Privacy Policy

1. Who We Are

OuiHealth LLC ("OuiHealth," "we," "our," or "us") is a Georgia-based home and personal care services organization. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information and protected health information ("PHI") obtained through our website, intake forms, client and caregiver portals, scheduling and clinical systems, and the delivery of care.

2. Scope

This Policy applies to current and prospective clients, authorized legal representatives, caregivers, applicants, employees, contractors, vendors, and website visitors. Where the U.S. Health Insurance Portability and Accountability Act ("HIPAA") applies, our HIPAA Notice of Privacy Practices governs the use and disclosure of PHI and supplements this Policy.

3. Information We Collect

• Identifiers and contact details (name, address, phone, email, date of birth, emergency contacts).
• Health and clinical information (medical history, diagnoses, mobility limitations, care plans, clinical assessments, medication information, physician details).
• Insurance, payer, and payment information.
• Government-issued identification, driver licenses, certifications, CPR/BLS cards, TB screening, background screening, and employment records (for caregivers and staff).
• Documents you upload to intake forms, applications, or the portals.
• Account credentials and authentication metadata.
• Service usage data (clock-in/clock-out events, visit notes, scheduling activity, portal logins, audit logs).
• Communications you send to us by phone, SMS, email, or portal messaging.
• Technical data such as IP address, device type, browser, and cookies (see our Cookie Policy).

4. How We Use Information

• Evaluating requests for care and matching clients with appropriate caregivers.
• Delivering, coordinating, documenting, and improving care services.
• Verifying caregiver credentials, conducting background screening, and maintaining personnel files.
• Operating our portals, scheduling, electronic signature, clock-in/clock-out, and billing systems.
• Communicating about appointments, care, billing, regulatory notices, and service updates.
• Meeting legal, regulatory, accreditation, audit, licensing, and reporting obligations.
• Investigating incidents, safeguarding clients and staff, preventing fraud, and protecting our systems.

5. How We Share Information

We disclose information only as necessary for treatment, payment, healthcare operations, or as permitted or required by law. Recipients may include:

• Authorized OuiHealth staff and contracted caregivers with a need to know.
• Healthcare providers involved in your care, with appropriate authorization where required.
• Service providers operating under written confidentiality and HIPAA Business Associate Agreements (hosting, communications, payment processing, background screening, document storage).
• Government agencies, regulators, accreditors, auditors, or courts where required by law.
• Authorized legal representatives you have designated in writing.
• Successors in interest in connection with a sale, merger, or restructuring of our organization, subject to continued protection of your information.

6. Your Rights

• Request access to records about you, subject to verification and applicable law.
• Request corrections to inaccurate information.
• Request restrictions on certain uses and disclosures (we will accommodate where reasonable and legally permitted).
• Request communications by alternative means or to alternative addresses.
• Receive an accounting of certain disclosures.
• File a complaint with us or with the U.S. Department of Health and Human Services without retaliation.

7. Security

We maintain administrative, physical, and technical safeguards designed to protect personal information, including role-based access control, encryption of data in transit and at rest where technically feasible, audit logging, secure document storage, vendor due diligence, and workforce training. No system can be guaranteed perfectly secure.

8. Retention

We retain personal information for as long as needed to provide services and to satisfy legal, regulatory, contractual, accreditation, and recordkeeping obligations. See our Data Retention and Destruction Policy.

9. Children

Our services are directed to adults requesting care for themselves or on behalf of an authorized person. We do not knowingly collect personal information directly from children without parental or guardian consent.

10. Changes

We may update this Policy. Material changes will be posted with a revised effective date and, where appropriate, communicated through the portals or by email.

11. Contact

Questions about this Policy may be directed to the OuiHealth Privacy Officer at ouihealthmanagement@gmail.com or (229) 234-2649, or by mail to [Mailing Address — Albany, GA].