Privacy Policy

Part 1: General Website Privacy Policy & State Disclosures

This section explains how we handle standard data collected through our online services, forms, and website (https://homedicalsupply.com).

1. Health Data and HIPAA Compliance

Because we process medical equipment prescriptions, glucose supplies, and DME order forms, certain information you provide constitutes Protected Health Information (PHI) under federal law. Where our handling of your data is governed by HIPAA, our obligations and your medical data rights are governed by federal statutes and Part 2 of this document, which takes legal precedence over general website privacy rules.

2. Data Collected & Practical Usage

We collect and utilize user information across the following categories:

• Registration Data: Usernames and email addresses are securely stored for account administration.
• Comments and Forms: Form submissions are routed via secure company email hosted by Google LLC solely for customer service and order fulfillment. We do not use these submissions for marketing or third-party sharing.
• Analytics: Google Analytics is used anonymously to monitor site traffic. No personal identifiers are stored.

3. Cookies and Embedded Content

Our website utilizes functional cookies (such as session identifiers and internal WordPress authentication cookies) to manage shopping carts, maintain user sessions, and secure backend administrative panels. You can control or completely disable cookie usage through your computer’s browser settings. Third-party embedded elements (such as YouTube videos or social media plugins) track interactions according to their respective external privacy protocols.

4. Security, Retention, and Legal Disclosures

All communication with our servers is secured using SSL/HTTPS encryption protocol. We do not sell or lease user data to third parties. We may disclose user information in good faith to government agencies or litigants only when strictly necessary to comply with civil actions, criminal investigations, or fraudulent activity prevention.

5. North Carolina State Compliance & Breach Notification

In accordance with the North Carolina Identity Theft Protection Act (N.C.G.S. § 75-60), we maintain rigorous safeguards for identifying personal data, including driver’s licenses or financial data collected during the order process. In the event of a security incident resulting in a confirmed data breach of personal information, we will perform all mandatory legal assessments and notify affected residents without unreasonable delay, adhering strictly to state-mandated notification timelines.

6. Mobile SMS Privacy & TCPA Compliance

No mobile information, phone numbers, or SMS opt-in data will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are strictly excluded from all third-party sharing. Under the Telephone Consumer Protection Act (TCPA), text messages related to order fulfillment, shipping updates, or account status are sent only with your prior express consent. Providing consent to receive automated text messages is not a condition of purchasing any medical equipment or supplies. You may opt out of text updates at any time by replying STOP.

Part 2: HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

1. Our Legal Duty

We are required by applicable federal and state law to maintain the privacy of your Protected Health Information (PHI). We are also required to give you this notice about our privacy practices, legal duties, and your rights concerning your PHI. We are legally obligated to notify you following a confirmed security breach of your unsecured PHI.

2. Uses and Disclosures of Health Information

We may use and disclose your medical information without explicit written authorization for the following purposes:

• Treatment: Providing, coordinating, or managing your durable medical equipment (DME) and related supplies, including sharing info with your prescribing physician.
• Payment: Billing and collecting payment from you, your insurance company, private health plans, or Medicare/Medicaid for your medical supplies.
• Healthcare Operations: Supporting standard business activities, including quality assessments, customer service evaluations, compliance reviews, and auditing.
• Law Enforcement & Legal Requirements: Disclosing PHI when required by a court order, judge’s subpoena, warrant, or statutory public health reporting mandate.

Uses Requiring Written Authorization: Any highly sensitive processing, including the sale of PHI, tracking for targeted marketing, or uses and disclosures not explicitly detailed in this notice, strictly require your signed, explicit written authorization, which you may revoke at any time.

3. Your Individual Rights

Under HIPAA guidelines, you hold the following rights regarding the medical records we maintain about you:

• Right to Inspect and Copy: The right to inspect and obtain electronic or paper copies of your medical records and billing history.
• Right to Request Restrictions: The right to request restrictions on how we use or disclose your PHI for treatment, payment, or operations.
• Right to Restrict Disclosures to Health Plans: If you pay for an item or medical supply completely out-of-pocket, you have the right to request that we do not disclose that PHI to your health insurance plan for payment or operations, and we are legally required to honor that restriction.
• Right to Amend: The right to request that we amend health information in your record that you believe is inaccurate or incomplete.
• Right to an Accounting: The right to receive an accounting list of non-routine disclosures we have made of your PHI for purposes other than treatment, payment, or operations.

4. Questions and Complaints

If you believe your privacy rights have been violated, or if you wish to exercise any of your data rights, you may file a formal complaint with our privacy official at the physical address or contact numbers listed below. You will not be penalized or retaliated against for filing a complaint.

Privacy Official Contact Information:
Goodhope Home Healthcare Inc. dba: Home Medical Supply
5440 Atlantic Springs Rd., Ste 108
Raleigh, NC 27616
Phone: 919-522-5221 | Fax: 919-874-5123
Email: [email protected]