Your privacy is fundamental to everything we do. This Privacy Policy explains how VitalSigns House
Calls Inc. ('VitalSigns,' 'we,' 'us,' or 'our') collects, uses, discloses, and protects information about
you when you use our website, engage our clinical services, or communicate with our team. By
accessing our website or receiving our services, you agree to the practices described in this policy.
 

1. Who We Are
VitalSigns House Calls Inc. is an Alabama-based in-home primary care and chronic care management
practice headquartered in Mobile, Alabama. We provide clinician-led, house-call medical services to
adult and geriatric patients across the greater Mobile, Alabama region. Privacy questions may be
directed to: privacy@vitalsignshousecalls.com.

2. Information We Collect
We may collect the following categories of information:
• Personal Identification: Name, date of birth, address, phone number, and email address.
• Health and Medical Information: Medical history, diagnoses, medications, treatment plans,
insurance information, and clinical notes. This constitutes Protected Health Information (PHI)
governed by HIPAA and our HIPAA Notice of Privacy Practices.
• Insurance and Billing Information: Medicare/Medicaid numbers, Medicare Advantage plan details,
insurance carrier information, and billing records.
• Website Usage Data: IP address, browser type, pages visited, time on site, and referral URLs
collected via cookies and analytics tools.
• Communications Data: Emails, text messages, and voicemails sent to or received from our office.
• Emergency Contact Information: Names and contact details for designated emergency contacts
or healthcare proxies.

3. How We Use Your Information
We use collected information for the following purposes:
• Providing, coordinating, and managing your medical care and treatment.
• Processing insurance claims and billing for Medicare, Medicare Advantage, and other payers.

• Communicating appointment confirmations, care plan updates, and health reminders.
• Complying with applicable federal and state healthcare laws and regulations.
• Improving our website, services, and patient experience.
• Conducting quality improvement, population health analytics, and outcomes reporting.
• Responding to your inquiries and support requests.

4. Legal Basis for Processing
We process personal information under the following legal bases: (a) performance of a contract — to
provide the healthcare services you have requested; (b) legal obligation — to comply with HIPAA, CMS
regulations, and Alabama state law; (c) legitimate interests — to operate and improve our practice;
and (d) consent — where you have provided explicit consent for specific uses such as marketing
communications.

5. Information Sharing and Disclosure
We do not sell your personal information. We may share your information as follows:
• Treatment, Payment, and Operations: As permitted by HIPAA with physicians, specialists,
hospitals, laboratories, pharmacies, and other providers involved in your care.
• Business Associates: With HIPAA-compliant Business Associates (e.g., CureMD EHR, billing
services, remote monitoring platforms) under signed Business Associate Agreements.
• Payers and Insurers: With Medicare, Medicare Advantage plans, and other insurance carriers as
necessary for billing and care coordination.
• Legal and Regulatory Requirements: To comply with court orders, subpoenas, law enforcement
requests, or state and federal reporting obligations.
• Safety: To prevent or mitigate a serious and imminent threat to health or safety.
• With Your Authorization: For any other purpose with your explicit written authorization.

6. Website Cookies and Tracking
Our website uses cookies, web beacons, and similar tracking technologies to enhance your browsing
experience and collect aggregate analytics. You may control cookie preferences through your browser
settings. Disabling cookies may affect certain website functionality. We do not use tracking
technologies to collect Protected Health Information.

7. Data Retention
We retain medical and billing records in accordance with Alabama state law (minimum 10 years for
adult records; age of majority plus 3 years for minor records) and CMS requirements. Website
analytics data is retained for up to 24 months. You may request deletion of non-PHI data subject to
applicable legal retention obligations.

8. Data Security
We implement administrative, physical, and technical safeguards consistent with HIPAA Security Rule
requirements and industry best practices, including: encrypted data transmission (TLS/SSL), access
controls and role-based permissions within our EHR system, secure password policies and
multi-factor authentication, workforce training and signed confidentiality agreements, and regular
security risk assessments. No electronic system is completely immune from risk.

9. Your Rights
• Access and obtain a copy of your personal information and medical records.
• Request correction of inaccurate or incomplete information.
• Request restrictions on certain uses or disclosures of your PHI.
• Receive an accounting of disclosures of your PHI.
• Request confidential communications by alternative means or at alternative locations.
• File a complaint with our Privacy Officer or the HHS Office for Civil Rights.

10. Children's Privacy
Our services are directed to adults age 18 and older. We do not knowingly collect personal
information from children under 13 without verifiable parental consent. If you believe we have
inadvertently collected such information, please contact our Privacy Officer immediately.

11. Changes to This Policy
We reserve the right to modify this Privacy Policy at any time. Material changes will be posted on our
website with an updated effective date. Continued use of our services following such changes
constitutes acceptance of the revised policy.
12. Contact Our Privacy Officer

Privacy Officer — VitalSigns House Calls Inc. Mobile, Alabama
Email: privacy@vitalsignshousecalls.com