top of page
PHARMXHEALTHONE
Legal Notice, Privacy & Cookie Notice
Effective Date: Jan 1, 2024
Last Updated: October 7, 2026
Legal Entity: PHARM X UNIVERSAL, LLC d/b/a PHARMXHEALTHONE
Business Name: PharmXHealthOne (“PHO”)
Primary Clinic Location: 2828 South Seacrest Boulevard, Suite 216, Boynton Beach, Florida 33435
Telephone: 561-778-8121
Email: health@pharmxhealthone.com
This Legal Notice, Privacy Policy & Cookie Notice (“Policy”) applies to PharmXHealthOne’s public website, public digital forms, PHO Interest Cards, community and church outreach activities, event registration processes, general administrative communications, online interactions, cookies and website technologies, and other information-handling activities described in this Policy. It also explains important legal notices concerning PHO’s healthcare operations, cash-pay business model, third-party laboratory relationships, patient-specific products and medications, communications, privacy practices, information security, and the relationship between PHO’s public administrative systems and its clinical record system.
1. PURPOSE AND SCOPE
This Policy explains how PHO may collect, receive, use, maintain, protect, disclose, and otherwise process personal information in connection with its website, public forms, administrative activities, healthcare operations, community outreach, event programs, communications, payment administration, and related activities. It also explains important limitations concerning website information, medical advice, telehealth, PHO’s cash-pay model, third-party laboratories, patient-specific medications and products, refunds, communications, tracking technologies, and other operational matters. This Policy is intended to provide transparent information concerning PHO’s practices, but it is not intended to replace a treatment-specific informed consent, financial agreement, Good Faith Estimate, telehealth consent, PHO’s HIPAA Notice of Privacy Practices, or another document that applies to a specific patient relationship or healthcare service.
2. PHO'S LEGAL AND OPERATING STRUCTURE
PharmXHealthOne is operated by PHARM X UNIVERSAL, LLC d/b/a PHARMXHEALTHONE. PHO operates as an outpatient healthcare business and provides or coordinates healthcare services through healthcare professionals who are appropriately licensed, registered, certified, or otherwise legally authorized to perform the applicable services. References in this Policy to “PHO,” “PharmXHealthOne,” “we,” “us,” or “our” generally refer to the PHO business unless the context specifically refers to an individual healthcare professional, laboratory, pharmacy, supplier, payment processor, or other independent entity. The fact that an individual is employed by, contracts with, assists, or works in connection with PHO does not automatically mean that person is a physician or independently licensed clinician.
3. LEGAL AND REGULATORY FRAMEWORK
PHO conducts its operations subject to federal, Florida, and applicable local laws and regulations that govern the particular activity involved. Depending on the service, information, transaction, provider, or communication at issue, this may include the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the HITECH Act, the HIPAA Privacy, Security, and Breach Notification Rules, applicable requirements under 42 C.F.R. Part 2, Florida healthcare-professional licensing statutes and professional-board rules, Florida patient-record law, Florida telehealth law, the Florida Health Care Clinic Act where applicable, requirements administered by the Florida Agency for Health Care Administration (“AHCA”) where applicable, Florida privacy and data-security requirements, federal Good Faith Estimate requirements, pharmacy and medication requirements, applicable FDA requirements, laboratory laws, Federal Trade Commission requirements, communications laws including applicable TCPA and FCC requirements, and applicable Palm Beach County and City of Boynton Beach business, facility, safety, fire, zoning, and related local requirements. Reference to a law in this Policy does not mean that every provision of that law necessarily applies to every PHO activity.
4. AHCA AND FLORIDA HEALTH CARE CLINIC REQUIREMENTS
PHO evaluates its organizational structure, ownership, professional relationships, services, financial model, and other operations under applicable Florida healthcare-clinic requirements. The Florida Health Care Clinic Act, located in Chapter 400, Part X, Florida Statutes, establishes a regulatory framework administered by AHCA while also recognizing that certain entities may fall within statutory exclusions or exemptions depending upon their structure and operations. PHO will maintain any license, exemption, registration, posting, inspection requirement, screening documentation, personnel documentation, or other governmental requirement that applies to its actual operations. Nothing on the PHO website should be interpreted as a representation that PHO holds a particular AHCA license, certificate of exemption, or other regulatory status unless that specific status has been independently verified and remains current.
5. FLORIDA DEPARTMENT OF HEALTH AND PROFESSIONAL LICENSURE
Healthcare professionals providing services through PHO are expected to maintain the licenses, registrations, certifications, prescribing authority, continuing education, professional-board compliance, supervision or collaboration requirements, and other credentials required for their particular profession and role. Each professional must practice within the lawful scope of practice applicable to that person. Administrative employees, community outreach personnel, volunteers, or other non-clinical personnel do not independently diagnose medical conditions, prescribe medications, formulate medical treatment plans, or perform clinical functions merely because they work with or represent PHO.
6. WEBSITE INFORMATION IS NOT INDIVIDUALIZED MEDICAL ADVICE
The PHO website may contain information concerning health conditions, weight management, hormone-related care, medications, compounded medications, peptides, NAD-related services, laboratory testing, body-composition assessment, aesthetics, body-contouring services, shockwave-related services, wellness services, treatment technologies, and other healthcare subjects. Website content is provided for general educational and informational purposes. It does not constitute an individualized diagnosis, prescription, treatment recommendation, medical determination, or guarantee that a particular treatment is appropriate for a particular person. Individuals should not begin, discontinue, increase, decrease, or otherwise modify prescribed healthcare treatment solely because of general information appearing on the PHO website.
7. NO PROVIDER-PATIENT RELATIONSHIP FROM PUBLIC WEBSITE OR EVENT USE
Visiting the PHO website, completing a public inquiry form, completing a PHO Interest Card, registering for a PHO event, attending a church or community presentation, calling PHO for general information, communicating with outreach personnel, or receiving general educational information does not by itself establish a provider-patient relationship. A clinical relationship is established only through PHO’s approved patient-care process and the involvement of an appropriately licensed healthcare professional. Providing information, paying an administrative or consultation fee, or requesting a particular treatment does not guarantee a diagnosis, prescription, treatment recommendation, or acceptance for a particular healthcare service.
8. MEDICAL EMERGENCIES
PHO is an outpatient healthcare practice. PHO does not operate an emergency department, ambulance service, or after-hours/on-call emergency medical service. The PHO website, general email, public forms, social-media accounts, PHO Interest Cards, public Event & Community SMS program, administrative telephone line, website chat, or other non-emergency administrative channels should not be used for a medical emergency. Individuals who believe they are experiencing a medical emergency should call 911 or seek immediate emergency medical care.
9. PHO IS A CASH-PAY HEALTHCARE PRACTICE
PHO operates on a cash-pay basis for PHO services. PHO does not accept or bill Medicare, Medicaid, or commercial health insurance for PHO consultations, assessments, procedures, treatments, medications, products, or other PHO services. Patients and clients are financially responsible for PHO services they authorize. The medical nature of a service does not mean that PHO will submit a claim to an insurer or government payer. References elsewhere on the PHO website, in prior materials, or in older documentation suggesting that PHO accepts Medicare Part B or commercial health insurance should not be relied upon and should be removed as outdated.
10. QUEST DIAGNOSTICS, LABCORP, AND PATIENT INSURANCE
PHO may order or coordinate laboratory testing through independent third-party laboratories, including Quest Diagnostics and Labcorp. These laboratories are legally and operationally separate from PHO and may maintain their own insurance contracts, billing processes, patient financial policies, privacy notices, and network-participation requirements. Patients may be able to use their health insurance directly with Quest Diagnostics or Labcorp for eligible laboratory testing, depending upon the patient’s health plan, the laboratory’s network participation, medical-necessity requirements, prior authorization requirements, deductibles, copayments, coinsurance, benefit exclusions, and other payer rules. The ability to use insurance with Quest Diagnostics or Labcorp does not mean that PHO accepts, participates with, bills, or is in network with the patient’s health insurance plan. PHO does not guarantee that a laboratory test will be covered or reimbursed.
11. GOOD FAITH ESTIMATES
Because PHO operates on a cash-pay basis, federal Good Faith Estimate requirements may apply to uninsured individuals and individuals who choose not to use insurance. When required by applicable federal law, PHO will provide a Good Faith Estimate of reasonably expected charges for scheduled healthcare services or following an eligible request. The estimate is based upon information reasonably known at the time and does not guarantee that no additional medically necessary service or charge will arise. Federal rules provide a patient-provider dispute process in qualifying circumstances when billed charges are at least $400 greater than the expected charges identified in an applicable Good Faith Estimate. HHS.gov PHO should also maintain a separate public Good Faith Estimate / No Surprises Act Notice.
12. PHO FINAL SALE AND NO REFUND POLICY
PHO maintains a Final Sale and No Refund Policy applicable to PHO medications, products, consultations, assessments, treatments, procedures, and other services. PHO does not voluntarily issue refunds, exchanges, store credits, or account credits for medications or products that have been ordered or purchased, and PHO does not refund consultations, treatments, assessments, procedures, or other healthcare services that have been partially or fully provided. Once PHO begins performing a service, professional time, clinical review, staffing resources, facility resources, materials, administrative processing, and other expenses are incurred for the individual receiving the service. Those services and resources cannot be returned or restored simply because the patient later changes their mind, elects not to continue treatment, changes providers, changes treatment goals, fails to complete recommended follow-up, or is dissatisfied because a desired outcome was not achieved.
The same policy applies when a healthcare professional determines during or following a consultation that a patient’s requested medication or treatment is not medically appropriate. A consultation fee is payment for the professional evaluation itself and is not payment for a guaranteed prescription, diagnosis, medication, or treatment approval. The fact that a provider declines a requested treatment, recommends additional testing, recommends a different treatment, refers the patient elsewhere, or determines that no PHO treatment is appropriate does not convert a completed professional evaluation into a refundable service.
This policy applies to the fullest extent permitted by applicable law. Nothing in this Policy is intended to eliminate a remedy that PHO is legally required to provide for an unauthorized transaction, duplicate charge, established billing error, or another circumstance in which applicable law expressly requires a correction, reversal, or other remedy. A legally required correction is not the same as a discretionary PHO refund.
13. WHY MEDICATIONS AND PRODUCTS ARE NOT RETURNABLE OR REFUNDABLE
PHO’s no-return and no-refund policy for medications and products exists because of patient safety, product integrity, healthcare regulation, and PHO’s patient-specific ordering model. PHO does not purchase general standing inventories of unassigned patient medications for anticipated future resale. Medications, compounded preparations, injectable therapies, and other patient-specific treatment products are ordered for an individual after the applicable health assessment, laboratory review where clinically indicated, provider evaluation, individualized treatment determination, patient authorization, and payment process. Once PHO submits a patient-specific order, the pharmacy, compounding facility, supplier, or PHO may incur preparation, compounding, packaging, labeling, fulfillment, acquisition, and shipping expenses specifically for that individual, and those costs may not be reversible.
Prescription medications, compounded preparations, injectable products, sterile products, temperature-sensitive products, and other healthcare products must also be handled under appropriate storage, temperature-control, sterility, labeling, expiration, security, and chain-of-custody conditions. After a product has been dispensed, shipped, delivered, or otherwise released outside the controlled custody of the dispensing pharmacy, supplier, or PHO, PHO cannot independently verify that it has continuously remained under required handling conditions. Even an unopened product may have been exposed to inappropriate temperatures, environmental conditions, contamination, tampering, or other circumstances that cannot be reliably determined after it has left controlled custody. PHO therefore does not return medications or patient-specific healthcare products to inventory, redistribute them to another patient, or resell them.
A patient should not use a medication or product that appears incorrect, damaged, contaminated, improperly labeled, expired, temperature-compromised, recalled, or otherwise unsafe. A suspected dispensing error, shipment problem, product defect, recall, or safety concern should be reported promptly to PHO and, where appropriate, to the dispensing pharmacy or supplier. An appropriate correction, replacement, recall response, or other remedy provided because of an established pharmacy, supplier, or legal obligation is not a voluntary PHO refund and does not modify PHO’s general Final Sale and No Refund Policy.
14. SERVICES AND TREATMENTS THAT HAVE BEEN PARTIALLY OR FULLY PROVIDED
PHO does not refund services or treatments that have already been partially or fully performed. Once any portion of a consultation, assessment, procedure, treatment, injection, aesthetic service, body-contouring service, shockwave service, SECA mBCA assessment, telehealth consultation, clinical review, treatment visit, or other professional service has begun or been provided, the amount attributable to that service is non-refundable. Healthcare services require professional time, preparation, staffing, clinical judgment, facility use, treatment materials, medical supplies, administrative support, and other resources that cannot be recovered after the service begins.
If a patient purchases or begins a multi-visit treatment course, procedure series, treatment package, program, or other arrangement and later voluntarily discontinues participation, services already rendered, professional work already performed, products already ordered, supplies already consumed, and costs already incurred remain non-refundable. A patient’s later change of mind, relocation, change of provider, financial circumstances, failure to attend follow-up, voluntary discontinuation, or failure to achieve a desired result does not create a right to reimbursement for work already performed or resources already committed.
15. PATIENT-SPECIFIC MEDICATION AND PRODUCT ORDERING
PHO does not maintain general standing inventory of unassigned patient medication for anticipated future sale. Where a medication, compounded preparation, injectable therapy, or other patient-specific product is clinically appropriate, the item is ordered specifically for the patient after the applicable assessment, provider review, treatment determination, patient authorization, and payment process. Depending on the service, this process may include review of the patient’s health concerns and goals, laboratory testing where appropriate, SECA mBCA assessment where relevant, healthcare-provider evaluation, treatment recommendation, informed consent, payment, and subsequent submission of the patient-specific order to the appropriate pharmacy or supplier. A medication or product is not ordered merely because it appears on a PHO website, service list, brochure, price list, or educational document.
16. COMPOUNDED MEDICATIONS
Certain patient-specific treatment plans may involve compounded medication when clinically appropriate and legally available. Compounded drugs are not FDA-approved in the same manner as FDA-approved manufactured medications, which means FDA does not review each compounded product for safety, effectiveness, or quality before it reaches patients. U.S. Food and Drug Administration Compounding may nevertheless serve legitimate patient needs in circumstances permitted by federal and state law. PHO does not represent that a compounded medication is FDA-approved or appropriate for every patient. Decisions regarding compounded treatment are made by the treating healthcare professional based on individual circumstances, applicable law, professional judgment, and appropriate informed consent.
17. PHARMACIES, SUPPLIERS, AND PATIENT SAFETY
PHO may coordinate patient-specific prescriptions and products with independent pharmacies, compounding facilities, outsourcing facilities, and medical suppliers. Such organizations remain responsible for their own licensure, registration, compounding or dispensing authority, labeling, storage, quality systems, sterility procedures, shipping, recordkeeping, recalls, and other legal responsibilities. PHO may restrict commercial account details or vendor-contract information to personnel who have a legitimate business need to know, but commercial confidentiality must not prevent treating providers or authorized medication-handling personnel from obtaining information necessary for patient safety, including product identity, concentration, supplying facility, storage information, expiration, labeling, lot or traceability information where applicable, administration information, recall information, and other clinically necessary product details.
18. TELEHEALTH SERVICES
PHO may provide telehealth services when legally authorized and clinically appropriate. Patients participating through telehealth are responsible for accurately identifying the state and physical location from which they are participating because provider authority may depend on where the patient is physically located at the time of the encounter. Florida law requires a Florida telehealth provider to practice within the provider’s scope and according to the prevailing professional standard applicable to comparable in-person care, and Florida law also imposes specific requirements concerning prescribing through telehealth. Online Sunshine A PHO provider may determine that telehealth is insufficient and require an in-person examination, additional medical records, laboratory testing, diagnostic testing, referral, or emergency evaluation.
19. TREATMENT ELIGIBILITY AND NO GUARANTEE OF TREATMENT
Not every person is eligible for every PHO treatment, medication, service, or procedure. A healthcare professional may consider medical history, current health condition, symptoms, medications, allergies, laboratory results, contraindications, age, pregnancy status where relevant, prior treatment, health goals, state of residence, legal requirements, professional scope, and other clinically relevant information. Requesting or paying for a consultation does not guarantee that a requested medication or treatment will be authorized. Clinical judgment and patient safety take priority over patient preference for a specific therapy.
20. NO GUARANTEE OF RESULTS
Healthcare outcomes vary from person to person. PHO does not guarantee a specific diagnosis, treatment eligibility, medication eligibility, amount of weight loss, laboratory result, hormone level, symptom improvement, aesthetic result, body-composition change, duration of treatment, or other medical or wellness outcome. Testimonials, educational materials, descriptions of possible benefits, before-and-after examples, or discussions of typical experiences should not be interpreted as guarantees that another person will obtain the same outcome.
21. INFORMATION PHO MAY COLLECT
PHO may collect information that is reasonably necessary to provide healthcare services, respond to inquiries, administer PHO operations, coordinate events, process transactions, communicate with individuals, protect PHO systems, comply with legal obligations, and support other legitimate activities described in this Policy. The information collected depends on the individual’s relationship with PHO and may include identity and contact information, administrative registration information, scheduling information, general health concerns or goals, clinical information within appropriate clinical systems, laboratory information, payment and transaction information, communications records, event participation information, SMS consent records, website and device information, and records reasonably necessary to document PHO’s services and legal obligations.
22. IDENTITY AND CONTACT INFORMATION
PHO may collect identifying and contact information such as a person’s name, telephone number, email address, mailing address, date of birth where appropriate, communication preferences, identification-document information where necessary, and information concerning an authorized representative. PHO may request identity documentation when necessary to establish a patient record, protect access to sensitive information, prevent fraud, verify authority, or comply with legal or professional requirements.
23. EVENT, COMMUNITY, AND PHO INTEREST CARD INFORMATION
PHO may use digital or paper Interest Cards and event-registration processes during church, community, educational, and outreach activities. These forms may collect limited information such as the individual’s name, phone number, email address, preferred contact method, general areas of healthcare interest, requested next step, whether recent laboratory results are available, event participation information, and optional PHO Event & Community SMS consent. A PHO Interest Card is not intended to function as a complete medical history or substitute for a clinical intake. Selecting a health or wellness topic on an Interest Card does not constitute a diagnosis or clinical assessment.
24. ADMINISTRATIVE HEALTHCARE INFORMATION
PHO may maintain administrative information concerning appointment requests, appointment dates and times, registration status, identification-document status, payment status, follow-up status, laboratory-order status, general workflow status, whether required administrative documents have been completed, and other information reasonably necessary to coordinate the patient’s PHO process. Administrative systems should not be used to store unnecessary detailed clinical narratives where those details belong in PHO’s clinical record system.
25. CLINICAL INFORMATION AND ELATION HEALTH
PHO uses Elation Health as its approved electronic health record environment for detailed clinical information. Medical history, diagnoses, allergies, medications, laboratory results, clinical assessments, treatment recommendations, provider notes, informed-consent information, clinical communications, and other detailed patient-care information should be maintained in the approved clinical environment where appropriate. A public website form, general email account, QCommand Center record, Airtable operational field, PHO Event form, or public Interest Card is not a substitute for Elation Health as the clinical patient record.
26. QCOMMAND CENTER, AIRTABLE, AND PHO OPERATIONAL SYSTEMS
PHO may use QCommand Center, Airtable, PHO portals, dashboards, reporting tools, workflow systems, and related administrative technologies to support operational activities. Such systems may contain information concerning lead status, appointment status, next administrative step, workflow responsibility, event administration, reporting, approvals, operational requests, and other non-clinical management information. Personnel should not enter unnecessary detailed diagnoses, treatment plans, laboratory values, prescription details, or other sensitive clinical narrative into general operational free-text fields unless the particular system and field have been specifically approved for that information. Technical ability to enter information into a field does not itself make that field appropriate for clinical documentation.
27. PAYMENT AND TRANSACTION INFORMATION
PHO or an approved payment processor may process information reasonably necessary to complete an authorized cash-pay transaction. This may include transaction amount, payment status, billing contact information, transaction identifier, the service or product associated with the transaction, and information required to investigate an unauthorized transaction, payment dispute, chargeback, billing issue, duplicate charge, or fraud concern. PHO operational systems should not retain complete payment-card numbers, card security codes, banking passwords, or other restricted authentication credentials unless the information is handled through an approved system specifically designed and authorized for such information.
PHO may retain transaction, authorization, treatment, service-delivery, pharmacy-order, and related administrative records when reasonably necessary for accounting, tax compliance, healthcare operations, patient account administration, fraud prevention, chargeback response, legal defense, regulatory compliance, or other lawful business purposes. Maintaining a transaction record does not create a right to a refund where PHO’s Final Sale and No Refund Policy applies.
28. SOURCES OF INFORMATION
PHO may receive information directly from an individual, an authorized representative, a PHO healthcare professional, an authorized workforce member, Elation Health, a PHO public form, an Interest Card, an event registration process, a laboratory, a pharmacy, a supplier, a payment processor, a legally authorized referral source, a website or security system, a governmental or professional licensing source, or another lawful source related to PHO’s operations. PHO may verify information where reasonably appropriate and does not guarantee that information obtained from an outside source is always complete or accurate.
29. HOW PHO MAY USE INFORMATION
PHO may use information as reasonably necessary to respond to an inquiry, provide healthcare, determine an appropriate administrative next step, schedule or manage appointments, verify identity, coordinate laboratory testing, coordinate provider-authorized patient-specific products, process cash-pay transactions, perform healthcare operations, maintain required records, conduct legitimate administrative follow-up, administer community events, manage PHO Event & Community SMS communications, protect patients and workforce members, prevent fraud, investigate security concerns, perform quality assurance, comply with law, manage professional or regulatory requirements, respond to payment disputes or chargebacks, and protect PHO’s legitimate legal interests.
PHO may also use transaction, service-delivery, treatment, product-order, pharmacy-order, authorization, and related administrative information to document whether a healthcare service was partially or fully performed, whether a patient-specific product was ordered, whether a transaction was authorized, and whether PHO’s No Refund Policy applies to a particular disputed transaction.
30. HIPAA AND PROTECTED HEALTH INFORMATION
When PHO acts as a healthcare provider subject to HIPAA and information constitutes Protected Health Information, PHO handles that information according to applicable HIPAA Privacy, Security, and Breach Notification requirements. PHO maintains a separate HIPAA Notice of Privacy Practices that describes patient rights and the permitted uses and disclosures of PHI. HHS requires covered healthcare providers to provide such a notice and to prominently make it available on a website that describes the provider’s services or benefits. HHS revised its model notices in 2026 to account for changes involving Part 2 information. HHS.gov This website Policy does not replace PHO’s formal HIPAA Notice of Privacy Practices.
31. SUBSTANCE-USE-DISORDER INFORMATION AND 42 C.F.R. PART 2
Certain substance-use-disorder records may be subject to additional federal confidentiality requirements under 42 C.F.R. Part 2 when those requirements apply. As of February 16, 2026, HIPAA-covered entities subject to the relevant requirements must address Part 2 information in their Notice of Privacy Practices, and federally assisted Part 2 programs have additional notice obligations. HHS.gov Nothing in this Policy should be interpreted as representing that PHO is necessarily a federally assisted Part 2 program. Where PHO possesses information subject to Part 2, PHO will apply the requirements that legally govern that information.
32. FLORIDA PATIENT RECORDS AND CONFIDENTIALITY
PHO handles patient records according to applicable federal and Florida law. Florida Statutes § 456.057 addresses matters including ownership and control of patient records, confidentiality, disclosure, and furnishing records or copies. Online Sunshine PHO may require appropriate identity verification, authorization, or documentation establishing authority before releasing sensitive patient information. PHO does not disclose medical information merely because someone requests it; disclosure must have an appropriate legal basis. A separate financial dispute does not eliminate a patient’s record-access rights where access is legally required.
33. RECORD RETENTION
PHO does not apply one universal retention period to every category of information because applicable retention periods may differ depending upon the nature of the record, the healthcare professional involved, professional-board requirements, HIPAA, Florida law, AHCA requirements where applicable, pharmacy and laboratory requirements, contractual obligations, accounting and tax requirements, litigation holds, fraud-prevention needs, and other legal considerations. PHO retains records for the period reasonably required by the legal, clinical, administrative, financial, and operational obligations applicable to the specific record and uses appropriate destruction, deletion, or de-identification practices when information no longer needs to be maintained.
34. ROLE-BASED ACCESS AND MINIMUM NECESSARY PRINCIPLES
PHO seeks to restrict access to sensitive information according to job function, legitimate operational need, clinical responsibility, and applicable law. Personnel should not access information merely because a system technically permits access. Where HIPAA’s minimum-necessary standard applies, PHO will apply that standard to applicable uses, disclosures, and requests. Access may differ among healthcare providers, clinical personnel, executive administration, operational staff, outreach personnel, contractors, provider partners, and volunteers depending upon their responsibilities.
35. COMMUNITY VOLUNTEERS
Church members, community volunteers, or other individuals may help participants locate or complete a public PHO registration process or Interest Card. Such assistance does not give the volunteer access to Elation Health, patient medical records, QCommand Center, PHO backend portals, Airtable administration, private clinical communications, or other internal systems. Community volunteers are not authorized to independently diagnose, interpret laboratory results, promise treatment, prescribe, or provide medical advice on behalf of PHO unless the individual separately possesses appropriate professional authority and has been specifically authorized to perform the applicable clinical role.
36. PAPER PHO INTEREST CARDS
Paper PHO Interest Cards collected during community or church outreach are PHO administrative documents and should be protected from unnecessary access, unattended exposure, loss, or unauthorized copying. PHO personnel should collect and secure completed cards, transport them appropriately, reconcile relevant information into an approved PHO system, retain them according to PHO’s approved operational and legal retention rules, and securely destroy them when retention is no longer required. Because recurring SMS consent requires reliable evidence of what the individual authorized, PHO’s preferred method for recurring PHO Event & Community SMS consent is the approved digital consent process. A paper form should not be treated as sufficient recurring SMS evidence unless PHO preserves reliable documentation of the consent language, affirmative authorization, mobile number, individual, date, and applicable consent version.
37. PHO EVENT & COMMUNITY SMS UPDATES
PHO may operate an optional recurring informational text-message program called PHO Event & Community SMS Updates. The program is limited to non-clinical communications concerning PHO event announcements, event invitations, RSVP confirmations, RSVP reminders, event dates and times, event locations, schedule or location changes, event cancellations, and related community-program notices. The program is not intended for patient-specific medical advice, laboratory results, prescription instructions, treatment instructions, clinical consultations, or patient appointment reminders managed through PHO’s clinical workflow. The Event & Community program is also not intended to authorize unrelated product advertisements, treatment promotions, discounts, coupons, limited-time sales, or unrelated promotional campaigns.
38. SMS CONSENT
Participation in PHO Event & Community SMS Updates is voluntary and requires separate affirmative consent for recurring messages. Providing a mobile number, selecting “Text” as a preferred communication method, completing an Interest Card, requesting future event information, becoming a PHO patient, purchasing a PHO service, or participating in a community event does not by itself constitute recurring SMS consent. Consent to the Event & Community SMS program is not a condition of receiving healthcare, becoming a patient, purchasing a PHO service, or receiving treatment. PHO may retain evidence of consent including the mobile number, consent source, date and time, version of consent language presented, and opt-out status.
39. SMS MESSAGE FREQUENCY, CARRIER CHARGES, STOP, AND HELP
Message frequency varies according to PHO event and community-program activity. Message and data rates may apply according to the recipient’s wireless service plan. A recipient may reply STOP to opt out of PHO Event & Community SMS Updates and HELP for assistance. PHO should process valid opt-out requests promptly, and recurring messages under that program should cease after a valid opt-out is processed unless the individual later provides new valid consent. Message delivery may be affected by carrier filtering, network availability, mobile-device settings, number reassignment, or other telecommunications circumstances outside PHO’s control.
40. MOBILE INFORMATION AND SMS-CONSENT DATA
PHO does not sell SMS opt-in information or mobile telephone information to third parties or affiliates for their own independent marketing or promotional purposes. PHO may provide information reasonably necessary to an authorized communications service provider to deliver messages, maintain consent or suppression records, process STOP and HELP requests, prevent unauthorized messaging, and perform other functions necessary to administer the authorized PHO communications program. Such access does not authorize the provider to use PHO’s consent information for its own unrelated advertising or promotional campaigns.
41. PATIENT-SPECIFIC COMMUNICATIONS
Patient-specific medical, clinical, laboratory, treatment, prescription, and appointment communications are separate from PHO’s public Event & Community SMS program. PHO may use Elation Health or another approved clinical or administrative channel for appropriate patient-specific communications. PHO personnel should select a communication channel appropriate to the sensitivity of the information and should not intentionally place detailed medical content into the public Event & Community SMS stream.
42. EMAIL AND TELEPHONE COMMUNICATION
PHO may communicate by email or telephone for legitimate administrative or healthcare-related purposes such as responding to an inquiry, scheduling, registration, requested follow-up, payment administration, event coordination, record requests, and other appropriate PHO business. Ordinary email and telephone communication may have privacy limitations. Individuals should avoid transmitting unnecessary detailed medical information through general public email when a more appropriate secure clinical communication method is available. Providing authorization for one communication method does not automatically constitute consent to unrelated promotional communications.
43. THIRD-PARTY SERVICE PROVIDERS
PHO may use third-party entities to perform administrative, technical, financial, legal, clinical-support, communications, security, website, laboratory, pharmacy, or other legitimate functions. Depending upon the function involved, these parties may include Elation Health, laboratories, pharmacies, medical suppliers, payment processors, Wix, Twilio, Airtable, information-technology providers, security providers, attorneys, accountants, and other authorized vendors. Use of a vendor does not automatically authorize disclosure of PHI. Where applicable law requires a Business Associate Agreement or other privacy arrangement before a vendor receives PHI, PHO should use the legally appropriate agreement or should not disclose PHI in the manner requiring such an agreement.
44. DISCLOSURES PERMITTED OR REQUIRED BY LAW
PHO may use or disclose information when permitted or required by applicable law. Depending on the type of information and circumstances, this may include disclosures related to treatment, payment, healthcare operations, public health, healthcare oversight, licensing, legally valid court processes, law enforcement, fraud investigations, professional disciplinary proceedings, prevention of serious threats, mandatory reporting, legal claims, or other legally authorized purposes. This section is not blanket permission to disclose patient information whenever requested. Each disclosure must have an appropriate legal basis and remain subject to any privacy protections applicable to the information.
45. SALE AND COMMERCIAL USE OF PERSONAL INFORMATION
PHO does not sell PHI. PHO does not sell PHO Event & Community SMS opt-in information or mobile telephone numbers to third parties for their independent marketing or promotional use. PHO does not authorize a website analytics company, advertising company, communications vendor, or other service provider to use PHO patient information for an independent commercial purpose merely because the vendor provides technology to PHO. If PHO materially changes its data-use practices in a manner that legally requires additional notice or consent, PHO will provide the required notice or obtain the required consent before implementing the new use.
46. COOKIES AND SIMILAR TECHNOLOGIES
The PHO website may use cookies, local storage, pixels, scripts, and similar technologies to provide website functionality, maintain security, remember preferences, improve usability, understand general website performance, and support other legitimate website functions. Some technologies may be necessary for basic website operation, while others may support preferences, analytics, or optional functionality. Information collected through these technologies may include IP address, device type, browser type, operating system, approximate geographic region, pages viewed, referring page, date and time of access, cookie identifiers, and general website interaction information.
47. ESSENTIAL AND FUNCTIONAL COOKIES
Essential cookies and comparable technologies may be necessary for website security, network management, navigation, authentication, fraud prevention, accessibility, session management, and other functions required for the website to operate properly. Because some technologies are necessary for basic functionality or security, disabling them may prevent portions of the site from functioning correctly. Functional cookies may remember user preferences or enable optional features intended to improve usability.
48. ANALYTICS AND WEBSITE PERFORMANCE TECHNOLOGIES
PHO may use analytics or performance technologies to understand general traffic, navigation patterns, website performance, device characteristics, and usability. Such information may help PHO identify broken pages, improve website design, understand how visitors reach the website, or evaluate general engagement. PHO does not use ordinary website analytics as a substitute for the clinical medical record and does not authorize general analytics tools to independently diagnose patients or determine treatment.
49. HEALTHCARE WEBSITE TRACKING TECHNOLOGIES
Healthcare websites require particular care when tracking technologies could receive sensitive health-related information. PHO seeks to distinguish ordinary public website activity from protected clinical information and does not intentionally transmit PHI to advertising or analytics companies merely for behavioral advertising, unrelated profiling, or another independent commercial purpose. Where a technology provider would receive PHI on PHO’s behalf and HIPAA requires a Business Associate Agreement or another legally appropriate structure, PHO should implement the required safeguards or avoid the disclosure. PHO may periodically review website integrations, forms, tracking technologies, and data flows to reduce the risk of inappropriate collection or disclosure of health-related information.
50. COOKIE AND PRIVACY CHOICES
Where supported by PHO’s website technology and required or appropriate under applicable law, website visitors may be provided with controls for managing non-essential cookies or similar technologies. Visitors may also use browser controls to block, delete, or limit cookies, although doing so may affect website functionality, saved preferences, or user experience. Where applicable law requires PHO to respond to a legally recognized privacy preference or opt-out mechanism, PHO will address the requirement to the extent it legally applies to PHO and the information involved.
51. INFORMATION SECURITY SAFEGUARDS
PHO uses administrative, technical, and physical safeguards designed to protect information according to its sensitivity and the requirements applicable to that information. Safeguards may include authentication, role-based access, least-privilege controls, password requirements, multi-factor authentication where supported, secure clinical systems, workforce training, access monitoring, physical protections, incident-response procedures, secure disposal, vendor controls, and encryption where appropriate. No website, electronic system, communication method, or physical environment can guarantee absolute security, and PHO does not represent that unauthorized access, technological failure, or security incidents can never occur.
52. PRIVACY AND SECURITY INCIDENT RESPONSE
PHO evaluates suspected privacy and security incidents based on the information involved, systems affected, circumstances, likelihood of compromise, legal requirements, and other relevant factors. When PHI is involved, PHO evaluates applicable HIPAA Privacy, Security, and Breach Notification requirements. Florida Statutes § 501.171 separately governs security of certain personal information in electronic form and expressly includes medical information and health-insurance information within its statutory definition of personal information. Online Sunshine PHO will provide notices to affected individuals, governmental authorities, regulators, or other parties when legally required.
53. CHILDREN AND MINORS
PHO’s general public website is not designed primarily for children under 13. PHO does not intend to use unrestricted public website forms to knowingly solicit unnecessary personal information directly from young children without appropriate parental or legal authority where required. Healthcare services involving minors are governed by applicable Florida and federal law, parental or guardian authority, minor-consent laws, the particular treatment involved, and other legally relevant circumstances. The privacy rights of a parent, legal representative, or minor may differ depending upon the specific healthcare service and governing law.
54. AUTOMATION AND ARTIFICIAL INTELLIGENCE
PHO may use software, analytics, workflow automation, or artificial-intelligence-assisted technologies to support legitimate administrative and operational functions, such as routing requests, assigning tasks, generating operational summaries, identifying workflow issues, producing reports, managing events, tracking statuses, and assisting with documentation. Automation does not replace licensed clinical judgment. QCommand Center, Airtable, Twilio, website analytics, or another general operational technology is not independently authorized to diagnose a patient, prescribe medication, make a final autonomous treatment decision, or override the judgment of an appropriately licensed healthcare professional.
55. THIRD-PARTY LINKS
The PHO website may contain links to independent third-party websites or services, including Elation Health, laboratories, pharmacies, payment services, governmental agencies, social-media platforms, educational resources, or other external services. Once a visitor leaves the PHO website and uses an independent third-party service, the third party’s own terms, privacy practices, security practices, billing rules, accessibility practices, and other policies may apply. A link from PHO does not mean that PHO controls every practice of the linked entity.
56. HIPAA PRIVACY RIGHTS
For PHI governed by HIPAA, individuals may have rights concerning access to certain records, correction or amendment requests, confidential communications, restrictions on certain uses or disclosures, accounting of certain disclosures, receipt of PHO’s HIPAA Notice of Privacy Practices, designation of a legally authorized personal representative, and filing of privacy complaints. These rights are subject to the requirements, procedures, exceptions, and limitations contained in applicable law. HHS’s current provider model Notice of Privacy Practices identifies these core rights. HHS.gov
57. IDENTITY VERIFICATION AND AUTHORIZED REPRESENTATIVES
PHO may require appropriate identity verification before granting access to sensitive information, modifying certain records, processing particular privacy requests, or disclosing healthcare information. A person acting on behalf of another individual may be required to demonstrate legal authority through guardianship, personal-representative documentation, healthcare surrogate authority, power of attorney where applicable, or another legally recognized basis. PHO should use verification procedures reasonably appropriate to the sensitivity of the information involved and should not request unnecessary sensitive information merely to process a routine inquiry.
58. PRIVACY COMPLAINTS AND NO RETALIATION
Individuals may raise good-faith concerns about PHO’s privacy practices and may exercise legally protected privacy rights without retaliation. PHO will not retaliate against an individual merely because the individual requests records, asks a privacy question, submits a good-faith privacy complaint, or communicates with an appropriate governmental or regulatory authority. Where HIPAA applies, individuals may also have rights to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.
59. PRIVACY REQUESTS
Privacy-related requests may be directed to PharmXHealthOne, PHARM X UNIVERSAL, LLC d/b/a PHARMXHEALTHONE, at 2828 South Seacrest Boulevard, Suite 216, Boynton Beach, Florida 33435; telephone 561-778-8121; email health@pharmxhealthone.com. PHO may request sufficient information to identify the requester, identify the information involved, determine the person’s legal authority, and process the request accurately. Individuals should not send unnecessary detailed medical histories, diagnoses, Social Security numbers, complete payment-card information, banking credentials, passwords, or other unnecessary sensitive information through a general privacy inquiry.
60. ONLINE PRIVACY REQUEST FORM
If PHO provides a general online Privacy Request Form, the form should be used for privacy administration rather than clinical care. The form may request the person’s name, email address, optional telephone number, state of residence, type of request, description of the request, and whether the request is being made for the individual or by an authorized representative. The form should clearly instruct users not to submit unnecessary detailed medical histories, diagnoses, medication information, laboratory results, Social Security numbers, complete payment-card information, passwords, or financial-account credentials. Sensitive record requests may be redirected to a more appropriate secure process.
61. ELECTRONIC RECORDS AND ONLINE FORMS
PHO may use electronic forms, electronic acknowledgments, electronic records, online registration, and electronic signatures where legally appropriate. Completing an electronic form does not eliminate the need for treatment-specific informed consent where such consent is legally or clinically required. PHO may maintain records demonstrating when an electronic form was submitted, what version of consent language was presented, what choices the individual made, and other information necessary to establish the validity of an administrative or communication authorization.
62. CHANGES TO THIS POLICY
PHO may update this Legal Notice, Privacy Policy & Cookie Notice when reasonably necessary because of changes in federal or Florida law, governmental guidance, PHO services, technology, vendors, healthcare practices, website functions, privacy practices, security requirements, communications programs, or organizational operations. The Last Updated date at the beginning of this page identifies the current published version. PHO will not rely solely upon an updated website policy when applicable law requires separate notice, affirmative consent, authorization, or execution of a separate agreement.
63. GOVERNING LEGAL REQUIREMENTS
This Policy is intended to operate consistently with applicable federal law, Florida law, professional licensing requirements, privacy laws, healthcare regulations, and applicable local requirements. Nothing in this Policy is intended to waive a patient’s non-waivable legal rights, relieve PHO of a legally mandatory duty, prevent legally protected governmental reporting, expand PHO’s authority beyond applicable law, or substitute website language for a license, exemption, registration, Business Associate Agreement, informed consent, patient authorization, financial agreement, governmental approval, or another legal requirement. If a provision of this Policy conflicts with a mandatory legal requirement, the mandatory legal requirement controls.
64. SEVERABILITY
If any provision of this Policy is determined by a competent authority to be invalid, unlawful, or unenforceable, that determination should not automatically invalidate unrelated provisions that can continue to operate lawfully. The affected provision should be interpreted or limited only to the extent reasonably necessary to comply with applicable law.
65. CONTACT INFORMATION
Questions concerning this Legal Notice, Privacy Policy & Cookie Notice may be directed to PharmXHealthOne, PHARM X UNIVERSAL, LLC d/b/a PHARMXHEALTHONE, 2828 South Seacrest Boulevard, Suite 216, Boynton Beach, Florida 33435. PHO may be contacted by telephone at 561-778-8121 or by email at health@pharmxhealthone.com. Individuals should avoid sending unnecessary detailed medical information through general email when an appropriate secure patient or clinical communication process is available.
66. RELATED PHO TERMS, NOTICES, AND PATIENT DOCUMENTS
This Policy should be read together with PHO’s Terms and Conditions, HIPAA Notice of Privacy Practices, Good Faith Estimate / No Surprises Act Notice, Telehealth Consent, Consent to Treatment, Accessibility Statement, applicable Cookie Preferences controls, applicable financial policies, patient-specific treatment documentation, pharmacy information, laboratory information, and treatment-specific informed-consent documents. PHO’s Terms and Conditions contain the complete general contractual provisions concerning PHO’s cash-pay model, patient financial responsibility, Final Sale and No Refund Policy, medication and product ordering, treatment and service payments, cancellations, payment disputes, patient responsibilities, online services, and related general terms. PHO should make an item clickable only when the corresponding public document has actually been reviewed and published.
FINAL LEGAL NOTICE
This Legal Notice, Privacy Policy & Cookie Notice should be read together with PHO’s Terms and Conditions, HIPAA Notice of Privacy Practices, applicable informed-consent documents, financial policies, Final Sale and No Refund Policy, Good Faith Estimates, telehealth documentation, laboratory and pharmacy disclosures, treatment-specific documents, and all federal, Florida, and applicable local legal requirements governing the particular PHO service, healthcare professional, transaction, communication, or patient relationship. PHO’s website and public documents are intended to provide transparency regarding PHO’s operations and policies, but they do not replace individualized healthcare-provider judgment, treatment-specific informed consent, or mandatory legal requirements.
bottom of page