Home › Notice of Privacy Practices

Notice of Privacy Practices

How Scotts Medical Supply uses and discloses your health information, and the rights you have over it.

Effective date: [TO BE SET BY THE SCOTTS COMPLIANCE OFFICER BEFORE PUBLICATION]

This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.

SCOTTS MEDICAL SUPPLY INC. (“Scotts Medical Supply”, “we”, “us”) is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). We are required by law to maintain the privacy of your protected health information (PHI), to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.

How we may use and disclose your health information without your authorization

We may use and disclose your PHI for the following purposes:

  • Treatment. To supply the equipment and supplies your prescriber has ordered, to fit and set them up, to coordinate with your physician, home health agency, hospital or facility, and to arrange service or replacement.
  • Payment. To verify your eligibility and benefits, to obtain prior authorization, to bill Medicare, Medicaid, your health plan or another responsible party, and to pursue payment for the items we supplied.
  • Health care operations. Quality assessment, staff training and review, accreditation and licensing activities, compliance and audit programs, and business management.
  • Business associates. We use vendors — billing clearinghouses, software providers, delivery contractors, shredding services — who need PHI to do their work. Each is bound by a written business associate agreement requiring them to protect it.
  • Appointment and delivery reminders, and notices that a resupply shipment is due.
  • Individuals involved in your care. We may share information relevant to your equipment with a family member, caregiver or other person you have identified as involved in your care — for example, the person who will operate a hospital bed or a lift.
  • As required by law. Including public health activities, reporting of abuse or neglect, health oversight activities, judicial and administrative proceedings, law enforcement purposes, coroners and medical examiners, organ donation, serious threats to health or safety, specialized government functions, and workers’ compensation.
  • Food and Drug Administration. To report adverse events, product defects, or to participate in a product recall — a real and routine part of supplying medical equipment.

Uses that always require your written authorization

We will not use or disclose your health information for the following without your written authorization, which you may revoke at any time in writing:

  • Most uses and disclosures of psychotherapy notes.
  • Marketing communications, other than a face-to-face communication with you or a promotional gift of nominal value.
  • Any sale of your protected health information.
  • Any other use or disclosure not described in this notice.

Revoking an authorization does not undo disclosures we already made in reliance on it.

Your rights

  • To inspect and copy your health information in our designated record set, including an electronic copy where we hold it electronically. We may charge a reasonable, cost-based fee.
  • To request an amendment if you believe information we hold is incorrect or incomplete. We may deny the request, and if we do we will tell you why in writing and you may file a statement of disagreement.
  • To an accounting of disclosures we have made, other than for treatment, payment, health care operations, and certain other exceptions, for up to six years prior to your request.
  • To request restrictions on how we use or disclose your information. We are not required to agree, except in one case: if you pay for an item in full out of pocket, you may require us not to disclose that information to your health plan for payment or operations purposes, and we must comply.
  • To request confidential communications — for example, that we call a particular number, or send mail to an alternative address. We will accommodate reasonable requests.
  • To be notified of a breach of unsecured protected health information.
  • To a paper copy of this notice at any time, even if you agreed to receive it electronically. Call us and we will mail one.

To exercise any of these rights, write to us at PO Box 1484, Boca Raton, FL 33429-1484, or call (800) 304-7030 and ask for the Privacy Officer.

Our obligations

  • We are required by law to maintain the privacy and security of your PHI.
  • We must notify you promptly if a breach occurs that may have compromised the privacy or security of your information.
  • We must follow the duties and privacy practices described in this notice and give you a copy of it.
  • We will not use or share your information other than as described here unless you tell us in writing that we may.

Changes to this notice

We reserve the right to change this notice and to make the revised notice effective for health information we already hold as well as information we receive in future. The current notice will always be posted on this website and available on request. The effective date appears at the top of this page.

Complaints

If you believe your privacy rights have been violated, tell us — write to the Privacy Officer at PO Box 1484, Boca Raton, FL 33429-1484 or call (800) 304-7030. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at hhs.gov/ocr/privacy/hipaa/complaints, by mail, or by calling 1-800-368-1019.

We will not retaliate against you for filing a complaint.

Contact

SCOTTS MEDICAL SUPPLY INC.
Privacy Officer
PO Box 1484, Boca Raton, FL 33429-1484
Phone (800) 304-7030 · Fax (800) 594-1226
intake@scottsmedsupply.com

Needs Florida sourcing before publish: The effective date below is a placeholder. Before publishing, set the real adoption date, name the designated Privacy Officer, and have compliance confirm the business-associate and breach-notification language against current practice. This version was drafted 2026-08-18 and has not yet been reviewed by counsel.