Privacy Policy

I. Introduction

This Confidentiality and Privacy Policy and Procedure (the “Policy”) outlines the commitment of Ayuda Center of Healing ( ACH) entities Ayuda Sanctuary (AS) and Ayuda Community (AC)  to protecting the confidentiality and privacy of all client information. We understand that the information you share with us is sensitive and we take our responsibility to safeguard it very seriously.

II. Applicable Laws

This Policy adheres to all applicable  laws in Sri Lanka regarding patient privacy,  The Personal Protection act no 9 of 2022 (PDPA)including the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its regulations.

III. Definitions

• Client: An individual seeking services from the center.
• Protected Health Information (PHI): Individually identifiable information relating to a client’s past, present, or future physical or mental health condition, the provision of healthcare to the client, or payment for the provision of healthcare to the client.
• Minimum Necessary Standard: The use and disclosure of PHI should be limited to the amount necessary to achieve the intended purpose.

IV. Information We Collect

We collect the following types of information from clients:

• Demographic Information: Name, address, phone number, date of birth, emergency contact information.
• Medical Information: Health history, diagnoses, treatment plans, progress notes.
• Insurance Information: Health insurance details needed for billing purposes.

V. Use and Disclosure of Information

We will only use and disclose your information for the following purposes:

• To provide you with services: This includes treatment planning, communication with healthcare providers involved in your care, and coordination of care.
• For billing purposes: To obtain payment from your insurance company or for services rendered directly to you.
• To comply with the law: We may be required to disclose information in response to a court order, subpoena, or other legal process.
• To protect your health and safety: In rare circumstances, we may disclose information to prevent imminent harm to yourself or others.
• With your written authorization: You have the right to authorize the disclosure of your information for other purposes.

We will use the Minimum Necessary Standard when using or disclosing your PHI.

VI. Your Rights

You have the following rights regarding your information:

• Right to access: You have the right to request a copy of your medical records.
• Right to amend: You have the right to request an amendment to your medical records if you believe they are inaccurate or incomplete.
• Right to request an accounting of disclosures: You have the right to request a list of disclosures of your PHI that have been made, except for disclosures for treatment, payment, or healthcare operations.
• Right to request restrictions: You have the right to request restrictions on how your PHI is used or disclosed.
• Right to request confidential communication: You have the right to request that we communicate with you about your health information in a specific way, such as by mail or through a secure online portal.

VII. Security Measures

The Center takes all reasonable steps to protect the confidentiality and security of your information. These measures include:

• Physical safeguards: Restricting access to paper and electronic records.
• Administrative safeguards: Policies and procedures to ensure proper handling of information.
• Technical safeguards: Using encryption and password protection for electronic records.

VIII. Breaches of Protected Health Information

In the event of a breach of your PHI, we will take steps to investigate the breach, notify you and the appropriate authorities, and mitigate any potential harm.

IX. Retention and Disposal of Information

We will retain your information for as long as required by law or as necessary to provide you with services. After that time, we will dispose of your information in a secure manner.

X. Minors

For clients who are minors, we will obtain written consent from a parent or legal guardian before using or disclosing any information, except in emergencies.

XI. Questions and Complaints

If you have any questions or concerns about this Policy or how we handle your information, please contact us on dranilapaul@ayudahealing.com.

XII. Changes to this Policy

We reserve the right to change this Policy at any time. We will notify you of any changes by posting the revised Policy on our website or providing you with a copy.

This Policy is intended to provide you with a general understanding of our commitment to confidentiality and privacy. Please do not hesitate to contact us if you have any questions.