Privacy Policy

Information We Collect

The information we collect depends on how you interact with Triple Aim.

Patient Assistance Information

When a patient applies for or receives assistance through a Triple Aim program, we may collect information necessary to determine eligibility and administer assistance, including:

• Name and contact information
• Date of birth
• State or territory of residence
• Household size
• Household income and supporting income documentation
• Medicare Part D and other relevant insurance information
• Diagnosis or medical condition relevant to program eligibility
• Prescribed provider-administered medication
• Prescribing or treating healthcare provider information
• Pharmacy information
• Information about qualifying out-of-pocket prescription costs
• Prescription, dispensing, or claim information
• Application and eligibility status
• Assistance award amount, dates, use, and remaining balance
• Information about other assistance applicable to the same expense
• Other information reasonably necessary to determine eligibility or administer assistance

Some of this information relates to an individual’s health, insurance, or finances and may be considered sensitive personal information under applicable law.

Information From Healthcare Providers, Pharmacies, and Authorized Representatives

We may receive information about a patient from healthcare providers, pharmacies, authorized representatives, program administrators, insurers or prescription drug plans, and others involved in the application or assistance process.

For example, we may receive information necessary to confirm a patient’s diagnosis, prescribed medication, insurance coverage, qualifying out-of-pocket responsibility, prescription claims, or use of an assistance award.

Donor Information

When you make a donation or otherwise support Triple Aim, we may collect information such as:

• Name
• Contact information
• Donation amount and date
• Communication preferences
• Other information you choose to provide

Payment information may be collected and processed directly by a payment processor, fundraising platform, or other service provider.

Communications and Website Information

If you contact us, request information, join a mailing list, submit a form, or otherwise communicate with Triple Aim, we may collect your contact information and the contents of your communication.

Our website and technology providers may also collect limited technical information such as IP address, browser or device information, pages visited, and website usage information. We may use this information to operate, secure, maintain, and understand use of our website.

How We Use Information

Triple Aim may use personal information to:

• Review patient assistance applications
• Determine eligibility under applicable program requirements
• Verify information submitted through an application
• Communicate with patients, authorized representatives, healthcare providers, and pharmacies
• Establish and administer patient assistance awards
• Confirm eligible diagnoses and prescribed medications
• Verify qualifying out-of-pocket prescription costs
• Process, facilitate, and reconcile assistance payments
• Track use and remaining balances of assistance awards
• Maintain accurate program, financial, and patient-assistance records
• Identify or prevent duplicate, inaccurate, fraudulent, or improper applications or payments
• Respond to questions and requests
• Process and acknowledge donations
• Provide requested organizational or program communications
• Operate, maintain, and secure our website and systems
• Conduct accounting, auditing, compliance, governance, and program evaluation activities
• Meet legal, regulatory, tax, contractual, and recordkeeping obligations
• Protect Triple Aim, its charitable resources, and the people we serve
• Create aggregated or de-identified information for program evaluation, reporting, compliance, stewardship, and organizational purposes

Triple Aim does not make medical decisions, prescribe treatment, or use patient information to direct a patient toward a particular medication, healthcare provider, pharmacy, or treatment.

How We Share Information

Triple Aim does not sell or rent personal information.

We may share personal information when reasonably necessary to administer our programs, operate the Foundation, comply with applicable requirements, or carry out the purposes described in this Privacy Policy.

Healthcare Providers, Pharmacies, Insurers, and Program Administration

We may exchange information with healthcare providers, pharmacies, insurers or prescription drug plans, authorized representatives, claims or prescription administrators, and other parties involved in administering patient assistance when reasonably necessary to:

• Determine or verify eligibility
• Confirm an eligible diagnosis or prescribed medication
• Confirm insurance coverage
• Verify qualifying out-of-pocket costs
• Process or reconcile assistance payments
• Confirm use of an assistance award
• Maintain accurate program records
• Resolve discrepancies
• Prevent duplicate or improper payments

We limit these exchanges to information reasonably necessary for the applicable purpose.

Service Providers

We may use service providers to support functions such as website hosting, application and program administration, secure document and data storage, communications, donation processing, accounting, payment administration, and other organizational operations.

These service providers may receive or access personal information when reasonably necessary to perform services for Triple Aim.

Legal, Professional, and Compliance Purposes

We may disclose information to attorneys, accountants, auditors, consultants, insurers, regulators, or other professional advisors when reasonably necessary.

We may also disclose information when required by law, legal process, court order, governmental request, audit, or regulatory obligation, or when reasonably necessary to investigate suspected fraud or misuse, enforce program requirements, protect charitable assets, or protect Triple Aim’s legal rights.

With Your Authorization

We may disclose information when you authorize or direct us to do so.

Patient Information and Donor Independence

Triple Aim independently establishes its patient-assistance eligibility criteria and independently determines whether an individual patient qualifies for assistance.

We do not provide identifiable patient information to donors for the purpose of allowing a donor or funding partner to:

• Select individual patients for assistance
• Determine whether a particular patient is eligible
• Determine an individual patient’s award amount
• Direct or influence an individual award decision
• Influence the patient’s choice of healthcare provider, pharmacy, medication, or treatment
• Market products or services to individual patients

Donors do not receive authority to approve, deny, prioritize, or direct assistance to individual patients based on their financial support of Triple Aim.

Triple Aim may provide donors and other funding partners with aggregated, de-identified, financial, or program-level information for appropriate reporting, compliance, stewardship, and organizational purposes.

Donor Privacy

Triple Aim does not sell, rent, or trade donor personal information.

We do not provide donor information to other organizations for their independent marketing purposes.

We may share donor information with payment processors, fundraising platforms, accountants, professional advisors, and other service providers when reasonably necessary to process donations or administer Triple Aim’s charitable operations.

Sensitive Personal Information

Patient assistance may require Triple Aim to collect information relating to health, prescriptions, insurance, income, and financial circumstances.

We seek to collect and use only information reasonably necessary to determine eligibility, administer assistance, comply with applicable requirements, and protect the integrity of our programs.

Triple Aim does not sell sensitive patient information.

Data Security

Triple Aim uses reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, or loss.

Access to sensitive information is limited to individuals and service providers who need the information for authorized Foundation purposes.

No electronic transmission, storage system, or security measure can guarantee absolute security. Accordingly, Triple Aim cannot guarantee that personal information will never be accessed, used, or disclosed without authorization.

Data Retention

Triple Aim retains personal information for as long as reasonably necessary to:

• Administer patient assistance
• Process and reconcile payments
• Maintain required financial and program records
• Complete audits and compliance activities
• Meet legal, regulatory, tax, contractual, and recordkeeping obligations
• Prevent or investigate fraud, misuse, or duplicate payments
• Resolve disputes
• Protect the Foundation’s legal rights and charitable assets

Information that is no longer reasonably necessary may be deleted, destroyed, or de-identified in accordance with Triple Aim’s record-retention practices and applicable law.

Your Privacy Requests

Depending on applicable law, you may have rights regarding personal information Triple Aim maintains about you.

You may also contact us to:

• Request that inaccurate information be corrected
• Update your contact information
• Change your communication preferences
• Ask questions about information Triple Aim maintains or how it is used
• Submit another privacy-related request

We may need to verify your identity before responding to certain requests.

We may retain information when necessary to comply with legal, financial, audit, payment, program-integrity, or other legitimate recordkeeping requirements, even when a deletion request has been made.

Privacy requests may be submitted to contact@tripleaimfoundation.org.

Third-Party Services and Websites

Our website and programs may use or link to services operated by third parties, including application platforms, payment processors, donation platforms, and other technology providers.

When a third party independently collects or processes information, its handling of that information may also be governed by its own privacy practices and policies.

This Privacy Policy describes Triple Aim’s handling of personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time as our programs, operations, technology, or legal requirements change.

When we make material updates, we will post the revised Privacy Policy on our website.

Contact Us

Questions about this Privacy Policy or Triple Aim’s privacy practices may be directed to: