Privacy Policy

Version 1.0 · Effective November 8, 2026

Scope

This Privacy Policy describes how AccuMix Pharmacy, LLC, an Illinois limited liability company doing business as AccuRx Allergy Services ("AccuRx", "we", "us") collects, uses and protects information when you visit new.accu-rx.us or accu-rx.us, sign in to the AccuRx Allergy Services portal, or sign a consent form through a link or QR code we provide. Protected health information entered by a medical practice is governed by HIPAA, our HIPAA & HITECH Notice and the Business Associate Agreement with that practice; where this policy and those documents differ with respect to PHI, those documents control.

Information we collect

• Account information: name, work email address, phone number, role, and the practice(s) you are associated with, provided by your practice or AccuRx when your login is created.
• Clinical and order information: skin-test results, diagnoses, prescriptions, consents, superbills and supply orders entered by authorized practice users, and the pharmacy records created when an order is compounded. This is PHI handled under HIPAA.
• Consent signatures: when a patient signs an immunotherapy or testing consent, we record the typed name, the hand-drawn signature image, the acknowledgements checked, the date and time, the network (IP) address and browser type of the device used. The signature image is a written signature, not a biometric identifier, and is not used for identification by any biometric method.
• Payment information: when a practice or patient pays by card, the card details are entered directly with our payment processor, Stripe, Inc.; we receive only a confirmation, the last four digits and the card brand.
• Usage and device data: pages viewed, actions taken, time stamps, IP address, browser and operating system, collected in server and audit logs to keep the portal secure and to meet record-keeping duties.
• Support communications: messages you send through the Help Desk or by email.

Cookies

The portal uses a session cookie to keep you signed in and a security (CSRF) cookie to protect forms. Both are essential, and the session cookie is removed when you sign out or your session expires. We do not use advertising cookies, third-party analytics trackers or cross-site tracking, and we do not respond differently to "Do Not Track" signals because we do not track visitors across other sites.

How we use information

We use the information above to operate the portal and provide the services; to authenticate users and enforce role-based access; to compound, dispense and ship immunotherapy; to process payments and prevent fraud; to keep legally required pharmacy and consent records; to respond to support requests; to monitor security, investigate incidents and meet our legal obligations; and to produce de-identified statistics about testing and ordering volume. We do not use your information for advertising, and we do not sell or rent personal information.

When we share information

• With the medical practice you are associated with, and with the prescriber named on an order.
• With AccuMix Pharmacy, LLC, which compounds and dispenses the prescription.
• With service providers that act on our behalf under written confidentiality terms: cloud hosting and storage (Amazon Web Services), payment processing (Stripe, Inc.), email delivery, and shipping carriers (name and address only).
• When required by law, regulation, subpoena or court order; to protect the rights, safety or property of patients, practices, AccuRx or the public; or to a successor if AccuRx's business is transferred, in which case this policy continues to apply.

Security

We protect information with encryption in transit and at rest, unique logins and strong passwords, role-based access checked on every request, automatic sign-out, audit logs, secured backups and restricted administrative access. No method of transmission or storage is completely secure; if we learn of a breach affecting your information we will notify affected practices as required by law and our HIPAA & HITECH Notice.

Retention

Account information is kept while your login is active and for a reasonable period afterwards for audit purposes. Clinical, prescription, dispensing and consent records are kept for the period required by Illinois pharmacy law and federal law, and other records for up to ten years, after which they are securely destroyed. Server logs are kept for a shorter, rolling period unless needed for an investigation.

Your choices and rights

• Portal users may review and correct their account details, and may ask their practice administrator or the Help Desk to deactivate their login.
• Patients who wish to access, correct or receive a copy of their health information should contact the practice that treated them; the practice can obtain the records from us. See the HIPAA & HITECH Notice for details.
• Residents of states with consumer privacy laws may have additional rights to know, correct or delete personal information that is not covered by HIPAA. To make such a request, contact us as shown below; we will verify your identity and respond within the time the applicable law allows.

Children

The portal is a professional tool for medical practices and is not directed to children. Records about minor patients are entered only by their treating practice, with consent obtained from a parent or guardian as the practice's procedures and state law require, and are handled as PHI.

Links to other sites

The portal may link to payment pages operated by Stripe and to reference sites such as cms.gov. Those sites have their own privacy policies, which we encourage you to read.

Changes to this policy

We may update this policy from time to time. The current version, with its version number and effective date, is always available at new.accu-rx.us/legal/privacy/. Material changes will be announced in the portal.

Contact

Questions or requests about this policy: Privacy & Compliance Officer, AccuRx Allergy Services, 655 W. Grand Ave, Suite 240, Elmhurst, IL 60126 · phone 630-749-2771 · or the Help Desk inside the portal.