1

Introduction

LifeCare Ambulance LLC (“LifeCare,” “we,” “us,” or “our”) is committed to protecting the privacy, confidentiality, and security of all personal and health information entrusted to us. This Privacy and Security Policy describes how we collect, use, disclose, and safeguard information in connection with our non-emergency medical transportation services and website at lifecareambulance.org.

As a HIPAA Covered Entity, LifeCare Ambulance LLC is required by law to maintain the privacy of Protected Health Information (PHI), to provide individuals with notice of our legal duties and privacy practices, and to abide by the terms of this notice currently in effect.

This policy applies to all employees, contractors, volunteers, and business associates of LifeCare Ambulance LLC who access, use, or disclose Protected Health Information in the course of their duties.

2

Information We Collect

We collect several types of information to provide and improve our services:

Personal Information — When you contact us or request services, we may collect your name, address, phone number, email address, date of birth, insurance information, and emergency contact details.

Protected Health Information (PHI) — In the course of providing medical transportation services, we collect health-related information including medical history, diagnosis codes, treatment information, and insurance details as required for billing and service coordination.

Digital Information — When you visit our website, we automatically collect certain technical data including IP address, browser type, pages visited, and time spent on pages through cookies and similar technologies. Please see our Terms & Conditions for more information on cookies.

SMS Consent Data — If you provide your mobile phone number and check the SMS consent checkbox on our Contact Us form, we collect your phone number and consent status for the purpose of sending service-related SMS communications.

3

How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery — To schedule, coordinate, and provide non-emergency medical transportation services
  • Billing & Insurance — To process insurance claims and billing for services rendered
  • Communications — To send appointment reminders, scheduling confirmations, dispatch updates, and service notifications (including via SMS if you have consented)
  • Legal Compliance — To comply with applicable laws, regulations, and legal processes, including HIPAA requirements
  • Quality Improvement — To improve our services, train staff, and conduct internal audits
  • Safety — To protect the safety of patients, staff, and the public
4

How We Share Your Information

LifeCare Ambulance LLC may share your information in the following limited circumstances:

  • Healthcare Providers — With hospitals, physicians, and other healthcare providers involved in your care and transportation
  • Insurance Companies — With your health insurance carrier for billing and reimbursement purposes
  • Business Associates — With vendors and service providers who assist in our operations under HIPAA-compliant Business Associate Agreements
  • Legal Requirements — When required by law, court order, or government regulation
  • Emergency Situations — To prevent or lessen a serious and imminent threat to health or safety
SMS Data Protection

Mobile opt-in data, SMS consent status, and phone numbers collected for SMS communication purposes will not be shared with any third party or affiliates for marketing purposes.

5

Key HIPAA Definitions

Protected Health Information (PHI)
Individually identifiable health information that is transmitted or maintained in any form or medium, including electronic, paper, or oral. PHI includes information about an individual's past, present, or future physical or mental health condition, the provision of health care, or payment for health care.
Covered Entity
A health plan, health care clearinghouse, or health care provider that transmits health information in electronic form in connection with HIPAA-covered transactions. LifeCare Ambulance LLC is a Covered Entity.
Business Associate
A person or entity that performs certain functions or activities that involve the use or disclosure of PHI on behalf of, or in providing services to, a Covered Entity.
De-Identified Information
Health information from which all 18 HIPAA-specified identifiers have been removed, such that the information cannot reasonably be used to identify an individual. De-identified information is not subject to HIPAA protections.
Minimum Necessary Standard
The HIPAA requirement that covered entities make reasonable efforts to use, disclose, and request only the minimum amount of PHI needed to accomplish the intended purpose.
6

Security Safeguards

LifeCare Ambulance LLC implements comprehensive administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of all PHI and personal information we maintain.

Administrative

  • HIPAA Privacy & Security Officer designated
  • Annual workforce training on HIPAA compliance
  • Written policies and procedures for PHI handling
  • Regular risk assessments and audits
  • Sanctions policy for policy violations

Physical

  • Restricted access to facilities and records
  • Secure storage of paper records
  • Workstation security policies
  • Device and media disposal procedures
  • Visitor access controls

Technical

  • Encrypted data transmission (SSL/TLS)
  • Access controls and unique user IDs
  • Automatic logoff for inactive sessions
  • Audit logs for PHI access and disclosure
  • Secure, encrypted data storage
7

Workforce Compliance & Training

All LifeCare Ambulance LLC employees, contractors, and volunteers who have access to PHI are required to complete HIPAA training upon hire and annually thereafter. Training covers:

  • HIPAA Privacy Rule requirements and patient rights
  • HIPAA Security Rule requirements for electronic PHI
  • LifeCare's internal policies and procedures for PHI handling
  • Breach notification requirements and reporting procedures
  • Consequences of non-compliance, including disciplinary action

All workforce members must sign a confidentiality agreement acknowledging their obligations under HIPAA and LifeCare Ambulance LLC's privacy policies prior to accessing any PHI.

8

Authorized Uses & Disclosures

LifeCare Ambulance LLC may use and disclose PHI without your written authorization for the following purposes as permitted by HIPAA:

  • Treatment — To provide, coordinate, or manage your healthcare and related services
  • Payment — To obtain payment for services rendered, including insurance billing
  • Healthcare Operations — For quality assessment, training, auditing, and other operational activities
  • Public Health Activities — As required by law for disease reporting, injury prevention, and public health oversight
  • Law Enforcement — As required by law or court order

All other uses and disclosures of PHI require your written authorization. You may revoke such authorization at any time in writing. LifeCare Ambulance LLC follows the minimum-necessary standard for all uses and disclosures of PHI.

9

Reporting Authority & Violations

If an inappropriate disclosure of PHI occurs, LifeCare Ambulance LLC shall assign a Privacy and Security Officer (PSO) to lead the investigation. The PSO will report findings to an Investigation Team composed of the CEO, HR Manager, company counsel, and other appointed members.

Any person subject to this policy who uses or discloses PHI in violation of its terms will be subject to disciplinary action, up to and including termination of employment.

In the event of a breach of unsecured PHI, LifeCare Ambulance LLC will notify affected individuals, the U.S. Department of Health and Human Services, and, where required, the media, in accordance with the HIPAA Breach Notification Rule.

10

Non-Retaliation

LifeCare Ambulance LLC will not take retaliatory or intimidating action against any person who exercises their right to report or file a complaint about any violation of this policy. No employee or staff member may threaten, coerce, or intimidate any person who reports a concern or participates in an investigation.

Retaliation against anyone who reports a HIPAA concern or cooperates in an investigation is strictly prohibited and may itself result in disciplinary action up to and including termination.

You may file a complaint with LifeCare Ambulance LLC directly, or with the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr. Filing a complaint will not result in any retaliation against you.

11

Your Rights

Under HIPAA, you have the following rights regarding your Protected Health Information:

Request access to your Protected Health Information
Request corrections to your health records
Request restrictions on certain uses and disclosures
Receive an accounting of disclosures of your PHI
Request confidential communications at a specific address or number
File a complaint with LifeCare Ambulance LLC or the U.S. Dept. of Health and Human Services

To exercise any of these rights, please contact us using the information provided at the bottom of this page.

SMS Communications Privacy — Section 12

Section 12 governs how we collect, use, and protect your phone number and SMS consent data in compliance with CTIA and TCPA requirements.

12

SMS Communications Privacy

When you consent to receive SMS messages from LifeCare Ambulance LLC by checking the optional SMS consent checkbox on our Contact Us form, we collect your mobile phone number solely for the purpose of sending service-related communications such as trip confirmations, scheduling updates, dispatch notifications, and follow-up messages.

  • Your phone number and SMS consent data are stored securely and used only for the purposes you have authorized.
  • You may opt out of SMS communications at any time by replying STOP to any message.
  • For help, reply HELP or call us at 866-905-1681.
  • Message and data rates may apply. Message frequency may vary.
  • Consent to receive SMS messages is optional and is not a condition of receiving transportation services.
📱 SMS Data Protection

Mobile opt-in data, SMS consent status, and phone numbers collected for SMS communication purposes will not be shared with any third party or affiliates for marketing purposes.

For more information about how SMS consent is collected on our website, please review our Terms & Conditions, specifically Section 21 (SMS Consent Checkbox Requirement).

Message & data rates may apply. Contact your carrier for details about your plan.

Opt out anytime — reply STOP to any message to stop all SMS communications.

Need help? Reply HELP to any message or call 866-905-1681.

Message frequency varies based on your scheduled transports and service requests.

Questions or Concerns?

If you have questions about this Privacy and Security Policy, wish to exercise your rights, or need to report a concern, our team is here to help.