This Privacy Policy explains how Tennis Friends LLC, doing business as Baton Rouge Pharmacy.com (“Baton Rouge Pharmacy,” “we,” “us,” or “our”), collects, uses, discloses, and protects information through BatonRougePharmacy.com and related online services.
This Privacy Policy applies to general website and commercial information. Protected health information (“PHI”) maintained by a HIPAA-covered entity is also subject to the applicable HIPAA Notice of Privacy Practices. If this Privacy Policy conflicts with that notice regarding PHI, the Notice of Privacy Practices controls.
1. Information We Collect
A. Information You Provide
Depending on how you use the Services, we may collect:
- Name, date of birth, age, sex, and contact information;
- Email address, telephone number, billing address, and shipping address;
- Account credentials and account preferences;
- Louisiana residency, identity, and eligibility information;
- Questionnaire responses, symptoms, medical history, allergies, medication use, treatment goals, and other health information;
- Prescription, provider, pharmacy, and fulfillment information;
- Product, dosage, quantity, order, shipment, renewal, cancellation, and transaction information;
- Payment-related information, such as payment token, card type, last four digits, billing status, and transaction identifiers. Full payment-card data may be collected directly by our payment processor rather than stored by us;
- Communications, support requests, complaints, feedback, and records of consent; and
- Any other information you choose to submit.
Please do not place sensitive medical details in the general contact form or ordinary email. Use the secure questionnaire or designated clinical channel.
B. Information Collected Automatically
When you use the website, we or our service providers may collect:
- Internet Protocol address;
- Browser, operating system, device type, and device identifiers;
- Referring and exit pages;
- Pages viewed, links selected, dates, times, and session activity;
- Approximate location inferred from IP address;
- Cookie identifiers and preferences;
- Shopping-cart, checkout, and account activity;
- Error logs, security events, and performance information; and
- Communications-delivery information, such as whether an operational email was delivered or opened.
C. Information From Other Sources
We may receive information from:
- Prescribing providers or clinical groups;
- Dispensing pharmacies and pharmacy systems;
- Identity, residency, fraud-prevention, or eligibility services;
- Payment processors;
- Shipping carriers;
- Account, questionnaire, hosting, security, analytics, email, and customer-support vendors; and
- Public or governmental sources where legally permitted.
2. How We Use Information
We may use information to:
- Operate, maintain, secure, and improve the website;
- Confirm age, identity, Louisiana eligibility, and delivery location;
- Administer questionnaires and route information for provider review;
- Facilitate diagnosis, treatment, prescribing, dispensing, payment, and healthcare operations where permitted;
- Process orders, payments, renewals, cancellations, refunds, and replacements;
- Ship products and provide delivery updates;
- Maintain accounts and transaction records;
- Communicate about provider requests, prescription status, orders, safety matters, account changes, and policy updates;
- Provide customer service and respond to complaints;
- Detect fraud, diversion, misuse, security incidents, and unlawful activity;
- Comply with pharmacy, healthcare, tax, accounting, recordkeeping, legal, and regulatory duties;
- Enforce agreements and protect patients, users, staff, providers, the pharmacy, and others;
- Conduct internal analytics, quality assurance, accessibility improvement, and service development; and
- Send marketing communications where permitted and with any consent required by law.
We do not use PHI for marketing or disclose PHI for sale except as permitted by HIPAA and described in the applicable Notice of Privacy Practices or a valid authorization.
3. Cookies and Similar Technologies
The website may use cookies, local storage, pixels, tags, or similar technologies for:
- Essential website operation;
- Age-gate and preference storage;
- Session and account security;
- Shopping-cart and checkout functionality;
- Fraud prevention;
- Performance monitoring;
- Remembering choices; and
- Analytics, but only as configured and permitted for a healthcare website.
Healthcare tracking caution: Tracking technologies must not be configured to transmit questionnaire answers, prescription information, account data, URLs that reveal treatment selections, or other PHI to an analytics, advertising, or social-media vendor unless the disclosure is legally permitted and the necessary HIPAA business-associate agreement or patient authorization is in place.
The final published policy should identify the actual tools used:
- Analytics: [NONE / MATOMO / GOOGLE ANALYTICS / OTHER]
- Advertising pixels: [NONE / LIST EACH]
- Consent-management platform: [NAME]
- Session replay: [NONE / NAME]
You can manage cookies through browser settings and any cookie-preference tool offered on the website. Disabling essential cookies may prevent account, cart, intake, or checkout features from working.
4. How We Disclose Information
We may disclose information to:
A. Healthcare Participants
Prescribing providers, clinical support personnel, dispensing pharmacists, pharmacies, laboratories, consultants, and other participants involved in treatment, payment, fulfillment, or healthcare operations.
B. Service Providers and Business Associates
Vendors that provide hosting, secure forms, questionnaires, account systems, payment processing, email, customer support, security, fraud prevention, data storage, analytics, accessibility, legal, accounting, and other operational services.
When a vendor handles PHI on behalf of a covered entity, we require an appropriate business associate agreement when legally required.
C. Payment and Transaction Partners
Payment processors, banks, card networks, fraud-prevention services, and financial institutions necessary to authorize and complete transactions, chargebacks, refunds, and recurring payments.
D. Shipping and Fulfillment Partners
Carriers and fulfillment providers receive information reasonably necessary to deliver an order. Packaging is intended to be discreet, but carrier records may still show sender, recipient, tracking, or delivery information.
E. Legal, Regulatory, and Safety Disclosures
We may disclose information when reasonably necessary to:
- Comply with law, court orders, subpoenas, audits, or regulatory requirements;
- Respond to authorized health oversight or professional-board inquiries;
- Report or investigate fraud, diversion, abuse, threats, or security incidents;
- Protect legal rights, health, safety, property, or the integrity of the Services; or
- Meet public-health, pharmacovigilance, recall, or reporting obligations.
PHI disclosures remain subject to HIPAA and other applicable restrictions.
F. Business Transactions
Information may be transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, subject to applicable healthcare privacy requirements and continued protection of PHI.
G. At Your Direction
We may disclose information when you request or authorize us to do so.
5. We Do Not Sell Personal Information
Baton Rouge Pharmacy does not sell personal information or PHI for monetary consideration. We do not share PHI for cross-context behavioral advertising.
If any website technology could legally constitute a “sale,” “sharing,” or targeted advertising under an applicable state privacy law, this section must be revised and a legally compliant opt-out mechanism must be provided.
6. Automatic-Renewal Information
When you enroll in automatic renewal, we maintain information needed to administer recurring orders, including plan selection, renewal interval, provider-review status, payment token, shipping information, and cancellation history.
You may cancel future renewals using the method disclosed at enrollment. Records of prior prescriptions, dispensing, transactions, and legal consents may be retained even after cancellation as required by law.
7. Data Retention
We retain information for as long as reasonably necessary for the purposes described in this Policy, including treatment, prescription and pharmacy recordkeeping, payment processing, tax and accounting, disputes, fraud prevention, security, and legal compliance.
Different records may have different retention periods. HIPAA-required policies, notices, and related documentation generally must be retained for at least six years, while Louisiana pharmacy, prescription, professional, tax, and litigation requirements may require different or longer periods.
Final retention schedule: [INSERT COUNSEL/COMPLIANCE-APPROVED RETENTION SCHEDULE].
8. Data Security
We use reasonable administrative, physical, and technical safeguards designed to protect personal information and electronic PHI. Measures may include access controls, encryption in transit, secure hosting, authentication, logging, workforce training, vendor review, backups, and incident-response procedures.
No website, email system, database, or transmission method is completely secure. You are responsible for protecting your account, email, devices, and passwords.
9. HIPAA and Breach Notification
Where HIPAA applies, uses and disclosures of PHI are governed by the HIPAA Privacy, Security, and Breach Notification Rules and the applicable Notice of Privacy Practices.
If unsecured PHI is affected by a reportable breach, required notices will be provided in accordance with applicable law. Other personal-information incidents will be handled under applicable federal and Louisiana breach-notification requirements.
10. Your Choices and Rights
Depending on the information and law involved, you may be able to:
- Review or update account information;
- Correct inaccurate contact, shipping, or billing information;
- Cancel automatic renewal;
- Unsubscribe from promotional email;
- Manage nonessential cookies;
- Request information about our privacy practices; or
- Exercise HIPAA rights regarding PHI, including access, amendment, restrictions, confidential communications, an accounting of certain disclosures, and receipt of a paper copy of the Notice of Privacy Practices.
Some records cannot be deleted or changed because of legal, clinical, pharmacy, fraud-prevention, or recordkeeping duties.
Submit requests to midcity@rxtogeaux.com. We may verify your identity before completing a request.
11. Children’s Privacy
The Services are intended only for adults age 18 or older. We do not knowingly offer the Services to children or knowingly collect personal information from a child through the prescription process.
If you believe a minor submitted information, contact us at midcity@rxtogeaux.com.
12. Louisiana and United States Use
The Services are directed to eligible users in Louisiana and are operated in the United States. Information is processed and stored in the United States unless an approved vendor arrangement states otherwise.
Do not use the prescription Services from another state or country unless expressly authorized and legally permitted.
13. Email and General Contact Forms
Ordinary email and general website contact forms may not be appropriate for sensitive medical details. The general contact form should be limited to non-clinical support matters and should display a warning not to include sensitive medical information.
Clinical information should be submitted only through the secure intake, patient portal, or other approved channel.
14. Third-Party Links
This Policy does not apply to websites or services operated independently by third parties. Review their privacy policies before providing information.
15. Changes to This Privacy Policy
We may update this Policy by posting the revised version and updating the date above. Material changes will be communicated or consented to when required by law.
16. Contact Us
Privacy Officer
HIPAA Privacy Officer
Tennis Friends LLC d/b/a Baton Rouge Pharmacy.com
12090 S Harrells Ferry Rd, Baton Rouge, LA 70816
Email: midcity@rxtogeaux.com
For questions involving medical records or HIPAA rights, use the Privacy Officer contact above rather than the general customer-support form.