How does South Lake Compounding handle patient data?

South Lake Pharmacy handles protected health information because placing a compounded order through LifeFile requires patient identity, a prescriber, and directions for use. As a licensed pharmacy and HIPAA covered entity, it publishes a patient-facing HIPAA Notice of Privacy Practices. Clinic-level access controls, BAA terms, and data retention policies should be confirmed separately before you transmit PHI.

Does South Lake Compounding have a HIPAA privacy policy?

Yes. South Lake Pharmacy publishes a HIPAA Notice of Privacy Practices at slcompounding.com/hipaa-notice-of-privacy-practices/. The notice covers how the pharmacy uses and discloses patient health information in its role as a covered entity. It is patient-facing, not a clinic BAA.

Where does patient data go when I place a South Lake order?

Patient details are entered by the clinic through the LifeFile prescriber portal, processed by South Lake's ordering system, and used to compound and ship the medication from South Lake's Zephyrhills, FL facility. Each step should safeguard PHI under HIPAA obligations.

Who can see patient data on South Lake Compounding's LifeFile portal?

South Lake does not publish how access to patient data in LifeFile is restricted by role or organization for clinic users. Ask how access is controlled, whether it is role-based, and whether it is logged before sharing patient information.

How long does South Lake Compounding keep patient data?

South Lake does not publish its data retention or deletion policy for clinic-submitted patient records. Before committing, confirm retention periods, whether records can be deleted on request, and whether you can export patient history if you leave.

How does Fizy Health handle patient data?

Fizy Health keeps patient records organization-scoped so only authorized users see PHI, audits patient-linked cart actions per line, and signs a BAA at onboarding. Access controls are built into the product rather than negotiated separately.

South Lake Compounding patient data handling

Ordering through South Lake Compounding's LifeFile prescriber portal passes protected health information — patient identity, prescriber, and directions for use — from your clinic to South Lake Pharmacy, which compounds and ships the medication. South Lake is a licensed pharmacy and a HIPAA covered entity; it publishes a HIPAA Notice of Privacy Practices at slcompounding.com that describes how it uses and discloses patient information in its pharmacy role. What the notice does not cover is how patient data entered by your clinic through LifeFile is stored, who on the platform can access it, and whether a clinic-level Business Associate Agreement is in place. Those are the questions a clinic should confirm in writing before sending patient information through the portal.

This page maps where patient data goes in the South Lake ordering flow and lists the data-handling questions a clinic should verify before going live.

Compare Fizy Health vs South Lake Compounding

Proudly Partnered With

What patient data does the LifeFile portal handle?

To place a compounded order through South Lake's LifeFile portal, the platform needs patient identity linked to the medication, a valid prescriber, and directions for use — all of which is protected health information under HIPAA. That data is created or entered at the clinic, processed by the LifeFile portal, and transmitted to South Lake Pharmacy, which compounds and ships the medication. South Lake is itself a HIPAA covered entity as a licensed pharmacy and publishes a patient-facing HIPAA Notice of Privacy Practices that covers how it uses and discloses information in its pharmacy role. What a clinic should also confirm is how LifeFile handles patient data entered by the clinic — role-based access controls, encryption in transit and at rest, data retention terms, and whether a signed clinic Business Associate Agreement governs the relationship.

Data-handling checklist

How to evaluate South Lake Compounding patient data handling

Each row is a data-handling consideration, what is publicly known about South Lake Pharmacy, and what to confirm before transmitting PHI through the LifeFile portal.

Data-handling criterion

What is publicly known

What to verify

Published HIPAA notice

What is publicly knownSouth Lake Pharmacy publishes a HIPAA Notice of Privacy Practices at slcompounding.com/hipaa-notice-of-privacy-practices/ covering use and disclosure of patient health information in its pharmacy role.

What to verifyReview the notice and confirm it reflects current practices. Note that the patient-facing notice is separate from a clinic-level BAA.

Clinic Business Associate Agreement

What is publicly knownSouth Lake does not publish a BAA template for clinic ordering relationships. A BAA governs how PHI entered by your clinic through LifeFile is handled.

What to verifyRequest a signed BAA before transmitting any patient information. Have your compliance team or counsel review its terms.

Access controls in LifeFile

What is publicly knownSouth Lake does not publish whether patient data entered by clinic staff in LifeFile is restricted by role or organization.

What to verifyAsk how prescriber and staff access to patient records within LifeFile is controlled, whether access is role-based, and whether it is logged.

Encryption of PHI

What is publicly knownSouth Lake does not publish encryption details for patient data in transit through LifeFile or at rest on its systems.

What to verifyConfirm encryption in transit and at rest for patient data handled through the prescriber portal, and ask where data is hosted.

Data retention and deletion

What is publicly knownSouth Lake does not publish how long patient data entered through LifeFile is retained or whether it can be deleted on request.

What to verifyConfirm retention periods, deletion rights, and whether you can export patient and order history if you leave.

Sourced from South Lake Pharmacy HIPAA Notice of Privacy Practices (slcompounding.com) and public website, reviewed June 2026. Data-handling and clinic BAA terms should be confirmed in writing with South Lake and reviewed by your own counsel.

Negotiate data terms per vendor, or start with scoped access built in?

South Lake Compounding fits if