Privacy Policy

1. Introduction

This Privacy Policy governs the manner in which RevXRCM Services LLP (“we,” “us,” or “our”) collects, uses, maintains, and discloses information collected from users (“Users”) of our website (www.revxrcm.com]) and, most critically, in the course of providing Medical Coding and Revenue Cycle Management (RCM) services.

2. Information We Collect

We collect information for two distinct purposes: business engagement and service delivery.

A. Personally Identifiable Information (PII) – Business Data

This is information provided by prospective and current clients for communication, marketing, and business contracts. This may include:

• Name, Job Title, and Company Name

• Email address and Business Phone number

• Company Address and Billing Information

B. Protected Health Information (PHI) – Service Data (HIPAA)

In the course of providing RCM and Medical Coding services, RevXRCM Services LLP acts as a Business Associate (BA) to healthcare providers (Covered Entities). We are entrusted with processing, transmitting, and storing patient data, including:

• Patient demographics (name, date of birth, address)

• Medical records, clinical documentation, and treatment data

• Diagnosis and procedure codes (ICD, CPT, HCPCS)

• Insurance, eligibility, and payment information

3. Commitment to Compliance and Data Security

RevXRCM Services LLP treats the protection of all client data and PHI as our paramount responsibility.

A. HIPAA Compliance (Business Associate Status)

• We strictly adhere to the standards set forth by the Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security Rules.

• Our use and disclosure of PHI are governed exclusively by legally binding Business Associate Agreements (BAAs) signed with our Covered Entity clients. We will only use or disclose PHI as permitted by the BAA and as required by law.

B. Data Security

We employ robust technical, administrative, and physical safeguards to protect all data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: Utilizing encryption for data in transit and at rest.

• Access Control: Implementing rigorous, role-based access to PHI, ensuring only authorized personnel can access necessary data.

• Physical Security: Hosting data within secure, compliant data centers.

• Employee Training: Conducting mandatory and ongoing security and privacy training for all employees.

4. How We Use Collected Information

RevXRCM Services LLP uses the collected information strictly for the following purposes:

• To Perform Services: To execute contractual duties, including accurate medical coding, claims submission, denial management, and financial analysis.

• To Ensure Compliance: To audit and enforce adherence to all RCM guidelines (e.g., CCI edits, LCDs) and federal regulations.

• To Communicate: To respond to service inquiries, provide client support, and deliver crucial service updates.

• To Improve Quality: To use aggregated, de-identified data for internal process refinement and the enhancement of our RCM technology.

5. Sharing and Disclosure of Information

We do not sell, trade, or rent your PII or PHI to others. We only share information under the following limited circumstances:

• Service Delivery (PHI): PHI is disclosed only as required to perform our RCM services (e.g., submitting claims to clearinghouses or payers) and is bound by the terms of the relevant BAA.

• Legal Obligation: If required by law, such as in response to a subpoena, court order, or to comply with other legal processes.

• Business Operations: With trusted third-party service providers (e.g., secure hosting platforms, analytics providers) who assist us in operating our business and website, provided they are contractually bound by confidentiality and/or BAA requirements.

6. Website Data and Tracking Technologies

Our Site may use “cookies” and other tracking technologies (like Google Analytics) to enhance the User experience and gather general site usage data (browser type, time spent on pages, etc.).

• User Control: Users may choose to set their web browser to refuse cookies. However, note that doing so may affect the proper functionality of the website.

7. Your Rights

Your rights regarding the data we hold differ based on the type of information:

• PHI Rights (Patient Data): Rights concerning the access, amendment, or accounting of PHI disclosures are governed by HIPAA. Requests regarding PHI must be directed to your respective healthcare Provider, as they are the Covered Entity responsible for that data.

• PII Rights (Business Data): You may have rights under various laws (e.g., GDPR, CCPA) to access, correct, or request deletion of your PII. Please contact us to exercise these rights.

8. Changes to this Privacy Policy

RevXRCM Services LLP reserves the right to update this policy at any time. When we make changes, we will revise the “Effective Date” at the top of this page. We encourage Users to check this page frequently.

9. Contacting Us

If you have any questions about this Privacy Policy, our RCM practices, or your dealings with this company, please contact us at:

RevXRCM Services LLP Email: info@revxrcm.com Address: RevXRCM, Pune, Maharashtra, India 411028 Phone: +91 917 534 3236