Effective Date: February 2026 | Last Updated: February 2026
OriRx is committed to protecting the privacy of your protected health information (PHI). We are required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations to maintain the privacy of your PHI and to provide you with notice of our legal duties and privacy practices with respect to your PHI.
We are required to abide by the terms of this Notice. We reserve the right to change our privacy practices and to make the new practices effective for all PHI we maintain. If we change our practices, we will post the updated Notice on this page.
Treatment: We may use and disclose your PHI to facilitate, coordinate, or manage healthcare and related services. For example, we may share your health intake information with the licensed prescriber reviewing your case, and with the compounding pharmacy dispensing your prescription.
Payment: We may use and disclose your PHI to bill and collect payment for services. This may include disclosing your PHI to payment processors, collection agencies (if necessary), or insurance companies to obtain payment.
Healthcare Operations: We may use and disclose your PHI for our internal operations, including quality assurance, training, audits, fraud detection, and legal and compliance activities.
As Required by Law: We may disclose your PHI when required to do so by federal, state, or local law, including disclosures to public health authorities, law enforcement, or in response to a court order or subpoena.
Business Associates: We may disclose your PHI to our business associates — third parties who perform services on our behalf (such as IT providers, cloud storage, analytics). Business associates are required by law and by contract to safeguard your PHI.
Other Uses Requiring Your Authorization: Any use or disclosure of your PHI not described in this Notice requires your written authorization. You may revoke your authorization at any time by submitting a written revocation to our Privacy Officer, except to the extent we have already acted in reliance on the authorization.
Right to Inspect and Copy: You have the right to inspect and obtain a copy of your PHI that we maintain in a designated record set. We may charge a reasonable fee for copies. To request access, submit a written request to our Privacy Officer.
Right to Amend: If you believe your PHI is incorrect or incomplete, you may request that we amend the information. We may deny your request if the information was not created by us, is not part of the records we maintain, or is already accurate. If we deny your request, you may submit a statement of disagreement.
Right to an Accounting of Disclosures: You have the right to request a list of disclosures we have made of your PHI for purposes other than treatment, payment, operations, and certain other exceptions.
Right to Request Restrictions: You may request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request, but if we do agree, we will honor that restriction unless it is needed for an emergency.
Right to Request Confidential Communications: You may request that we communicate with you about your PHI by a specific means or at a specific location (e.g., only to a certain email address). We will accommodate reasonable requests.
Right to a Paper Copy of This Notice: You have the right to receive a paper copy of this Notice at any time. To request a copy, contact us at the address below.
If you believe your privacy rights have been violated, you may file a complaint with OriRx or with the U.S. Department of Health and Human Services (HHS). To file a complaint with HHS, visit hhs.gov/ocr. There will be no retaliation against you for filing a complaint.
For questions about this Notice or to exercise your rights:
Privacy Officer, OriRx
382 NE 191 St
Miami, FL 33179
support@orirx.com
Subject line: "HIPAA / Privacy Request"
This Notice applies to OriRx as a covered entity or business associate under HIPAA as applicable to our role in facilitating telehealth services. The prescribing providers at Crafted Rx maintain their own separate HIPAA Notice of Privacy Practices in connection with the professional services they provide.