1. Introduction

Rocky Mountain Medical Rentals ("we," "our," or "us") is committed to protecting the privacy and security of our customers' personal and health-related information. This policy outlines how we collect, use, disclose, and safeguard data in compliance with applicable federal and state laws, including the Health Insurance Portability and Accountability Act (HIPAA) and the Colorado Privacy Act (CPA).

2. Information We Collect

We collect information necessary to provide medical equipment rentals, including:

Contact Information: Name, delivery address, phone number, and email address.

Health and Medical Information: Medical conditions relevant to equipment needs (e.g., CPAP therapy, mobility constraints), prescriptions (if required), and primary care physician details.

Financial Information: Credit card details and billing addresses for rental payments.

Digital Data: IP addresses, browser types, and cookies when interacting with our website to reserve equipment.

3. How We Use Your Information

We use your data solely for business operations and customer care:

Processing rental reservations and coordinating delivery and pickup across the Denver Metro area and the Colorado Front Range.

Communicating regarding equipment maintenance, safety recalls, and billing.

Ensuring the correct fit and medical suitability of the requested equipment.

Complying with healthcare regulations and legal requirements.

4. Protected Health Information (PHI) and HIPAA Compliance

As a provider of medical equipment, we may handle PHI. We maintain strict administrative, physical, and technical safeguards to ensure the confidentiality of your health information. We do not sell PHI. We will only share PHI with healthcare providers, insurance companies (if applicable), or designated caregivers when explicitly authorized by you or as required by law.

5. Colorado Privacy Act (CPA) Rights

As a Colorado-based business, we adhere to the CPA, granting Colorado residents the following rights:

Right to Access: You may request a copy of the personal data we have collected about you.

Right to Correction: You may request corrections to inaccurate personal data.

Right to Deletion: You may request the deletion of your personal data, subject to legal and healthcare retention requirements.

Right to Opt-Out: You may opt out of the processing of personal data for targeted advertising or the sale of personal data (note: we do not sell customer data).

6. Data Security

We implement industry-standard encryption, secure servers, and restricted access protocols to protect your sensitive information from unauthorized access, alteration, or disclosure. All payment processing is conducted through PCI-compliant third-party gateways.

7. Data Retention

We retain your personal and medical information only for as long as necessary to fulfill the purposes outlined in this policy, manage your rental agreements, and comply with state and federal medical record retention laws.

8. Third-Party Sharing

We do not sell or rent your personal information to third parties. We may share information with trusted service providers (such as delivery personnel or payment processors) who are contractually obligated to protect your data and use it solely for the services they provide to us.

9. Contact Us

For questions regarding this Data and Privacy Protection Policy, or to exercise your privacy rights, please contact us at:

Phone: (720) 980-1411

Email: [email protected]