Privacy Policy

Divine Harvest Home Care (“we,” “our,” or “us”) is committed to protecting the privacy and confidentiality of all individuals who engage with our services, in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable federal and state privacy regulations.

This Privacy Policy outlines how we collect, use, disclose, and protect personal and health-related information obtained through our website and services.

1. Introduction
This Privacy Policy (“Policy”) governs the manner in which Divine Harvest Home Care (“Divine Harvest,” “Company,” “we,” “us,” or “our”) collects, uses, maintains, discloses, and protects personal and protected health information (“PHI” or “Personal Data”) of clients, site visitors, and any individuals (“you,” “your,” or “user”) who access or utilize our services or website.

By accessing our website or providing information to us via any channel, you acknowledge and agree to the terms set forth in this Policy. This Policy is provided in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), HITECH Act, and other applicable federal and state privacy and security laws.

2. Scope of Application
This Policy applies to all Personal Data, including but not limited to PHI, collected through the Divine Harvest website, in-person consultations, electronic communications, telephonic correspondence, intake forms, and any services rendered in the scope of caregiving, clinical coordination, or case management.

3. Definition of Terms
For purposes of this Policy:

“Personal Data” includes any information that identifies or can be used to identify an individual, including name, address, phone number, email, date of birth, medical history, and insurance information.

“Protected Health Information (PHI)” refers to individually identifiable health information transmitted or maintained in any form or medium, as defined under HIPAA.

“Data Subject” refers to the individual to whom the information pertains.

4. Collection of Personal Data
We may collect Personal Data and PHI by lawful and fair means, including but not limited to:

Submission of contact forms on our website
In-person or virtual consultations
Care intake assessments
Telephonic and email communications
Third-party referral partners
Payment processing systems
Information collected may include, but is not limited to:
Identifying information (e.g., full name, date of birth, SSN)
Contact information (e.g., email address, phone number, mailing address)
Medical conditions, diagnoses, treatment plans
Insurance and payment information
Emergency contact details
IP addresses, browser metadata, and device identifiers

5. Use of Personal Data
Divine Harvest may use Personal Data for the following lawful and legitimate business purposes:

To initiate and manage the provision of home care and nursing services
To coordinate with physicians, insurance providers, or case managers
To verify client eligibility and conduct pre-care evaluations
To respond to client inquiries or service requests
To carry out billing, claims, or administrative operations
To conduct quality assurance, compliance monitoring, or risk mitigation
To improve service delivery and user experience
To fulfill legal, regulatory, or contractual obligations

We do not sell or lease your Personal Data to third parties under any circumstances.

6. Disclosure of Information
Divine Harvest may disclose Personal Data under the following circumstances:

To Authorized Personnel: Access to PHI is granted on a “minimum necessary” basis to employees, contractors, or agents with a valid business need and HIPAA training.
To Business Associates: Where required, we may disclose data to third-party vendors who perform services on our behalf under a Business Associate Agreement (BAA) compliant with 45 CFR § 164.504(e).
As Permitted or Required by Law: Including disclosures for public health reporting, subpoenas, court orders, investigations, or as required by federal, state, or local law.
To Prevent Harm: Where necessary to prevent serious threat to health or safety, in compliance with 45 CFR § 164.512(j).
With Client Consent or Authorization: We will obtain your written authorization prior to any use or disclosure of PHI not otherwise permitted or required by law.

7. Data Security and Safeguards
Divine Harvest implements robust physical, administrative, and technical safeguards to protect the confidentiality, integrity, and availability of Personal Data in accordance with 45 CFR §§ 164.302–318. These include but are not limited to:

Access controls and role-based permissions
Data encryption in transit and at rest
Secure storage of physical documents
Audit logs and monitoring systems
Mandatory HIPAA compliance training for all staff
Password-protected electronic health systems
Privacy policies governing mobile access

Despite these efforts, no system is 100% secure. You acknowledge and accept these limitations when transmitting information electronically.

8. Client Rights Under HIPAA
In accordance with 45 CFR § 164.500 et seq., you have the right to:

Request Access to your PHI in designated record sets
Request Amendment of inaccurate or incomplete PHI
Request Restrictions on certain uses and disclosures
Request Confidential Communications via alternative means
Receive an Accounting of Disclosures of PHI for six years prior to the request
Obtain a Paper Copy of this Policy upon request
Withdraw Authorization at any time, except to the extent action has already been taken

Requests must be submitted in writing to our Privacy Officer (see Section 12).

9. Website Use & Cookies
Our website may use cookies, tracking pixels, and third-party analytics tools to collect non-personal data for functionality and performance purposes. This may include browser types, IP addresses, time stamps, and page views.

Cookies can be disabled via your browser settings, although doing so may impact site functionality.

10. Third-Party Websites and External Links
Our website may contain hyperlinks to third-party websites. Divine Harvest does not control, endorse, or assume responsibility for the content, security, or privacy practices of such websites. Users are encouraged to review the privacy policies of external websites independently.

11. Modifications to This Policy
We reserve the right to amend or revise this Policy at any time without prior notice, in compliance with applicable laws. Any updates will be published on this page with an updated “Effective Date.” Continued use of our services or website constitutes acceptance of the revised terms.

12. Contact Information
For questions regarding this Privacy Policy or to exercise your rights under HIPAA, please contact:

Privacy Officer - Yolanda Harris
Divine Harvest Home Care info@divineharvesthomecare.com

Complaints may also be submitted to the U.S. Department of Health & Human Services, Office for Civil Rights (OCR) at:
https://www.hhs.gov/ocr/privacy/hipaa/complaints/

13. Governing Law
This Policy shall be governed by and construed in accordance with the laws of the State of Georgia and applicable federal regulations. Jurisdiction and venue shall lie exclusively in the courts located in Henry County, Georgia.