.
Effective Date: April 10, 2025
Last Updated: April 10, 2025
Empowered Services (“we,” “our,” or “us”) respects your privacy and is committed to protecting the personal and health information of all individuals we serve. This Privacy Policy explains how we collect, use, disclose, and protect your information across all platforms—including in-person services and online usage—consistent with applicable Oregon state laws, the Health Insurance Portability and Accountability Act (HIPAA), and related data privacy standards.
🔄 Note: For information about how we collect and use your information when you opt into our text message (SMS) communication services, please refer to our full SMS Messaging Privacy Policy and SMS Terms & Conditions.
Summary of SMS Messaging Policy
If you choose to receive SMS messages from Empowered Services, the following privacy and compliance safeguards apply:
-
One-to-One Consent: You will only receive SMS communications from Empowered Services. Your number is never shared for marketing or other uses.
-
What We Collect: We collect your phone number, opt-in records, and interaction data.
-
How We Use It: For alerts, reminders, and service-related notifications (maximum 5/day).
-
Opt-Out: Reply “STOP” at any time. For help, reply “HELP” or contact us.
-
No Sale of Data: We never sell or rent your number.
-
Compliance: Our SMS practices align with the 2024 FCC and TCPA guidelines.
-
Message/Data Rates: May apply per your mobile carrier plan.
🔗 SMS Privacy Policy
🔗 SMS Terms & Conditions
1. Who We Are
Empowered Services is an Oregon-based agency providing support services to individuals with intellectual and developmental disabilities (IDD). We operate exclusively within the state of Oregon, delivering person-centered care that upholds the dignity, privacy, and rights of those we serve.
2. What Information We Collect
A. Personal Identifiable Information (PII)
We may collect:
-
Full name, date of birth, address, phone number, email
-
Health and service information (e.g., diagnosis, care notes, plans of care)
-
Emergency contact and legal guardian details
-
Application and employment-related information
-
Billing and payment information, when applicable
B. Automatically Collected Data (Website Use)
-
IP address, device type, browser type, pages visited
-
Time/date of access and referring URLs
-
Cookies and analytics tracking data (non-identifiable)
3. How We Use Your Information
We may use your information to:
-
Deliver IDD services in accordance with Oregon Health Authority (OHA), Office of Developmental Disabilities Services (ODDS), and Medicaid requirements
-
Communicate with clients, guardians, and representatives
-
Manage internal operations, staffing, billing, and service documentation
-
Respond to inquiries and fulfill service requests
-
Improve the quality and accessibility of our services and website
We do not sell or lease personal information under any circumstances.
4. Legal Basis for Processing
We collect and process your information as required by:
-
HIPAA regulations for protected health information (PHI)
-
Oregon Administrative Rules (OAR 411 Division 320, 325, 330)
-
Oregon Consumer Identity Theft Protection Act (ORS 646A.600 – 646A.628)
-
Written consent or legal authorization (when applicable)
5. Information Sharing
We only share information:
-
With government agencies such as ODDS, the Oregon Department of Human Services (ODHS), or case management entities for the purpose of service coordination or compliance
-
With authorized representatives, legal guardians, or next of kin (with consent)
-
With contracted service providers or business associates who operate under confidentiality and HIPAA-compliant agreements
-
When required by law (e.g., court order, legal investigation)
6. Data Security Practices
We implement reasonable and appropriate safeguards to protect your information:
-
Secure electronic health records and encrypted storage systems
-
Physical controls (locked file rooms, access restrictions)
-
Role-based access to client data
-
Staff HIPAA and confidentiality training
-
Routine audits and compliance reviews
7. Your Rights (Under Oregon and HIPAA)
You have the right to:
-
Access your records and request a copy
-
Amend or correct inaccurate data
-
Request restrictions on data sharing or use
-
Receive an accounting of how your data has been shared
-
Request confidential communication via alternate methods or locations
To submit a request, contact us at the address or phone number listed in Section 14.
8. Children’s Privacy (COPPA)
We do not collect information online from children under 13. If you believe a child has submitted information through our website, please contact us to have it removed.
9. Website Cookies and Tracking
We use cookies to:
-
Understand visitor behavior and improve our site
-
Track analytics through third-party tools (e.g., Google Analytics)
You may disable cookies in your browser settings. Note that this may limit certain site features.
10. Third-Party Websites
Our website may contain links to external websites not controlled by us. We are not responsible for the privacy practices or content of those sites. Please review their privacy policies before submitting personal information.
11. Data Retention
We retain records as required by Oregon and federal law:
-
IDD records and documentation: Minimum of 7 years after service ends
-
Employment records: 3 years after termination
-
Website and analytics data: Typically 26 months
12. Breach Notification
If we experience a breach of your information, we will notify you in accordance with:
-
HIPAA Breach Notification Rule (45 CFR §§ 164.400–414)
-
Oregon Data Breach Law (ORS 646A.604)
13. Policy Updates
This policy may be updated as needed to reflect changes in law, practice, or technology. Updates will be posted to this page with the revised “Last Updated” date.
14. Contact Us
If you have questions, complaints, or wish to exercise your rights under this policy, contact:
Sandi Byers
Chief Operations Officer (COO)
Empowered Services
8101 SW Nyberg St. Suite 217
Tualatin, OR 97062
Phone: (503) 855-3581
Email: sandi@empowered-services.org
Website: https://empowered-services.org