First Call Technologies, LLC dba Community CareLink is committed to protecting the privacy and security of protected health information (PHI) we manage as part of our electronic health records (EHR) services. This Privacy Policy outlines our practices in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable laws.

 

PHI We Collect and Use

We collect and use PHI to provide and improve our EHR services. This may include, but is not limited to, patient names, dates of birth, medical histories, treatment information, and health insurance details.  Data that is collected shall be limited to that which is needed to provide care and information access logging in compliance with all Federal, State, and Community CareLink guidelines and regulations.

 

Use and Disclosure of PHI

We use and disclose PHI only for the purposes of providing our services, improving patient care, and as required by law. We may also use PHI for billing and payment processing purposes.

 

Safeguards

We implement physical, administrative, and technical safeguards to protect the confidentiality, integrity, and availability of PHI. This includes secure data storage, encryption, access controls, and regular security assessments.

 

Patient Rights

Patients whose PHI we manage have the right to:

• Access and obtain a copy of their PHI.

• Request amendments to their PHI.

• Receive an accounting of disclosures of their PHI.

• Request restrictions on certain uses and disclosures of their PHI.

• Receive confidential communications.

 

Breach Notification

In the event of a breach of unsecured PHI, we will notify affected individuals, the Department of Health and Human Services, and, if applicable, the media, in accordance with HIPAA requirements.

 

Changes to This Policy

We reserve the right to change this Privacy Policy. Any changes will be posted on our website and will be effective upon posting.

​

Identification of 3rd Party Involvment

Community CareLink has contracts in place with the following companies for hosting and business services:

• Microsoft Azure

• NetStandard

No data is shared with outside parties unless appropriate legal agreements and protections are in place and are solely used for the delivery of services customers have contracted for.

 

Contact Information

For questions or concerns about our privacy or security practices (including vulnerability notification) or data inquiries, please contact our Privacy Officer at security@communitycarelink.com.

 

Effective Date

This Privacy Policy is effective as of 19-Dec-2023.

​​