Notice of Privacy Practices & Privacy Policy

---

Effective Date:  August 10, 2025

This notice describes how your personal and health information may be used and disclosed, and how you can access this information. Please review it carefully.

Our Commitment to Privacy

Oraum Healthcare is committed to protecting the privacy of your personal and health information. We follow all applicable federal and state privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA), Virginia privacy regulations, and Medicaid waiver program requirements.

What is Protected Health Information (PHI)?

Protected Health Information, or PHI, is any information that identifies you and relates to your past, present, or future physical or mental health, the care you receive, or payment for your care. PHI can include:

• Medical and service records
   
• Individual Support Plans (ISPs)
   
• Progress notes and behavior support logs
   
• Medicaid waiver documentation
   
• Contact information, demographics, and identifiers
   

How We May Use and Disclose Your Information

We use and share PHI only as allowed by law, including:

For Treatment

To provide, coordinate, and manage your services. This may include sharing PHI with Direct Support Professionals (DSPs), Community Services Boards (CSBs), support coordinators, therapists, or medical providers involved in your care.

For Payment

To bill and receive payment for your services. This may involve PHI being shared with Medicaid, Managed Care Organizations (MCOs), the Virginia Department of Medical Assistance Services (DMAS), WaMS, and, if applicable, fiscal intermediaries like Public Partnerships LLC (PPL).

For Healthcare Operations

For activities such as quality improvement, staff training, compliance audits, licensing reviews, and incident investigations.

As Required by Law

We may disclose PHI when required by law, such as for public health reporting, court orders, audits, or to prevent a serious threat to health or safety.

Other Allowed Disclosures Without Authorization

We may share PHI in specific cases such as:

• Reporting suspected abuse, neglect, or exploitation
   
• Responding to emergencies
   
• Working with law enforcement when legally required
   
• Coordinating care with family members or guardians involved in your support (with your consent or when necessary to prevent serious harm)
   

With Your Written Authorization

Any other use or sharing of your PHI — such as for marketing, fundraising, or non-required disclosures — will only be done with your signed, written authorization. You may revoke this at any time in writing.

Your Privacy Rights

You have the right to:

• Access and Copy Your Records – Receive paper or electronic copies of your PHI. 
• Request an Amendment – Ask us to correct or update PHI you believe is incomplete or incorrect. 
• Request Restrictions – Ask us to limit how we use or share your PHI for treatment, payment, or operations. 
• Request Confidential Communications – Ask us to contact you in a specific way (e.g., phone, mail, email) or at a specific location. 
• Get an Accounting of Disclosures – Receive a list of certain times we shared your PHI. 
• Receive Breach Notification – Be informed if your unsecured PHI is accessed or shared in a way that violates HIPAA. 
• Obtain a Copy of This Notice – Ask for this policy at any time.
   

Our Responsibilities

We are required by law to:

• Maintain the privacy and security of your PHI 
• Notify you promptly if a breach occurs that may compromise your information 
• Follow the terms of this notice as long as it is in effect 
• Provide you with updates if our privacy practices change
   

Website & Electronic Privacy

When you visit our website, we may collect non-identifying information (such as browser type or pages visited) to improve our site. We do not sell personal information. Any personal details submitted through online forms are treated as confidential and handled according to this policy.

We will not share mobile phone numbers, email addresses, or text messaging consent with third parties for marketing purposes.

Filing a Complaint

If you believe your privacy rights have been violated, you can file a complaint without fear of retaliation. You may contact:

Privacy Officer
Oraum Healthcare
1640 Boro Place, 4th Floor
(703) 485-5013
support@oraumhealthcare.com

You may also contact:

Alan Rezaie at (202) 937-9424

U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, SW
Washington, D.C. 20201
Phone: 1-877-696-6775

Changes to This Notice

We may change this notice at any time. Any changes will apply to all PHI we maintain and will be posted on our website and available upon request.