PHI Privacy Policy

Tall Tree Administrators

Introduction

This privacy policy explains how Tall Tree Administrators (TTA) collects, uses, and discloses your personal health information (PHI) in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA). TTA is a health care clearinghouse that processes health care claims and other transactions for health care providers, health plans, and other entities. TTA is committed to protecting your privacy and safeguarding your PHI.

What is PHI?

PHI is any information that identifies you or could be used to identify you, and that relates to your past, present, or future physical or mental health or condition, the provision of health care to you, or the payment for such health care. Examples of PHI include your name, address, date of birth, medical records, diagnosis, treatment, claims, and payment information.

How do we collect PHI?

We collect PHI from you, your health care providers, your health plans, and other entities that are involved in your health care or payment for your health care. We may collect PHI in various ways, such as through paper forms, electronic transmissions, telephone calls, or online portals.

How do we use and disclose PHI?

We use and disclose PHI for the following purposes:

• To perform our health care clearinghouse functions, such as processing and transmitting health care claims and other transactions, validating data, performing billing and payment services, and providing customer support.
• To comply with legal and regulatory requirements, such as responding to court orders, subpoenas, audits, investigations, or requests from government agencies.
• To protect the rights, property, and safety of TTA, our clients, our business partners, or the public, such as preventing or detecting fraud, abuse, or misuse of our services, enforcing our contracts, or resolving disputes.
• To perform other functions that are permitted or required by law, or that you authorize or consent to.

We do not use or disclose PHI for any other purposes, unless we obtain your written authorization or consent. You have the right to revoke your authorization or consent at any time, except to the extent that we have already acted on it.

What are your rights regarding PHI?

You have the following rights regarding your PHI that we maintain:

• You have the right to request access to your PHI. You may inspect and obtain a copy of your PHI that we maintain, subject to certain exceptions and limitations. To request access to your PHI, you must submit a written request to our Privacy Officer at the address below.
• You have the right to request amendment of your PHI. You may request that we correct or update your PHI that we maintain, if you believe that it is inaccurate or incomplete. To request amendment of your PHI, you must submit a written request to our Privacy Officer at the address below, and provide a reason for the request.
• You have the right to request an accounting of disclosures of your PHI. You may request a list of the disclosures that we have made of your PHI, except for those made for the purposes of treatment, payment, health care operations, or as authorized or required by law. To request an accounting of disclosures of your PHI, you must submit a written request to our Privacy Officer at the address below, and specify the time period for which you want the accounting.
• You have the right to request restrictions on the use and disclosure of your PHI. You may request that we limit how we use and disclose your PHI for the purposes of treatment, payment, or health care operations, or to certain individuals or entities that are involved in your care or payment for your care. We are not required to agree to your request, unless you request that we restrict the disclosure of your PHI to a health plan for payment or health care operations purposes, and the PHI pertains to a health care item or service that you have paid for out of pocket in full. To request restrictions on the use and disclosure of your PHI, you must submit a written request to our Privacy Officer at the address below, and specify what information you want to limit, and to whom you want the limits to apply.
• You have the right to request confidential communications of your PHI. You may request that we communicate with you about your PHI in a certain way or at a certain location, such as by mail, email, phone, or at a specific address. We will accommodate your request if it is reasonable and specifies how or where you wish to be contacted. To request confidential communications of your PHI, you must submit a written request to our Privacy Officer at the address below.
• You have the right to receive a copy of this privacy policy. You may request a paper copy of this privacy policy at any time, even if you have agreed to receive it electronically. To request a copy of this privacy policy, you may contact our Privacy Officer at the address below, or visit our website at www.talltree.com.

How do we protect PHI?

We take reasonable and appropriate measures to protect PHI from unauthorized access, use, or disclosure. We use physical, technical, and administrative safeguards to secure PHI in accordance with HIPAA and other applicable laws and standards. We train our staff on how to handle PHI properly and confidentially. We require our business associates and subcontractors to comply with HIPAA and other applicable laws and standards when they perform services for us or on our behalf that involve PHI.

How do we update this privacy policy?

We reserve the right to change this privacy policy at any time, as permitted or required by law. We will post any changes to this privacy policy on our website and notify you of any material changes by mail or email, as required by law. The revised privacy policy will be effective as of the date stated on the notice. Your continued use of our services after the effective date of the revised privacy policy will constitute your acceptance of the changes.

How do you contact us?

If you have any questions, comments, or complaints about this privacy policy or our privacy practices, or if you want to exercise any of your rights regarding your PHI, you may contact our Privacy Officer at:

Tall Tree Administrators
Attn: Privacy Officer
11550 S 700 E, Suite 200
Draper, UT 84020
Phone: (800) 274-8100
Email: service@talltreehealth.com

You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services at:

Office for Civil Rights
U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: (800) 368-1019
Email: OCRComplaint@hhs.gov

We will not retaliate against you for filing a complaint.