CPAP Shack Electronic Privacy Policies

Information provided by you

All personal information that is collected by CPAP-SHACK is held in the strictest confidence, and is only used to complete your transactions and make for a better buying experience. You can choose not to provide certain information, but then you will not be able to take advantage of many of our services. We use the information that you provide for such purposes as sending out our newsletter, site notices, promotions and order information.

We do not share your personal information

No information will be released by CPAP-SHACK except upon your written consent. We do not collect or traffic any information about your activity on the internet.

Information security

All of our transactions within our site (like information exchange, or purchases) are secure and 128-bit encrypted with industry-standard secure sockets layer technology.

CPAP Shack HIPAA POLICIES

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) was enacted by Congress on August 21, 1996. The Administrative Simplification provisions of the Act require the standardized transmission of electronic information. The goal is to reduce administrative burdens in the health care industry by adopting and requiring the use of standardized electronic transactions and code sets. Provisions were also made for rules regarding privacy and confidentiality of personal health information, the security of protected health information, and unique identifiers for health plans, providers, individuals and employers.

Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED BY CPAP Shack Inc. PLEASE REVIEW IT CAREFULLY.

I. Our Responsibilities

We are required by law to protect the privacy of your health information and to give you this Notice of our privacy practices, our duties and your rights concerning your health information. We must comply with the terms of our Notice currently in effect.

We reserve the right to change our privacy practices and the terms of this Notice at any time as permitted by applicable law. The new provisions will be effective for all health information we maintain, including health information we created or received before we made the changes. Before we make a significant change in our privacy practices, we will change this Notice and make the revised Notice available upon request. The Notice will also be posted on our Website (www.CPAP-Shack.com).

At CPAP Shack Inc, we respect the privacy and confidentiality of your personal health information. This Notice describes our legal duties and privacy practices

II. Uses and Disclosures of Health Information

The following categories describe different ways that we use and disclose health information. For each category, we give examples. Not every use or disclosure in a category is listed, but all of the ways we are permitted to use and disclose information will fall within one of the categories.

a. Treatment: We may use and disclose your health information as necessary to provide you with treatment and services and to coordinate your care. For example, we may share information with a home health agency to enable it to provide appropriate care. We may receive information from or disclose information to your physician or hospital staff to assist with appropriate treatment. Information may be collected from a hospital or extended care facility in order to plan for appropriate care upon your discharge from the facility. We may provide information to town or municipal social workers or housing officials to help locate appropriate services.

b. Payment: We may use and disclose your health information as necessary to obtain payment for services you receive. For example, we may confirm your eligibility for Medicare or Medicaid and provide the Department of Social Services, insurance companies or others with information needed to obtain payment for equipment and services.

c. Business Administration (Healthcare Operations): We may use and disclose your health information as necessary for our internal business activities such as quality assurance, education and training, employee performance review and other administrative activities.

III. Other Permitted Uses and Disclosures of Health Information

According to Federal Privacy Regulations, we may make the following uses and disclosures without obtaining written authorization from you:

a. Persons Involved in Your Care or Payment for Your Care: Unless you object, we may disclose health information about you to a family member, friend, money manager or other person involved in your care. We will use our professional judgment to disclose only information relevant to the person's involvement in your care or in arranging payment for care. As appropriate, we may use or disclose health information to notify or assist in the notification of a family member or personal representative, of your location, your general condition or your death.

b. Appointments: We may use or disclose health information to make or confirm an appointment for a home visit.

c. Reporting Victims of Abuse, Neglect, Domestic Violence or Exploitation: We must use and disclose your health information to notify a protective services agency or government authority as required by law if we reasonably believe that you have been a victim of abuse, neglect, domestic violence or exploitation.

d. To Avert a Serious Threat to Health or Safety: When necessary to prevent a serious threat to your health or safety or the health or safety of the public or another person, we may use or disclose your health information to someone able to help lessen or prevent the threatened harm.

e. Public Health Activities: We may disclose your health information for public health activities such as to help prevent or control disease, injury or disability, to report problems with medications or products or to advice of recalls of products.

f. Disaster Relief: We may disclose health information about you to an organization assisting in a disaster relief effort.

g. As Required by Law: We may disclose your health information when required by law to do so. This includes laws relating to Workmen's Compensation and similar programs.

h. Judicial and Administrative Proceedings: We may disclose your health information in response to a court or administrative order. We may also disclose information in response to a subpoena, discovery request or other lawful process that meets the requirements of Federal Privacy Regulations.

i. Law Enforcement: We may disclose your health information for certain law enforcement purposes. For example, we may disclose information to report emergencies or suspicious deaths, to identify or locate a suspect or missing person or to answer certain requests for information related to a crime. If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may disclose your health information for certain purposes including your own health and safety as well as that of others.

j. Business Associates: We may disclose your health information to our “business associates” who provide contracted services (for example, accounting, legal representation, consulting). If we disclose health information to a business associate, we will do so subject to a contract that requires that the information be kept confidential.

k. Health Oversight Activities: We may disclose your health information to a health oversight agency for activities authorized by law. For example, state or federal agencies conduct audits and inspections to assure that CPAP Shack Inc and its business associates comply with all laws and regulations.

l. National Security: We may disclose health information to authorized federal officials as required for lawful intelligence, counterintelligence and other national security activities.

Other uses and disclosures require your authorization. Disclosure of your health information or its use for any purpose other than those listed above requires your specific written authorization. If you change your mind after authorizing a use or disclosure of your information, you may submit a written revocation of the authorization. However, your decision to revoke the authorization will not affect or undo any use or disclosure of information that occurred before you notified us of your decision to revoke your authorization

IV. Authorization

a. Your written authorization (Authorization) is required for uses and disclosures not described in the categories listed above.

b. The Authorization will describe the particular health information to be used or disclosed, the name of the person or entity receiving the information, the purpose of the use or disclosure and an expiration date or event.

c. You may revoke an Authorization previously given by you at any time, but you must do so in writing. If you revoke your Authorization, we will no longer use or disclose your health information for the purposes specified except where we have already taken actions in reliance on your Authorization.

V. Your Rights Regarding Your Health Information

You have certain rights under the federal privacy standards. These include:

a. The right to request restrictions on the use and disclosure of your protected health information

b. The right to receive confidential communications concerning your medical condition and treatment

c. The right to inspect and copy your protected health information

d. The right to amend or submit corrections to your protected health information

e. The right to receive an accounting of how and to whom your protected health information has been disclosed

f. The right to receive a printed copy of this notice

Paper Copy of This Notice: You may request a copy of this notice at any time. You may also obtain a copy of this Notice at our website (www.CPAP-Shack.com).

VI. Special Restrictions under Connecticut State Law

For disclosures concerning health information relating to care for certain conditions, such as HIV-related information, State Law may require special restrictions on disclosure. We will follow the State Law if it provides a greater degree of protection than the Federal Law (HIPAA Privacy Regulations).

VII. Questions and Complaints

If you have any questions about our privacy practices or about your rights under this Notice, please contact your care manager or the CPAP Shack Inc Privacy Officer. If you are concerned that we may have violated your privacy rights, you may call us or file a complaint in writing to us. Please send any written requests or complaints to:

CPAP Shack Inc

276 Dow rd

Plainfield CT 06374

Toll-Free Telephone Number: 1-866-761-2727

CPAP Shack Inc will not retaliate in any way if you file a complaint.

Effective date of this notice: February 20, 2006