Oneiro Management Group LLC

Privacy Policy

Effective October 12, 2026

This Privacy Policy explains how Oneiro Management Group LLC (“Oneiro,” “we,” “us”) collects, uses, and protects information in connection with our pharmacy services and the Oneiro ordering portal at order.oneiropharmacy.org.

Information we collect

Account information. Name, work email address, organization, role, and mobile phone number for portal users at the hospitals, clinics, and facilities we serve.
Patient and order information. Information needed to prepare, verify, and deliver prescribed therapies, submitted to us by authorized healthcare providers.
Contact information for notifications. A mobile phone number, where you have chosen to receive text message notifications.
Technical and security logs. Sign-in events, IP address, browser and device information, and records of actions taken in the portal, which we retain for security and audit purposes.

How we use information

To prepare, dispense, and deliver prescribed therapies and to coordinate care with the ordering provider.
To operate, secure, and support the ordering portal, including authentication and multi-factor verification.
To send transactional notifications you have requested, such as delivery scheduling and account activity alerts.
To meet our legal, regulatory, licensing, and recordkeeping obligations.

We do not use patient information for advertising, and we do not sell personal information.

SMS and text messaging

Oneiro Management Group LLC collects your mobile phone number to send transactional text messages that you have consented to receive, including delivery and account notifications and one-time security codes used to verify your identity when signing in. We do not send marketing or promotional text messages. How opt-in works is described on our Text Message Program page.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

Your mobile number is disclosed only to our messaging service provider, and only for the purpose of delivering these messages to you. Consent to receive text messages is optional and is never a condition of receiving pharmacy services. You may opt out at any time by replying STOP to any message, or by contacting us using the details below; we will suppress all further text notifications to that number. Reply HELP for assistance. Message frequency varies. Message and data rates may apply.

Text messages are not an encrypted or secure channel, so our notification messages deliberately contain no clinical or health information. They tell you only that an update is available and direct you to sign in to the portal, where information is protected by authentication.

How we share information

We share information only as needed to provide our services and as permitted by law:

With the healthcare providers and facilities responsible for a patient’s care.
With service providers who support our operations, such as cloud hosting, messaging, and delivery partners. These providers are bound by written agreements, including Business Associate Agreements where they handle protected health information, that restrict their use of information to the services they perform for us.
When required by law, regulation, subpoena, or other legal process, or to protect the rights, safety, and security of patients, our personnel, or the public.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes.

Protected health information

Oneiro Management Group LLC is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). Our use and disclosure of protected health information is governed by HIPAA and by our Notice of Privacy Practices, which describes patients’ rights with respect to their health information. Where this Privacy Policy and our Notice of Privacy Practices differ with respect to protected health information, the Notice of Privacy Practices controls. To request a copy, contact us using the details below.

Security

We protect information using encryption in transit and at rest, role-based access controls, tenant isolation, multi-factor authentication available on portal accounts, audit logging, and ongoing monitoring. No method of transmission or storage is completely secure, but we work to protect information consistent with HIPAA’s Security Rule and recognized industry practice.

Data retention

We retain information for as long as needed to provide our services and to satisfy our legal, professional, and recordkeeping obligations, including pharmacy record retention requirements, after which it is securely deleted or de-identified.

Your choices

Text messages. Opt out at any time by replying STOP, or by contacting us.
Account information. Portal users may review and update their profile information, or ask their administrator or us to do so.
Health information rights. Patients may request access, amendment, an accounting of disclosures, and other rights described in our Notice of Privacy Practices.

Children

The portal is intended for use by healthcare professionals and is not directed to children. We handle health information about patients of any age, including minors, in accordance with HIPAA and applicable state law.

Changes to this policy

We may update this Privacy Policy from time to time. We will revise the effective date above when we do, and material changes will be communicated to affected portal users.

Contact us

Questions about this Privacy Policy, our text message program, or your information:

Oneiro Management Group LLC
Attn: Privacy Officer
Email: info@oneiromanagementgroup.com