Welcome to Medbrin. We are committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, and protect information when you visit our website or use our medical billing and revenue cycle management services.

1. Introduction

Privacy Policy

Medbrin ("we", "us", or "our") operates as a service provider for healthcare entities. We take our responsibility toward data privacy seriously and adhere to applicable laws, including HIPAA (Health Insurance Portability and Accountability Act) where we act as a "Business Associate."

2. The Data We Collect

We may collect and process the following types of personal data:

Contact Information: Name, email address, phone number, and mailing address.
Professional Information: Practice name, NPI number, and tax ID for healthcare providers.
Patient Information (PHI): When providing billing services, we process Protected Health Information on behalf of our clients. This data is handled in strict accordance with HIPAA Business Associate Agreements.
Technical Data: IP address, browser type, operating system, and interaction data collected through cookies.

3. How We Collect Data

We collect data through several channels:

Direct Interaction: When you fill out contact forms or correspond with us.
From Clients: Healthcare providers share patient and billing data with us to perform our contracted services.
Automated Technologies: We use cookies and web beacons to collect technical and usage data.

4. How We Use Your Data

We use your information for the following purposes:

To provide and manage medical billing and RCM services.
To process insurance claims and manage patient accounts.
To communicate with you regarding service updates or inquiries.
To comply with legal and regulatory obligations.
To detect and prevent fraudulent activities.

5. Legal Bases for Processing (EEA/UK Only)

For individuals in the European Economic Area (EEA) or the United Kingdom, we process data based on: (a) Performance of a contract; (b) Compliance with legal obligations; and (c) Our legitimate interests in providing efficient billing services.

6. Cookies and Tracking Technologies

Our website uses cookies to enhance user experience and analyze traffic. You can manage your cookie preferences through your browser settings. "Cookies" are small files placed on your device that help us understand how you use our site.

7. Data Sharing

We do not sell your personal data. We share information only with:

Service Providers: Third-party vendors who assist in hosting, data analytics, and payment processing.
Legal Recipients: When required by law or to respond to valid legal processes.
Health Insurance Carriers: To process claims on behalf of our healthcare clients.

12. Children’s Privacy

Our services are not intended for or directed at children under the age of 18. We do not knowingly collect personal information from minors.

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.

14. HIPAA and Healthcare Privacy

Services & Responsibility: Medbrin supports healthcare providers and business associates with medical billing and revenue cycle management as a "Business Associate" under HIPAA.
Safeguards & Compliance: We maintain administrative, physical, and technical safeguards designed to meet HIPAA privacy and security standards whenever healthcare data is processed.
Data Distinction: It is important to distinguish between general website info (like demo requests) and Protected Health Information (PHI). PHI is only ever handled within our secure service environments.
Secure Communications: Users should never submit sensitive medical records, patient details, or clinical records through general website contact forms or standard email channels.
PHI Protection: When PHI is received through proper secure channels, Medbrin uses and protects it only as allowed by our Business Associate Agreements and applicable laws.