Notice of Privacy Practices

Effective Date: January 1, 2025

1. Our Commitment to Your Privacy

Dream Home Care LLC ("we," "us," or "our") is required by federal law under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations, including the Privacy Rule (45 CFR Parts 160 and 164), to maintain the privacy of your Protected Health Information (PHI), to provide you with this Notice of our legal duties and privacy practices, and to abide by the terms of this Notice currently in effect.

2. What Is Protected Health Information (PHI)?

PHI is individually identifiable health information that relates to your past, present, or future physical or mental health condition, the provision of health care to you, or payment for such care. This includes information such as your name, address, date of birth, Social Security number, and clinical records created in the course of your care.

3. How We May Use and Disclose Your PHI

For Treatment

We may use and disclose your PHI to provide, coordinate, and manage your in-home care services. For example, we may share information with your caregivers, physicians, or other health care providers involved in your care.

For Payment

We may use and disclose your PHI to obtain payment for services provided to you. This includes billing and collections activities processed through our authorized billing platform, HHAexchange, which operates under a signed Business Associate Agreement (BAA) with Dream Home Care LLC.

For Health Care Operations

We may use and disclose your PHI for our internal operations, including quality assessment, staff training, compliance audits, and business management necessary to support your care.

As Required by Law

We may disclose your PHI when required by federal, state, or local law, including reporting to public health authorities, in response to a court order or administrative request, or to report suspected abuse, neglect, or domestic violence.

With Your Written Authorization

Other uses and disclosures of your PHI not described in this Notice will only be made with your written authorization. You may revoke your authorization in writing at any time, except to the extent that we have already acted in reliance upon it.

4. Your Rights Regarding Your PHI

You have the following rights with respect to your PHI:

• Right to Access: You have the right to inspect and obtain a copy of your PHI maintained by us, with limited exceptions. Requests must be made in writing. We may charge a reasonable, cost-based fee for copies.
• Right to Amend: You may request in writing that we amend your PHI if you believe it is incorrect or incomplete. We may deny the request under certain circumstances and will provide a written explanation.
• Right to an Accounting of Disclosures: You may request a list of certain disclosures of your PHI that we have made for purposes other than treatment, payment, or health care operations.
• Right to Request Restrictions: You may request restrictions on how we use or disclose your PHI for treatment, payment, or health care operations. We are not required to agree to your request, except in limited circumstances required by law.
• Right to Confidential Communications: You may request that we communicate with you about your health information by alternative means or at alternative locations (e.g., sending correspondence to a different address).
• Right to a Paper Copy: You have the right to receive a paper copy of this Notice upon request, even if you received it electronically.
• Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

5. Our Responsibilities

• We are required by law to maintain the privacy of your PHI.
• We are required to provide you with this Notice of our legal duties and privacy practices.
• We are required to notify affected individuals following a breach of unsecured PHI in accordance with the HITECH Act Breach Notification Rule.
• We will not use or disclose your PHI without your written authorization, except as described in this Notice.

6. Business Associates

We may share your PHI with third-party service providers (Business Associates) who perform functions on our behalf. Each Business Associate is required to sign a Business Associate Agreement (BAA) that obligates them to protect your PHI in accordance with HIPAA. Our current Business Associates include:

• HHAexchange: Electronic Visit Verification (EVV), scheduling, billing, and claims processing.

7. Website Privacy

Our website at dreamhc.net does not collect, store, or transmit Protected Health Information. We do not use cookies, analytics, or any third-party tracking on our website. Do not submit PHI through our website contact forms. All clinical intake and health-related communications are conducted through secure, HIPAA-compliant channels.

8. Changes to This Notice

We reserve the right to change the terms of this Notice and to make the revised provisions effective for all PHI we maintain. A revised Notice will be posted on our website and made available at our offices.

9. Contact Information & Complaints

To exercise your rights, request information, or file a complaint, contact our HIPAA Privacy Officer:

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights: