HIPAA Notice of Privacy Practices

Effective January 5, 2026

This Notice of Privacy Practices describes how AmazingXO, LLC (“AmazingXO”) may use and disclose your protected health information (“PHI”) and how you can access this information. Please review it carefully.

AmazingXO acts as a business associate to licensed 503A compounding pharmacies. Health information you submit through our platform — including medical history, medications, allergies, and identity verification materials — may constitute PHI subject to applicable privacy protections.

1. How We May Use and Disclose Your Health Information

Treatment

We may use and disclose your PHI to facilitate the dispensing of compounded medications by licensed pharmacies. This includes transmitting your order details, prescription information, and relevant health history to the dispensing pharmacy.

Payment

We may use your PHI to process payments and verify eligibility for services, including communicating with payment processors and resolving billing disputes.

Healthcare Operations

We may use your PHI to operate, manage, and improve our platform — including compliance review, fraud detection, quality assurance, and customer support activities related to your care.

Required by Law

We may disclose your PHI when required to do so by federal, state, or local law, including disclosures to public health authorities, law enforcement, or in response to court orders and subpoenas.

Business Associates

We share PHI with third-party vendors who assist in operating our platform, including licensed pharmacies, payment processors, and identity verification services. These parties are required to protect your PHI under written agreements.

2. Your Rights Regarding Your Health Information

You have the following rights with respect to your PHI:

Right to Access: You may request a copy of your health information in our possession.
Right to Amend: You may request corrections to inaccurate or incomplete health information.
Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your PHI.
Right to Request Restrictions: You may request restrictions on how we use or disclose your PHI, though we are not required to agree to all requests.
Right to Confidential Communications: You may request that we communicate with you about your PHI in a specific way or at a specific location.
Right to a Paper Copy: You may request a paper copy of this Notice at any time.
Right to File a Complaint: You may file a complaint with us or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated. We will not retaliate against you for filing a complaint.

3. How to Exercise Your Rights

To exercise any of the rights described above, contact us in writing at privacy@amazingxo.com. We will respond to all requests within the timeframes required by applicable law.

4. Our Duties

AmazingXO is required by law to maintain the privacy of your PHI, to provide you with this Notice of our legal duties and privacy practices, and to notify you in the event of a breach of unsecured PHI. We reserve the right to change our privacy practices and the terms of this Notice at any time, provided such changes are permitted by law.

5. Complaints

If you believe your privacy rights have been violated, you may file a complaint with AmazingXO at privacy@amazingxo.com or with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr. All complaints must be submitted in writing. We will not penalize you for filing a complaint.

6. Contact

For questions about this Notice or our privacy practices, contact us at privacy@amazingxo.com or by mail at AmazingXO, LLC, United States.