Privacy Policy

Personal Identification

When you create an account or place an order we collect your full name, email address, mailing address, phone number, and date of birth. This information is required to fulfill your prescription and comply with DEA and pharmacy regulations.

Health & Prescription Data

To dispense prescription medications we collect your prescription documents, prescribing physician information, medical history relevant to your prescription, and any health conditions you voluntarily disclose. All health information is treated as Protected Health Information (PHI) under HIPAA.

Payment Information

We do not store credit card numbers or full payment details on our servers. When paying with cryptocurrency (Bitcoin, USDT, Monero) we record only the transaction ID and wallet address provided by you. No financial credentials are stored.

Technical Data

We automatically collect IP addresses, browser type, device type, pages visited, and session duration for security monitoring and fraud prevention. We do not use tracking pixels or third-party advertising cookies.

Order Fulfillment

Your personal and prescription information is used solely to process, verify, and ship your order and to communicate order updates.

Prescription Verification

Prescriptions are reviewed by our licensed pharmacists. We may contact your prescribing physician to verify authenticity.

Legal Compliance

We maintain records as required by DEA, state pharmacy boards, and other applicable regulations. We will disclose information to law enforcement only when legally compelled by a valid court order or subpoena.

Communications

We send transactional emails (order confirmation, shipping updates, prescription status). We do not send marketing emails without your explicit opt-in consent.

Protected Health Information

FarmapramRx is a HIPAA-covered entity. All Protected Health Information (PHI) is handled in accordance with the HIPAA Privacy Rule (45 CFR Part 164). We have implemented administrative, physical, and technical safeguards to protect your PHI.

Minimum Necessary Standard

We collect, use, and disclose the minimum amount of PHI necessary to accomplish the intended purpose.

Your HIPAA Rights

You have the right to: access and receive a copy of your PHI; request corrections to inaccurate PHI; request restrictions on uses and disclosures; receive an accounting of disclosures; and file a complaint with the HHS Office for Civil Rights.

Business Associates

Where we share PHI with business associates (e.g. shipping providers, IT vendors), we require signed Business Associate Agreements (BAAs) to ensure equivalent data protection.

End-to-End Encryption

All prescriptions and sensitive communications submitted through our website are encrypted with OpenPGP (RFC 4880) before transmission. Our public key is available at /pgp-key. Once encrypted on your device, only our pharmacists holding the private key can decrypt your submission.

Communication Security

Chats via Telegram, WhatsApp, and Signal are secured by those platforms' respective encryption protocols. For maximum security we recommend Signal (E2E by default) or PGP-encrypted email.

We Do Not Sell Your Data

We never sell, rent, or trade your personal information or health data to third parties for commercial purposes.

Service Providers

We share limited data with USPS and other carriers to ship your order, and with our IT infrastructure providers under BAA/DPA agreements. These providers are prohibited from using your data for any purpose other than providing services to us.

Legal Disclosures

We may disclose information if required by law, court order, or regulatory authority. We will notify you of such requests to the extent permitted by law.

Prescription Records

Prescription records are retained for a minimum of 7 years as required by DEA regulations and applicable state pharmacy laws.

Account Data

Your account data is retained for as long as your account is active. You may request account deletion at any time; however, we are required to retain prescription records for the legally mandated period.

Payment Records

Cryptocurrency transaction IDs are retained for 5 years for fraud prevention and legal compliance purposes.

Access & Portability

You may request a copy of the personal data we hold about you. We will provide it in a machine-readable format within 30 days.

Correction

You may request corrections to inaccurate personal data at any time by contacting support@farmapram.us.

Deletion

You may request deletion of your account and non-PHI personal data. Note that PHI associated with prescriptions must be retained for the period required by law.

GDPR (EU/EEA Residents)

EU and EEA residents have additional rights under GDPR including the right to object to processing and the right to lodge a complaint with your national data protection authority.

Essential Cookies Only

We use only essential session cookies required for site functionality (authentication, cart state). We do not use analytics, advertising, or third-party tracking cookies.

No Third-Party Trackers

We do not embed Google Analytics, Facebook Pixel, or any other third-party tracking scripts on our website.

Privacy Officer

For any privacy questions, data requests, or HIPAA concerns, contact our Privacy Officer at: privacy@farmapram.us or by mail at FarmapramRx Pharmacy, Privacy Officer, PO Box XXXX, [City, State ZIP].

Response Time

We respond to all privacy inquiries within 5 business days and fulfill data access or deletion requests within 30 days.