Effective: April 2026 | Last updated: April 5, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
About This Notice
National Power Alliance (“NPA,” “we,” “us,” or “our”) is a concierge alliance that facilitates introductions among attorneys, medical providers, and imaging centers. In the course of providing these coordination services, we may create, receive, maintain, or transmit Protected Health Information (“PHI”) as defined by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and its implementing regulations.
This combined Privacy Policy and Notice of Privacy Practices explains how we collect, use, disclose, and safeguard your personal information and PHI. It also describes your rights under HIPAA and applicable Florida law.
Information We Collect
We collect only the minimum information necessary to coordinate referral services. This may include:
Patient Information: Name, phone number, preferred service region, and referral type (e.g., imaging, specialist consultation, transportation)
Referring Party Information: Name, firm or practice name, professional role, email address, and phone number
Communication Records: Records of phone calls, emails, and form submissions related to referral coordination
We adhere to the HIPAA Minimum Necessary Standard, we request and use only the information essential to fulfill a referral. We do not collect Social Security numbers, insurance policy numbers, diagnoses, or detailed medical history through this website.
How We Use Your Information
We may use and disclose your PHI without additional authorization for the following purposes:
Treatment: Coordinating referrals between attorneys, physicians, and imaging centers to facilitate patient care, including scheduling appointments, arranging transportation, and ensuring continuity of services
Payment: Facilitating billing coordination, lien management, and reduction services between providers and referring parties
Healthcare Operations: Improving the quality and efficiency of our referral coordination services, internal training, and compliance auditing
Disclosures of Your Information
We do not sell, trade, or rent your personal information or PHI. We may disclose PHI only in the following circumstances:
To Concierge Service Partners: We share necessary referral details with partner attorneys, medical providers, and imaging centers directly involved in your concierge-level support
As Required by Law: We may disclose PHI when required by federal, state, or local law, including court orders or legal proceedings
For Public Health and Safety: As permitted by HIPAA for public health activities, to prevent a serious threat to health or safety, or to report abuse or neglect
With Your Authorization: For any purpose not listed above, we will obtain your written authorization before using or disclosing your PHI. You may revoke any such authorization in writing at any time
We will never use your PHI for marketing purposes without your explicit written consent.
Your Rights Under HIPAA
You have the following rights regarding your PHI:
Right to Access: You may request copies of your PHI that we maintain. We will respond within 30 days of receiving your request
Right to Amend: You may request corrections to your PHI if you believe it is inaccurate or incomplete. We may deny the request under certain circumstances and will provide a written explanation
Right to an Accounting of Disclosures: You may request a list of certain disclosures of your PHI that we have made within the past six years
Right to Request Restrictions: You may request that we limit how we use or disclose your PHI for treatment, payment, or operations. We are not required to agree to all restriction requests but will comply if we do agree
Right to Confidential Communications: You may request that we communicate with you about your PHI by a particular means or at a specific location (e.g., contacting you at work rather than home)
Right to a Paper Copy: You may request a paper copy of this Notice at any time
Right to File a Complaint: If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights (OCR). We will not retaliate against you for filing a complaint
To exercise any of these rights, contact our Privacy Officer using the information provided below.
Data Security
We implement administrative, physical, and technical safeguards to protect your PHI as required by the HIPAA Security Rule. These measures include:
Encryption of data in transit via TLS (HTTPS) on all website pages
Access controls limiting PHI access to authorized personnel only
Workforce training on HIPAA privacy and security requirements
Regular review and updating of security practices
While we take reasonable measures to protect your information, no method of electronic transmission or storage is completely secure. We are committed to promptly addressing any security incident that may affect your PHI.
Breach Notification
In the event of a breach of unsecured PHI, we will notify affected individuals, the U.S. Department of Health and Human Services, and, where required, the media, in accordance with the HIPAA Breach Notification Rule (45 CFR §§ 164.400–414). Notification will be provided without unreasonable delay and no later than 60 days after discovery of the breach.
Business Associate Agreements
When we engage third-party service providers (business associates) who may access PHI on our behalf, including hosting providers, form processors, and communication platforms, we require signed Business Associate Agreements (BAAs) that contractually obligate them to safeguard PHI in compliance with HIPAA.
Website-Specific Practices
No Third-Party Tracking: We do not use Google Analytics, Meta Pixel, or any third-party tracking technologies on this website that could capture or transmit PHI
Referral Form: Our online referral form collects the minimum information necessary to initiate a referral. Submission of the form constitutes acknowledgment of this Notice. PHI entered into the form is processed in accordance with HIPAA requirements
Email Communications: Standard email is not a fully secure method of communication. Please do not include sensitive health information in emails sent to us. For secure communications regarding PHI, please call Contact the NPA Team or use our secure referral form
Cookies: This website uses only essential cookies necessary for site functionality. No advertising, analytics, or tracking cookies are used
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy or security practices of external sites and encourage you to review their privacy policies.
Contact Our Privacy Officer
For questions about this Notice, to exercise your HIPAA rights, or to file a privacy complaint:
We reserve the right to update this Notice at any time. Changes will apply to PHI we already hold as well as information received after the effective date. The revised Notice will be posted on this page with an updated effective date. We encourage you to review this page periodically.