At CarePayment, we respect our customers and clients and understand you may be concerned about privacy, so we’ve instituted policies intended to ensure that your personal information, either obtained through you or our provider clients, is handled safely and responsibly. In addition we have a Business Associate agreement with each of our provider clients to ensure that your protected health information is treated confidentially and within the legal confines of HIPAA (Health Insurance Portability and Accountability Act). We encourage you to refer to this policy on an ongoing basis so that you understand our Privacy Policy. If you have any questions about this policy you can contact us by mail at Customer Service, ATTN: Privacy Manager, CarePayment, 5300 Meadows Road, Suite 320, Lake Oswego, OR 97035, or by calling our Privacy line: 866-625-8532.

What Information Do We Collect?
CarePayment may collect personally identifiable information about you from our provider clients, depending on the services you use.
• We collect information about your transactions with us.
• We collect information we receive from consumer reporting agencies.
• When you submit a question to customer service, you also may provide us with other information to allow us to answer your question.
• We also may receive some information about you from other sources and may add it to your account information. For example, we might get your updated address or billing adjustments from a health services provider or from one of our strategic partners.
CarePayment reserves the right to collect or otherwise obtain personally identifiable information about customers and potential customers in any lawful manner.

How Do We Use Your Information?
We use your information in a number of ways, including the following:
• For billing and collection purposes, including adjustments to the amount you owe.
• Your information may also be needed to complete transactions you request or to provide services you have requested.
CarePayment reserves the right to use personally identifiable information about customers and potential customers in any lawful manner.

Do We Share Your Information?
The information gathered (for example your name and address) may be shared with corporate affiliates within CarePayment. We may also share the information with unaffiliated third parties, including responsible companies with which we have a business associate relationship. For example:
We may disclose the following kinds of personally identifiable information about you to companies in which we have obtained a Business Associate Agreement:
• Information we receive from you on your credit application or other forms, such as your name, address, social security number and date of birth;
• Information about your transactions with your health service provider, us, our affiliates, or others, such as your account balance, credit limit, account number, payment history, parties to transactions, types of goods and/or services purchased and account usage;
• Information we receive from a consumer-reporting agency, such as your creditworthiness and credit history.
We may disclose personally identifiable information about you to the following types of unaffiliated third parties as permitted by law and to companies in which we have a Business Associate relationship:
• We may use unaffiliated companies to assist in providing our products and services to customers.
• We may share your personally identifiable information with outside companies that perform services on our behalf. For example, we may retain an outside company to manage a database containing certain customer information or to create and distribute billing statements or provide customer service support. In those situations, the outside party is performing work for CarePayment, and CarePayment takes appropriate steps designed to ensure your information is used only to provide the services requested by CarePayment, and not for other purposes.
• If your account is in default for non-payment, we may assign the account and non-public personal information to unaffiliated third parties or our affiliates.
• Additionally, CarePayment may share account or other information when we believe it is necessary to comply with law or to protect our interests or property. This may include sharing information with other companies, lawyers, credit bureaus, agents or government agencies in connection with issues related to fraud, credit or debt collection.
• In the event that some or all of the business assets of CarePayment are sold or transferred, we may transfer the corresponding information about our customers.

Explanation of Opt-Out Rights
If you prefer that we not disclose certain personal information about you, you may opt out of those disclosures; that is, you may direct us not to make those disclosures (other than disclosures permitted by law or otherwise exempt from your opt-out rights). If you wish to opt out of disclosures of nonpublic personal information to unaffiliated companies, you may call the toll-free customer service number disclosed above. If you wish to opt out of disclosure of credit information (other than your credit experience with us) between affiliate companies within CarePayment, you may call the same toll-free number.
If you share access to or responsibility for your CarePayment account with some one else, either party may exercise their opt-out rights. If either party exercises the opt-out right, none of your information associated with the joint account will be disclosed (other than disclosures permitted by law or otherwise exempt from your opt-out rights).
Once you have submitted your request you should assume that it has been successfully received and your request is being processed. Please allow us 60 calendar days from your request to complete the removal.
You should know that certain information (for example, your name, address and phone number) may still be shared with unaffiliated third parties, in which we have a Business Associate relationship with, when it is required to complete a transaction or to provide special services you request, such as changing a billing date. Your transaction or request is our authorization to provide this information to third parties regardless of your or your joint account holder’s previous request to opt-out but only for this transaction or request.

Is My Information Secure?
CarePayment strives to maintain the security of information collected. To try to prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put in place physical, electronic, and managerial procedures to safeguard and secure the information we collect.
We restrict access to nonpublic personal information about you to those employees who need to know that information to provide products or services to you. We maintain physical, electronic, and procedural safeguards to guard your nonpublic personal information.
Private account and customer information is located on a secured server behind a firewall; it is not directly connected to the Internet. The firewall meets recognized industry and HIPAA standards.

Privacy Policy Changes
We may change this Privacy Policy from time to time. When such a change is made, we will post a revised version on the web site and make it available at your request through our phone centers. Changes will be effective when they are posted. It is your responsibility to review this Privacy Policy from time to time to be aware of any such change. Your continued use of any of CarePayment’s services will indicate your agreement to any such change.
This Privacy Policy was last reviewed April 2014.