Last updated: November 2025

Introduction

Empowerment Resource Center (“ERC,” “we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our organization.

By using our services or visiting our website, you agree to the terms of this Privacy Policy. If you do not agree with the terms, please do not access or use our services.

---

Information We Collect

We may collect the following types of information:

• Personal Information: Name, address, phone number, email address, date of birth, and emergency contact information.
• Health Information: Medical history, diagnoses, treatment information, lab results, medications, and other health-related data necessary for providing healthcare services.
• Insurance Information: Insurance provider details, policy numbers, and coverage information.
• Website Usage Data: IP address, browser type, pages visited, time spent on pages, and other analytics data collected through cookies and similar technologies.
• Communications: Records of your communications with us, including emails, phone calls, and in-person conversations.

 

---

How We Use Your Information

We use your information for the following purposes:

• Healthcare Services: To provide, coordinate, and manage your healthcare services, including medical treatment, case management, and care coordination.
• Communication: To communicate with you about appointments, test results, health programs, and other relevant information.
• Billing & Insurance: To process insurance claims, billing, and payment for services rendered.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes, including HIPAA requirements.
• Quality Improvement: To improve the quality of our services, conduct research, and develop new programs.
• Website Functionality: To maintain and improve our website, analyze usage patterns, and enhance user experience.
• Marketing & Outreach: To inform you about our programs, events, and health education opportunities (you may opt out at any time).

 

---

HIPAA Compliance

ERC is committed to complying with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable privacy laws. We maintain strict safeguards to protect your protected health information (PHI):

• Notice of Privacy Practices: We provide all patients with a Notice of Privacy Practices that explains your rights and our obligations regarding your health information.
• Minimum Necessary Standard: We only use or disclose the minimum amount of information necessary to accomplish the intended purpose.
• Business Associates: Any third parties who have access to your PHI are required to protect it under HIPAA-compliant agreements.
• Patient Rights: You have the right to access, amend, and receive an accounting of disclosures of your health information as outlined in our Notice of Privacy Practices.

 

---

Data Security

We implement appropriate technical, administrative, and physical safeguards to protect your information:

• Physical Security: Secure facilities with restricted access, locked file cabinets, and secure disposal of physical records.
• Technical Security: Encrypted data transmission, secure servers, firewalls, antivirus software, and regular security audits.
• Administrative Security: Employee training on privacy and security practices, confidentiality agreements, and access controls based on job responsibilities.
• Incident Response: Procedures for detecting, responding to, and reporting security incidents or data breaches.

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but continuously work to maintain the highest standards.

 

---

Information Sharing & Disclosure

We may share your information in the following circumstances:

• With Your Consent: We will share information with third parties when you have provided explicit consent.
• Healthcare Operations: With healthcare providers, laboratories, pharmacies, and other entities involved in your care coordination.
• Legal Requirements: When required by law, court order, or government request, including public health reporting.
• Business Associates: With service providers who assist in our operations (billing, IT services, etc.) under HIPAA-compliant agreements.
• Research: De-identified information may be used for research purposes in compliance with applicable regulations.
• Emergency Situations: To prevent serious harm to you or others when legally permitted.

We do not sell your personal or health information to third parties.

 

---

Your Privacy Rights

You have the following rights regarding your information:

• Access: Request a copy of your health records and other personal information we maintain.
• Amendment: Request corrections to your health information if you believe it is inaccurate or incomplete.
• Accounting: Receive an accounting of certain disclosures of your health information.
• Restriction: Request restrictions on certain uses or disclosures of your health information.
• Confidential Communications: Request that we communicate with you in a specific way or at a specific location.
• Opt-Out: Unsubscribe from marketing communications at any time.
• Data Portability: Request that we transfer your information to another provider in certain circumstances.

To exercise these rights, please contact our Privacy Officer using the information provided below.

 

---

Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience:

• Essential Cookies: Necessary for website functionality and security.
• Analytics Cookies: Help us understand how visitors use our website to improve performance.
• Marketing Cookies: Used to deliver relevant advertising and track campaign effectiveness.

You can control cookie preferences through your browser settings. However, disabling cookies may affect website functionality.

 

---

Children’s Privacy

We are committed to protecting the privacy of minors. We do not knowingly collect personal information from children under 13 without parental consent. If you believe we have collected information from a child without proper consent, please contact us immediately.

For patients under 18, we comply with applicable state and federal laws regarding parental access to minors’ health information.

 

---

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on our website with a “Last Updated” date. Material changes will be communicated through prominent notice on our website or direct communication to patients.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

 

---

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is handled, please contact our Privacy Officer:

Empowerment Resource Center Privacy Officer
230 Peachtree Street NW, Suite 1800 Atlanta, GA 30303

Phone: +1 678.940.8597 Email: privacy@erc-inc.org

For HIPAA-related complaints, you may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.