Cathay Express Transportation Inc. (“Cathay Express Transportation,” “Cathay Transportation,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information of everyone who visits our website or requests our transportation services. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights available to you.
This Policy applies to our website at cathayexpresstransportation.com, and to information we collect in connection with providing non-emergency medical transportation (“NEMT”) and related services.
Who we are
Cathay Express Transportation Inc. 30-50 Whitestone Expressway, Suite 402 Flushing, NY 11354 Phone: (212) 337-3333
Email: info@cathaytransportation.com
We provide non-emergency Medical and special needs transportation throughout New York City and New York State, including ambulette, wheelchair-accessible, stretcher, paratransit, public transport, ambulatory/livery, and school transportation services, and we coordinate trips with hospitals, dialysis centers, rehabilitation facilities, insurance brokers, and Medicaid transportation networks.
Protected Information
Because we provide DOH-authorized medical transportation, much of the information we handle — including pickup and drop-off locations at medical facilities, appointment details, mobility or vehicle requirements, and insurance/Medicaid authorization information — constitutes or reveals Protected Health Information (PHI).
PHI collected or received by Cathay Express Transportation is protected under HIPAA, and we limit its use and disclosure to what is necessary to arrange, dispatch, coordinate, bill for, and report on your transportation (i.e., treatment, payment, and healthcare operations purposes), consistent with the HIPAA Privacy Rule.
Depending on the nature of a trip and the referring/payer relationship, Cathay Express Transportation may act as a HIPAA Covered Entity (for example, as a health care provider that conducts electronic billing transactions with Medicaid or insurers) or as a HIPAA Business Associate to a referring health plan, Medicaid transportation broker, or healthcare facility. In either capacity, we apply HIPAA’s administrative, physical, and technical safeguard requirements to PHI in our possession.
A separate HIPAA Notice of Privacy Practices, which describes in detail how we may use and disclose PHI and the specific rights you have with respect to your PHI, governs the handling of health information collected in connection with your transportation and is available upon request by contacting us using the information in Section 12.
b) Information Collected Automatically
When you visit our website, our hosting and website platform may automatically collect certain technical information.
This information is generally collected through cookies and similar technologies to operate correctly, remember preferences, and understand how visitors use our site (for example, through website analytics tools). Cookies are small text files stored on your device.
You can control or disable cookies through your browser settings. Disabling cookies may affect certain features of our website, though it will not prevent you from submitting a quote request or contacting us.
c) Information from Other Sources
We may also receive information about you from third parties involved in arranging your transportation, such as hospitals, dialysis centers, rehabilitation facilities, case managers, insurance brokers, or Medicaid transportation management organizations, when they schedule or coordinate a trip on your behalf.
Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to provide services you have requested, maintain business and billing records, and comply with legal, regulatory, and Medicaid recordkeeping requirements. Consistent with HIPAA, records containing PHI are generally retained for a minimum of six (6) years from the date of creation or last use, whichever is later, unless a longer period is required under New York State law or DOH/Medicaid program requirements. Retention periods otherwise vary depending on the type of information and applicable legal requirements.
Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, or disclosure. For PHI, these safeguards are designed to meet the requirements of the HIPAA Security Rule. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
In the event of a breach involving unsecured PHI, we will provide notification to affected individuals and, where required, to the U.S. Department of Health and Human Services and other authorities, in accordance with the HIPAA Breach Notification Rule.
Your Privacy Rights
Depending on where you live, you may have rights regarding your personal information, which may include the right to:
- Request access to the personal information we hold about you
- Request that we correct inaccurate information
- Request deletion of your personal information, subject to our legal, contractual, and recordkeeping obligations
- Opt out of receiving marketing communications from us at any time
As a New York-based company, we maintain reasonable safeguards for private information in accordance with the New York SHIELD Act.
With respect to PHI specifically, and consistent with HIPAA, you also have the right to:
- Request access to and a copy of your PHI
- Request an amendment to your PHI if you believe it is inaccurate or incomplete
- Request an accounting of certain disclosures of your PHI
- Request restrictions on certain uses or disclosures of your PHI
- Request confidential communications by an alternative means or at an alternative location
- File a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated, without fear of retaliation
To exercise any privacy or HIPAA rights, or to request a copy of our HIPAA Notice of Privacy Practices, contact us at info@cathaytransportation.com.
Children’s Privacy
Our website is intended for use by adults arranging transportation for themselves or on behalf of others (including minors receiving school or medical transportation services). We do not knowingly collect personal information directly from children through our website. Information about minor passengers is collected only from a parent, guardian, school, or authorized organization arranging their transportation.
Third-Party Links
Our website may contain links to third-party websites, including partner facilities and social media pages. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies separately.
Contact Us
If you have questions about this Privacy Policy or how we handle your information, please contact us:
Cathay Express Transportation Inc. 30-50 Whitestone Expressway, Suite 402 Flushing, NY 11354 Phone: (212) 337-3333
Email: info@cathaytransportation.com
Privacy Policy Updates
We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated Policy on this page with a revised effective date. We encourage you to review this Policy periodically.