Notice of Privacy Practices

Effective date: August 10, 2026

Understanding This Notice

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Palmetto Rx Solutions, Inc. is a licensed pharmacy and a covered entity under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). This Notice describes our privacy practices and the rights you have regarding your Protected Health Information (“PHI”) — information about you, or that could identify you, relating to your past, present or future physical or mental health, health care, or payment for health care.

We are required by law to protect the privacy of your PHI, to provide you with this Notice, and to abide by its terms while it is in effect. We reserve the right to change our privacy practices and this Notice, as described below.

How We Use and Disclose Your Information

We use and disclose your PHI for treatment, payment and health care operations without asking your permission separately for each instance.

• Treatment: we use your PHI to fill your prescriptions and to coordinate your care with your prescriber and other providers.
• Payment: we disclose your PHI to your insurer or other payer to obtain payment for the medications and services we provide.
• Health Care Operations: we use the minimum necessary PHI to assess and improve the quality of our services and to evaluate the performance of our staff.

Other Ways We May Use or Disclose Your Information Without Your Written Authorization

The law permits or requires us to use or disclose your PHI, without your written authorization, in the circumstances below.

• As required by law.
• For public health activities, including reporting to the FDA on the safety of a drug, food or supplement.
• To a government authority, if we reasonably believe you are a victim of abuse, neglect or domestic violence.
• For health oversight activities such as audits, investigations and inspections related to licensure.
• To individuals involved in your care.
• In judicial and administrative proceedings, with proper legal documentation.
• To law enforcement, as required by law or in response to a court order or subpoena.
• To coroners, medical examiners and funeral directors, concerning a deceased individual.
• For organ, eye or tissue donation purposes.
• For research, with an approved waiver of authorization or your signed authorization.
• To avert a serious threat to health or safety.
• For specialized government functions, including military, veterans’, national security and correctional-institution purposes.
• To comply with workers’ compensation laws.
• To assist in disaster relief efforts.
• To our business associates, who are contractually required to safeguard your PHI. This includes our pharmacy software provider and the electronic medication administration record systems we integrate with on behalf of the facility where you live.

Uses and Disclosures That Require Your Written Authorization

For any use or disclosure not described above, including the marketing of your PHI or the sale of your PHI, we will obtain your written authorization. You may revoke that authorization in writing at any time, except to the extent we have already relied on it. To revoke an authorization, contact our Privacy Officer using the contact information below.

Your Rights Regarding Your Information

You have the following rights regarding the PHI we maintain about you. To exercise any of these rights, contact our Privacy Officer using the contact information below.

• Request restrictions on certain uses and disclosures of your PHI. We are not required to agree, except that we must agree to restrict disclosure to a health plan for services you paid for yourself, in full, out of pocket.
• Request that we communicate with you by an alternate means or at an alternate location. We will accommodate reasonable requests.
• Inspect and obtain a copy of your PHI. We may charge a reasonable, cost-based fee for copies, and will tell you in advance if one applies.
• Request an amendment to your PHI if you believe it is incorrect or incomplete. We may deny the request; if we do, you may submit a statement of disagreement.
• Receive an accounting of certain disclosures of your PHI that we have made.
• Receive a paper copy of this Notice at any time, even if you agreed to receive it electronically.
• Be notified if a breach compromises the privacy or security of your unsecured PHI.

Our Duties, and Changes to This Notice

We are required by law to maintain the privacy of your PHI, to provide you with this Notice, and to abide by the terms of the Notice currently in effect. We reserve the right to change our privacy practices and to make a revised Notice effective for PHI we already maintain, as well as PHI we create or receive in the future. If we make a material change, we will make the revised Notice available on request and post it where we serve patients.

Complaints and Contact Information

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

To file with us, or with any question about this Notice or our privacy practices, contact:

Palmetto Rx Solutions, Inc.
Peggy Hardy Ohrin, Privacy Officer
8 Harbison Way, Columbia, SC 29212
(803) 454-2290

To file with HHS, use the OCR Complaint Portal at ocrportal.hhs.gov, or see hhs.gov/hipaa/filing-a-complaint for other ways to file, including by mail to: Office for Civil Rights, Centralized Case Management Operations, U.S. Department of Health and Human Services, 200 Independence Avenue, S.W., Room 509F, HHH Building, Washington, D.C. 20201.

Effective Date

This Notice is effective as of August 10, 2026 and replaces any Notice of Privacy Practices Palmetto Rx Solutions, Inc. issued before that date.