Privacy Practices Policy
THIS POLICY DESCRIBES HOW MEDICAL
INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO
THIS INFORMATION. PLEASE READ IT CAREFULLY.
The terms
"we", "us" and "our" refer to Alpha Star Aviation
Services. The term "you” and “your” refers to the customer visiting our
website or using our services.
Purpose of this Policy: Alpha Star Aviation Services providing
Air Ambulance herein after referred to as “ALPHA STAR”, is required by law to
maintain the privacy of certain confidential health care information of its
customers, known as Protected Health Information or “PHI”, and to provide you
with a Policy of our legal duties and privacy practices with respect to your
PHI. This Policy describes your legal rights, advises you of our privacy practices, and lets you know how ALPHA STAR is permitted to use and
disclose PHI about you.
In most situations, we
may use PHI as described in this Policy without your permission. However, there
are some situations where we may use it only after we obtain your written
authorization, if we are required by law to do so.
Uses and Disclosures
of PHI: ALPHA STAR may use PHI for the purposes of treatment, payment, and health care
operations, in most cases without your written permission. Examples of our use
of your PHI:
·
For Treatment: This includes such things as verbal
and written information that we obtain about you and use pertaining to your
medical condition and treatment provided to you by us and other medical
personnel (including doctors, nurses, first responders, and others allowed by
applicable law who order our services to provide medical care to you). It also
includes information we give to other health care personnel to whom we transfer
your care and treatment, and includes transfer of PHI via radio or telephone to
the hospital or dispatch center as well as providing the hospital with a copy
of the written record we create in the course of providing you with treatment
and transport
·
For Payment: This includes any activities we must
undertake in order to get reimbursed for the services we provide to you,
including such things as organizing your PHI and submitting bills to insurance
companies (either directly or through a third party billing company),
management of billed claims for services rendered, medical necessity
determinations and reviews, utilization review, and collection of outstanding
accounts
·
For Health Care Operations: This includes quality assurance
activities, licensing, and training programs to ensure that our personnel meet
our standards of care and follow established policies and procedures, obtaining
legal and financial services, conducting business planning, processing
grievances and complaints, creating reports that do not individually identify
you for data collection purposes, fundraising, and certain marketing activities
Use and Disclosure of
PHI without your Authorization: ALPHA STAR is
permitted to use PHI without your written authorization, or opportunity to
object in certain situations, including:
·
For ALPHA STAR use in treating you
or in obtaining payment for services provided to you or in other health care
operations
·
For the treatment, activities of
another health care provider
·
To another health care provider or
entity for the payment activities of the provider or entity that receives the
information (such as your hospital or insurance company)
·
To another health care
provider (such as the hospital to which you are transported) for the health
care operations activities of the entity that receives the information as long
as the entity receiving the information has or has had a relationship with you
and the PHI pertains to that relationship
·
For disclosures
required by international, federal, state, or local law
·
For health care fraud
and abuse detection or for activities related to compliance with the law
·
To a family member,
other relative, or close personal friend or other individual involved in your
care if we obtain your verbal agreement to do so or if we give you an
opportunity to object to such a disclosure and you do not raise an objection.
We may also disclose health information to your family, relatives, or friends
if we infer from the circumstances that you would not object. For example, we
may assume you agree to our disclosure of your personal health information to
your spouse when your spouse has called the ambulance for you. In situations
where you are not capable of objecting (because you are not present or due to
your incapacity or medical emergency), we may, in our professional judgment,
determine that a disclosure to your family member, relative, or friend is in
your best interest. In that situation, we will disclose only health information
relevant to that person’s involvement in your care
·
To a public health
authority in certain situations such as reporting a birth death or disease as
required by law, as part of a public health investigation, to report child or
adult abuse or neglect or domestic violence, to report adverse events such as
product defects, or to notify a person about exposure to a possible
communicable disease as required by law
·
For health oversight
activities including audits or government investigations, inspections,
disciplinary proceedings, and other administrative or judicial actions
undertaken by the government (or their contractors) by law to oversee the
health care system
·
For judicial and
administrative proceedings as required by a court or administrative order, or
in some cases in response to a subpoena or other legal process
·
For law enforcement
activities in limited situations, such as when there is a warrant for the
request, or when the information is needed to locate a suspect or stop a crime
·
For military, national
defense and security and other special government functions. If you are a
member of the armed forces, we may release PHI as required by military command
authorities including foreign military authorities
·
To avert a serious
threat to the health and safety of a person or the public at large
·
For workers’
compensation purposes, and in compliance with workers’ compensation laws
·
To coroners, medical
examiners, and funeral directors for identifying a deceased person, determining
cause of death, or carrying on their duties as authorized by law
·
To our business
associates that perform functions on our behalf or provide us with services if
the information is necessary for such functions or services. All of our
business associates are obligated to protect the privacy of your PHI and are
not allowed to use or disclose any information other than as specified in our
contract
·
To a correctional
institution if you are an inmate or law enforcement official if you are under
custody if necessary
·
If you are an organ
donor, we may release health information to organizations that handle organ
procurement or organ, eye or tissue transplantation or to an organ donation
bank, as necessary to facilitate organ donation and transplantation
·
To disaster relief
organizations, if you do not object, that seeks your PHI to coordinate your
care, or notify family and friends of your location or condition in a disaster
·
For research projects,
but this will be subject to strict oversight and approvals and health
information will be released only when there is a minimal risk to your privacy
and adequate safeguards are in place in accordance with the law
·
We may use or disclose
health information about you in a way that does not personally identify you or
reveal who you are
Use and Disclosures
Requiring Your Authorization:
·
Uses and disclosures
for marketing purposes
·
Uses and disclosures
of psychotherapy notes
·
Disclosures that
constitute a sale of your PHI
Any other use or
disclosure of PHI, not covered by this Policy will only be made with your
written authorization, (the authorization must specifically identify the
information we seek to use or disclose, as well as when and how we seek to use
or disclose it). You may revoke your authorization at any time, in writing to
our Privacy Office, except to the extent that we have already used or disclosed
medical information in reliance on that authorization.
PATIENT’S RIGHTS:
As a patient, you have
a number of rights with respect to the protection of your PHI, including:
·
The Right to Access, Copy
or Inspect Your PHI: This means you may visit our offices, inspect, and
copy most of the medical information about you that we maintain. You will be
required to make your request specific in writing. We will normally provide you
with access to this information within 30 days of your request or the timeframe
required under local law. We also may charge you a reasonable fee for copy of any
medical information that you have the right to access. In limited
circumstances, we may deny access to your medical information, and you may
appeal certain types of denials. We have available forms to request access to
your PHI and we will provide a written response if we deny you access and let
you know your appeal rights. If you wish to inspect and copy your medical
information, you should contact the Privacy Officer listed at the end of this Policy
If your PHI is
maintained in an electronic format (known as an electronic medical record or an
electronic health record), you have the right to request that an electronic
copy of your record be given to you or transmitted to another individual or
entity as authorised by you. We will make every effort to provide access to
your PHI in the form or format you request, if it is readily producible in such
form or format. If the PHI is not readily producible in the form or format you
request your record will be provided in either our standard electronic format
or if you do not want this form or format, a readable hard copy form. We may
charge you a reasonable, cost-based fee for the labor associated with
transmitting the electronic medical record.
·
The Right to Amend
Your PHI: You have the right to ask us to amend written medical information that we
may have about you. We will generally amend your information within 60 days of
your request based on cogent supporting medical records and will notify you
when we have amended the information. We are permitted by law to deny your
request to amend the medical information only in certain circumstances; such as
we believe the information you have asked us to amend is not correct. To amend
your medical information, you should contact the Privacy Officer listed at the
end of this Policy
·
The Right to Request
an Accounting of Our Use and Disclosure of Your PHI: You may request an accounting from us of certain disclosures of your
medical information that we have made in the last six years before the date of
your request. We are not required to give you an accounting of information we
have used or disclosed for purposes of treatment, payment or health care
operations, or when we share your health information with our business
associates, such as our billing company or a medical facility from/to which we
have transported you
We also are not required to give you an accounting of our uses of
protected health information for which you have already given us written
authorization. If you wish to request an accounting of the medical information
about you that we have used or disclosed that is not exempted from the
accounting requirement, you should contact the Privacy Officer listed at the
end of this Policy.
·
The right to request
that we restrict the uses and disclosures of your PHI: You have the right to request that we restrict how we use and disclose
your medical information that we have for treatment, payment or health care
operations, or to restrict the information that is provided to family, friends
and other individuals involved in your health care. But if you request a
restriction and the information you asked us to restrict is needed to provide
you with emergency treatment, then we may use the PHI or disclose the PHI to a
health care provider to provide you with emergency treatment. ALPHA STAR is not
required to agree to any restrictions you request, but any restrictions agreed
to by ALPHA STAR are binding on ALPHA STAR
·
Right to request
Confidential Communications: You have the right to request that we communicate with you about medical
matters in a certain way or at a certain location. For example, you can ask
that we only contact you by mail or at work. To request confidential
communications, you must make your request; you should contact the Privacy
Officer listed at the end of this Policy. Your request must specify how or
where you wish to be contacted. We will accommodate reasonable requests. For
any reason, we cannot accommodate your request, we will communicate the reason,
which will require no further reconsideration
·
Right to Get Policy of
a Breach: You have the right to be notified upon a breach of
any of your unsecured Protected Health Information
·
Out-of-pocket-payments: If you paid out-of-pocket (or in
other words, you have requested that we not bill your health plan) in full for
a specific item or service, you have the right to ask that your PHI with
respect to that item or service not be disclosed to a health plan for purposes
of payment or health care operations, and we will honor that request
·
Internet, Electronic
Mail, and the Right to Obtain Copy of Paper Policy on Request: We will prominently post a copy of
this Policy on our web site and make the Policy available as electronically viewing
format. If you make a request, we will forward you this Policy by electronic
mail instead of on paper to your notified E-mail address.
·
Revisions to the Policy: ALPHA STAR reserves the right to amend
the terms of this Policy at any time without any prior notice, and the changes
will be effective immediately and will apply to all Protected Health
Information that we maintain. Any material changes to the Policy will be
promptly posted in our facilities and posted to our web site, if we maintain
one. You can get a copy of the latest version of this Policy by contacting the
Privacy Officer identified below
·
Your Legal Rights and
Complaints: You also have the right to complain to us at the threshold, if you believe
your privacy rights have been violated. Should you have any questions, comments
or complaints you may direct all inquiries to the Privacy Officer listed at the
end of this Policy. Individuals will not be retaliated against for filing a
complaint. Your remedy to ventilate before Ministry of Health will not be withdrawn
as you avail above said remedial action taken by you
If you have any questions or if you wish to file a complaint or exercise
any rights listed in this Policy, please contact:
Attention: Privacy Officer
Alpha Star Aviation
Services
PO Box 15622
Riyadh, Saudi Arabia
11454
+966 11 210 0303 ext.
2402
Email: airamb@alphastarav.com
PERSONAL DATA UNDER THE GENERAL DATA
PROTECTION REGULATION (“GDPR”):
Personal Data shall
have the meaning as set forth in the GDPR, but generally refers to information
that can be used to identify a natural person.
·
The Information ALPHA
STAR Collects: ALPHA STAR may collect administrative data such as a patient’s name,
address, contact details (phone, email), nationality, passport information,
driver’s license, etc… Processing of this administrative data is necessary to
support the administration of patient care.
Similarly, ALPHA STAR may collect and process medical information that
is necessary to provide patient care.
ALPHA STAR may also collect and process account detail that is necessary
for providing billing services and seeking reimbursement from insurance
companies or the government, as applicable.
ALPHA STAR may also use cookies or other tracking technologies to improve
or customize the products, content, and services for its website visitors
Information Sharing and Disclosure: ALPHA STAR may disclose Personal
Data as follows:
·
To third parties that
ALPHA STAR has engaged to perform business-related functions on its behalf.
This may include providers that provide customer, transportation, technical or
operational support
·
In response to legal
process, for example, in response to a court order or a subpoena, a law
enforcement or government agency's request or similar request
·
With third parties in
order to investigate, prevent, or take action (in ALPHA STAR’s sole discretion)
regarding potentially illegal activities, or violations of ALPHA STAR policies
Retention of Personal Data:
ALPHA STAR, as a
health care provider, is obligated to store some of your Personal Data for a
certain period of time, depending on various legal requirements
Other Important
Information About Your Privacy:
·
International
Transfer: Any transfer of Personal Data is performed in accordance with Saudi Arabia
law. There are times that ALPHA STAR operates globally so it is necessary to
transfer your Personal Data internationally. In particular, your Personal Data
will be transferred to and processed in Saudi Arabia. By using ALPHA STAR’s
services, you (a) acknowledge that the data protection and other laws of other
countries, such as the US, may provide a less comprehensive or protective
standard of protection than those in your country, and consent to your Personal
Data being collected, processed and transferred as set forth in this Privacy
Policy and Saudi Arabia law
·
Data Security: ALPHA STAR has put in place
physical, electronic, and managerial procedures designed to help prevent
unauthorized access, to maintain data security, and to use correctly the Personal
Data it collects. These safeguards vary based on the sensitivity of the
Personal Data that is collected and stored. Although ALPHA STAR takes
appropriate measures to safeguard against unauthorized disclosures of Personal
Data, ALPHA STAR cannot assure you that Personal Data will never be disclosed,
altered or destroyed in a manner that is inconsistent with this Privacy
Policy. In the event of a breach of
Personal Data, ALPHA STAR will report the breach to the supervisory authority
within 72 hours of discovery unless your rights and freedom are at stake. ALPHA STAR will notify you of such a breach
if there is a significant risk to your rights and freedom (in ALPHA STAR’s sole
opinion)
·
You have the right to
obtain from ALPHA STAR the erasure of Personal Data without undue delay,
including, but not limited to, for the following reasons: (1) the Personal Data
is no longer necessary for the intended purpose; (2) you withdraw your consent
and no valid legal ground remains for processing; and (3) the Personal Data was
unlawfully processed. The grounds for
erasure do not apply if the Personal Data is being retained for the
establishment, exercise or defense of legal claims, or if such Personal Data is
being archived for purposes in the public interest, scientific or historical
research purpose or statistical purpose
If your Personal Data is inaccurate, ALPHA
STAR will work to correct the inaccuracies without undue delay.
You also have the
right to restrict processing upon certain conditions. These conditions include:
(1) your contest of the accuracy of the personal data until ALPHA STAR is able
to verify its accuracy; (2) unlawful processing where you request restriction
as opposed to deletion of the personal data; (3) ALPHA STAR no longer needs the
personal data for processing, but are required to retain the personal data for
the establishment, exercise or defense of legal claims; and (4) you have
objected to the processing of the data as outlined above and ALPHA STAR is verifying whether the legitimate
grounds override the members. You have the right to complain to the relevant
supervisory authority in the event you do not believe your rights are being
honored by ALPHA STAR.
All requests to access, erase, correct, or
restrict your Personal Data should be made in writing to:
Attention: Privacy Officer
Alpha Star Aviation Services
PO Box 15622
Riyadh, Saudi Arabia 11454
+966 11 210 0303 extn 2402
Email: airamb@alphastarav.com