Privacy Policy

Kassy Home Health ("Kassy," "we," "us," or "our") is a for-profit Medicare-certified home health agency licensed by the Florida Agency for Health Care Administration. We serve patients in Orange, Seminole, and Osceola counties from our office at 901 N. Lake Destiny Road, Suite 385, Maitland, FL 32751.

This Privacy Policy explains how kassyhealth.com (the "Site") collects, uses, and protects information about visitors. This Privacy Policy is separate from our HIPAA Notice of Privacy Practices, which governs Protected Health Information ("PHI") we create or receive in delivering home health services. If you are a patient or authorized representative seeking information about how we handle PHI, please review our HIPAA Notice of Privacy Practices.

What This Policy Covers — and What It Doesn't

This policy covers information collected through this Site (forms, cookies, analytics, contact requests). It does not cover information collected during the delivery of home health services. PHI we handle in connection with treatment, payment, or healthcare operations is governed by HIPAA (45 CFR Parts 160 and 164), the Florida home health confidentiality statute (Fla. Stat. § 400.494), and Florida's heightened confidentiality protections for mental health (§ 394.4615), substance use (§ 397.501), HIV/AIDS (§ 381.004), STDs (§ 384.29), tuberculosis (§ 392.65), and genetic information (§ 760.40).

Information We Collect

Information you give us. When you submit a contact form, request a callback, ask about services, apply for employment, or sign up for communications, you may provide your name, contact information, the reason for your inquiry, and any other information you choose to share.

Information collected automatically. Like most websites, kassyhealth.com collects technical information from your device, including IP address, browser type and version, device identifiers, operating system, referring URL, the pages you visit, time of visit, and approximate geographic location derived from your IP address.

Cookies and similar technologies. We use a limited set of cookies and pixel-based technologies to operate the Site, remember your preferences, and understand how visitors use our pages. We classify them as:

• Strictly necessary cookies — required for the Site to function (session, security, accessibility).
• Analytics cookies — help us understand aggregate Site traffic and improve user experience.
• Marketing cookies — used only on unauthenticated marketing pages and only with your consent where required.

You can control cookies through your browser settings or through our Cookie Notice and preferences tool. Disabling certain cookies may affect Site functionality.

Important — tracking technologies and PHI. Consistent with U.S. Department of Health and Human Services Office for Civil Rights guidance on online tracking technologies, Kassy does not allow third-party tracking technologies (including marketing pixels and advertising trackers) on pages where PHI is created, requested, or transmitted. Where any vendor processes information that may include PHI, Kassy executes a HIPAA Business Associate Agreement before deployment.

How We Use Information

We use information collected through this Site to: respond to inquiries; provide information about home health services; schedule and follow up on consultations; recruit and evaluate job applicants; administer and improve the Site; secure the Site against fraud, abuse, and unauthorized access; comply with applicable law; and, with appropriate consent, send marketing or service communications.

How We Share Information

We do not sell personal information. We share information only as follows:

• With service providers who help us operate the Site (web hosting, analytics, email, recruiting platforms) under written agreements requiring confidentiality and, where applicable, HIPAA Business Associate Agreements;
• With our affiliates, professional advisors (legal, accounting, compliance), insurers, and auditors as needed for legitimate business operations;
• When required by law, court order, subpoena, or in response to lawful requests by public authorities, including pursuant to Florida-specific subpoena notice procedures under Fla. Stat. § 456.057(7);
• In connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality;
• With your consent.

Email and Text Messaging

If you opt in to email or text communications, we will obtain your prior express written consent that meets both the federal Telephone Consumer Protection Act (47 U.S.C. § 227) and the Florida Telephone Solicitation Act (Fla. Stat. § 501.059) before sending marketing calls or texts using an automated system. You may opt out at any time by replying STOP to a text, clicking unsubscribe in any email, or contacting us using the information below; we will honor opt-outs within ten business days. Your phone number, email, and consent records are retained for at least four years.

Children's Privacy

Kassyhealth.com is intended for adults. We do not knowingly collect personal information online from children under 13 without verifiable parental consent, consistent with the Children's Online Privacy Protection Act (15 U.S.C. §§ 6501–6506). If you believe a child has provided information to us through this Site, please contact our Privacy Officer and we will promptly delete it.

Security

Kassy maintains reasonable administrative, physical, and technical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure, consistent with the HIPAA Security Rule (45 CFR Part 164, Subpart C) and Fla. Stat. § 501.171(2). No internet transmission is ever fully secure; we encourage you not to send sensitive medical information through unencrypted email or web forms.

Florida Data Breach Notification

If a breach of security affects unencrypted personal information of Florida residents, Kassy will provide notice to affected individuals as expeditiously as practicable and no later than 30 days after determining a breach occurred, consistent with Fla. Stat. § 501.171. Where a breach affects 500 or more Florida residents, we will also notify the Florida Department of Legal Affairs within 30 days. Where the breach involves PHI, we will provide notice consistent with the HIPAA Breach Notification Rule (45 CFR §§ 164.400–.414).

Florida Residents — Rights and Disclosures

Kassy is a HIPAA-covered entity exempt from the comprehensive Florida Digital Bill of Rights consumer-rights regime under Fla. Stat. § 501.703(2)(c). Even though those rights do not apply, you may at any time contact our Privacy Officer to ask what personal information we hold about you, request that we correct or delete it (subject to retention obligations under federal and Florida law, including Fla. Stat. § 400.491 six-year retention for skilled care records), or opt out of marketing communications.

Links to Other Websites

This Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites. Please review their policies.

Accessibility, Language Assistance, and Nondiscrimination

Kassy is committed to making this Site accessible to everyone. See our Accessibility Statement and our Notice of Nondiscrimination and Language Assistance. Free language assistance and auxiliary aids and services are available — call (407) 875-1801.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective date" at the top reflects the most recent revision. Material changes will be highlighted on the Site for at least 30 days.

Contact Us