., secure form submission processing. Form submissions are transmitted via HTTPS, processed by Formspree, then forwarded to our pharmacy email at bandbrx@yahoo.com. formspree.io/legal/privacy-policy
• Google Translate, optional, on-demand translation of page content into Spanish, Russian, Hindi, or Bengali. No personal information is sent to Google for translation; only the displayed page text. policies.google.com/privacy
• Cloudflare (cdnjs), delivers the PDF-generation library (jsPDF) used to create your downloadable forms. PDF generation happens entirely in your browser; your form data does not leave your device during PDF creation.
• U.S. National Library of Medicine (RxNav) and U.S. FDA (openFDA), public health databases queried only when you search for a medication; queries contain only the medication name you typed.

Form Submissions & Email Notification

When you submit any form on this site (vaccine registration, prescription transfer, delivery request, contact form, newsletter signup):

• Your submission is sent over HTTPS to Formspree, which forwards it to our pharmacy email at bandbrx@yahoo.com.
• We retain submissions in our email and pharmacy management system for as long as needed to provide service and meet legal/regulatory requirements (typically 7 years for medical records, per New York pharmacy law).
• You may request deletion of your submission at any time by emailing bandbrx@yahoo.com; we will honor such requests subject to legal retention requirements.

Data Security

We use industry-standard encryption (HTTPS/TLS 1.2+) for all data transmission. Our website enforces HTTP Strict Transport Security (HSTS), Content Security Policy (CSP), X-Frame-Options, and other defensive HTTP headers. Subresource Integrity (SRI) is used to verify that external scripts have not been tampered with. Health information is protected under HIPAA Security Rule administrative, physical, and technical safeguards. While no method of electronic transmission is 100% secure, we work hard to protect your information.

Cookies

This site uses only essential cookies needed for core functionality (language preference, theme preference, session). We do not use third-party advertising or tracking cookies. If you use the Google Translate feature, Google may set its own cookies on your device per its privacy policy.

Your Data Rights (GDPR / CCPA equivalent)

Regardless of where you live, you may at any time:

• Request a copy of the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information (subject to legal record-retention rules for medical records).
• Withdraw consent for non-essential processing.
• File a complaint with a regulatory authority.

To exercise any of these rights, contact us at bandbrx@yahoo.com or call (718) 533-6623.

Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13 without parental consent.

Your Choices

• You may opt out of marketing emails at any time by clicking "unsubscribe" or contacting us.
• You may request access, correction, or deletion of your information (HIPAA rules apply to health records).
• You may disable cookies in your browser settings.

Terms of Service

Acceptance of Terms

By using bandbrx.com or our pharmacy services, you agree to these Terms. If you do not agree, please do not use our services.

Use of Website

• You may use this website for personal, non-commercial purposes.
• You may not attempt to gain unauthorized access, scrape data, or interfere with the website's operation.
• Information provided through forms must be accurate and truthful.

No Medical Advice

The content on this website is for informational purposes only and does not constitute medical advice. Always consult your doctor or pharmacist before making decisions about medications or vaccinations. In an emergency, call 911 or go to the nearest emergency room.

Prescription Services

All prescription services are subject to verification by a licensed pharmacist, valid prescription requirements, applicable laws, and pharmacy policies. We reserve the right to refuse service when professional judgment requires it.

Insurance & Pricing

Insurance coverage and final pricing are determined at the time of service. Quoted prices are estimates and may change based on insurance benefits. You are responsible for any co-pays, deductibles, or non-covered amounts.

Limitation of Liability

To the maximum extent permitted by law, B & B RX INC. shall not be liable for any indirect, incidental, or consequential damages arising from use of our website. This does not limit liability that cannot be excluded under New York law.

Governing Law

These Terms are governed by the laws of the State of New York. Any disputes shall be resolved in the courts of Queens County, New York.

Accessibility Statement

B & B RX INC. is committed to ensuring digital accessibility for people with disabilities. We are continually improving the user experience for everyone and applying the relevant accessibility standards.

Conformance Status

Our website aims to conform to Web Content Accessibility Guidelines (WCAG) 2.1 Level AA. These guidelines explain how to make web content more accessible for people with a wide array of disabilities.

Accessibility Features

• Semantic HTML and ARIA labels for screen readers.
• Keyboard navigation support throughout the site.
• Sufficient color contrast on text and interactive elements.
• Resizable text without loss of content or functionality.
• Alt text for meaningful images.
• Reduced motion option (respects prefers-reduced-motion).
• Multilingual support (English, Spanish, Russian).
• Mobile-responsive design.

In-Store Accessibility

• Wheelchair-accessible entrance and store layout.
• Multilingual staff (English, Spanish, Russian).
• Large-print labels available upon request.
• Telephone consultations for patients who cannot visit in person.
• Free home delivery for patients with mobility limitations.

Feedback

We welcome your feedback on the accessibility of our services. If you encounter barriers, please contact us at bandbrx@yahoo.com or (718) 533-6623. We aim to respond within 2 business days.

Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device by your browser. They help us remember your preferences (like language and theme) and improve your experience.

Cookies We Use

• Essential: Required for the website to function (form security, language preference, theme).
• Functional: Remember your settings (e.g., light/dark mode, EN/ES/RU).
• Analytics: Help us understand how visitors use the site (only if you opt in).

We do not use advertising or tracking cookies.

Managing Cookies

You can control cookies through your browser settings. Disabling some cookies may affect site functionality (e.g., your language choice won't be remembered).

Privacy Officer Contact

For questions about this Notice or our privacy practices:

B & B RX INC. | Privacy Officer
79-08 37th Ave, Jackson Heights, NY 11372
📞 (718) 533-6623
✉️ bandbrx@yahoo.com