HIPAA Notice of Privacy Practices

Effective Date: April 14, 2003

Revised Date: December 18, 2025 (currently in effect)

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY

Liberator Medical Supply, Inc.™ (“Liberator Medical,” “we,” or “our”) is required by law to maintain the privacy of its patients’ Protected Health Information (“PHI”). “Protected Health Information” includes certain information about a Liberator Medical™ patient (“you” or “your”) that may identify you, and that relates to your past, present, or future physical or mental health or condition, and related health care services. This Notice of Privacy Practices (“Notice”) describes how we may use or disclose PHI to carry out treatment, payment, and/or health care operations, and for other purposes that are permitted or required by law. This Notice and its contents pertain to your data when it is PHI.

We are required to abide by the terms of this Notice. We reserve the right to revise the terms of the Notice at any time. Any revised Notice shall be posted on www.liberatormedical.com. Any PHI maintained by Liberator Medical, including any information created or received prior to issuing the revised notice, shall be subject to the terms of the Notice that are currently in effect.

Upon your request, we will provide you with a paper copy of this Notice. Requests can be made by contacting Liberator Medical in the manners identified below. In your request, please indicate whether you would like to receive a copy of the Notice (a) by mail or (b) by email. Based on your choice, make sure to include your email address or mailing address.

By Mail: Liberator Medical Supply, Inc. 1823 SE Airport Rd, Stuart, FL 34996 By
Email: [email protected]
Phone: 1 (800) 323-0914

1.   YOUR HEALTH INFORMATION RIGHTS

You have the following rights regarding your PHI. To exercise these rights, please contact us using the contact information at the end of this form.:

  • Request restrictions on certain uses and disclosures of your PHI for treatment, payment, or health care operations. We are not required to agree to your request, and we may say “no” if it would affect your care;
  • Request restrictions on the disclosure of your PHI to your health insurer for payment purposes, if you pay for a service or health care item out-of-pocket in full. We will say “yes” unless a law requires us to share that PHI;
  • Inspect and obtain a copy of any PHI we have on file for you (other than in some cases, psychotherapy notes, and information compiled in reasonable anticipation of, or for use in, civil, criminal, or administrative action or proceeding). We will provide a copy or a summary of your PHI, usually within 30 days of your request. We may charge a reasonable cost-based fee;
  • Amend incorrect or incomplete information contained in any PHI we have on file for you. If we decline your request, we will inform you of our rationale, in writing, within 60 days of your request;
  • Obtain an accounting of certain disclosures of your PHI within the past 6 years. We will include all the disclosures except for those about treatment, payment, and health care operations, and certain other disclosures (such as any you asked us to make). We will provide one accounting per year for free, but will charge a reasonable, cost-based fee for additional accountings requested within a 12-month period;
  • Request that communications of your PHI be delivered confidentially by alternative means or at alternative locations. We will say “yes” to all reasonable requests.;
  • Choose someone to act for you (i.e. power of attorney, legal guardian); and
  • File a complaint if you feel we have violated your rights. We will not retaliate against you for filing a complaint.

2.   OUR RESPONSIBILITIES

Liberator Medical™ is required by law to:

  • Maintain the privacy of your PHI;
  • Provide you with a notice as to our legal duties and privacy practices with respect to PHI we collect and maintain about you;
  • Abide by the terms of this Notice; and
  • Notify you following a breach of your unsecured PHI.

3.   PERMITTED USES OR DISCLOSURES

We may use or disclose your PHI without your authorization for the following common reasons. If we disclose your PHI as described in this section, the PHI may be subject to redisclosure by the recipient and may no longer be protected by HIPAA.

1. Treatment

We may use and disclose your PHI with other professionals who are treating you.

Example: We may provide your treating physician with various medical records that he or she requested as part of deciding how to treat you.

2. Payment

We may use and disclose your PHI to bill and receive payment for services we provide.

Example: We may need to give your health plan information about products you received so that your health plan will pay us for the care. We may also tell your health plan about a product you may receive so we can obtain prior approval or determine whether your plan will cover the product provided to you.

3. Health Care Operations

We may use and disclose your PHI to run our business, review and improve our services, evaluate the performance of our staff, and contact you.

Example: We may combine medical information about many patients to decide what additional services or products we should (or should not) offer and to manage and evaluate the quality of services we provide to you.  We may also use or disclose PHI in connection with artificial intelligence, machine learning, and other technologies that support our operations, including processing orders, streamlining financial processes (such as improving how we submit claims to your health plan), and for customer service.

4.   OTHER USES OR DISCLOSURES

We may use or disclose your PHI without authorization for the following other reasons. If we disclose your PHI as described in this section, the PHI may be subject to redisclosure by the recipient and may no longer be protected by HIPAA.

1. Public Health and Safety

We may use or disclose your PHI for public health activities, such as to (i) prevent or control disease, injury, or disability; (ii) notify people of product recalls; (iii) report reactions to medications or problems with products; (iv) notify the appropriate government authority if we believe a patient who is a minor or disabled adult has been a victim of abuse, neglect or exploitation; (v) notify a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition; or (vi) report births or deaths.

2. Research

We may use or disclose your PHI to researchers when their research has been approved by an institutional review board that has established protocols to ensure the privacy of your PHI.

3. Law Enforcement

We may release PHI (i) in response to a court order, criminal subpoena, warrant, summons or similar process, or whenever otherwise authorized by law; (ii) if asked to do so by a law enforcement official investigating criminal conduct or to the Secretary of Health and Human Services to investigate or determine our compliance with the requirements of the HIPAA Privacy Rule; and (iii) in emergency circumstances to report a crime, the location of the crime or victims, or the identity, description or location of the person who committed the crime.

4. Organ Tissue and Donation Requests

We may use or disclose your PHI to organ procurement organizations.

5. Medical Examination/Funerals

We may use or disclose your PHI with a coroner, medical examiner, or funeral director, if you die.

6. Workers Compensation

We may use or disclose your PHI to the extent authorized by, and to the extent necessary to comply with, laws relating to workers compensation or other similar programs established by law.

7. Lawsuits and Disputes

We may disclose PHI in response to a court or administrative order. We may also disclose PHI in response to a civil subpoena, discovery request, or other lawful process under the law. Parties using these legal procedures to get PHI may have an obligation to tell you about the request or to obtain an order protecting the information requested.

8. Military and Veterans

If you are a member of the armed forces, we may release PHI as required by military command authorities.

9. As Required by Law

We will disclose PHI when required to do so by federal, state, or local law.

10. Business Associates

We may disclose PHI to business associates who provide services to or on behalf of us. Our business associates have the same obligation to keep PHI confidential as we do.

We must require our business associates to ensure that PHI is protected from unauthorized use or disclosure.

11. Health Oversight

We may disclose PHI to a health oversight agency for activities authorized by law, such as audits, investigations, and inspections. Oversight agencies include government agencies that oversee the health care system, government benefit programs, other government regulatory programs and civil rights laws.

12. De-identified Information

We may de-identify your PHI in accordance with the HIPAA standards. PHI that is de- identified in accordance with the HIPAA standards is not considered PHI, and therefore, we may use and disclose your de-identified information for any lawful purpose, including without limitation, for research purposes.

13. Placing, Paying for, or Refunding an Order

We may use and disclose PHI in order to sell, ship, return, or refund a product you purchase from us.

5.   USES AND DISCLOSURES THAT YOU CONTROL

1. Disclosures: (a) to family, friends, and others involved in your care, and (b) for disaster relief purposes.

You have both the right and choice to tell us to:

  • Share information with your family, close friends, or others involved in your care
  • Share information in a disaster relief situation

If you are not able to tell us your preference, for example if you are unconscious, we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety

2. Fundraising

Although we may contact you for fundraising efforts, you have the right and choice to tell us not to contact you again.

6.   USES AND DISCLOSURES THAT REQUIRE YOUR AUTHORIZATION

Except as identified in this Notice or otherwise permitted or required by HIPAA, Liberator Medical™ will not use or disclose your PHI without a valid authorization.

Once PHI about you has been disclosed pursuant to an authorization, HIPAA protections may no longer apply to the disclosed PHI, and that PHI may be re-disclosed by the recipient without your or our knowledge or authorization.

You may revoke an authorization, except to the extent that we have already taken action in reliance on it, at any time by delivering a written revocation statement to us using the contact information at the end of this Notice. Liberator™ cannot retract any PHI disclosed pursuant to your authorization prior to your revocation.

1. Marketing

Unless you give us separate written authorization, we will not use or disclose your PHI for marketing. For example, we will not accept any payments from other organizations or individuals in exchange for making communications to you about treatments, therapies, health care providers, settings of care, case management, care coordination, products or services unless you have given us your authorization, or the communication is permitted by law.

2. Sale of PHI

Unless you give us separate written authorization, we will not sell your PHI.

3. Psychotherapy Notes

Unless you give us separate written authorization, we will not use or disclose any of your PHI related to psychotherapy notes.

7.   SPECIAL PROTECTIONS FOR REPRODUCTIVE HEALTH INFORMATION

“Reproductive health information” includes details related to pregnancy, contraception, pregnancy termination, fertility treatments, and other related services.

When required by law, we will not use or disclose reproductive health information without your authorization.

We are prohibited from using or disclosing reproductive health information for purposes of conducting or imposing liability in connection with a criminal, civil, or administrative proceeding based solely on the fact that a person sought, obtained, provided, or facilitated reproductive health care, provided we reasonably determine that such care was lawful. For example, if you seek reproductive health services that are legal in your state or travel out of state to obtain reproductive health services, we will not disclose your information to law enforcement or other authorities for the purpose of investigating, prosecuting, or imposing liability on you or your healthcare provider.

In some situations, we may be asked to share reproductive health information with others, such as law enforcement, courts, or government agencies. In those situations, the person or group requesting your reproductive health information must provide a statement, called an attestation, that certain conditions have been met before we can release the reproductive health information. We are required to obtain an attestation in the following circumstances:

  • Requests from Law Enforcement – If law enforcement asks for your reproductive health information for an investigation, we will only share it if they confirm that the information will not be used to investigate or prosecute you or your healthcare provider for legal reproductive health care.
  • Court Orders or Subpoenas – If a court or lawyer requests your reproductive health information for a legal case, we will require them to confirm that the information will be used properly and in accordance with the law.
  • Government Investigations or Audits – If a government agency needs your information for auditing or investigating our healthcare practices, we will ask for an attestation to ensure the information is used only for that purpose.
  • Requests from Coroners and Medical Examiners – If a coroner or medical examiner requests reproductive health information, we need them to provide a statement confirming that the information is needed for their official duties, such as investigating the cause of death or performing autopsies.

8.   STATE LAW

We are required to comply with state privacy laws when they are stricter (or more protective of your PHI) than federal law. Some types of sensitive PHI, such as HIV information, genetic information, and mental health records may be subject to additional confidentiality protections under state or federal law.

9.   COMPLAINTS AND CONTACT INFORMATION

If you believe your privacy rights have been violated, you can file a complaint with our Privacy Officer or with the Secretary of Health and Human Services. There will be no retaliation for filing a complaint.

You may contact us with questions or to file a complaint at:

Liberator Medical Supply, Inc. Attn: Privacy Officer
1823 SE Airport Rd.
Stuart, FL 34996
(772) 287-2414

To file a complaint with the Secretary of Health and Human Services, contact:

US Department of Health and Human Services Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
(877) 696-6775