Privacy Policy

This document is a template provided for convenience and does not constitute legal advice. Have it reviewed by qualified counsel before relying on it or offering it to customers.

1. Scope

This Privacy Policy describes how Fratera LLC (“Fratera,” “we,” “us”) collects, uses, discloses, and safeguards information when you use our platform. Fratera is a technology platform that connects prescribing providers with compounding pharmacies; we are not a pharmacy and do not take payment from patients.

This policy applies to information we collect through the platform and related websites. It does not apply to the privacy practices of pharmacies or providers, which are governed by their own policies and by law.

2. Information we collect

Account and workspace data: names, business and professional credentials (such as license and NPI numbers), email addresses, phone numbers, and role assignments for pharmacy, provider, and staff users.

Prescription and patient data: information submitted by pharmacies and providers on behalf of patients to operate the prescribing and dispensing workflow, which may include patient identifiers, clinical details, prescription contents, and dispensing status. This data is contributed by our customers; we process it to provide the service.

Usage and technical data: device and browser information, log data, and usage patterns collected automatically to operate, secure, and improve the platform.

3. How we use information

We use information to operate the prescribing and dispensing workflow between providers and pharmacies, authenticate users, authorize access by role, maintain audit logs, provide support, ensure security, and comply with legal obligations.

We do not sell personal information. We do not use prescription or patient data for advertising.

4. How we share information

We share information only as needed to provide the service: with the participating pharmacy and provider organizations that need it to fulfill a prescription, and with vetted service providers (such as hosting and infrastructure vendors) that process data on our behalf under appropriate safeguards.

We may disclose information when required by law or to protect the rights, safety, and security of the platform and its users.

5. Protected health information

Where Fratera creates, receives, maintains, or transmits protected health information on behalf of a covered entity, we act as a business associate and are bound by the applicable Business Associate Agreement and the HIPAA Rules. Patients have rights under HIPAA with respect to their health information; those rights are exercised through the covered entity, and we support covered entities in responding to such requests.

6. How we protect information

We apply technical and organizational safeguards designed to protect data, including tenant isolation, role-based access control, step-up signing for prescription authority, audit logging, and encryption of patient-identifying data. See our Security page for the controls currently in place. No system can be guaranteed perfectly secure, and we continuously work to improve our safeguards.

7. Retention

We retain information for as long as needed to provide the service, to meet legal and record-keeping obligations, and to resolve disputes. When data is no longer required, it is deleted or de-identified, subject to any retention periods required by law.

8. Cookies and similar technologies

We use cookies and similar technologies to keep users signed in, remember preferences, and understand how the platform is used. Session cookies are essential for authentication and security. You can control cookies through your browser settings, though disabling essential cookies may prevent the platform from working.

9. Your choices

Users may access, correct, or request deletion of their account information, subject to legal and clinical record-keeping requirements. Patients should direct requests about their health information to the provider or pharmacy that treats them. To make a privacy request, reach out through the For providers page or the contacts in your service agreement.

10. Children

The platform is not directed to children and is operated by licensed pharmacies and providers for legitimate clinical purposes. We do not knowingly collect information directly from children outside of a care relationship managed by a provider or pharmacy.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date and, where appropriate, by notice through the platform.

12. Contact

For privacy inquiries, reach out through the For providers page or the contacts provided in your service agreement.