Trust & Security

Our security approach

We take a risk-based approach to protecting customer, patient, prescription, order and business information. Depending on the context, safeguards may include access controls, system updates, restricted staff permissions, verification steps, payment-provider controls, logs, backups, professional review and incident-response procedures.

We review security needs against the sensitivity of the information, the likelihood and impact of misuse, the systems and providers involved, and the obligations applying to pharmacy and health-related information. We may change or strengthen controls as risks, technology and legal requirements evolve.

Website and connection safety

Our official website is identified above. When security indicators are available, check that your browser shows a secure HTTPS connection and that the domain is spelled correctly before entering personal, prescription or payment information.

We may use hosting, firewall, monitoring, anti-spam, malware scanning, update and backup controls that are appropriate to our website environment. The availability and effectiveness of a particular control can depend on the platform, configuration and service provider in use at the time.

• do not continue if your browser displays a certificate or unsafe-site warning;
• avoid entering sensitive information on public or untrusted Wi-Fi;
• keep your browser, device and security software updated; and
• contact us if the website redirects unexpectedly, displays unusual payment instructions or appears altered.

Payments and checkout security

Depending on the payment method, checkout information may be processed by a specialist payment provider, bank or digital-wallet service. Their terms, privacy practices, fraud controls and security systems may apply in addition to ours.

We do not ask customers to send a complete card number, card PIN, internet-banking password or one-time banking code through ordinary email, SMS, social media or an unsolicited telephone call. Never share those details with a person claiming to be HRPharmacyUSA.

• check the amount, merchant name and website address before authorising payment;
• do not pay a changed bank account unless you independently confirm the request with us;
• contact your bank promptly if you notice an unauthorised or suspicious transaction; and
• keep payment confirmations and order references for your records.

Account and login protection

Where customer accounts are available, you are responsible for keeping your login details confidential and for activity performed through your account unless you report suspected compromise. Do not reuse a password that you use for email, banking or another important service.

• use a long, unique password or passphrase;
• turn on multi-factor authentication where the feature is offered;
• do not share login or verification codes with another person;
• sign out on shared devices and avoid saving passwords in a public browser; and
• contact us promptly if your email address, mobile number or account details change unexpectedly.

Health, prescription and identity information

Medicine and prescription services can involve sensitive personal and health information. We aim to collect, use, disclose, retain and dispose of such information only for authorised pharmacy, patient-care, order, payment, delivery, safety, fraud-prevention, legal or operational purposes.

Access should be limited to staff, pharmacists and service providers who need the information for their role. We may use approved prescription, dispensing, insurance, pharmacy-benefit, identity, monitoring or healthcare systems where authorised or required.

• send prescription tokens and documents only through the process we direct;
• do not place complete clinical details in public reviews or social-media comments;
• check that documents are accurate and relate to the correct patient; and
• tell us promptly if sensitive information is sent to the wrong address or recipient.

Identity, prescription and fraud checks

We may pause, review, contact you about, decline or cancel an order where information is incomplete, inconsistent, unusual or reasonably suspected to be fraudulent, unsafe or unauthorised. A security check is not an accusation; it is a safeguard for patients, customers, prescribers and the pharmacy.

Checks may include:

• matching customer, patient, prescription, billing and delivery details;
• confirming identity, age, authority, consent or an authorised representative;
• reviewing duplicate, early, excessive, high-risk or unusual order activity;
• contacting the patient, purchaser, prescriber, payment provider or delivery provider;
• requesting appropriate supporting information; or
• requiring collection, signature or another secure handover method.

Official emails, calls and messages

We may contact you about an order, prescription, pharmacist review, identity check, payment, refund, collection or delivery. Before providing sensitive information, confirm that the message relates to an order or request you recognise and use the official contact details on this page to verify it.

• we will not ask for your banking password, card PIN or complete one-time banking code;
• we will not pressure you to install remote-access software to complete a pharmacy order;
• we will not ask you to buy gift cards or cryptocurrency to pay an account;
• we may ask reasonable questions to verify identity before discussing sensitive information; and
• ordinary email or SMS may not be suitable for complete clinical records or highly sensitive documents.

Delivery, collection and handover security

Delivery controls depend on the medicine, order, destination and carrier. We may require identity confirmation, signature, an authorised recipient, secure packaging, tracked delivery, temperature management, collection or another handover method.

• provide a complete, accurate and secure delivery address;
• do not request unattended delivery for an order requiring secure receipt;
• keep tracking links and collection codes private;
• check that the parcel is addressed to the correct person before opening it;
• do not use medicine if tampering, damage, temperature exposure or product identity is uncertain; and
• contact us immediately about a missing, opened, damaged, delayed or incorrectly delivered parcel.

A replacement or early resupply cannot be guaranteed, especially for prescription or controlled medicines. Investigation, evidence, a new prescription or additional approval may be required.

Hosting, payment, technology and delivery providers

We may rely on third parties for website hosting, email, prescription systems, payment processing, analytics, customer support, fraud checks, cloud storage, backups, messaging and delivery. Those providers may process information on our behalf or under their own legal terms.

We aim to select and manage providers with regard to the service, information involved, contractual controls, security representations, access needs and operational risk. However, we do not control every system, network, employee, subcontractor or incident affecting a third-party provider.

Information may be processed or stored in different locations where permitted. See our Privacy Policy for more detail about disclosures, overseas handling and your privacy rights.

Security incidents and suspected data breaches

If we become aware of suspected unauthorised access, disclosure, loss, misuse, fraud, malicious activity or system compromise, we may investigate, preserve records, contain the issue, reset access, suspend a service, contact providers, obtain professional advice and notify affected people or authorities where appropriate or required.

The information available at the beginning of an investigation may be incomplete. We may need time to confirm what occurred, which systems and people were affected, whether information was actually accessed, and what actions are appropriate.

Fake websites, scams and impersonation

Criminals may copy a business name, logo, product image, website design, email address or social-media profile. They may send fake payment requests, order-confirmation messages, refund notices, prescription requests or delivery links designed to steal money or information.

Warning signs can include:

• a domain name or email address that is slightly misspelled;
• unusual urgency, threats or pressure to keep the request secret;
• payment by gift card, cryptocurrency or an unfamiliar bank account;
• a request for passwords, remote-access software or complete security codes;
• prices or medicine promises that appear unrealistic; or
• a message about an order, refund or prescription that you do not recognise.

How you can protect yourself

• use the official website address and save it as a bookmark;
• use unique login credentials and multi-factor authentication where available;
• review order, payment and delivery details before confirming;
• keep prescription tokens, tracking links and verification codes private;
• do not upload unnecessary identity or health documents;
• check bank and account activity regularly;
• contact us through official details when a message or request feels unusual; and
• report suspected theft, misuse, scam activity or unauthorised account access promptly.

Changes to this Trust & Security page

We may update this page to reflect changes in our website, pharmacy operations, payment methods, prescription systems, delivery arrangements, providers, security practices, risk environment or legal obligations. The date shown at the top identifies the current published version.

This page is general information and does not replace our Privacy Policy, Terms and Conditions, professional pharmacy obligations, provider terms or mandatory legal requirements. Where a mandatory requirement applies, it prevails.