Privacy Policy

Effective date: August 13, 2026 · Version 1.0

This Privacy Policy describes what happens to information when you use lakehillsrx.com. It covers the website itself: the cookies we set, the analytics and advertising services we use, the forms you can fill in here, and what happens when you buy a supplement from us online.

This site is operated by Lake Travis Pharmacy Partners, LLC d/b/a Lake Hills Pharmacy, a licensed compounding pharmacy at 12005 Bee Caves Rd, Suite 1-A, Austin, TX 78738. In this policy, “we”, “us” and “our” mean Lake Hills Pharmacy, and “you” means the person using this site.

Your health information is covered by a different notice

If you are a patient of the pharmacy, the way we handle your health information is governed by our Notice of Privacy Practices, which is the notice the Health Insurance Portability and Accountability Act requires us to give you. It sets out your rights over your medical record and how we may use and disclose your health information. Where the two documents cover the same information, the Notice of Privacy Practices governs.

You cannot send us a prescription, or any patient health information, through a form on this website. There is no form here that asks for it. Prescriptions reach us from your prescriber and are handled in our pharmacy systems, not on this site.

Information you give us

You can choose to give us information in four places on this site.

• The provider and clinic onboarding form on our Partner With Us page. It asks for your name, work email, phone number, clinic name, practice type and practice address, and for the professional identifiers a pharmacy needs before it can dispense to your patients: your NPI number, your DEA number, and your state license number and its expiration date. This form is for licensed healthcare professionals. What you enter goes to HubSpot, the customer relationship management service we use to handle provider enquiries.
• The enquiry form on our medication information pages, which asks for your name, email, phone number, and your practice name and address. It is a business contact form for prescribers and their staff. It does not ask for patient information, and you should not put any in it. Submissions go to HubSpot as well.
• A customer account, if you create one to buy supplements. Your account is held by Shopify, which runs our online store, and it carries your name, email address, order history and any address you save for delivery.
• Calling, emailing or writing to us, in which case we have whatever you chose to tell us.

Information collected automatically

Like most websites, this one records technical information when you visit: your IP address, the type of device and browser you are using, the pages you look at, the links you click, the date and time of your visit, and the website or advertisement that sent you here. The next two sections describe the services that collect it and what each one does with it.

Cookies and similar technologies

A cookie is a small file a website asks your browser to keep. This site uses two kinds, and they are treated differently.

Cookies the site needs to work. These keep your shopping cart, remember that you are signed in, and keep your session secure. They are set whether or not you accept anything, because without them the site cannot do what you came here for. Declining optional cookies never breaks your cart, your account or your checkout.

Advertising and analytics cookies. These measure how the site is used and let us show and measure advertisements for our services. They are optional. Until you accept them, the services below either do not load at all or run with advertising and analytics storage switched off.

The services we use, and what each one does

Four groups of third-party services are involved in the optional cookies described above. Each is named here with what it actually does on this site.

• Google Ads and Google Tag Manager. Google measures our advertising and lets us show advertisements to people who have visited this site. The Google tag runs in Google Consent Mode version 2: before you answer the cookie banner it loads with advertising and analytics storage denied, which means it cannot read or write advertising cookies. If you accept, those signals are switched on. If you reject optional cookies, the tag is not loaded at all.
• HubSpot. HubSpot is our customer relationship management and marketing service. Its tracking script sets cookies that recognise your browser between visits, so that if you later submit one of the forms above we can see which pages and which advertisement brought you to us. The script also loads whatever additional tags are configured in that HubSpot account, which can include advertising tags. It does not load unless you accept optional cookies.
• Meta, which operates Facebook and Instagram. The Meta pixel tells Meta that a visit or an action happened, so that we can measure our advertising there. It does not load unless you accept optional cookies. Where we send Meta an event about a compounded medication page, the event carries a generic category rather than the name of the medication.
• PostHog. PostHog is the product analytics service we use to understand how the site is used: pages viewed, clicks, and errors. Its requests are routed through our own domain, at lakehillsrx.com/ingest, before they reach PostHog. Routing them this way keeps the requests first-party, and it also means an ad blocker or a tracker filter list will not recognise them. That is why it is written down here. PostHog does not start until you accept optional cookies, and if you reject them it is switched off and its identifiers are cleared.

When advertising and analytics cookies are switched on, the address of the page you are viewing is sent to these services as part of an ordinary web request. Some of our medication information pages carry the name of a medication in their address.

Your choices about cookies

When you first arrive, a banner asks you to choose. You can accept all cookies, or reject the optional ones and keep only what the site needs to work. Before you answer, the only optional service present is Google's tag, which runs in its consent-denied mode — it sets no advertising or analytics cookies — as the Google section below describes. Every other optional service stays off unless you accept.

You can change your mind at any time. The Cookie settings control in the footer of every page reopens that banner. If you withdraw your consent, we stop the optional services, expire the advertising and analytics cookies they set, and reload the page so that nothing already loaded keeps running.

Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a refusal of optional cookies without asking you again. A choice to accept that you made before you turned the signal on does not override it. You can still turn optional cookies on from the Cookie settings control if you want to.

Your browser also lets you block or delete cookies itself. Blocking the cookies this site needs to work may stop parts of the site from working.

Some state privacy laws describe the use of advertising cookies explained above as targeted advertising, and some treat the sharing of information with advertising services as a sale or a share of personal data. Rejecting optional cookies, or sending a Global Privacy Control signal, is how you opt out of it here.

Buying supplements online

Our online store and its checkout are run by Shopify. When you check out you leave this website for a checkout page Shopify hosts. Your payment details are entered on that page, not on this website, and they are handled by Shopify and its payment processors under Shopify’s own terms.

Two pieces of information travel with your cart to that checkout: the cookie choice you made, so that Shopify’s side of the checkout knows whether it may report your purchase to the analytics and advertising services above, and an analytics identifier, which is not attached at all if you rejected optional cookies.

Who we share information with

We share information with the service providers named in this policy, for the purposes described here: HubSpot for provider enquiries and marketing, Shopify for the online store and its checkout, and Google, Meta and PostHog for advertising and analytics where you have accepted optional cookies. We also share information where the law requires it, or to establish or defend legal claims.

Health information is not part of that list. It is governed by our Notice of Privacy Practices, which sets out who we may disclose it to and in what circumstances.

Data retention

We keep your information only as long as we need it.

How long that is depends on what the information is and why we hold it:

• Medical and prescription records. We keep these for at least the minimum period required by applicable federal and state law. Those periods vary by record type and by state, and generally fall in the range of seven to ten years. Records belonging to patients who were minors are kept longer, as the law requires.
• Account and order information. We keep this while your account is active, and afterwards for as long as we need it to meet our legal, tax, accounting and reporting obligations, to resolve disputes, and to enforce our agreements.
• Everything else. Where we no longer need information and no law requires us to keep it, we securely delete it, or de-identify it so that it can no longer be linked back to you.

Where the law requires a pharmacy to keep a record, we keep it. A request to delete cannot shorten a retention period the law imposes on us.

Data deletion

You can ask us to delete information we hold about you.

To make a request, call the pharmacy at 512-608-9355, email support@lakehillsrx.com, or use the contact details on our Contact page. Requests come to us directly rather than through an online form or a self-service control, so that we can verify who you are before we act on them.

What happens after you ask:

• We confirm your identity. We need to be satisfied that a request to delete health information comes from you, or from someone authorized to act on your behalf.
• We respond within 30 days. If we need longer, because the request is complex or because the law allows us a longer period, we will tell you within those 30 days, explain why, and tell you when to expect our response.
• We tell you what was deleted and what was kept. Where the law requires us to retain a record, we will say so and explain why.
• We pass the request on. We ask the service providers and other third parties that hold your information on our behalf to delete it as well, including from backup and archive systems. Deletion from backups and archives can take longer to complete than deletion from live systems.

Deleting your information may mean we can no longer provide some services to you, including dispensing a prescription.

Your rights under HIPAA, including your right to see, obtain a copy of, or ask us to correct your medical record, are the ones set out in our Notice of Privacy Practices.

Changes to this policy

We may update this policy. When we do, we post the updated version on this page and change the effective date and version number at the top of it.

How to contact us

If you have a question about this policy, or you want to make a request about your information, please contact us.

Lake Travis Pharmacy Partners, LLC d/b/a Lake Hills Pharmacy
12005 Bee Caves Rd, Suite 1-A
Austin, TX 78738
Phone: 512-608-9355
Email: support@lakehillsrx.com