Privacy policy

What this policy covers

This policy describes how MedBil handles information collected through this website. It does not cover protected health information processed under a Business Associate Agreement on behalf of a client practice — that is governed by the BAA and by HIPAA, and is described on our HIPAA compliance page.

What we collect

Information you give us. When you complete a form on this site we collect your name, practice name, work email, phone number, state, specialty, provider count, collections band, current billing setup, and anything you write in the free-text field.

We ask you not to include patient names, dates of birth or any protected health information in our forms, and the forms say so.

Information collected automatically. Standard web server information: IP address, browser type, pages visited, referring page and timestamps. [CLIENT INPUT — confirm which analytics tooling is in use and list it here.]

Cookies. [CLIENT INPUT — list the cookies actually set, their purpose and their duration. If a consent banner is required in your operating jurisdictions, describe it here.]

How we use it

• To respond to your enquiry and prepare the A/R analysis you requested
• To contact you about your enquiry by email and phone, where you have consented
• To operate, secure and improve this website
• To meet legal and regulatory obligations

We do not sell your information, and we do not share it for anyone else's marketing.

Third parties who process data for us

[CLIENT INPUT — list every processor: hosting provider, email delivery service, CRM, analytics. Name them and state what each one does. A policy that refers vaguely to "trusted partners" is not compliant with several state privacy laws.]

How long we keep it

[CLIENT INPUT — state retention periods for form submissions, email correspondence and server logs.]

Your rights

Depending on where you live you may have the right to request access to the information we hold about you, to have it corrected or deleted, and to opt out of certain processing. Residents of California have specific rights under the CCPA and CPRA, including the right to know, delete and correct, and the right to opt out of sale or sharing — MedBil does not sell or share personal information as those terms are defined.

[CLIENT INPUT — confirm which state privacy laws apply and add the required disclosures for each.]

To make a request, contact us using the details below. We will verify your identity before acting on it.

Security

We use encrypted transmission, role-based access control and audit logging. No system is perfectly secure, but the safeguards we apply are described in more detail on our HIPAA compliance page.

Children

This website is directed at healthcare businesses and is not intended for children.

Changes

We will post any changes to this policy on this page with a revised date.

Contact

Privacy requests and questions about this policy should go to the privacy contact listed in the footer of this site.