Privacy Policy
Effective Date: May 20, 2025
At MedBrilliance, your privacy is our top priority. We are dedicated to protecting the personal information you provide to us. This Privacy Policy outlines how we collect, use, disclose, and protect your data when you visit our website and engage with our services, including healthcare practice management, medical billing, credentialing, and revenue cycle management (RCM). Rest assured, we take all necessary measures to ensure your information is handled securely and with the utmost respect.
We value your cooperation as you explore our website. By using our services, we trust that you have carefully reviewed and accepted the terms outlined in this Privacy Policy. If you do not agree with any part of this Policy, we kindly ask that you refrain from using the website or its services. Please note, this Policy may be updated periodically to reflect changes in our practices or applicable laws. For your own benefit, we recommend reviewing this Policy occasionally to stay informed of any updates.
Types of Information We Collect
At MedBrilliance, we collect various types of personal information to deliver and enhance our services. This information includes:
Personal Information
- Name: Your full name or business entity name.
- Contact Information: Email address, phone number, physical address, and other communication details.
- Payment Information: Credit card numbers, billing addresses, or other payment information required for processing transactions.
Sensitive Data
In compliance with relevant laws, we may collect sensitive data, such as health information, medical history, and financial details, which are essential for providing medical billing and credentialing services. This information is safeguarded in accordance with HIPAA (Health Insurance Portability and Accountability Act) guidelines.
Cookies and Tracking Technologies
To improve your experience, we use cookies and similar technologies to monitor website performance and track user behavior. You can adjust your cookie preferences through your browser settings at any time.
Automated Data Collection
We may automatically gather data through third-party services, like Google Analytics, to help us analyze website traffic and user interactions, ultimately improving our services.
Information from Website Forms
When you complete forms on our website, such as inquiry forms or service requests, we collect the details you provide in order to process your request or deliver the required services.
How MedBrilliance Use Your Information
We use the information we collect for the following purposes:
- Service Improvement: To enhance the quality and effectiveness of our medical billing, credentialing, and revenue cycle management (RCM) services.
- Analytics: To monitor and analyze website traffic and user behavior using tools like Google Analytics, which helps us refine our website and services for a better user experience.
- Communication: To respond to your inquiries, provide customer support, and send essential updates or notifications related to your account and services.
- Legal and Compliance Purposes: To comply with applicable laws, regulations, and contractual obligations, including maintaining HIPAA compliance regarding medical data.
- Marketing: With your consent, we may use your information to send marketing communications about our services. You can opt out of these communications at any time.
- Fraud Prevention and Service Optimization: For fraud detection and optimizing our services, we may use automated decision-making systems and profiling techniques. We will take appropriate measures if any decision significantly impacts you.
How MedBrilliance Share Information
We do not sell, rent, or share your personal data for marketing or commercial purposes. However, we may disclose your information in the following circumstances:
- Legal Compliance: To adhere to relevant laws, court orders, or regulatory obligations.
- Business Transfers: In the event of a sale, merger, or acquisition, your personal data may be transferred as part of the transaction, with this Privacy Policy remaining applicable.
- Research & Development: We may share anonymized data with affiliates or partners for research and service improvement purposes, ensuring that no personal or identifiable information is disclosed.
- Service Providers: We may disclose your personal data to third-party service providers who assist with managing our website, processing payments, or providing other essential services. These providers operate under strict confidentiality agreements and may only use your data for the services contracted with us.
Data Security
At MedBrilliance, the security of your personal information is a top priority. We employ industry-standard security protocols to ensure the safety of your data, including:
- Encryption: Sensitive data, including health-related and payment information, is encrypted both during transmission (using SSL/TLS) and while stored.
- Access Controls: Strict access controls are enforced to ensure that only authorized personnel can access your data.
- Security Audits: Regular security assessments are performed to identify and mitigate potential vulnerabilities within our systems.
- PCI DSS Compliance: We fully comply with the Payment Card Industry Data Security Standard (PCI DSS), ensuring all payment transactions are secure and meet the highest data protection standards.
While we implement robust security measures, please note that no system is completely immune to security risks. We are continually enhancing our practices to minimize these risks.
Data Retention Policy
At MedBrilliance, we retain personal information only for as long as necessary to provide our services and fulfill legal, regulatory, and business obligations. Regarding healthcare information, we adhere to HIPAA requirements, retaining medical records for a minimum of six years, either from the date of creation or the last effective date, whichever is later.
Once the retention period has passed, we securely dispose of your data in accordance with HIPAA guidelines and industry best practices.
Your Rights and Choices
At MedBrilliance, we are dedicated to giving you control over your personal information. You have the following rights regarding your data:
- Access and Correction: You can request access to the personal data we hold about you and request corrections if any data is inaccurate or incomplete.
- Deletion: You have the right to request the deletion of your personal data, subject to legal and contractual obligations.
- Opt-Out of Marketing Communications: If you no longer wish to receive marketing communications, you can opt out by:
- Email Communications: Clicking the "Unsubscribe" link in any email you receive from us.
- SMS Communications: Replying "STOP" to any marketing text message you receive.
- Direct Contact: Contacting us directly through the contact details provided in this Privacy Policy.
Even if you choose to opt out of marketing communications, we may still send you essential updates related to the services you are currently using.
- Data Portability: You may request a copy of your data in a portable format to transfer it to another service provider.
Third-Party Links and Services
Our website may include links to third-party websites or services that operate independently from us. We are not responsible for the content, privacy policies, or practices of these third-party sites. Any interactions you have with these third parties are subject to their own terms and privacy policies.
HIPAA Compliance
At MedBrilliance, we are committed to ensuring the privacy and security of your health-related information. In line with our dedication to maintaining the highest standards, we adhere to the Health Insurance Portability and Accountability Act (HIPAA) to ensure that your Protected Health Information (PHI) is handled with the utmost security and in compliance with all relevant regulations.
HIPAA-Compliant Measures
We implement comprehensive administrative, physical, and technical safeguards to protect your Protected Health Information (PHI), including:
- Administrative Safeguards: Employee training, access controls, and policies designed to ensure secure data management.
- Physical Safeguards: Restricted access to physical records and secure facilities to prevent unauthorized access.
- Technical Safeguards: Encryption, firewalls, and secure authentication measures to protect data from cyber threats.
Additionally, we conduct regular audits and continuous monitoring to ensure ongoing compliance with HIPAA standards.
Children’s Privacy
Our services are not intended for individuals under the age of 16, and we do not knowingly collect personal information from minors. If you believe we have collected data from a minor, please contact us immediately, and we will take appropriate steps to remove the information in compliance with the Children's Online Privacy Protection Act (COPPA).
Selling The Information
MedBrilliance does not sell personal data to any third parties. We prioritize your privacy and are fully committed to ensuring that your data is secure and handled with the utmost care.
Privacy Policy Updates
We may periodically update this Privacy Policy to reflect changes in our business practices, regulations, and legal obligations. If any significant changes are made, we will inform you via email. We recommend revisiting this policy regularly to stay informed about our data protection procedures. The "Last Updated" date at the top of this policy reflects the latest changes made.
Contact Information
If you have any questions, concerns, or requests about this Privacy Policy or your personal data, please don't hesitate to reach out to us:
Address: [Your Company Address Here]
Phone: [Your Company Phone Number Here]
Email: [Your Company Email Here]
We will address your inquiries in compliance with applicable laws and respond within a reasonable timeframe.