This RxResults website or application has been designed to comply with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), as well as the subsequent privacy and security rules, which establish standards for the privacy of individually identifiable health information; also, commonly known as protected health information, or PHI. We have implemented security procedures on this website or application in an effort to protect your personal health information. It has always been the policy of RxResults to protect the confidentiality of personal health information.

Protected Health Information (PHI) is defined as health information, including demographic data collected, which permits identification of an individual or could reasonably be used to identify that individual. It includes information regarding the diagnosis, medical treatment, care, advice or counseling of an identified member, the physical or mental condition of the member, or prescription drug therapy for an individual.

RxResults is a Business Associate of your health or prescription plan as defined by the HIPAA regulations. RxResults has executed a legal agreement with your health plan which defines RxResults as a Business Associate of the plan.

RxResults receives prescription claim data, medical claims data, and demographic information from entities such as your health plan carrier, prescription benefit manager, third party administrator, or other health care entity as authorized by your health plan or employer and as allowed by HIPAA business associate agreements. Demographic information provided about you may include identity information such as your name, address, date of birth, gender, etc. The demographic information may sometimes include your social security number, email address and phone number. RxResults also collects personal information voluntarily disclosed or entered by you such as your email address and telephone number.

In addition to your personal information, RxResults may automatically gather generic data or information from your web browser and/or your internet connection used to access the RxResults website or application. Examples of such collected information include: the internet protocol (IP) address used to connect your computer to the Internet; computer and connection information such as browser type and version, operating system, and platform; the Uniform Resource Locator (URL) path to, through, and from our website; mouse clicks, mouse movements, and scrolling activity; non-personally identifiable information entered by you while using the RxResults website or application; and the date and time you access our website.

If RxResults combines your personal information with non-personal information, the combined information will be treated as personal information as long as it remains combined.

RxResults uses your personal information to communicate with you and to display medication information that is tailored for you based on your prescription history. Your personal information is secure and may only be accessed by you through a valid login; by RxResults employees as needed to support your use of the RxResults website or application; or possibly by sub-contracted third parties that perform business services on the behalf of RxResults (subcontractors are also Business Associates as defined under HIPAA). All RxResults employees and sub-contractors are HIPAA-trained and tested and are not allowed to disclose your personal information other than as authorized.

RxResults does not sell or rent your personal information. RxResults may be required by law to disclose your personal information under certain circumstances.

Data is transferred from RxResults information systems to you during a "secured session" using secure socket layer (SSL) 256-bit encryption technology and transport layer security (TLS) 1.2. SSL is the industry standard security protocol for encoding sensitive information and works by creating a shared digital key, which allows only the sender and receiver of the transmission to code and decode the information. Transport layer security (TLS) is a protocol that ensures privacy between communicating applications and you on the internet. If your web browser does not support 256-bit encryption, you should download the most current version.

Most web browsers have a method to visibly display whether you are using a website secured by SSL technology. This visible display is commonly presented by the presence of a padlock or key typically in or near the URL address bar at the top of the web browser window.

RxResults websites or applications may make use of web/internet cookies. Cookies are small pieces of information or data sent to your web browser from a web server and stored on your computer's storage device for record‐keeping purposes. RxResults uses this information to analyze traffic patterns and improve our website. If your web browser is not configured to allow cookies, this RxResults website may not function properly or function at all. Please refer to the help feature of your web browser to learn how to configure your web browser to accept cookies.

Once you have established your password through the registration process, you are responsible for keeping your password private. To maintain the security of your information, do not share your password with anyone. If you give your username or password to others, you assume responsibility for possible unauthorized access. If you suspect the privacy of your username or password has been compromised, please either change your password immediately or contact RxResults.

If you think the personal information RxResults has collected about you is inaccurate, you may send a written request for review and changes to RxResults at the following address:

• MyRxGuidance Member Services
• 320 Executive Ct, Ste 201
• Little Rock, AR 72205

Upon request of your PHI in RxResults’ possession, RxResults will provide requested PHI in a Designated Record Set as available in RxResults records (electronic or paper). Only those data elements requested by you shall be disclosed to you. A Designated Record Set means a group of records maintained by RxResults consisting of one or more of the following types of information:

• Medical claims and payment records about you,
• rescription claims and payment records about you,
• Information about your health plan or prescription plan enrollment, and
• Other information used to make decisions about you (i.e., provider chart notes, communications, etc.).

If requesting a change to your PHI, RxResults will investigate your request and make changes if warranted or allowed. It is important to note that much of the data RxResults collects is from your health plan. Therefore, some of your demographic information will need to be updated by your health plan rather than by RxResults. Once updated by your health plan, the updated information will be passed to RxResults.

This website may contain links to other websites that may have online information practices or privacy and security policies different from RxResults. RxResults is not responsible for the privacy and security practices of those websites, and we encourage our visitors to review the privacy and security practices of those websites.

RxResults welcomes your questions or comments regarding this RxResults website/application or RxResults’ privacy and security practices. Please write to:

• MyRxGuidance Member Services
• 320 Executive Ct, Ste 201
• Little Rock, AR 72205

Website support questions may be directed to RxResults’ call center at (501) 687-9531, or via email to memberservices@rxresults.com.

To protect your privacy, please do not use email to communicate information to RxResults that you consider confidential. Email is not a secure method of communication and is not encrypted unless using special encryption email technology. Accordingly, an unencrypted email message potentially could be accessed and viewed by others without your knowledge and/or permission while in transit to RxResults

If you contact RxResults, RxResults team members will use reasonable measures to verify the identity and authority of any individual requesting information about you. You may also request a copy of RxResults’ Policy and Procedures for Verification of Identity and Authority (HIPAA Policy #: P1.9).

Regularly change your password. Do not share your password with anyone. Sign out or log off the RxResults website or application; and close your web browser when done.