EasyIOL acknowledges its duty and responsibility to maintain the privacy of Individually Identifiable Health Information and Protected Health Information (PHI) as defined in the Health Insurance Portability and Accountability Act (HIPAA) as amended by the Health Information Technology for Economic and Clinical Health (HITECH) Act and other federal and state laws protecting the confidentiality of personal information, and under principles of general and professional ethics.
EasyIOL, acting as a Business Associate under HIPAA, also acknowledges its duty and responsibility to support and facilitate the timely and unimpeded flow of health information for lawful and appropriate purposes.
Messaging & Consent
EasyIOL sends SMS notifications to registered users for:
- Order updates
- Inventory alerts
- Case-related verification messages
Users provide consent (opt-in) while registering or using the platform. Message frequency may vary. Standard message and data rates may apply.
Users can opt out at any time by replying STOP.
Collection and Use of PHI
We collect and use PHI only as necessary to provide our services to Covered Entities or as required by law. We will not use or disclose PHI for any other purposes without the explicit written consent of the Covered Entity.
Security of PHI
We have implemented appropriate administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of PHI, as required by HIPAA. We actively review and update our security measures to ensure that they are effective and compliant with applicable laws and regulations. We have drafted our inner HIPAA Compliance Policy, which is mandatory for our employees and contractors, who work under HIPAA regulations.
Breach Notification
In the event of a breach of unsecured PHI, we will provide notification to the affected Covered Entity as required by HIPAA.
Business Associate Agreements
We enter into written Business Associate Agreements with all Covered Entities that we provide services to upon their request, in order to ensure compliance with HIPAA and other applicable laws and regulations.
Access to PHI
Covered Entities and individuals have the right to access and receive a copy of their PHI that we maintain. Requests for access should be made in writing to our Privacy Officer, whose contact information is provided below.
Contact Information
If you have any questions or concerns about our HIPAA Policy or the handling of PHI, please contact our Privacy Officer at: info@easyiol.com
Complaints
In case you are not satisfied with the manner in which the Company as well as the Covered Entity handles your PHI, you may submit a complaint at: info@easyiol.com