Privacy Policy & PHI Governance

1. Introduction & Scope

This Privacy Policy explains how CareBridge collects, uses, stores, shares, and protects information gathered when healthcare providers, physicians, practice managers, and visitors interact with our website, request consultations, or engage our Revenue Cycle Management (RCM) solutions. By using our website and services, you acknowledge the terms described herein.

2. HIPAA & Protected Health Information (PHI) Governance

In our role as a healthcare Revenue Cycle Management provider, CareBridge operates as a Business Associate under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act.

When executing medical billing, certified medical coding, claims submission, denial appeals, and accounts receivable management for covered entities (healthcare providers and hospitals):

• We execute formal Business Associate Agreements (BAAs) with our clients prior to accessing or processing any clinical or financial data.
• All electronic Protected Health Information (ePHI) is handled strictly in accordance with HIPAA Privacy and Security Rules.
• We implement administrative, physical, and technical safeguards including encryption at rest (AES-256) and in transit (TLS 1.3), multi-factor authentication, and continuous audit logging.

3. Information We Collect

We may collect information directly from you or automatically through your interaction with our website:

• Direct Inquiries & Consultation Data: Full name, professional title, practice/facility name, medical specialty, work email address, phone number, estimated claim volume, and specific RCM challenges submitted via our contact forms.
• Technical & Usage Data: Internet Protocol (IP) address, browser type and version, operating system, referring URLs, pages visited, time spent on pages, and standard server log metrics.
• Communication Records: Transcripts of email exchanges, telephone inquiries, and customer support communications.

4. How We Use Your Information

We utilize the collected information strictly for legitimate commercial and operational purposes, including:

• Evaluating your practice's RCM requirements and providing customized service proposals and consultations.
• Delivering, operating, and optimizing our medical billing, coding, and denial recovery workflows.
• Responding to inquiries, administrative requests, and career applications.
• Maintaining institutional security, preventing fraudulent activity, and verifying compliance with healthcare regulations.
• Complying with applicable legal, regulatory, and reporting requirements.

5. Disclosure of Information & Third-Party Processors

CareBridge does NOT sell, rent, or trade your personal or business information to third parties. We may share information only under strict confidentiality and security controls in the following scenarios:

• Authorized Service Providers: Trusted technology vendors (such as secure cloud infrastructure, clearinghouses, and encrypted email gateways) bound by non-disclosure agreements and HIPAA BAAs.
• Legal Requirements: When mandated by court order, subpoena, government inquiry, or applicable statutory laws.
• Business Transfers: In the event of a merger, acquisition, or reorganization, subject to identical privacy protections.

6. Data Security & Storage

We employ enterprise-grade security protocols designed to prevent unauthorized access, accidental loss, or disclosure. Our delivery centers in Navi Mumbai maintain 24/7 physical security, biometric access control, clean desk policies, and isolated network infrastructures.

7. Data Retention

We retain personal and business information only for the duration necessary to fulfill the purposes outlined in this policy or as required by applicable medical record retention laws and statutory obligations.

8. Your Privacy Rights & Choices

Depending on your jurisdiction, you have the right to request access to, correction of, or deletion of your personal data held by us. You may also opt out of promotional communications at any time by following the unsubscribe instructions or contacting us directly.

9. Contact Our Data Protection Team

If you have any questions regarding this Privacy Policy or our HIPAA compliance practices, please contact us: