1. Our Commitment to Your Privacy

Mercyland Healthcare Inc., is committed to protecting the privacy of your personal information, including your Protected Health Information (PHI). As a healthcare provider, we are a Covered Entity under the Health Insurance Portability and Accountability Act (HIPAA) and must follow its rules and regulations. This Privacy Policy serves as our Notice of Privacy Practices regarding PHI collected, used, and disclosed in connection with our services.

2. Information We Collect

We collect two main types of information:

A. Website Usage Information

This is non-PHI information collected when you browse our website:

• Technical Data: IP address, browser type, operating system, and pages visited.
• Contact/Inquiry Data: Information you voluntarily submit through online forms (e.g., name, phone number, email) to request more information or apply for a job.

B. Protected Health Information (PHI)

This is highly confidential information related to the individual supported, collected during the course of providing DDS-funded services:

• Health and Disability Information: Diagnoses, assessments, DDS Person-Centered Plans, medical records, and notes related to the individual’s Intellectual and Developmental Disability.
• Demographic and Personal Data: Name, date of birth, address, and DDS identification numbers.
• Financial and Payment Information: Details related to billing DDS, Medicaid, or other third-party payers for services.

3. How We Use and Disclose PHI

We may use and disclose your (or the persons supported) PHI without prior written authorization for the following purposes, as permitted by HIPAA:

• Treatment: To provide, coordinate, or manage the individual’s IDD and related health care services. This includes coordinating care with DDS staff, physicians, specialists, and other providers.
• Payment: To bill and collect payment from DDS, Medicaid, or other third parties for the services we provide.
• Health Care Operations: To run our agency, including conducting quality assessment activities, training staff, and performing administrative functions.
• Public Health Activities: To prevent or control disease, injury, or disability, including reporting suspected abuse, neglect, or exploitation to appropriate authorities (e.g., DDS or law enforcement).
• Serious Threat to Health or Safety: To prevent a serious and imminent threat to the health or safety of the individual supported or the public.
• Legal/Government Requirements: When required by federal, state, or DC law, or in response to a court order or other legal process.
• Family/Friends Involved in Care (with opportunity to object): We may share PHI with a family member, personal representative, or other person involved in the individual’s care or payment for care, unless the individual (or their legal representative) objects.

4. Uses Requiring Written Authorization

We must obtain your (or your legal representative’s) written authorization for other uses and disclosures of PHI, including:

• For marketing purposes (as defined by HIPAA).
• For the sale of PHI.
• For most uses of psychotherapy notes (if applicable).

You may revoke an authorization in writing at any time, but this will not apply to uses or disclosures already made based on your original authorization.

5. Your Rights Regarding PHI

As an individual or legal representative, you have the right to:

• Request Restrictions: Request limits on the PHI we use or disclose for treatment, payment, or health care operations. We are not required to agree to all requests.
• Access and Copy PHI: Request to inspect and obtain a copy of the PHI we maintain about the individual supported.
• Request an Amendment: Request to amend the PHI you believe is incorrect or incomplete.
• Receive an Accounting of Disclosures: Request a list of certain non-routine disclosures of PHI we have made.
• Request Confidential Communications: Request to receive communications of PHI by alternative means or at an alternative location (e.g., sending mail to a guardian’s address).

6. Website and Personal Information Security

We employ reasonable and appropriate physical, administrative, and technical safeguards to protect the security of our website and any information we collect, including both website usage data and PHI. While we strive to protect your information, no data transmission over the internet can be guaranteed to be 100% secure.

7. Changes to this Policy

We reserve the right to change these Terms of Use and this Privacy Policy at any time. Any changes will be posted on this page with an updated “Effective Date.”