Privacy Policy

1. Purpose

This Privacy Policy describes how the Provider collects, uses, maintains, and protects personal information for individuals receiving Home-Delivered Meals and Daily Meals services. The Provider is committed to protecting the privacy, dignity, and confidentiality of all individuals served and will handle personal information in accordance with applicable federal and state laws and regulations.

2. Information Collected

To provide services effectively, the Provider may collect and maintain the following types of information:

• Personal identifying information, such as name, address, phone number, and date of birth
   
• Health-related information necessary for service delivery, including dietary needs, allergies, and physician instructions
   
• Service authorization and care coordination information
   
• Delivery records and other service documentation related to meal services

3. Use of Information

Personal information is collected and used only for purposes necessary to provide and manage services, including:

• Delivering authorized meal services
   
• Coordinating care with care managers, service coordinators, and other approved service providers
   
• Ensuring compliance with waiver program requirements, billing procedures, and regulatory standards
   
• Responding to emergencies, maintaining quality assurance, and improving service delivery
   

4. Information Sharing and Disclosure

Personal information will only be shared under the following circumstances:

• With the consent of the individual or their authorized representative
   
• With care managers, service coordinators, or other providers involved in the individual’s approved service plan
   
• When required by applicable laws, regulations, or court orders
   
• In emergency situations when disclosure is necessary to protect the health or safety of the individual or others
   

The Provider does not sell, rent, or distribute personal information for marketing or commercial purposes.

5. Data Security

The Provider implements reasonable administrative, physical, and technical safeguards to protect personal information from unauthorized access, use, disclosure, or loss. Access to personal records is restricted to authorized personnel who require the information to perform their job duties.

6. Confidentiality of Records

All records are maintained in accordance with applicable confidentiality requirements, including the Health Insurance Portability and Accountability Act (HIPAA) when applicable. Records are stored securely and retained only for the period required by law and program regulations.

7. Individual Rights

Individuals receiving services have the right to:

• Access their personal information maintained by the Provider
   
• Request corrections to inaccurate or incomplete information
   
• Understand how their personal information is collected, used, and shared
   
• File a complaint if they believe their privacy rights have been violated
   

Requests regarding personal records must be submitted to the Provider’s designated contact person.

8. Breach Notification

In the event of a breach involving unsecured personal information, the Provider will notify affected individuals and appropriate authorities in accordance with applicable federal and state breach notification laws.

9. Policy Updates

The Provider reserves the right to revise or update this Privacy Policy to reflect changes in regulations, policies, or operational practices. Individuals will be notified of significant updates when required.