​

Oct 23, 2026 · @Erik

Effective date: 10/23/2026

About this policy

Mt. Shasta Ambulance Service ("Mt. Shasta Ambulance," "we," "us," or "our") provides 911 emergency response, interfacility transport, and ambulance standby services in Siskiyou County, California. This Privacy Policy explains how we collect, use, and protect information through our website, www.mtshastaambulance.com (the "Site").

As a healthcare provider, we are a "covered entity" under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Medical and billing information about patients we treat or transport is protected health information (PHI). How we use and disclose PHI is governed by HIPAA and described in full in our Notice of Privacy Practices, posted on this website and available by request at our business office. If this Privacy Policy and our Notice of Privacy Practices conflict about PHI, the Notice of Privacy Practices controls.

Information we collect through the Site

• Contact form: your first and last name, email address, phone number, and the message you send us.

• Bill payments: online payments are processed by our third-party payment provider, Payground. Payment card details go directly to that provider; we do not receive or store your full card number. We may receive your name, account or invoice number, and payment amount so we can apply the payment.

• Employee and student portals: if you are an employee or ride-along student, we collect the login and profile information needed to give you access.

• Automatically collected data: like most websites, our Site and its hosting provider collect technical data such as IP address, browser type, device type, pages visited, and the date and time of your visit. This is gathered through server logs and cookies.

We do not use the Site to collect information for advertising, and we do not sell personal information.

Your health information and HIPAA

When we respond to a 911 call or transport a patient, we create records that may include your name, address, date of birth, medical history, assessment and treatment provided, insurance details, and Social Security number for billing. This is PHI, and we protect it as HIPAA and California law require.

We may use and disclose PHI without your written authorization for:

• Treatment: sharing information with hospitals, physicians, air ambulance services, and other providers involved in your care.

• Payment: billing you, Medicare, Medi-Cal, private insurers, or other responsible parties, including through billing companies that work for us.

• Healthcare operations: quality assurance, training, licensing, and compliance activities.

• Other purposes permitted or required by law: such as reporting to public health authorities and Siskiyou County EMS, responding to court orders or law enforcement as the law allows, reporting suspected abuse or neglect, and averting a serious threat to health or safety.

Other uses and disclosures require your written authorization, which you may revoke in writing at any time.

Your rights. Under HIPAA you have the right to:

• Inspect and get a copy of your records, including an electronic copy.

• Ask us to correct records you believe are wrong or incomplete.

• Get an accounting of certain disclosures of your PHI.

• Ask us to limit certain uses or disclosures, and to restrict disclosures to your health plan when you pay in full out of pocket.

• Ask us to contact you in a particular way or at a different address.

• Be notified if a breach of your unsecured PHI occurs.

• Get a paper copy of our Notice of Privacy Practices.

To use any of these rights, contact our Privacy Officer (see Contact us below).

Business associates. Vendors that handle PHI for us, such as billing services and electronic patient care reporting systems, must sign a HIPAA business associate agreement and protect your information as we do.

How we use Site information

We use information collected through the Site to:

• Respond to your questions and requests.

• Process and apply bill payments.

• Give employees and students access to their portals.

• Keep the Site secure, prevent fraud, and fix technical problems.

• Understand how the Site is used so we can improve it.

• Meet our legal and regulatory obligations.

How we share information

We share Site information only as needed to run our services, with:

• Service providers: our website host (Wix), our payment processor (Payground), Google (which hosts our careers page), and other vendors that support the Site. They may use the information only to provide services to us.

• Legal and safety: government agencies, courts, or law enforcement when the law requires it, or to protect the safety of our patients, staff, or the public.

• Business changes: a successor organization if Mt. Shasta Ambulance is merged, sold, or reorganized, subject to this policy and HIPAA.

Third-party sites we link to, including payment and careers pages, have their own privacy policies. We are not responsible for their practices.

Please do not send medical information through the Site

In an emergency, call 911. Do not use the contact form or email to request emergency help.

Our contact form and general email are not secure channels for medical information. Please do not include medical details, insurance numbers, or Social Security numbers in them. To request your records, fax your request to 530-926-5001. To discuss a bill, call our business office at 530-926-2665.

Security and retention

We use administrative, physical, and technical safeguards to protect your information, including access controls and encryption where appropriate. No website or transmission over the internet is completely secure, so we cannot guarantee absolute security.

We keep patient care and billing records for as long as California law and our regulators require. We keep other Site information only as long as needed for the purposes described in this policy.

Children's privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from them online. Health information about minors we treat is protected under HIPAA and California law, and parents or guardians may exercise rights on a minor's behalf as the law allows.

California privacy rights

Your medical information is also protected by the California Confidentiality of Medical Information Act (CMIA). In some cases it gives you more protection than HIPAA, and we follow whichever law is stricter.

Medical information covered by HIPAA and the CMIA is exempt from the California Consumer Privacy Act (CCPA). To the extent the CCPA applies to other personal information we collect, California residents may ask what personal information we hold about them, ask us to correct or delete it, and will not be treated differently for making a request. We do not sell or share personal information for cross-context behavioral advertising.

Your choices

• Cookies: you can set your browser to refuse or delete cookies. Some Site features may not work properly without them.

• Communications: you can ask us at any time to stop contacting you about a non-emergency inquiry.

Changes to this policy

We may update this policy from time to time. We will post the new version on this page and change the effective date at the top. Material changes to how we handle PHI will also be reflected in a revised Notice of Privacy Practices.

Contact us

For questions about this policy, to exercise your rights, or to report a privacy concern, contact our Privacy Officer:

Privacy Officer, Mt. Shasta Ambulance Service
Physical address: 1020 Oak Street, Mount Shasta, CA 96067
Mailing address: PO Box 1030, Mount Shasta, CA 96067
Phone: 530-926-2665
Fax: 530-926-5001
Email: Privacy@mtshastaambulance.com

Complaints. If you believe your health privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights, at www.hhs.gov/ocr/complaints or 1-800-368-1019. We will not retaliate against you for filing a complaint.