Privacy Policy & HIPAA Notice

I. HIPAA Notice of Privacy Practices

Amal Rehab Care ("we," "us," or "our") is committed to protecting the privacy of your Protected Health Information ("PHI") in compliance with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), the HITECH Act, and all applicable federal and state privacy laws. This Notice of Privacy Practices describes how we may use and disclose your PHI and your rights regarding that information.

A. Our Duties

We are required by law to:

• Maintain the privacy of your PHI as required by law;
• Provide you with this Notice of our legal duties and privacy practices with respect to your PHI;
• Notify you following a breach of your unsecured PHI; and
• Abide by the terms of this Notice currently in effect.

B. How We May Use and Disclose Your Protected Health Information

We may use and disclose your PHI for the following purposes without your written authorization:

1. Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This includes consultations between healthcare providers regarding your care, referrals to other providers, and coordination of treatment plans including physical therapy evaluations, progress notes, and rehabilitation protocols.

2. Payment

We may use and disclose your PHI to obtain payment for the healthcare services we provide. This includes billing your insurance company, health plan, or third-party payer; verifying insurance coverage and eligibility; submitting claims and supporting documentation; processing Letters of Protection (LOPs); and coordinating Workers' Compensation claims and benefits.

3. Healthcare Operations

We may use and disclose your PHI for our healthcare operations, which include quality assessment and improvement activities, patient safety activities, conducting or arranging for medical review, credentialing, business planning, and general administrative activities.

C. Other Permitted Uses and Disclosures

We may also use or disclose your PHI without your authorization in the following circumstances:

• As required by law: When federal, state, or local law requires disclosure.
• Public health activities: To public health authorities for the purpose of preventing or controlling disease, injury, or disability.
• Health oversight activities: To a health oversight agency for activities authorized by law, including audits, investigations, inspections, and licensure.
• Judicial and administrative proceedings: In response to a court order, subpoena, or other lawful process.
• Law enforcement: For law enforcement purposes as required by law or in response to a valid court order.
• To avert a serious threat: To prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
• Workers' Compensation: As authorized by and to the extent necessary to comply with Workers' Compensation laws and programs.
• Appointment reminders and health-related benefits: To contact you to provide appointment reminders or information about treatment alternatives or other health-related benefits and services.

D. Uses and Disclosures Requiring Your Written Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes not described in this Notice, including but not limited to:

• Marketing purposes (unless face-to-face or involving promotional gifts of nominal value);
• Sale of your PHI;
• Most uses and disclosures of psychotherapy notes, if applicable; and
• Any other use or disclosure not described in this Notice.

You may revoke your authorization at any time in writing, except to the extent we have already taken action in reliance on your authorization.

E. Your Rights Regarding Your Protected Health Information

You have the following rights with respect to your PHI:

• Right to Access: You have the right to inspect and obtain a copy of your PHI maintained in our records. Requests must be submitted in writing. We may charge a reasonable, cost-based fee for copies. We will respond to your request within 30 days.
• Right to Amend: You have the right to request that we amend your PHI if you believe it is incorrect or incomplete. Requests must be submitted in writing and include the reason for the amendment. We may deny your request under certain circumstances, and if denied, we will provide you with a written explanation.
• Right to Request Restrictions: You have the right to request that we restrict certain uses and disclosures of your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request except when the disclosure is to a health plan for payment or healthcare operations purposes and the PHI relates to a service you have paid for in full out of pocket.
• Right to Request Confidential Communications: You have the right to request that we communicate with you about your PHI in a specific way or at a specific location. For example, you may request that we only contact you via email or at a particular phone number.
• Right to an Accounting of Disclosures: You have the right to receive an accounting of certain disclosures of your PHI made by us during the six (6) years prior to your request. This accounting will not include disclosures made for treatment, payment, or healthcare operations, or disclosures made with your authorization.
• Right to a Paper Copy of This Notice: You have the right to obtain a paper copy of this Notice at any time, even if you have agreed to receive it electronically. You may request a paper copy by contacting our Privacy Officer.
• Right to Be Notified of a Breach: You have the right to be notified following a breach of your unsecured PHI. We will notify you in accordance with applicable federal and state laws.

F. Filing a Complaint

If you believe your privacy rights have been violated, you have the right to file a complaint. You will not be retaliated against for filing a complaint.

You may file a complaint with:

• Amal Rehab Care Privacy Officer
  9222 Overlook Dr, Temple Terrace, FL 33617
  Phone: (813) 899-0797
  Email: info@amalrehabcare.com
• The Secretary of the U.S. Department of Health and Human Services
  Office for Civil Rights
  200 Independence Avenue, S.W., Washington, D.C. 20201
  Phone: 1-877-696-6775
  Website: www.hhs.gov/ocr/privacy/hipaa/complaints

II. Website Privacy Policy

A. Information We Collect

When you visit our website at www.amalrehabcare.com, interact with our services, or communicate with us, we may collect the following categories of information:

• Personal Information: Full name, email address, phone number (including mobile number), mailing address, date of birth, and insurance information when voluntarily provided through our website contact forms, intake forms, or appointment scheduling.
• Health Information: Information about your injury, condition, medical history, or treatment needs when submitted through our contact form or intake process. This information is treated as PHI and protected under HIPAA.
• Usage Data: We may automatically collect information about how you access and use our website, including your IP address, browser type, device information, pages visited, and referring URL.
• Cookies and Tracking Technologies: Our website may use cookies and similar technologies to enhance user experience and analyze site traffic. You may disable cookies through your browser settings.

B. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and contact form submissions;
• To schedule and confirm appointments;
• To provide, coordinate, and manage your physical therapy care;
• To process insurance claims, LOPs, and Workers' Compensation documentation;
• To send appointment reminders and service-related communications;
• To improve our website, services, and patient experience; and
• To comply with legal and regulatory obligations.

C. How We Protect Your Information

We implement appropriate administrative, technical, and physical safeguards designed to protect your personal information and PHI against unauthorized access, alteration, disclosure, or destruction. These safeguards are consistent with HIPAA Security Rule requirements and include encrypted data transmission, access controls, and workforce training.

D. Information Sharing

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• With healthcare providers involved in your treatment and care coordination;
• With insurance companies, attorneys, or third-party payers for payment purposes;
• With service providers who assist us in operating our website and business, subject to confidentiality agreements;
• When required by law, regulation, court order, or governmental request; and
• As otherwise permitted or required under HIPAA.

E. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

F. Children's Privacy

Our website is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13 without parental consent. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.

III. SMS & Text Messaging Privacy

A. Data Collection for SMS Communications

When you opt in to receive text messages from Amal Rehab Care, we collect the following information:

• Your full name — collected via our website contact forms, online scheduling tools, and/or physical intake forms at our clinic.
• Your mobile phone number — collected via our website contact forms, online scheduling tools, and/or physical intake forms at our clinic.

Your consent to receive text messages is obtained at the time you provide your mobile phone number and agree to receive communications from us, whether electronically or in writing.

B. Purpose of Text Messages

We may send you text messages for the following service-related purposes:

• Appointment reminders and confirmations;
• Service updates related to your care;
• Care coordination communications; and
• Responses to inquiries you submit via text.

We do not use text messaging for marketing or promotional purposes.

C. Message Frequency and Charges

Message frequency varies based on your appointment schedule and care needs. Standard message and data rates may apply depending on your mobile carrier and plan. Amal Rehab Care is not responsible for any charges incurred from your carrier for receiving text messages.

D. Opt-Out and Assistance

You may opt out of receiving text messages at any time. Your participation is entirely voluntary.

• To opt out: Reply STOP to any text message you receive from us. You will receive a confirmation message and no further texts will be sent.
• To get help: Reply HELP to any text message you receive from us, or contact us directly at (813) 899-0797 or info@amalrehabcare.com.

Opting out of text messages will not affect your ability to receive care at our clinic or communicate with us through other channels.

E. No Sharing of Mobile Information

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

IV. Changes to This Policy

We reserve the right to modify this Privacy Policy and HIPAA Notice of Privacy Practices at any time. Any changes will be effective immediately upon posting the revised policy on our website. We will make the updated notice available at our clinic and on our website at www.amalrehabcare.com/privacy-policy. We encourage you to review this page periodically for any updates.

V. Contact Information

If you have any questions about this Privacy Policy, our HIPAA Notice of Privacy Practices, our SMS messaging practices, or if you wish to exercise any of your rights described herein, please contact us: