Privacy Policy for The RestRx Medical Supplies

---

1. Introduction

The Rest Rx ("The Rest Rx," "we," "us," or "our") is a Medicare-enrolled Durable Medical Equipment, Prosthetics, Orthotics, and Supplies (DMEPOS) supplier based in Maryland. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website, request medical equipment, or otherwise interact with us. We are committed to protecting patient information in accordance with HIPAA, Medicare supplier standards, and applicable Maryland law.

2. Information We Collect

Patient information collected directly or from referring providers:

• Name, address, phone number, date of birth

• Insurance information and member ID numbers

• Physician orders and prescriptions

• Diagnoses (ICD-10 codes) related to the equipment requested

• Medical necessity documentation

• Delivery preferences and authorized signers

• Communications regarding your equipment

Information from website visitors:

• IP address, browser information, pages visited

• Cookie data

• Contact form submissions

3. How We Use Your Information

We use the information we collect to:

• Process equipment requests and prescriptions

• Verify insurance coverage and obtain prior authorizations

• Coordinate delivery and setup of medical equipment

• Bill Medicare, Medicaid, commercial insurance, and patients

• Provide product education and support

• Comply with Medicare supplier standards and regulatory requirements

• Communicate about deliveries, supply replacements, and equipment status

• Internal operations, quality improvement, and audit compliance

4. HIPAA Protected Health Information

The Rest Rx is a HIPAA-covered entity. We maintain a full Notice of Privacy Practices (NPP) describing how we use and disclose your Protected Health Information (PHI) and your rights under HIPAA. The NPP is provided to all patients and is available upon request.

5. How We Share Your Information

We share your information only as needed and as permitted by law:

• Your prescribing physician and clinical team — for medical necessity documentation, supply

coordination, and care updates

• Insurance companies — for verification, prior authorization, and claims processing

• Delivery and shipping partners — for delivery scheduling and tracking

• Business associates — vendors providing services on our behalf under signed Business Associate

Agreements

• Medicare and government auditors — as required for supplier compliance and audits

• Manufacturers — for warranty registration, product recalls, and equipment-specific support

• Affiliated entities — including Woundworx (our affiliated clinical practice) when clinically relevant; you

may choose alternative providers

We do not sell your information.

6. Medicare Supplier Standards Compliance

As a Medicare-enrolled DMEPOS supplier, The Rest Rx complies with the 30 Medicare Supplier Standards (42 CFR § 424.57). These standards include provisions for honest billing and refunds, product warranty disclosure, complaint resolution procedures, accessible business hours and contact methods, honoring all warranty obligations, and accepting return of defective merchandise. A complete copy of the Medicare Supplier Standards is provided to every Medicare beneficiary we serve and is available upon request.

7. Patient Rights as a Medicare Beneficiary

If you are a Medicare beneficiary, you have specific rights regarding equipment supplied through The Rest Rx, including:

• The right to receive equipment that is medically necessary and ordered by your physician

• The right to choose any Medicare-enrolled supplier (you are not required to use The Rest Rx)

• The right to a copy of the supplier standards

• The right to file a complaint without retaliation

• The right to ask about equipment alternatives and to participate in decisions about your equipment

8. Data Security

We protect your information using administrative, physical, and technical safeguards including encrypted data transmission, access controls, staff training, and Business Associate Agreements with all vendors.

9. Data Retention

We retain DMEPOS records in accordance with Medicare requirements (minimum 7 years from the last claim date) and applicable state law.

10. Cookies and Website Tracking

Our website uses cookies for functionality, analytics, and security. You may control cookies through your browser settings.

11. Children's Privacy

Our services are not directed to children under 13 without parent or legal guardian involvement. We do not knowingly collect information from children online.

12. Changes to This Policy

We may update this Privacy Policy. The "Last Updated" date reflects the most recent revision.

13. Contact Us

Privacy Officer Contact

The Rest Rx Medical Supplies
8181 Professional Place, Suite 240
Hyattsville, MD 20785
Phone: (301) 265-3795
Fax: (301) 558-6775
Email: support@therestrxmedicalsupplies.com 

To file a complaint:

The Rest Rx Privacy Officer (above)

Medicare Beneficiary Ombudsman — 1-800-MEDICARE

U.S. Department of Health and Human Services, Office for Civil Rights — 1-877-696-6775

You will not be retaliated against for filing a complaint.