Privacy Policy

---

The Care Krewe ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our home health services.

Important: As a home health agency, we are also subject to the Health Insurance Portability and Accountability Act (HIPAA). Our handling of Protected Health Information (PHI) is governed by our separate HIPAA Notice of Privacy Practices, which is provided to all patients at the start of care.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our website.

We collect information you voluntarily provide when you:

• Submit our contact or intake form on the website
• Call or email us to inquire about services
• Apply for employment or caregiver positions
• Communicate with our staff via any channel

This may include your name, phone number, email address, mailing address, insurance information, and details about your healthcare needs.

When you visit our website, we may automatically collect certain technical data including your IP address, browser type, pages visited, time spent on pages, and referring URLs. This data helps us improve our website experience.

If you become a patient, we collect Protected Health Information (PHI) as necessary to provide skilled nursing and home health services. This is governed by HIPAA and our Notice of Privacy Practices.

We use the information we collect to:

• Respond to your inquiries and provide requested services
• Process patient intake and coordinate care
• Communicate appointment scheduling, updates, and care information
• Process insurance claims and billing
• Evaluate job applications and onboard staff
• Improve our website, services, and patient experience
• Comply with legal and regulatory obligations
• Send occasional service-related communications (not marketing spam)

We do not sell your personal information. We do not use your information for automated decision-making or profiling.

The Care Krewe is a HIPAA-covered entity. All Protected Health Information (PHI) — including medical records, treatment details, and health history — is handled in strict accordance with HIPAA's Privacy Rule and Security Rule.

• The right to access and receive a copy of your health records
• The right to request corrections to your records
• The right to an accounting of disclosures of your PHI
• The right to request restrictions on certain uses of your PHI
• The right to receive confidential communications
• The right to file a complaint without retaliation

Our full Notice of Privacy Practices is available upon request and will be provided to you at the start of care. To request a copy, contact us at hello@thecarekrew.com.

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

We may share PHI with physicians, specialists, and other members of your care team as necessary to coordinate and provide your care.

We share necessary information with Medicare, Medicaid, and private insurers to process claims on your behalf.

We may use trusted third-party vendors (e.g., electronic health record systems, scheduling platforms) who are bound by Business Associate Agreements (BAAs) and contractual obligations to protect your data.

We may disclose information when required by law, court order, or to protect the safety of patients, staff, or the public.

We implement administrative, technical, and physical safeguards to protect your personal and health information, including:

• Encrypted data transmission (SSL/TLS) on our website
• Secure, HIPAA-compliant electronic health record systems
• Staff training on privacy and data security practices
• Access controls limiting PHI to authorized personnel only
• Regular security assessments and updates

While we take reasonable precautions, no method of transmission over the internet is 100% secure. If you believe your information has been compromised, please contact us immediately.

Depending on your location and applicable law, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information (subject to legal retention requirements)
• Opt out of non-essential communications
• Data portability — receive your data in a portable format

To exercise any of these rights, please contact us using the information below. We will respond within 30 days.

Our website may use cookies and similar tracking technologies to enhance your browsing experience and gather aggregate analytics. These cookies do not collect personal health information.

You can control cookie preferences through your browser settings. Disabling cookies may affect some website functionality.

We do not use third-party advertising cookies or sell data to advertisers.

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 through our website. If you believe a child has provided us personal information, please contact us and we will take prompt action to delete it.

Note: We do provide home health services to pediatric patients. Health information for minors is handled under HIPAA and with parental or legal guardian consent.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.