Privacy Policy
Last updated: October 18, 2025
Code Red Medical Couriers LLC (“we,” “our,” or “us”) is committed to protecting the privacy and security of all information entrusted to us, particularly information related to healthcare and government operations. This Privacy Policy explains how we collect, use, disclose, and protect personal and health-related information in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, and applicable U.S. federal privacy laws.
1. Scope
This Privacy Policy applies to all users of our website https://coderedmedicalcouriers.com/about-us/ and to all information collected or processed in connection with our courier services for clients including the Department of Veterans Affairs (VA), Department of Defense (DoD), hospitals, clinics, pharmacies, laboratories, and other healthcare organizations.
When performing courier services involving Protected Health Information (“PHI”), we act as a Business Associate under HIPAA and are bound by Business Associate Agreements (“BAAs”) with our clients.
2. Information We Collect
We may collect the following categories of information:
- Personal and Business Contact Information
- Name, email, phone number, organization, and job title
- Pickup and delivery addresses
- Health and Specimen Information (PHI)
- Medical specimen identifiers and limited patient data necessary for transport verification
- Information required for secure delivery tracking and chain-of-custody documentation
- Technical and Usage Data
- IP address, browser type, device data, and activity logs (via secure analytics tools)
We collect this information through direct interactions, electronic forms, and operational processes related to our courier services.
3. How We Use Information
We use collected information to:
- Provide and manage courier, logistics, and chain-of-custody services
- Ensure compliance with contractual, legal, and regulatory requirements
- Communicate regarding deliveries, service requests, and support inquiries
- Maintain security, accountability, and operational performance records
- Improve our website, services, and quality assurance processes
We will never sell or use personal or health information for marketing or non-operational purposes.
4. Information Sharing and Disclosure
We disclose information only as necessary to perform our services or as required by law. This may include:
- Authorized partners, subcontractors, or agents operating under strict confidentiality and security agreements
- Healthcare and government clients under applicable BAAs or service contracts
- Legal, regulatory, or law enforcement authorities when required by law or regulation
All disclosures comply with HIPAA, HITECH, and applicable federal contract data protection clauses.
5. Data Security and Compliance
We maintain comprehensive safeguards to protect the confidentiality, integrity, and availability of all information, including:
- Encryption of data in transit and at rest
- Secure, access-controlled storage and transmission systems
- Staff training on HIPAA, cybersecurity, and data privacy policies
- Incident response and breach notification procedures compliant with federal and state requirements
When transporting PHI or government-sensitive materials, we adhere to all applicable DoD/VA transport and data handling standards.
6. Data Retention
We retain information only as long as necessary to fulfill contractual, operational, and legal obligations, or as required under federal records retention standards. Once no longer needed, data is securely destroyed or anonymized.
7. Your Rights
Depending on the nature of our engagement, you may have rights to:
- Access or request correction of your personal information
- Request restrictions or deletion where permitted by law
- Receive notice of any breach involving your PHI
For HIPAA-covered information, such requests must be submitted through the covered entity (our client).
8. Cookies and Website Analytics
Our website may use cookies or analytics tools to improve functionality and security. These do not collect PHI. You may disable cookies through your browser, though some features may be limited.
9. Federal and HIPAA Compliance
As a Business Associate and government contractor, we comply with:
- HIPAA and HITECH privacy and security rules
- VA and DoD privacy and cybersecurity clauses (including NIST SP 800-171 standards as applicable)
- Any additional contractual confidentiality and data protection requirements
10. Policy Updates
We may update this Privacy Policy periodically. The updated version will be posted on this page with the revised effective date.
11. Contact Us
For questions about this Privacy Policy or our data privacy practices, please contact:
Code Red Medical Couriers
Email: info@coderedmedicalcouriers.com
Phone: (843) 968-3073
If you believe your privacy rights have been violated, you may also contact the U.S. Department of Health and Human Services Office for Civil Rights (OCR) at https://www.hhs.gov/ocr.
By using our website or services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.