HENYIDA LLC

Privacy Notice

Member Services | Essential Medicine Access Program

Effective Date: 2 APR 2024
Last Updated: 2 APR 2026

1. Our Commitment to Privacy and Integrity

At HENYIDA LLC ("HENYIDA," "we," "our," or "us"), integrity is fundamental to how we conduct business and manage the information entrusted to us.

We recognize that our services may involve sensitive personal, medical, regulatory, and commercially confidential information. We are committed to protecting this information through responsible data governance, appropriate technical and organizational safeguards, and transparent information-handling practices.

This Privacy Notice explains how HENYIDA collects, uses, stores, shares, and protects personal information in connection with its membership services and Essential Medicine Access Program.

2. Scope

This Notice applies to individuals who register for HENYIDA membership, request assistance accessing essential medicines, submit prescriptions or supporting documentation, or communicate with HENYIDA concerning these services.

It also applies, where relevant, to personal information provided by authorized patient representatives, healthcare professionals, and other individuals participating in the service.

Separate confidentiality arrangements may govern proprietary information submitted by manufacturers, suppliers, and commercial partners.

3. Information We Collect

Depending on the service requested, HENYIDA may collect:

Personal and Membership Information

  • Full name, date of birth, and contact information

  • Country of residence and country of treatment

  • Membership identification number

  • Authorized representative information, where applicable

Health and Treatment Information

  • Prescriptions and prescribed medicines

  • Medical necessity documentation

  • Relevant diagnosis and treatment information provided by the patient or treating healthcare professional

  • Supporting clinical records necessary to assess the request

Professional and Regulatory Information

  • Treating physician and healthcare institution details

  • Relevant regulatory documentation and correspondence

  • Information concerning medicine availability, import authorization, and supply arrangements

Administrative and Technical Information

  • Application status, case reference numbers, and correspondence

  • Consent and authorization records

  • Information needed to maintain the security and functionality of our systems

We seek to collect only information reasonably necessary for the identified purpose.

4. How We Use Information

HENYIDA may process information to:

  1. Verify membership and administer requested services.

  2. Review and assess essential medicine access requests.

  3. Communicate with patients and authorized representatives.

  4. Coordinate with treating healthcare professionals to verify prescriptions and obtain necessary clinical documentation.

  5. Assess medicine availability, sourcing arrangements, and applicable regulatory requirements.

  6. Facilitate communications with authorized manufacturers, suppliers, importers, pharmacies, and regulatory authorities.

  7. Prepare, support, or coordinate regulatory and import authorization requests.

  8. Maintain appropriate records, fulfill legal obligations, and protect the integrity of our operations.

  9. Investigate security incidents, prevent misuse, and improve the administration of our services.

HENYIDA does not independently prescribe medicines or replace the clinical judgment of the patient's treating healthcare professional.

5. Confidentiality and Information Sharing

HENYIDA limits the disclosure of personal and health information to what is reasonably necessary for the authorized service or otherwise permitted or required by applicable law.

Depending on the circumstances, information may be shared with:

  • Treating healthcare professionals: To verify prescriptions, treatment requirements, and medical necessity.

  • Manufacturers and suppliers: To confirm product availability, specifications, and procurement requirements, generally without disclosing identifiable clinical information unless necessary and authorized.

  • Licensed importers, logistics providers, and pharmacies: To coordinate lawful importation, delivery, storage, and dispensing.

  • Regulatory authorities: To support applications, authorizations, inspections, or other legally required processes.

  • Authorized service providers: To support secure information processing, hosting, document management, and administrative operations under appropriate contractual safeguards.

Information will not be disclosed to unrelated third parties for their independent marketing purposes without a separate lawful basis or authorization.

HENYIDA does not sell patient health information.

6. Secure Information Collection and Storage

HENYIDA uses designated secure software solutions, including HIPAA-enabled services where appropriately configured, to collect, transmit, and manage sensitive information.

Our information-security approach includes, as appropriate:

  • Encryption during transmission and storage

  • Access restrictions based on authorized responsibilities

  • Authentication and account-security measures

  • Secure document submission and storage

  • Activity logging and accountability controls

  • Administrative safeguards and procedures for responding to security incidents

Where applicable, HENYIDA enters into appropriate data protection or Business Associate Agreements with service providers.

No electronic system can guarantee absolute security. HENYIDA continuously evaluates reasonable safeguards appropriate to the nature and sensitivity of the information processed.

7. International Information Transfers

HENYIDA operates across jurisdictions and may coordinate services involving healthcare professionals, suppliers, regulatory authorities, and service providers located in different countries.

Information may therefore be processed or transferred internationally, including to the United States and relevant Caribbean jurisdictions.

Where required, HENYIDA will apply appropriate legal, contractual, and technical safeguards to international transfers and obtain additional authorization when necessary.

8. Data Retention

HENYIDA retains personal and health information only for as long as reasonably necessary to provide the requested services, meet applicable legal and regulatory requirements, maintain appropriate records, resolve disputes, and fulfill legitimate operational obligations.

Retention periods may differ depending on the information category, jurisdiction, and nature of the service.

When information is no longer required, HENYIDA will arrange for its secure deletion, de-identification, or other lawful disposition in accordance with its retention procedures.

9. Your Privacy Rights

Depending on applicable law, individuals may have rights to:

  • Request access to personal information held about them.

  • Request correction of inaccurate information.

  • Request deletion or restriction of certain information, subject to applicable obligations.

  • Withdraw consent where processing is based on consent.

  • Request information about relevant disclosures or international transfers.

  • Submit privacy concerns or complaints.

HENYIDA will evaluate and respond to requests in accordance with applicable law. Certain records may need to be retained despite a request for deletion or withdrawal of consent.

10. Consent and Withdrawal

Where consent is required, HENYIDA will request it through an appropriate authorization process.

Consent may be withdrawn by contacting HENYIDA using the details below. Withdrawal does not necessarily affect processing already lawfully completed or information that must be retained under applicable law.

Withdrawal may limit HENYIDA's ability to continue coordinating a medicine access request.

11. Third-Party Platforms and External Websites

HENYIDA may direct members to secure third-party platforms to complete applications or upload supporting documentation.

Such platforms are selected and configured with consideration for appropriate information-security and confidentiality requirements.

Members should submit prescriptions and other sensitive records only through the designated secure submission channels.

12. Changes to This Notice

HENYIDA may update this Privacy Notice to reflect changes in its services, information-processing practices, technology, or applicable legal requirements.

The current version will be published on the HENYIDA website with its effective date.

13. Contact and Privacy Inquiries

HENYIDA LLC
Privacy & Information Governance
Email: info@henyida.io
Business Address: 16192 Coastal Highway, Lewes, Delaware, USA 19958
Website: www.henyida.io

For privacy questions, requests concerning personal information, or concerns about confidentiality, please contact HENYIDA using the details above.

HENYIDA — Integrity in Every Interaction.