Privacy Policy

Privacy Statement

Last updated: September 22, 2025

This Privacy Statement explains how St. Luke Compounding Pharmacy (“St. Luke,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit our websites, use our Provider or Patient Portals, communicate with us, or receive our services.

HIPAA vs. this Privacy Statement
If we create, receive, maintain, or transmit Protected Health Information (PHI) in connection with pharmacy services, PHI is governed by our HIPAA Notice of Privacy Practices (NPP), not this statement. This Privacy Statement covers website/portal use and other non-HIPAA contexts. For a copy of our NPP, contact us (details below).

1) Information We Collect

  1. Information you provide directly
  • Contact details (name, phone, email, address), professional credentials, organization details
  • Account and portal data (usernames, role/permissions, preferences)
  • Refill or service requests, customer support communications
  • Newsletter sign-ups and event registrations
  • Payment information (handled via secure processors; we do not store full card numbers)
  1. Information we receive from others
  • Prescribers/clinics (to fulfill prescriptions and verify care details)
  • Payment processors and financial institutions (payment status)
  • Couriers/shipping partners (delivery updates, tracking)
  • Software/service vendors that support our portals and operations
  • Regulators and reporting entities where required by law
  1. Information collected automatically
  • Device and usage data (IP address, browser type, pages viewed, timestamps)
  • Cookies and similar technologies for site functionality, analytics, and security

Please do not email PHI. Use our secure portals or call us for patient-specific questions.

2) How We Use Information

We use information to:

  • Provide and improve pharmacy and portal services (processing orders, refills, status updates)
  • Authenticate users, manage accounts/roles, and maintain security
  • Communicate about orders, billing, recalls/safety notices, or service updates
  • Respond to questions and support requests
  • Operate, analyze, and enhance our websites and portals
  • Comply with legal, regulatory, and audit obligations
  • Send optional educational content or newsletters (with your consent, where required)

3) How We Share Information

We may share information with:

  • Service providers / business associates who perform services for us (e.g., portal software, secure messaging, payment processing, shipping). These parties are bound by contractual or legal obligations to protect information.
  • Prescribers/clinics involved in your care, as appropriate.
  • Couriers and logistics partners for delivery and tracking.
  • Regulators and law enforcement when required by law (e.g., audits, investigations, PDMP/board reporting, or to protect rights/safety).
  • Successors to our business in the event of a merger, acquisition, or reorganization, subject to continued protections.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are defined under certain state privacy laws.

4) Cookies & Analytics

We use cookies and similar technologies to operate our site, keep sessions secure, and understand usage.
Types:

  • Essential (required for login, security, forms)
  • Functional (remember choices)
  • Analytics (aggregate site performance/traffic)

You can manage cookies through your browser settings; disabling some cookies may affect site functionality.

5) Communications & Marketing

  • Transactional messages (order status, shipping, account notices) are service-related.
  • Marketing email/newsletters are optional; you can unsubscribe via the link in any message.
  • Text messages (if offered) require your consent; standard carrier rates may apply. You can opt out as instructed in the message.

6) Patient & Provider Portals

Our portals use administrative, technical, and physical safeguards (e.g., role-based access, encrypted transmission) to help protect information. You are responsible for maintaining the confidentiality of your credentials and for promptly notifying us of any suspected unauthorized access.

7) Data Retention

We keep information as long as needed to provide services, fulfill legal/regulatory obligations (including pharmacy recordkeeping), resolve disputes, and enforce agreements. Retention periods vary by record type and applicable law.

8) Your Choices & State Privacy Rights

Your choices

  • Update contact details, addresses, and payment methods in the Patient Portal
  • Manage email preferences or unsubscribe at any time
  • Control cookies via browser settings

State privacy rights (e.g., CA, CO, CT, VA, UT and others)
Depending on your state, you may have the right to request access, correction, deletion, or portability of certain personal information; or to appeal a decision on a request. To exercise rights:

  • Email admin@stlukecompounding.com or call 877-310-5668 (toll-free).
  • We will verify your identity and respond as required by applicable law.
  • Authorized agents may submit requests with proper authorization.

HIPAA-covered PHI rights (access, amendments, restrictions, accounting of disclosures) are handled under our HIPAA NPP.

9) Security

We implement safeguards designed to protect information from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. No method of transmission or storage is 100% secure; we encourage you to use our portals for sensitive communications and to protect your login credentials.

10) Children’s Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 without appropriate consent as required by law. If you believe a child has provided us information, contact us so we can take appropriate action.

11) Third-Party Links

Our site may link to third-party websites or services. We are not responsible for their privacy practices. Review their policies before providing information.

12) International Users

We operate in the United States. If you access our site from outside the U.S., you understand that your information will be processed in the U.S., where laws may differ from those in your country.

13) Changes to This Privacy Statement

We may update this statement from time to time. If we make material changes, we will post the updated version with a new “Last updated” date and, where appropriate, provide additional notice.

14) Contact Us

St. Luke Compounding Pharmacy
9338 Little Rd, New Port Richey, FL 34654
Phone: 727-416-2006 • Fax: 727-416-2007 • Toll-Free: 877-310-5668
Email: admin@stlukecompounding.com

For questions about our HIPAA Notice of Privacy Practices, or to request a copy, contact us using the information above.

Top of Form

 

Bottom of Form