Notice of Privacy Practices

Our Legal Duty

Rainbow Road Transport, LLC is required by law to maintain the privacy of your protected health information (PHI), to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect. We reserve the right to change this notice, and to make the revised notice effective for PHI we already hold as well as information we receive in future.

How We May Use and Disclose Your PHI

We use and disclose PHI only as HIPAA permits — principally in order to arrange and deliver your transportation:

• Treatment — sharing pickup, destination, mobility, and equipment details with the Transportation Specialist assigned to your trip, and with providers involved in your care.
• Payment — billing and collecting for the transportation provided.
• Healthcare operations — scheduling, dispatch, safety, and quality assurance.
• As required by law — where a federal, state, or local law compels disclosure.
• With your written authorization — for any purpose not described in this notice.

We collect only the health information necessary to transport you safely. We do not sell PHI, and we do not use or share it for marketing.

How We Protect Your PHI

• Administrative, physical, and technical safeguards, with access limited to authorized personnel.
• Business Associate Agreements with third parties that handle PHI on our behalf.
• Privacy and HIPAA training for staff.
• Encryption of data in transit and at rest, regular audits, and documented breach-response procedures.
• Automatic redaction of personal and health information in call transcripts.

Your Rights Regarding Your PHI

• Access — inspect and obtain a copy of the PHI we hold about you.
• Amendment — ask us to correct PHI you believe is incomplete or inaccurate.
• Restriction — request limits on how we use or disclose your PHI. We will consider every request, though we are not required to agree to all of them.
• Confidential communications — ask that we contact you in a particular way or at a particular location.
• Accounting of disclosures — receive a list of certain disclosures we have made.
• Revoke authorization — withdraw a written authorization you previously gave, except where we have already acted in reliance on it.
• Breach notification — be told if a breach of unsecured PHI affects your information.
• Paper copy — obtain a paper copy of this notice, even if you agreed to receive it electronically.

To exercise any of these rights, write to the Privacy Officer using the details at the foot of this page and mark the request “HIPAA Privacy Request.” We will respond in the time HIPAA allows.

Getting a Copy of This Notice

This page is our Notice of Privacy Practices as currently in effect, and it is posted here so you can read, print, or save it at any time. Ask us and we will mail or hand you a paper copy — you are entitled to one whether or not you have read it here. If we materially change the notice, the revised version is posted on this page and the effective date above changes with it.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer at privacy@rainbowroadllc.com, or with the Secretary of the U.S. Department of Health and Human Services. You will not be retaliated against, and your service will not be affected, for filing a complaint.

How to Reach Us

Questions about this policy, or requests to exercise your rights, can go to any of the following.

Rainbow Road Transport, LLC

1530 S Monterey Ave, Schaumburg, IL 60193

Office

(847) 585-8888

Fax

(847) 929-9993

General Inquiries

info@rainbowroadllc.com

Privacy & HIPAA Requests

privacy@rainbowroadllc.com

Written privacy and HIPAA requests should be addressed to the Privacy Officer and marked “HIPAA Privacy Request.”