Privacy Policy

Effective Date: 10/10/2025
Last Updated: 10/10/2025

1. Introduction

Ark Provision (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website arkprov.com, and how we handle protected health information (PHI) in compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA). By using our website or services, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our site and services.

2. Scope & Applicability

• This Privacy Policy applies to information collected on arkprov.com and related forms, portals, or communications.
• Where we handle protected health information (PHI), we comply fully with HIPAA.
• If state or local laws provide stronger privacy protections, those laws will apply.

3. Information We Collect

a) Non-Health Personal Information

• Name, email address, mailing address, and phone number
• Demographic details (such as age, gender, ZIP code)
• IP address, browser type, device identifiers, and usage data
• Payment or billing information (if applicable)

b) Protected Health Information (PHI)

If you provide health-related details (e.g., in contact forms, intake forms, or telehealth communications), this may include PHI under HIPAA, such as:

• Medical history, conditions, diagnoses, or treatment notes
• Behavioral or developmental information
• Other health data you voluntarily provide

We collect PHI only when necessary to provide requested services or respond to your inquiries.

4. How We Use Information

• Provide, maintain, and improve our services
• Respond to inquiries and schedule appointments
• Billing and payment processing
• Communicate via phone, email, or text (with consent)
• Ensure legal and regulatory compliance
• Detect and prevent fraud or misuse
• Website analytics and improvement

For PHI, we comply with HIPAA and only use it for treatment, payment, and
healthcare operations, or as otherwise permitted by law.

5. How We Share and Disclose Information

a) With Your Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes not permitted by HIPAA.
You may revoke this authorization at any time in writing.

b) Permitted by Law (HIPAA and Others)

We may disclose PHI without authorization when allowed under HIPAA, including:

• To healthcare professionals for treatment or coordination of care
• To insurers or payers for billing and payment
• For operational functions (quality improvement, audits, training)
• To comply with legal or regulatory requirements
• For public health or safety purposes
• To contracted business associates under HIPAA-compliant agreements

c) Aggregate or Deidentified Data

We may use or share aggregated or deidentified data that cannot identify any individual for research or reporting purposes.

d) Legal Obligations and Safety

We may disclose information as required by law or to protect the health, safety, or rights of individuals or the public.

6. Cookies, Tracking & Third-Party Services

We use cookies and similar tracking technologies to enhance user experience, monitor site performance, and analyze usage trends.
Third-party services (such as Google Analytics or payment processors) may collect data according to their own privacy policies.
You can disable cookies through your browser settings, but some features of the site may not function properly.

7. Security & Safeguards

We maintain administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, or loss.
These include encryption, firewalls, secure servers, access controls, and staff training in data protection and HIPAA compliance.

8. Data Retention

We retain information only as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law.
PHI and medical records are retained according to healthcare regulations and state record retention requirements.

9. Your Rights & Choices

• Right to access and obtain a copy of your data or PHI
• Right to request correction or amendment of inaccurate PHI
• Right to request restrictions on certain uses or disclosures
• Right to request confidential communications
• Right to receive an accounting of PHI disclosures
• Right to revoke prior authorizations
• Right to opt out of marketing communications

To exercise any of these rights, contact our Privacy Officer at the address listed below.
We may require verification of identity before processing your request.

10. Children & Minors

We do not knowingly collect information from children under the age of 13 without parental consent.
If you believe a child has submitted personal information, please contact us immediately so we can remove it.

11. International Use & Data Transfer

This website is intended for users in the United States.
If you access our services from outside the U.S., your data may be transferred and processed in the U.S.,
where data protection laws may differ from those in your country.

12. State Privacy Laws & Additional Protections

If state or local law offers greater privacy protection than HIPAA, we will comply with the stricter standard.
Residents of certain states (e.g., California) may have additional privacy rights as defined by their laws.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically.
Any changes will be posted on this page with the updated effective date.
We encourage you to review this page regularly to stay informed.

14. Contact Information & Complaints

You may also contact the U.S. Department of Health & Human Services (HHS) Office for Civil Rights (OCR) if you believe your privacy rights have been violated:

We will not retaliate against you for filing a complaint.