Privacy Policy

Effective: July 7, 2026

1. Our Approach

PharmLink, LLC builds software for telepharmacy operations. We believe privacy is an architecture, not a feature. We do not track you. We do not sell your data. We do not use analytics or cookies on this website.

2. Information We Collect

We collect only what is necessary for the services you use:

• Business communications: Emails and messages you send us directly
• Platform account information: Name, work email, professional credentials, and role for authorized users of the PharmLink platform, under agreements with their organizations

This website collects nothing: no browsing data, device fingerprints, location data, or any other tracking information.

3. How We Use Information

• Providing and supporting the PharmLink platform
• Managing authorized user accounts
• Communicating about services or inquiries you have initiated
• Complying with legal obligations

4. Information We Do Not Collect

• We do not use cookies or tracking pixels on this website
• We do not run analytics scripts
• We do not collect health information through this website
• We do not share or sell personal data to third parties for marketing

5. Data Storage and Security

Platform data is stored with cloud providers that meet healthcare industry security standards, using encrypted connections in transit and encryption at rest, with role-based access control, multi-factor authentication, and complete audit logging. We retain data only as long as necessary for the purpose it was collected and as required by healthcare recordkeeping law.

6. Healthcare Data (HIPAA)

PharmLink operates as a business associate under the Health Insurance Portability and Accountability Act (HIPAA). Protected health information is processed only within the PharmLink platform, under Business Associate Agreements with the healthcare organizations we serve, and is protected with field-level encryption and end-to-end audit trails. Patient health information is never stored on, transmitted through, or accessible from this public website. Subcontractors that process protected health information on our behalf do so under Business Associate Agreements.

7. Third-Party Services

We use a small number of third-party services for business operations, including cloud infrastructure (Amazon Web Services) for platform hosting. Each service has its own privacy policy. We share only the minimum data necessary for each service to function, and any service that touches protected health information is covered by a Business Associate Agreement.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time. Contact us and we will respond within 30 days. Requests concerning patient records should be directed to the healthcare organization that holds them; we support our customers in fulfilling those requests.

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Changes

We may update this policy. Changes will be posted on this page with an updated effective date.

11. Contact

Questions about this Privacy Policy: mmaughan@germpharm.org

PharmLink, LLC, Lebanon, NH 03766