NOTICE OF PRIVACY PRACTICES FOR PROTECTED HEALTH INFORMATION AND ONLINE PAYMENTS

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

If you have any questions about this Notice, please contact: the Superior Senior Care (SSC) Privacy Officer at (501) 321-1743.

This Notice of Privacy Practice describes how we may use and disclose your Protected Health Information to carry out treatment, payment, or health care operations, and for other purposes that are permitted or required by law. It also describes your rights to access and control your Protected Health Information. "Protected Health Information" is information about you, including demographic information, that may identify you and that relates to your past, present or future physical or mental health or condition and related health care services.

We are required by law to give you this Notice about our privacy practices, our legal duties, and your rights concerning your Protected Health Information. We must follow the privacy practices that are described in this Notice while it is in effect. This Notice will remain in effect until we replace it.

We reserve the right to change our privacy practices and the terms of this Notice at any time, provided such changes are permitted by applicable law. We reserve the right to make the changes in our privacy practices and the new terms of our Notice effective for all Protected Health Information that we maintain, including Protected Health Information we created or received before we made the changes. Before we make a significant change in our privacy practices, we will change this Notice and send the new Notice to our customers at the time of the change.

You may request a copy of our Notice at any time. For more information about our privacy practices, or for additional copies of this Notice, please contact us using the information listed at the beginning of this Notice.

I. Uses and Disclosures of Protected Health Information

Treatment

We will use and disclose your Protected Health Information to provide, coordinate or manage your health care and any related services. This includes a coordination or management of your treatment plan with your health care providers. For example, we would disclose your Protected Health Information to a home health agency that provided personal care to you. In addition, we may disclose your Protected Health Information from time to time with your physician or other specialist who becomes involved in your care by providing assistance with your health care diagnosis or treatment plan.

Payment

Your Protected Health Information will be used, as needed, to obtain payment for health care services. This may include certain activities that Medicaid, Medicare or another health insurance plan may undertake before it approves or pays for your health care services such as making a determination of your eligibility or reviewing services provided to you as appropriate and necessary, and undertaking utilization review activities.

Health Care Operations

We may use or disclose, as needed, your Protected Health Information in order to support business activities including, but not limited to, quality assurance reviews, care manager trainings, peer reviews, Medicaid or Medicare or other health insurance plan audit reviews, and independent financial audits.

For example, we may disclose your Protected Health Information with third party "business associates" that perform various activities like billing or claim submission services for SSC. Whenever an arrangement between our office and a business associate involves the use or disclosure of your Protected Health Information, we will have a written contract with the business associate that will protect the privacy of your Protected Health Information.

We may disclose your Protected Health Information, as necessary, to contact you to check on your health status, to arrange for your next home visit by your care manager or to remind you of your next appointment for a home visit. We may also call you by name in our waiting room if you visit SSC to see your care manager.

We may also send you information about services we feel may be beneficial to you, notify you about our fund-raising efforts or send you our newsletters. You may contact our privacy officer to request that these materials not be sent to you.

We may use or disclose your Protected Health Information that directly relates to the provision of your health care in your home to an individual or agency from our pool of services providers. Only the Protected Health Information that is relevant for the provider to deliver comprehensive health care service(s) will be disclosed.

We may release Protected Health Information to a friend or family member who is involved in your medical care. We may also give information to someone who helps pay for your care. We may also tell your family or friends your conditions and that you are involved with our program. In addition, we may disclose Protected Health Information about you to an entity assisting in a disaster relief effort so that your family can be notified about your condition, status and location.

Uses and Disclosures of Protected Health Information Based Upon Written Authorization

Certain uses and disclosures of particular types of Protected Health Information require a written authorization from you before such use or disclosure may occur. In most circumstances, SSC must obtain a written authorization from you for any use or disclosure of psychotherapy notes related to you. SSC may use or disclose psychotherapy notes without a written authorization to the extent required by law when the use or disclosure is limited to the relevant requirements of such law. SSC may use psychotherapy notes without authorization to treat you or to train its employees to treat you. SSC may disclose psychotherapy notes when we reasonably believe disclosure is necessary to prevent an injury to someone else. SSC may disclose psychotherapy notes without an authorization to comply with an investigation by the Secretary of the Department of Health and Human Services.

In addition, SSC must obtain written authorization from you for any use or disclosure of your protected health information from marketing, except if the communication is in the form of (1) a face-to-face communication made by SSC to you; (2) a promotional gift of nominal value provided by SSC; or (3) if the marketing involves direct or indirect remuneration to SSC from a third party, the authorization must state that such remuneration is involved.

Finally, SSC must obtain an authorization from you for any disclosure of Protected Health Information which is a sale of such information, and such authorization must state that the disclosure will result in remuneration to SSC.

Other uses and disclosures of your protected health information will be made only with your written authorization, unless otherwise permitted or required by law. You may revoke any written authorization at any time in writing, except to the extent that your care manager has taken an action already in progress in reliance on the use or disclosure indicated in the previously signed authorization.

Other Permitted and Required Uses and Disclosures That May Be Made With Your Consent, Authorization or Opportunity to Object

You have the opportunity to agree or object to the use or disclosure of all or part of your Protected Health Information. If you are not present or able to agree or object to the use or disclosure of the Protected Health Information, then your care manager may, using professional judgment, determine whether the disclosure is in your best interest. In this case, only the Protected Health Information that is relevant to your health care will be disclosed.

II. Your Rights Regarding Protected Health Information about You

You have the following rights regarding Protected Health Information we maintain about you:

Right to Inspect and Copy

You have the right to inspect and copy Protected Health Information that may be used to make decisions about your care. Usually, this includes medical and billing records, but does not include psychotherapy notes or information compiled in reasonable anticipation of a civil, criminal, or administrative proceeding. To inspect and copy Protected Health Information that may be used to make decisions about you, you must submit your request in writing to SSC. If you request a copy of the information, we may charge a fee for the costs of copying, mailing or other supplies associated with your request. We may deny your request to inspect and copy in certain very limited circumstances. If you are denied access to medical information, you may in most circumstances request that the denial be reviewed. Another supervisor or director chosen by the agency will review your request and the denial. The person conducting the review will not be the person who denied your request. We will comply with the outcome of the review.

Right to Amend

If you feel that protected information we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment for as long as the information is kept by or for SSC. To request an amendment, your request must be made in writing and submitted to SSC. In addition, you must provide a reason that supports your request. We may deny your request for an amendment if it is not in writing or does not include a reason to support the request. We may deny your request if you ask us to amend information that was not created by us, unless the person or entity that created the information is no longer available to make the amendment or that is not part of the Protected Health Information kept by or for SSC, or is not part of the information which you would be permitted to inspect and copy, or that is accurate and complete.

Right of Accounting and Disclosures

You have the right to request an "accounting of disclosures." This is a list of the disclosures we made of Protected Health Information about you. To request this list of accounting of disclosures, you must submit this request in writing to SSC. Your request must state a time period which may not be longer than 72 months and may not include dates for which this agreement is effective. Your request should indicate in what form you want the list (for example, on paper, electronically, by mail). The first list you request within a 12 month period will be free. For additional lists, we may charge you for the costs of providing the list. We will notify you of the costs involved and you may choose to withdraw or modify your request at that time before any costs are incurred.

Right to Request Restrictions

You have the right to request a restriction or limitation on the Protected Health Information we use or disclose about you for treatment, payment or health care operations as set forth in Section I above. You also have the right to request a limit on the Protected Health Information we disclose about you to someone who is involved in your care or the payment of your care, like a family member or friend. For example, you may not want your spouse to know anything about your services unless it is an emergency. We are not required to agree to your request, except that SSC must agree to the request for restriction if (1) the disclosure is for the purpose of carrying out payment or health care operation and is not otherwise required by law; and (2) the Protected Health Information pertains solely to a health care item or service for which you, or any person other than the health plan on behalf of you, has paid SSC in full.

If we do agree with your request for restriction or limitation, we will comply with your request unless the information is needed to provide emergency treatment. To request restrictions, you must make your request in writing to SSC. In your request, you must tell us (1) what information you want to limit; (2) whether you want us to limit our use, disclosure, or both; and (3) to whom you want the limits to apply (for example, in the hypothetical set for above, your spouse).

Right to Request Confidential Communication

You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. For example, you can ask that we only contact you at work or by mail. To request confidential communications, you must make your request in writing to SSC. We will not ask you the reason for your request. We will accommodate all reasonable requests. Your request must specify how or where you wish to be contacted.

Right to a Paper Copy of this Notice

You have the right to a paper copy of this Notice. You may ask us to give you a copy of this Notice at any time. Even if you agreed to receive this Notice electronically, you are still entitled to a paper copy of this Notice. To obtain a paper copy of this Notice, call SSC at (501) 321-1743.

Right to File a Complaint

You have the right to file a formal complaint if you believe your privacy rights have been violated. You may file a complaint with SSC or with the Secretary of the Department of Human Services. To file a complaint with SSC, please contact the privacy officer at (501) 321-1743. All complaints must be submitted in writing. You will not be penalized for filing a complaint.

Right to Amend

We reserve the right to change this Notice. We reserve the right to make the revised or changed Notice effective for Protected Health Information we already have about you as well as information we receive in the future. We will post a copy of the current Notice in our office and on our website. The Notice will contain the effective date on the bottom right-hand corner of the actual Notice, and on the main page on the website.

III. Uses and Gathering of Personal Payment Information

Personal Information

"Personal Information" means individually identifiable information about an individual consumer collected from that individual by SSC via the Website or other means (for example, by Your voluntarily submitting Personal Information to Us via the completion of an order form or registration form). The types of Personal Information that We may request include, without limitation, Your name, employer, job title, department, business mailing address, home mailing address, email address, telephone number, fax number, credit card number and other credit card details, geo-location data of Your mobile or other device, including GPS-based, Wi-Fi-based, or cell-based location information.

In order for you to purchase the Products or participate in other Website activities, you may be required to provide us with Personal Information. Some of the information that we ask you to provide is identified as mandatory and some is identified as voluntary. If you do not provide the mandatory information, you will not be able to place Your Order.

Accessing and Updating Your Personal Information

You may update Your Personal Information. If you should become aware that your personal information with SSC is not complete and accurate, you shall promptly update your personal information.

Cookies

When you visit our site, a cookie (a very small text file) is placed on your machine (if it is accepted), this is to provide you with a personalized experience and to assist in the collection of the site visitation statistics. You may refuse the cookie, if you wish. To do so, you will need to check your browser settings. Through cookies, Heartland collects certain information about your computer hardware and software, this includes, but is not limited to: (i) your IP address, (ii) browser type, (iii) operating system, (iv) access times, or (v) referring website addresses. This information is used for the operation of the Services, to maintain quality of the Services, and to provide general statistics regarding use of SSC's websites. If you choose to not have your browser accept cookies, you will be able to view the majority of our site.

Adult Audiences Only

The Website is intended for adult audiences and is not directed to children and other individuals under the age of majority in the individual's country, and we do not knowingly collect Personal Information or other information from such individuals. You agree to notify us immediately, by writing to the applicable SSC office identified in the "Contact Us" section of the Website, if you become aware that we have received information from any such individuals.

Data Protection and Storage

SSC maintains reasonable administrative, technical and physical safeguards to protect the confidentiality of information transmitted online, including but not limited to encryption, firewalls and SSL (Secure Sockets Layer). SSC has implemented policies and practices pursuant to various security rules and regulations relating to the security and safeguarding of payment cardholder data. SSC is not liable for loss of passwords due to user negligence. If you believe your password has been lost or compromised, we recommend that you immediately change your password.

Third-Party Websites and Services

Our Services may provide links to (or links from) third-party websites or services - none of which are governed by this Privacy Policy. To the extent that any linked third-party websites or services you visit are not owned or controlled by SSC, we are not responsible for those websites' or services' content or information practices. We strongly encourage you to review the privacy policies of any site or service before providing any personal information.

Click Here to Return to Superior Senior Care's Website