Privacy

Privacy Policy

America First Pharmacies, Inc. - Effective July 19, 2026

Short version. We use patient information to fill prescriptions, coordinate care, collect payment, run the pharmacy, and respond to your requests. We do not sell prescription information. We do not use prescription information for advertising. We do not place advertising or analytics pixels on our refill, transfer, medication review, provider order, or track-order forms.

Who this policy covers

This policy explains how America First Pharmacies, Inc. handles information collected through this website, our pharmacy services, phone calls, text messages, and patient forms. It is written for patients, caregivers, providers, and visitors who use our site.

Pharmacy records are also protected by HIPAA and pharmacy privacy rules. For the pharmacy’s current HIPAA Notice of Privacy Practices, call us. An approved web copy will be linked here when provided.If this website policy and our HIPAA Notice of Privacy Practices differ for protected health information, the stricter health privacy rule controls.

Information we collect

Contact details, including name, phone number, email address, mailing address, and delivery address.
Prescription and health information you choose to send us, including prescription numbers, medication names, date of birth, prescriber details, allergy notes, and medication-review details.
Payment and insurance-related information needed to process a prescription, quote a cash price, or coordinate benefits.
Provider portal details, including NPI, license information, clinic details, work email, phone number, and order information.
On eligible public pages only, coarse page category, device class, Core Web Vitals rating, and a helpful or not-helpful answer. The metrics service does not accept exact paths, URLs, search terms, referrers, user agents, cookies, free text, health terms, or user/session identifiers.
Basic infrastructure security logs needed to protect the site and its public services. Source IP is used transiently for abuse limits; the public metrics service stores only a keyed pseudonym in short-lived rate buckets, never the raw address.
Text message consent records, including the phone number, opt-in status, and message history needed to honor your communication choices.

How we use information

To fill, refill, transfer, compound, package, deliver, and manage prescriptions.
To contact you, your prescriber, your caregiver, your insurance plan, or another pharmacy when needed for treatment, payment, or pharmacy operations.
To respond to refill requests, transfer requests, medication reviews, provider orders, and general messages.
To send service-related texts or calls when you ask for them, such as refill updates, pickup details, delivery coordination, and account help.
To run security, fraud-prevention, quality, compliance, accounting, and legal processes for the pharmacy.
To improve non-PHI areas of the website, such as navigation, page performance, and broken-link monitoring.

How we share information

We share information only when needed to run the pharmacy, serve you, or comply with law.

Prescribers, pharmacies, health plans, caregivers, delivery services, and other parties involved in your care or payment, when allowed by HIPAA and pharmacy rules.
Vendors that support the pharmacy, such as secure intake, messaging, hosting, payment, delivery, claims, software, and recordkeeping providers.
Government agencies, regulators, courts, law enforcement, or public-health authorities when the law requires or permits disclosure.
Professional advisors, including attorneys, accountants, auditors, compliance consultants, and insurers.

We do not sell prescription information. We do not share text messaging opt-in data, consent, or originator information with third parties or affiliates for marketing or promotional purposes.

Cookies and analytics

We do not use advertising cookies, third-party analytics, advertising pixels, or session-replay tools. After privacy approval and deployment, eligible public pages may send the coarse first-party measurements listed above. Metrics are disabled on refill, transfer, medication review, contact, tracking, provider, shop, partner-demo, and other noindex or health-adjacent routes.

Public search terms stay in browser memory and are not transmitted or measured. The provider OAuth redirect temporarily uses browser session storage for a random CSRF state and PKCE verifier, then deletes both. Provider access tokens remain in memory only.

HIPAA rights

For protected health information, HIPAA gives you rights to request access, request an amendment, request a restriction, ask for confidential communications, receive an accounting of certain disclosures, receive a paper copy of the Notice of Privacy Practices, and file a complaint without retaliation.

To use those rights, contact the pharmacy at 972-947-2400 or info@america1rx.com. You may also complain to the U.S. Department of Health and Human Services.

Do not include prescription, medication, or other health details in ordinary email. Call the pharmacy or use the protected form on this site for patient-specific requests.

Texas privacy rights

The Texas Data Privacy and Security Act gives eligible Texas consumers rights over personal data, including the right to access, correct, delete, obtain a copy of, and opt out of certain processing. Some pharmacy and health records may be handled under HIPAA or other health privacy laws instead.

Send privacy requests to info@america1rx.com or call 972-947-2400. If we deny a Texas privacy request, you may appeal by replying to our decision or contacting the pharmacy with the word "appeal" in your request. If the appeal is not resolved, you may contact the Texas Attorney General.

Children and caregivers

We do not aim this website at children. Parents, guardians, and caregivers may send information for a patient when they are legally allowed to act for that patient or when the patient has asked them to help.

Security and retention

We use administrative, technical, and physical safeguards designed for pharmacy records. No website or electronic system is perfect. If you believe information was sent to us by mistake, call the pharmacy.

We keep records for as long as needed for pharmacy care, legal duties, accounting, audit, security, and dispute-resolution purposes.

Public aggregate metrics expire after 400 days. Short-lived pseudonymous abuse-limit buckets expire separately. Counsel and the pharmacy owner must approve the full records schedule for pharmacy, provider, security, and operational records.

Contact

Privacy requests and questions can be sent to America First Pharmacies, Inc., 7801 Mesquite Bend Dr. #108, Irving, TX 75063. You can call 972-947-2400 or email info@america1rx.com.

For patient-specific questions, call us or use a protected site form rather than ordinary email.