Privacy Policy
A-S Medication Solutions

Information We Collect ​

We collect, and have collected in the preceding 12 months, the following categories of personal data: 

​

• Identifiers – name, postal address, email address, telephone number, unique device identifiers. 

• Commercial Information – records of products or services purchased, obtained, or considered. 

• Internet or Electronic Network Activity – IP address, cookie IDs, browsing history, interactions with our sites. 

• Geolocation Data – approximate location derived from IP address. 

• Professional or EmploymentRelated Data – job title, employer, or specialty when voluntarily provided. 

• Sensitive Personal Data – PHI where services require, and only as permitted by HIPAA; precise geolocation; and other categories defined by state law. 

​

Sources ​

We obtain personal data directly from you, automatically through cookies and similar technologies, and from service providers or business partners who support our operations. 

 

​

How We Use Your Information and Legal Bases ​

We use personal data for the purposes and lawful bases listed below: 

​

• Provide services, fulfil contracts, and respond to inquiries – Contractual necessity 

• Operate, maintain, and improve our websites and offerings – Legitimate interests / Consent (analytics cookies) 

• Send administrative or marketing communications – Consent where required; legitimate interests when permitted 

• Detect, prevent, and investigate security incidents or fraud – Legitimate interests / Legal obligation 

• Comply with legal and regulatory obligations, including HIPAA – Legal obligation 

​

​

Data Retention 

We retain personal data for as long as necessary to fulfil the purposes described above, or as required or permitted by applicable law, then securely delete or de-identify the information. 

 

​

Information Sharing 

We do not sell personal data for monetary consideration. We may "share" personal data for cross-context behavioral advertising. You may opt out of such sharing as described in “Your Privacy Choices.” 

​

• Service providers and processors that perform services on our behalf under written agreements. 

• Affiliates for internal business purposes, consistent with this policy. 

• Successors in interest in connection with a merger, acquisition, or asset transfer. 

• Public authorities or other parties when required to comply with the law or protect rights. 

​

​

Sensitive Personal Data 

We process Sensitive Personal Data only as strictly necessary to provide requested services, as permitted by law, or with your explicit consent. Additional safeguards—including encryption, leastprivilege access, and logging—apply to PHI. 

​

Children’s Privacy 

Our services are not directed to children under 13, and we do not knowingly collect personal data from such children. If we learn that we have collected data from a child under 13 without verifiable parental consent, we will delete it promptly. 

​

Automated Decision Making and Profiling 

We do not use automated decision-making that produces legal or similarly significant effects without human review. Where profiling for marketing occurs, you may opt out. 

 

​

Data Security 

We implement safeguards in line with SOC 2, NIST, and HIPAA requirements: 

​

• Encryption of data in transit and at rest using industry-standard protocols. 

• Access controls and authentication 

• Continuous monitoring, vulnerability management, and periodic penetration testing. 

• Employee privacy and security training. 

• Third-party attestations such as SOC 2 Type 2 and HITRUST. 

​

​

Your Privacy Rights 

Depending on where you live, you may have the rights listed below. We will not discriminate against you for exercising these rights. 

​

• Right to know and access the categories and specific pieces of personal data we hold. 

• Right to correct inaccurate personal data. 

• Right to delete personal data, with certain exceptions. 

• Right to portability of personal data you provided to us. 

• Right to opt out of sale, sharing, or targeted advertising. 

• Right to limit the use and disclosure of Sensitive Personal Data. 

• Right to appeal a denied request (Colorado, Connecticut, Virginia). 

• ​

To exercise your rights, contact us at: privacy@a-smeds.com. We will verify your identity and respond within 45 days (or the period required by law). If we deny your request, you may appeal by emailing privacy@a-smeds.com. 

​

Cookies and Tracking 

We use necessary, functional, analytics, and advertising cookies. You can manage nonessential cookies through our Cookie Preferences center or your browser settings. We honor the Global Privacy Control (GPC) signal where legally required. 

​

Updates 

We reserve the right to update this Privacy Policy periodically. If we make material changes, we will post a prominent notice on our website or contact you directly. "Last Reviewed" and "Effective Date" are shown at the top of this policy. 

​

Last Reviewed: May 22, 2025 

​

​