CHME Website Privacy Policy
1. Who we are and what this policy covers
This Privacy Policy explains how California Home Medical Equipment (“CHME,” “we,” “us,” or “our”) collect, use, and protect information when you visit www.chme.org or any page that links to this policy (the “Website”). CHME Pharmacy LLC operates its own website, which is governed by its own privacy policy.
This policy covers information collected through the Website, such as contact forms, referral and inquiry forms, emails you send us, and how you browse our pages.
Your health information is protected separately. CHME is a health care provider covered by the Health Insurance Portability and Accountability Act (HIPAA) and the California Confidentiality of Medical Information Act (CMIA). Any protected health information (PHI) you share with us, including through the Website, a referral form, or our patient portal, is handled under our Notice of Privacy Practices, which controls over this policy wherever the two differ.
By using the Website, you acknowledge the practices described here. If you do not agree, please do not use the Website.
2. Information we collect
We collect information you choose to give us and limited technical information collected automatically when you visit.
| Category | Examples | Source |
| Contact details | Name, email, phone number, mailing address | You, through forms or email |
| Referral and inquiry details | Facility name, provider name, equipment or service requested, message contents | You or a referring provider |
| Insurance and health details | Insurance plan, diagnosis, prescriptions, equipment needs | You or a referring provider (treated as PHI) |
| Employment information | Resume, work history, contact details for job applications | You |
| Device and usage data | IP address, browser type, device type, pages viewed, referring site, date and time of visit | Collected automatically |
| Communication preferences | Newsletter sign-ups, email engagement | You and our email service providers |
Please do not submit detailed medical information through general contact forms. If you need to share health details, call us or use the secure methods our staff provide.
3. How we use information
We use information to serve patients, referral partners, and visitors, and never sell it. Specifically, we use it to:
- Respond to questions, referrals, and requests for equipment or service
- Schedule deliveries, fittings, repairs, and appointments
- Verify insurance coverage and process orders, as permitted under HIPAA
- Send newsletters or updates you have signed up for (you can unsubscribe at any time)
- Review job applications
- Operate, secure, and improve the Website, and understand which content is useful
- Comply with legal, regulatory, and accreditation requirements, including those of the Community Health Accreditation Partner (CHAP)
- Protect the rights, property, and safety of CHME, our patients, and others
4. Cookies, analytics, and tracking technologies
We use cookies and similar tools to keep the Website working and to measure general traffic, not to build advertising profiles of patients.
- Essential cookies make forms, security features, and page navigation work.
- Analytics tools (such as [Google Analytics, confirm]) show us aggregate trends like popular pages and visitor counts.
- We do not use tracking pixels or third party advertising tools on pages where you enter health information or log in to patient services.
You can block or delete cookies in your browser settings. Some features may not work properly if you do.
Do Not Track and Global Privacy Control. Browsers handle “Do Not Track” signals inconsistently, so the Website does not respond to them. We do honor the Global Privacy Control (GPC) signal as a request to opt out of any sale or sharing of personal information, as described in Section 6.
5. How we share information
We do not sell your personal information, and we share it only when needed to serve you or when the law requires it.
- Health care partners: with your physicians, referring facilities, and care teams involved in your care.
- Health plans and payers: to verify coverage and obtain payment, as permitted under HIPAA.
- Service providers: with vendors who host the Website, deliver email, provide analytics, or support our operations. They may use information only to perform services for us, and those handling PHI sign Business Associate Agreements.
- Legal and safety reasons: to comply with law, subpoenas, or regulators, or to protect the rights and safety of patients, staff, and the public.
- Business transfers: if CHME is involved in a merger, acquisition, or sale of assets, subject to the same protections described here.
6. Your California privacy rights
California residents may ask what personal information we hold about them and ask us to correct or delete it, and we will not treat you differently for asking.
To the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, “CCPA”), applies to CHME, you have the right to:
- Know what personal information we collect, use, and disclose, and the categories of sources and recipients
- Access a copy of your personal information
- Correct inaccurate personal information
- Delete personal information, subject to legal and medical record retention requirements
- Opt out of the sale or sharing of personal information. CHME does not sell personal information or share it for cross context behavioral advertising.
- Limit the use of sensitive personal information. We use it only for purposes the CCPA permits.
- Not be discriminated against for exercising these rights
PHI and medical information governed by HIPAA or the CMIA are exempt from the CCPA. Your rights over that information, including access and amendment, are described in our Notice of Privacy Practices.
How to make a request. Email or call us using the contact details in Section 7. We will confirm receipt within 10 business days and respond within 45 days, and we may need to verify your identity first. You may use an authorized agent with your signed permission.
Shine the Light. California Civil Code Section 1798.83 lets residents ask whether we disclose personal information to third parties for their direct marketing. We do not.
7. Security, retention, and other terms
Security. We use administrative, technical, and physical safeguards to protect information, including encrypted connections (HTTPS) on the Website. No online transmission is completely secure, so please avoid sending sensitive health details by regular email.
Retention. We keep personal information only as long as needed for the purposes above, or longer when required by law, payer contracts, or medical record retention rules.
Children. The Website is not directed to children under 16, and we do not knowingly collect their personal information online. Information about minor patients is provided by parents or guardians and handled under our Notice of Privacy Practices.
Links to other sites. The Website may link to manufacturers, health plans, social media, or other sites. Their privacy practices are their own, so please review their policies.
Accessibility. If you need this policy in another format, contact us and we will provide it.
Changes to this policy. We may update this policy from time to time. The effective date at the top shows when it last changed, and significant changes will be noted on the Website.
Contact us.
California Home Medical Equipment
Attn: Privacy Officer
289 Foster City Blvd., Suite A,
Foster City, CA 94404
Email: aowia@chme.org;Phone: 650.357.8550