Prana Inc.

HIPAA Privacy

Prana Privacy Policy

Last Updated: July 12, 2022

Prana Care Inc. and its affiliates and related companies, including, but not limited to, Prana Pharmacy Chicago LLC (collectively, “Prana,” “we,” “us,” or “our”) understands your concerns with regard to how information about you is used and shared, and we appreciate your trust that we will use and share information about you carefully and sensibly. This Privacy Policy (this “Policy”) applies to information about you collected in connection with your access to and use of the website, www.prana-care.com the mobile and touch versions, and any sites and applications we have now or in the future that reference this Policy (collectively, the “Site”), as well as in connection with your use of the prescription management, fulfillment, and delivery services, and related products, offerings, services, information, content, and features, made available by us through the Site or otherwise (collectively, the “Services”). This Policy describes what information we collect about you in relation to your use of the Site and Services, how we collect it, how we use it, with whom we may share it, and what choices you have regarding it.

Please read this Policy carefully. By clicking “accept” or otherwise accessing and using the Site and Services, you agree that you have read and understand this Policy and that you accept and consent to the privacy practices (and any uses and disclosures of information about you) that are described in this Policy.

When do we collect your information?

Prana collects information relating to you and your use of the Site and Services in order to provide services and features that are responsive to your needs. We collect personal information in the following ways:

• Directly from you. We collect information from you when you register an account on the Site, place an order to fill your prescription, submit information or data to the Site (including, but not limited to, protected health information (“PHI”)), fill out a form, complete a survey, request information, send us an email or other communication, speak with us on the telephone, or otherwise interact with us or the Site or Services.
• From other third-party sources. We may receive information about you from your physician or other health care provider, and from our third-party partners, business associates, and service providers who help us to provide services to you, including the Site and Services.
• Automatically as you navigate the Site. Information collected automatically as you use and navigate the Site may include usage details, IP address, and information collected through cookies and other tracking technologies.

What information do we collect?

Information you provide to us. We collect the information you provide directly to us when you access and use the Site and Services, including, but not limited to, your:

• First and last name
• Email address
• Phone number
• Physical address
• Date of birth
• Gender
• Medical insurance information
• Treatment information and other PHI
• Billing and payment information
• Order information and history
• Account information (including username and password)
• Information regarding your utilization of the Services
• Survey or form responses
• Information contained in any communication that you have with us, whether via the Site (or any chat feature enabled there), telephone, email, or otherwise
• Any other content or information that you submit to or store within the Site otherwise provide to us

Information sent to us by web browsers. We and our third-party service providers collect information that is sent to us automatically by your web browser or device. This information may include your IP address, the identity of your Internet service provider, the name and version of your operating system, the name and version of your browser, the date and time of your visit (and the number of your visits), the pages you visit, the length of your visit, average time spent, and the websites you visit before coming to and after leaving the Site. The information we receive may depend on your browser or device settings.

The information we receive from your web browser and/or device is not, in and of itself, personally identifiable. Generally, we use this information in the aggregate to help us improve the Site and make it more compatible with the technology used by our visitors. However, we may combine it with other information in an attempt to identify you or we may combine it with information that does identify you. We may also review our server logs for security purposes – for example, to detect intrusions into our network – and we might share our server logs, which contain visitors’ IP addresses, with the appropriate investigative authorities who could use that information to trace and identify you.

Information collected by cookies and other technologies. We use “cookies” and other tracking technologies to collect information and support certain features of the Site. Cookies are identifiers we transfer to your device that allow us to recognize your device and tell us how and when pages and features in our Site and Services are visited and by how many people.

How do we use your information?

We process information in order to provide the Site and Services to you and any additional services you request, as well as to communicate with you. The precise purposes for which your personal information is processed will be determined by the request, and by applicable laws, regulatory guidance, and professional standards (including, without limitation, the Health Insurance Portability and Accountability Act of 1996, as amended (“HIPAA”)).

Generally, we use the information we collect from you to:

• Provide the Site, Services, and any other information or services you request to you.
• Support the Site, Services, and our business. For example, we may use your information to manage and process your orders, to respond to inquiries regarding our Services and other offerings, and to troubleshoot any issues with the Site or Services.
• Manage our day-to-day business operations and other business needs, such as operating, monitoring, analyzing, and improving the Services and the Site’s performance and functionality. For example, we analyze website and application user behavior and conduct research and analysis about the way you and other users use the Site and Services so that we can improve them.
• Provide services relating to your medical treatment. We use your PHI to manage and process your prescription orders, to communicate with you and your physicians, nurses, technicians, and other health care providers, personnel, and individuals and entities involved in your medical treatment, to send you information regarding the treatment and management of your medical condition, and to bill and collect payment for your prescription orders.
• Manage risk and protect the Site. We use data to better protect the Site, Services, and you by helping to detect and prevent fraud and abuse of the Site and Services.

• Tailor our Services and offerings, and the services and offerings of our third-party partners, to your preferences and apparent interests.

• Maintain our records.

• Market, promote, and provide information regarding our and/or our third-party partners’ products, services, and other offerings.

• Conduct processing necessary to fulfill other contractual obligations for you.

• Comply with our other contractual, legal, and regulatory obligations. We will use your information as necessary to enforce the terms of the Site and Services, to address emergency situations, and to comply with our other contractual obligations. We may also use your PHI for public health reporting purposes (for example, to report certain communicable diseases and to prevent or control disease, injury, or disability); to enable certain state and federal agencies and other health oversight committees to monitor the health care system, government programs, and compliance with laws; to support law enforcement purposes, facilitate law enforcement investigations, and/or comply with a court order, subpoena, warrant, summons, or similar process; for medical research; and