877-292-7999
Contact
CorrectCare Integrated Health

Legal

Privacy Policy

Last updated: September 17, 2026

1. Introduction & Scope

This Privacy Policy ("Policy") describes how CorrectCare – Integrated Health ("CorrectCare," "we," "us," "our") collects, uses, discloses, and protects information in connection with correctcare.com and related subdomains used for marketing and business purposes (collectively, the "Site").

This Policy does not apply to protected health information ("PHI") or other information we create, receive, maintain, or transmit on behalf of correctional facility clients in our capacity as a Business Associate under the Health Insurance Portability and Accountability Act ("HIPAA"). That processing is governed exclusively by the applicable Business Associate Agreement ("BAA") between CorrectCare and its client, and HIPAA.

By using the Site, you agree to the collection and use of information as described here. If you do not agree, please do not use the Site.

2. Information We Collect

2.1 Information You Provide Directly

  • Business contact information: name, business email, phone number, company/facility/agency name, job title, and message content — submitted through contact forms, demo requests, RFP/RFI submissions, or newsletter signups

  • Correspondence: information contained in emails, phone calls, or other communications you send us

2.2 Information Collected Automatically

  • Device and usage data: IP address, browser type and version, operating system, device identifiers, referring/exit pages, pages viewed, and time/date of visit

  • Cookies and similar technologies: see Section 5

2.3 Information We Do Not Collect Through the Site

We do not knowingly collect PHI, inmate health records, Social Security numbers, or other sensitive personal information through this Site. If you submit such information through a Site form in error, we will take reasonable steps to delete it and ask that you not resubmit it through this channel.

3. How We Use Information

We use the information described above to:

  • Respond to inquiries, demo requests, and RFP/RFI submissions from facilities, agencies, and healthcare providers

  • Provide information about our claims administration, utilization management, and PPO network access services

  • Operate, maintain, and improve the Site, including troubleshooting and analytics

  • Send administrative communications and, where you have opted in, marketing communications

  • Detect, prevent, and address fraud, security, or technical issues

  • Comply with applicable legal, regulatory, and contractual obligations

  • Establish, exercise, or defend legal claims

We do not use automated decision-making or profiling that produces legal or similarly significant effects on Site visitors.

Where required by applicable law, we process personal information on the basis of: (a) your consent (e.g., marketing communications); (b) our legitimate interests in operating and improving the Site and responding to business inquiries; (c) performance of a contract or steps toward entering one (e.g., responding to an RFP); and (d) compliance with legal obligations.

5. Cookies & Similar Technologies

We use cookies and similar technologies for basic Site analytics — to understand how visitors use the Site, measure traffic, and improve content and performance.

You can control or disable cookies through your browser settings. Disabling cookies may affect some Site functionality.

We do not currently respond to browser "Do Not Track" signals, as no common industry standard for such signals has been adopted.

6. How We Share Information

We may share information with:

  • Service providers and vendors who perform functions on our behalf (e.g., website hosting, CRM, email delivery, analytics), under contractual confidentiality and data protection obligations, and only to the extent necessary to perform their function

  • Professional advisors (legal, accounting) as needed

  • Legal and regulatory authorities, where required by law, subpoena, or valid legal process, or to protect the rights, property, or safety of CorrectCare, our clients, or others

  • Successors, in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections

We do not sell personal information, as that term is defined under applicable law.

7. Data Retention

We retain personal information collected through the Site for as long as reasonably necessary to fulfill the purposes described in this Policy, including responding to your inquiry, maintaining business records, and complying with legal, accounting, or reporting obligations. Retention periods vary depending on the type of information and the purpose for which it was collected. When information is no longer needed, we take reasonable steps to delete or de-identify it.

8. Your Choices & Rights

Depending on your location and role, you may have certain rights with respect to your personal information, which may include the right to:

  • Request access to, or a copy of, information we hold about you

  • Request correction of inaccurate information

  • Request deletion of your information, subject to legal exceptions

  • Opt out of marketing communications at any time (via the unsubscribe link in our emails or by contacting us directly)

To exercise any of these rights, contact us using the information in Section 15. We will respond within a reasonable time consistent with applicable law. We may need to verify your identity before fulfilling certain requests.

9. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect information collected through the Site against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Provider Portal & Health Information

Our portal (tpa.correctcare.com) and any PHI or other health information submitted, processed, or accessed through it are governed exclusively by the applicable Business Associate Agreement between CorrectCare and the relevant covered entity, and by HIPAA and other applicable health information laws — not by this Policy. Facility clients and providers should refer to their governing agreement for terms applicable to that data.

The Site may contain links to third-party websites (e.g., partner organizations, industry resources). We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policy of any third-party site you visit.

12. Children's Privacy

The Site is directed at business and professional audiences and is not intended for, or directed to, individuals under the age of 16. We do not knowingly collect personal information from children.

13. International Visitors

The Site is hosted in the United States and intended for a U.S. business audience. If you access the Site from outside the United States, your information may be transferred to, stored, and processed in the United States, which may have data protection laws different from those of your jurisdiction.

14. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The "Last Updated" date at the top of this Policy indicates when it was last revised. Material changes will be reflected by an updated posting on the Site.

15. Contact Us

If you have questions about this Policy or wish to exercise any of the rights described above, please contact us at:

CorrectCare – Integrated Health

1218 South Broadway, Ste 250
Lexington, KY 40504
Email: info@correctcare.com
Phone: 877-292-7999