Privacy Policy
PRIVACY POLICY & HIPAA NOTICE OF PRIVACY PRACTICES OF C&R MEDICAL CARRIER
Effective Date: October 5th, 2025
Last Updated: October 5th, 2025
INTRODUCTION
C&R Medical Carrier LLC (“we,” “our,” or “us”) is committed to protecting your privacy and maintaining the confidentiality of your personal and health information. This Privacy Policy and HIPAA Notice of Privacy Practices describes how we collect, use, disclose, and safeguard your information when you use our medical transportation and medication delivery services.
As a healthcare service provider, we are required by law to maintain the privacy of your protected health information (PHI) and to provide you with this notice of our legal duties and privacy practices.
INFORMATION WE COLLECT
Personal Information:
- Name, address, phone number, email address
- Date of birth and emergency contact information
- Insurance information and payment details
- Government-issued identification (for controlled substance delivery)
Health Information (Protected Health Information – PHI):
- Medical conditions relevant to safe transportation
- Mobility limitations and assistive device needs
- Medications being transported (name, dosage, prescribing physician)
- Healthcare provider and facility information
- Appointment dates and medical service types
- Discharge instructions and post-procedure care needs
Service Information:
- Pickup and destination addresses
- Service dates, times, and routes
- Temperature monitoring data for medication transport
- Driver notes about service delivery
- Communication records with you and healthcare providers
Technical Information:
- IP address and device information when using our website
- Cookies and similar tracking technologies
- GPS location data during active transportation services
HOW WE USE YOUR INFORMATION
We use your personal and health information only as necessary to provide medical transportation services:
Treatment Purposes:
- Coordinating your medical transportation needs
- Communicating with your healthcare providers about appointments and transfers
- Ensuring appropriate vehicle assignment based on mobility needs
- Monitoring medication temperature during transport
- Responding to medical emergencies during transport
Payment Purposes:
- Processing payments for services
- Billing insurance companies and third-party payers
- Verifying insurance coverage and obtaining prior authorizations
- Collecting payment for services rendered
Healthcare Operations:
- Improving service quality and safety
- Training staff on proper patient assistance and medical transport protocols
- Conducting quality assurance and compliance audits
- Managing business operations and regulatory compliance
- Responding to complaints and grievances
Required by Law:
- Complying with court orders and legal processes
- Reporting to public health authorities as required
- Cooperating with law enforcement in specific circumstances
- Meeting workers’ compensation requirements
- Responding to regulatory oversight agencies
HOW WE SHARE YOUR INFORMATION
With Healthcare Providers:
We share relevant information with your physicians, hospitals, rehabilitation facilities, and other healthcare providers involved in your care to coordinate transportation services and ensure continuity of care.
With Business Associates:
We may share information with vendors and contractors who perform services on our behalf (such as billing companies, IT providers, or insurance brokers). These business associates are required to protect your information under written agreements.
With Insurance Companies:
We share necessary information with your insurance provider, Medicare, Medicaid, or other payers to obtain payment for services and verify coverage.
With Family and Caregivers:
With your authorization, we may share information with family members or caregivers involved in your care. For minors, we share information with parents or legal guardians as permitted by law.
As Required by Law:
We disclose information when required by federal, state, or local law, including public health reporting, abuse/neglect reporting, and law enforcement requests with proper legal authority.
We DO NOT:
- Sell your personal or health information to third parties
- Use your information for marketing purposes without authorization
- Share your information for purposes unrelated to your healthcare or our business operations
- Disclose more information than necessary for the stated purpose
YOUR RIGHTS UNDER HIPAA
You have the following rights regarding your protected health information:
Right to Access: You have the right to inspect and obtain a copy of your health information maintained by us. Submit written requests to our Privacy Officer.
Right to Amend: You may request amendments to your health information if you believe it is incorrect or incomplete. We will respond within 60 days.
Right to Accounting of Disclosures: You may request a list of certain disclosures we have made of your health information in the past six years.
Right to Request Restrictions: You may request restrictions on how we use or disclose your information. We are not required to agree to your request, but we will consider it.
Right to Confidential Communications: You may request that we communicate with you about your health information by alternative means or at alternative locations.
Right to Notification of Breach: You have the right to be notified if a breach of your unsecured health information occurs.
Right to a Paper Copy: You have the right to receive a paper copy of this notice upon request.
DATA SECURITY
We implement appropriate technical, physical, and administrative safeguards to protect your information:
Technical Safeguards:
- Encrypted data transmission and storage
- Secure, password-protected systems with multi-factor authentication
- Regular security audits and vulnerability testing
- Firewall protection and intrusion detection systems
Physical Safeguards:
- Locked filing cabinets for paper records
- Secure facilities with restricted access
- Secure disposal of documents containing PHI
- GPS tracking and monitoring of transport vehicles
Administrative Safeguards:
- HIPAA training for all employees
- Confidentiality agreements with staff and business associates
- Policies and procedures for information handling
- Incident response and breach notification procedures
- Regular privacy and security risk assessments
COOKIES AND TRACKING TECHNOLOGIES
Our website uses cookies and similar technologies to:
- Remember your preferences and settings
- Analyze website traffic and usage patterns
- Improve website functionality and user experience
You can control cookie preferences through your browser settings. Disabling cookies may limit website functionality.
CHILDREN’S PRIVACY
We do not knowingly collect information from children under 13 without parental consent. Our services are designed for adults and children transported with parental/guardian authorization. Parents and guardians have the right to access and control their minor children’s health information.
CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this Privacy Policy and Notice of Privacy Practices. We will post changes on our website and make revised notices available upon request. Changes apply to all information we maintain, including information created or received before the change.
CONTACT INFORMATION
Phone: 267-309-8672
Email: hello@crmedicalcarrier.com
To File a Complaint:
If you believe your privacy rights have been violated, you may file a complaint with:
- Our Privacy Officer at the contact information above
- U.S. Department of Health and Human Services Office for Civil Rights
You will not be retaliated against for filing a complaint.
STATE-SPECIFIC PRIVACY RIGHTS
New Jersey Residents:
Under New Jersey law, you have additional rights regarding personal information collected by businesses. You have the right to know what personal information we collect, how it is used, and to request deletion of personal information in certain circumstances.
ACKNOWLEDGMENT
By using our services, you acknowledge that you have received this Privacy Policy and Notice of Privacy Practices and understand how we collect, use, and disclose your information.