Credimed, Inc. ("Credimed") is committed to protecting the privacy of your Protected Health Information ("PHI"). PHI is information about you, including demographic information, that may identify you and that relates to your past, present, or future physical or dental health condition, healthcare services, or payment for services.
We are required by law to:
Without your separate authorization, we may use or disclose your PHI for the following purposes:
We may disclose your PHI when required by federal, state, or local law, including in response to subpoenas, court orders, or other legal process.
We may disclose your PHI to public health authorities, as required by law, for activities such as preventing or controlling disease, reporting child or adult abuse, or reporting product defects.
We may disclose your PHI to health oversight agencies (e.g., the U.S. Department of Health and Human Services) for activities authorized by law, including audits, investigations, and inspections.
We may disclose your PHI to "Business Associates" — third-party vendors who perform services on our behalf and have signed a Business Associate Agreement (BAA) requiring them to safeguard your PHI. Current Business Associates include:
For uses and disclosures other than those described above, we will obtain your written authorization. Examples include marketing communications and the sale of PHI. You may revoke an authorization at any time, in writing, except to the extent we have already acted in reliance on it.
You have the right to inspect and obtain a copy of your PHI maintained by Credimed. We will provide a copy in the form and format you request, if readily producible, within 30 days of your request. We may charge a reasonable, cost-based fee.
If you believe PHI we have about you is inaccurate or incomplete, you may ask us to amend it. We may deny your request under specific circumstances permitted by law.
You have the right to request a list of disclosures we have made of your PHI for purposes other than treatment, payment, healthcare operations, and certain other exceptions, for the past six (6) years.
You have the right to request restrictions on certain uses and disclosures of your PHI. We are not required to agree to your request, except in narrow circumstances (such as restricting disclosures to a health plan for services you paid for entirely out of pocket).
You have the right to request that we communicate with you about your PHI in a particular way or at a particular location (for example, only by email rather than by phone).
You have the right to receive a paper copy of this Notice, even if you have agreed to receive it electronically.
You have the right to be notified if we discover a breach of your unsecured PHI.
To exercise any of these rights, contact our Privacy Officer at privacy@credimed.us. Some requests must be made in writing.
If you believe your privacy rights have been violated, you may file a complaint with us at privacy@credimed.us or with the U.S. Department of Health and Human Services, Office for Civil Rights:
We will not retaliate against you for filing a complaint.
We reserve the right to change this Notice and to make the new Notice effective for all PHI we maintain. We will post a copy of the current Notice on our website and provide a copy upon request.
Credimed Privacy Officer
Email: privacy@credimed.us
Phone: [TO BE PROVIDED]
Mailing address: [TO BE PROVIDED]