Privacy & Security Policy
HIPAA Notice: LifeCare Ambulance LLC is a HIPAA Covered Entity. This policy governs the collection, use, and protection of Protected Health Information (PHI) in compliance with the Health Insurance Portability and Accountability Act of 1996 and all applicable state privacy laws.
Introduction
LifeCare Ambulance LLC (“LifeCare,” “we,” “us,” or “our”) is committed to protecting the privacy, confidentiality, and security of all personal and health information entrusted to us. This Privacy and Security Policy describes how we collect, use, disclose, and safeguard information in connection with our non-emergency medical transportation services and website at lifecareambulance.org.
As a HIPAA Covered Entity, LifeCare Ambulance LLC is required by law to maintain the privacy of Protected Health Information (PHI), to provide individuals with notice of our legal duties and privacy practices, and to abide by the terms of this notice currently in effect.
This policy applies to all employees, contractors, volunteers, and business associates of LifeCare Ambulance LLC who access, use, or disclose Protected Health Information in the course of their duties.
Information We Collect
We collect several types of information to provide and improve our services:
Personal Information — When you contact us or request services, we may collect your name, address, phone number, email address, date of birth, insurance information, and emergency contact details.
Protected Health Information (PHI) — In the course of providing medical transportation services, we collect health-related information including medical history, diagnosis codes, treatment information, and insurance details as required for billing and service coordination.
Digital Information — When you visit our website, we automatically collect certain technical data including IP address, browser type, pages visited, and time spent on pages through cookies and similar technologies. Please see our Terms & Conditions for more information on cookies.
SMS Consent Data — If you provide your mobile phone number and check the SMS consent checkbox on our Contact Us form, we collect your phone number and consent status for the purpose of sending service-related SMS communications.
How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery — To schedule, coordinate, and provide non-emergency medical transportation services
- Billing & Insurance — To process insurance claims and billing for services rendered
- Communications — To send appointment reminders, scheduling confirmations, dispatch updates, and service notifications (including via SMS if you have consented)
- Legal Compliance — To comply with applicable laws, regulations, and legal processes, including HIPAA requirements
- Quality Improvement — To improve our services, train staff, and conduct internal audits
- Safety — To protect the safety of patients, staff, and the public
How We Share Your Information
LifeCare Ambulance LLC may share your information in the following limited circumstances:
- Healthcare Providers — With hospitals, physicians, and other healthcare providers involved in your care and transportation
- Insurance Companies — With your health insurance carrier for billing and reimbursement purposes
- Business Associates — With vendors and service providers who assist in our operations under HIPAA-compliant Business Associate Agreements
- Legal Requirements — When required by law, court order, or government regulation
- Emergency Situations — To prevent or lessen a serious and imminent threat to health or safety
Mobile opt-in data, SMS consent status, and phone numbers collected for SMS communication purposes will not be shared with any third party or affiliates for marketing purposes.
Key HIPAA Definitions
- Protected Health Information (PHI)
- Individually identifiable health information that is transmitted or maintained in any form or medium, including electronic, paper, or oral. PHI includes information about an individual's past, present, or future physical or mental health condition, the provision of health care, or payment for health care.
- Covered Entity
- A health plan, health care clearinghouse, or health care provider that transmits health information in electronic form in connection with HIPAA-covered transactions. LifeCare Ambulance LLC is a Covered Entity.
- Business Associate
- A person or entity that performs certain functions or activities that involve the use or disclosure of PHI on behalf of, or in providing services to, a Covered Entity.
- De-Identified Information
- Health information from which all 18 HIPAA-specified identifiers have been removed, such that the information cannot reasonably be used to identify an individual. De-identified information is not subject to HIPAA protections.
- Minimum Necessary Standard
- The HIPAA requirement that covered entities make reasonable efforts to use, disclose, and request only the minimum amount of PHI needed to accomplish the intended purpose.
Security Safeguards
LifeCare Ambulance LLC implements comprehensive administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of all PHI and personal information we maintain.
Administrative
- HIPAA Privacy & Security Officer designated
- Annual workforce training on HIPAA compliance
- Written policies and procedures for PHI handling
- Regular risk assessments and audits
- Sanctions policy for policy violations
Physical
- Restricted access to facilities and records
- Secure storage of paper records
- Workstation security policies
- Device and media disposal procedures
- Visitor access controls
Technical
- Encrypted data transmission (SSL/TLS)
- Access controls and unique user IDs
- Automatic logoff for inactive sessions
- Audit logs for PHI access and disclosure
- Secure, encrypted data storage
Workforce Compliance & Training
All LifeCare Ambulance LLC employees, contractors, and volunteers who have access to PHI are required to complete HIPAA training upon hire and annually thereafter. Training covers:
- HIPAA Privacy Rule requirements and patient rights
- HIPAA Security Rule requirements for electronic PHI
- LifeCare's internal policies and procedures for PHI handling
- Breach notification requirements and reporting procedures
- Consequences of non-compliance, including disciplinary action
All workforce members must sign a confidentiality agreement acknowledging their obligations under HIPAA and LifeCare Ambulance LLC's privacy policies prior to accessing any PHI.
Authorized Uses & Disclosures
LifeCare Ambulance LLC may use and disclose PHI without your written authorization for the following purposes as permitted by HIPAA:
- Treatment — To provide, coordinate, or manage your healthcare and related services
- Payment — To obtain payment for services rendered, including insurance billing
- Healthcare Operations — For quality assessment, training, auditing, and other operational activities
- Public Health Activities — As required by law for disease reporting, injury prevention, and public health oversight
- Law Enforcement — As required by law or court order
All other uses and disclosures of PHI require your written authorization. You may revoke such authorization at any time in writing. LifeCare Ambulance LLC follows the minimum-necessary standard for all uses and disclosures of PHI.
Reporting Authority & Violations
If an inappropriate disclosure of PHI occurs, LifeCare Ambulance LLC shall assign a Privacy and Security Officer (PSO) to lead the investigation. The PSO will report findings to an Investigation Team composed of the CEO, HR Manager, company counsel, and other appointed members.
Any person subject to this policy who uses or discloses PHI in violation of its terms will be subject to disciplinary action, up to and including termination of employment.
In the event of a breach of unsecured PHI, LifeCare Ambulance LLC will notify affected individuals, the U.S. Department of Health and Human Services, and, where required, the media, in accordance with the HIPAA Breach Notification Rule.
Non-Retaliation
LifeCare Ambulance LLC will not take retaliatory or intimidating action against any person who exercises their right to report or file a complaint about any violation of this policy. No employee or staff member may threaten, coerce, or intimidate any person who reports a concern or participates in an investigation.
Retaliation against anyone who reports a HIPAA concern or cooperates in an investigation is strictly prohibited and may itself result in disciplinary action up to and including termination.
You may file a complaint with LifeCare Ambulance LLC directly, or with the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr. Filing a complaint will not result in any retaliation against you.
Your Rights
Under HIPAA, you have the following rights regarding your Protected Health Information:
To exercise any of these rights, please contact us using the information provided at the bottom of this page.
SMS Communications Privacy — Section 12
Section 12 governs how we collect, use, and protect your phone number and SMS consent data in compliance with CTIA and TCPA requirements.
SMS Communications Privacy
When you consent to receive SMS messages from LifeCare Ambulance LLC by checking the optional SMS consent checkbox on our Contact Us form, we collect your mobile phone number solely for the purpose of sending service-related communications such as trip confirmations, scheduling updates, dispatch notifications, and follow-up messages.
- Your phone number and SMS consent data are stored securely and used only for the purposes you have authorized.
- You may opt out of SMS communications at any time by replying STOP to any message.
- For help, reply HELP or call us at 866-905-1681.
- Message and data rates may apply. Message frequency may vary.
- Consent to receive SMS messages is optional and is not a condition of receiving transportation services.
Mobile opt-in data, SMS consent status, and phone numbers collected for SMS communication purposes will not be shared with any third party or affiliates for marketing purposes.
For more information about how SMS consent is collected on our website, please review our Terms & Conditions, specifically Section 21 (SMS Consent Checkbox Requirement).
Message & data rates may apply. Contact your carrier for details about your plan.
Opt out anytime — reply STOP to any message to stop all SMS communications.
Need help? Reply HELP to any message or call 866-905-1681.
Message frequency varies based on your scheduled transports and service requests.
Questions or Concerns?
If you have questions about this Privacy and Security Policy, wish to exercise your rights, or need to report a concern, our team is here to help.