Security Policy

Security Policy for Andrews Apothecary’s Doctor’s-Only Portal

This security policy outlines the measures and practices Andrews Apothecary undertakes to protect the information and privacy of the doctors using our doctor’s-only portal. Located in Winston-Salem, NC, Andrews Apothecary is committed to safeguarding your data and ensuring compliance with all relevant standards, including the Health Insurance Portability and Accountability Act (HIPAA).

Data Privacy and Protection

1. No Sale or Sharing of Information:
   • Andrews Apothecary will not sell, rent, or share your personal or professional information with any third party without your explicit consent, except as required by law.
   • Your data is exclusively used to facilitate and enhance your experience within the portal and for internal purposes related to patient care and pharmacy operations.
2. Data Collection and Usage:
   • We collect only the necessary information required for the functioning of the portal, including but not limited to contact details, professional credentials, and prescription data.

Security Measures

1. Data Encryption:
   • All data transmitted between your device and our servers is encrypted using industry-standard encryption protocols (e.g., SSL/TLS).
   • Sensitive data stored on our servers is encrypted to protect against unauthorized access.
2. Access Controls:
   • Access to the portal is restricted to verified doctors who have completed our authentication process.
   • Role-based access controls ensure that users have access only to the information necessary for their role.
3. Regular Security Audits:
   • We conduct regular security audits and vulnerability assessments to identify and mitigate potential risks.
   • Any identified vulnerabilities are promptly addressed in accordance with best practices and compliance requirements.

HIPAA Compliance

1. Protected Health Information (PHI):
   • We strictly adhere to HIPAA regulations concerning the protection and confidentiality of PHI.
   • Any PHI accessed or processed through the portal is handled in compliance with HIPAA standards.
2. Breach Notification:
   • In the unlikely event of a data breach involving PHI, we will promptly notify affected parties in accordance with HIPAA breach notification rules.
   • We will also take immediate steps to mitigate the breach and prevent future occurrences.
3. Employee Training:
   • All employees with access to PHI receive regular training on HIPAA compliance and data protection best practices.
   • Our staff is committed to maintaining the confidentiality and security of your information.

User Responsibilities

1. Account Security:
   • Users are responsible for maintaining the security of their login credentials.
   • Passwords should be strong and unique, and users should avoid sharing their credentials with others.
2. Reporting Issues:
   • Users should report any suspicious activity or potential security issues to our support team immediately.
   • We encourage users to provide feedback on portal security and functionality to help us improve our services.

Contact Information

If you have any questions or concerns about this security policy or the protection of your information, please contact us at 336-723-1679 or refills@andrewsapothecary.com

Policy Updates

We may update this security policy from time to time to reflect changes in our practices or regulatory requirements. Users will be notified of any significant changes, and the updated policy will be posted on the portal.

By using the doctor’s-only portal of Andrews Apothecary, you acknowledge and agree to this security policy and our commitment to protecting your information.