Introduction

XpertRCM, a healthcare revenue cycle management company, is dedicated to maintaining the privacy and confidentiality of customer and patient data in compliance with HIPAA regulations. This Privacy Policy outlines how we collect, use, protect, and disclose health information and other personal information we may receive. Our goal is to be transparent about our data practices and to ensure the secure handling of all information entrusted to us.

SMS Privacy Policy

SMS opt-in consent or phone numbers for SMS purposes will NOT be shared with third parties or affiliates for marketing purposes

HIPAA Compliance Statement

XpertRCM is fully committed to maintaining HIPAA compliance in all physical and virtual operations. We ensure the following:

• Staying up-to-date with HIPAA developments and regulations, including those related to transaction and code sets, privacy, and security.
• Implementing and maintaining HIPAA compliance within our operations, systems, and software.
• Incorporating privacy and security features into websites and software that we provide to clients.
• Using HIPAA-compliant software and applying robust security measures to protect both provider and patient data, in full compliance with HIPAA guidelines.

Types of Information Collected

XpertRCM collects the following types of personal information from customers and patients as needed to support healthcare IT services:

• Contact Information: Name, email address, phone number, and mailing address
• Health Information: Medical records, diagnoses, treatment information, and other health-related data necessary for processing claims and payments

Method of Information Collection

We collect customer and patient data in the following ways:

• Directly from customers via forms, electronic health records, or data entry in our software systems
• Through secure communications and transactions conducted on our platforms, following HIPAA guidelines for data handling and transfer

Purpose of Data Collection

Customer information is collected and utilized for the following purposes:

• Facilitating healthcare IT operations and processing billing and claims
• Communicating with healthcare providers and patients to manage claims and support the revenue cycle
• Improving our services and conducting internal analysis for operational efficiency
• Enabling compliance with legal and regulatory requirements, including HIPAA

Data Security Measures

To protect customer data from unauthorized access, loss, or misuse, XpertRCM implements rigorous security measures, including:

• Encryption of data in transit and at rest
• Secure access protocols and regular security audits
• Firewalls and intrusion detection systems
• HIPAA-compliant software systems and secure physical access to data centers

Data Sharing

XpertRCM may share health information within the organization for purposes of payment or healthcare IT operations, as allowed by HIPAA regulations. We do not share customer data with third parties except in the following limited circumstances:

• When required by law or legal process
• With authorized partners necessary to deliver our services, who are also required to maintain HIPAA compliance

Importantly, SMS opt-in consent or phone numbers for SMS purposes will NOT be shared with third parties or affiliates for marketing purposes.

User Rights

Customers have the right to:

• Access and review their personal information upon request
• Update or correct any inaccuracies in their personal information
• Request the deletion of their personal information, within the bounds of legal and regulatory obligations

Notice of Privacy Practices

XpertRCM is committed to protecting the privacy of any health information we receive. Our policies detail how employees are expected to handle and manage health information. This Privacy Policy outlines how health information may be used or disclosed by our office and how customers may access and control their data. Health information is shared within XpertRCM only as necessary for payment and healthcare IT operations, and we strictly limit internal access to authorized personnel.

Changes and Updates to this Policy

We reserve the right to change this Privacy Policy, as well as the information, services, and features described herein, at any time to reflect regulatory updates, operational improvements, or changes in our services.

Contact Information

For any questions, concerns, or requests regarding your privacy and data security, please contact us at: info@xpertrcm.com

We are here to address any inquiries and assist with privacy and compliance concerns.