Our Privacy Policy

This Privacy Policy applies to personal information we collect:

• On the PrimeMedCure website and any page that links to this policy (the “Web Site”);
• When you create or use a PrimeMedCure account, contact us, request a demo, or attend an event or webinar; and
• When you apply for a job with us.

Patient health information

PrimeMedCure provides billing and clearinghouse services (the “Services”) to healthcare providers and practices. When our customers enter patient information into the Services, such as demographics, insurance, diagnoses, and claims, we handle it as a “business associate” under HIPAA, only on our customer's behalf and as permitted by our Business Associate Agreement with them.

That protected health information is not covered by this Privacy Policy. If you are a patient, your provider's Notice of Privacy Practices explains how your health information is used. Please contact your provider with questions or requests about it.

Information you give us

• Contact and professional details, such as your name, email, phone number, practice name, and role;
• Account information, such as your username, password, and multi-factor sign-in setup;
• Provider details your practice enters, such as NPI, taxonomy, and specialty;
• Messages you send us, including support requests and demo requests; and
• Job application details, such as your résumé and work history.

Information we collect automatically

• Device and connection details, such as IP address, browser type, and operating system;
• Usage details, such as pages viewed, links clicked, and the date and time of visits; and
• Inside the Services, security and audit records of sign-ins and actions, which HIPAA requires us to keep.

Information from other sources

• Your employer or practice, when it sets up your user account;
• Public sources, such as the CMS NPPES registry used to verify provider NPIs; and
• Service providers who help us run the Web Site and the Services.

We use personal information to:

• Provide, operate, and support the Web Site and the Services;
• Create and secure accounts, including verifying sign-ins and preventing fraud or misuse;
• Respond to questions, demo requests, and support tickets;
• Send service notices and, where allowed, product updates (you can opt out at any time);
• Understand how the Web Site is used so we can improve it;
• Comply with law, including HIPAA, and enforce our agreements; and
• Review job applications.

How we protect it

We use administrative, technical, and physical safeguards designed for healthcare data. These include encryption of sensitive fields, multi-factor sign-in, short session timeouts, role-based access that limits each user to the minimum information needed, and tamper-resistant audit logs. No system is perfectly secure, so please keep your password private and tell us right away if you think your account has been compromised.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share it only:

• With service providers who host, secure, or support our systems under contracts that limit their use of the data;
• With payers and clearinghouse partners, when a customer instructs us to check eligibility, submit claims, or receive remittances;
• With your organization, when your account was provided by your employer or practice;
• For legal reasons, when required by law, court order, or government request, or to protect the rights, safety, and security of PrimeMedCure, our customers, or others;
• In a business transfer, such as a merger, acquisition, or sale of assets, subject to this policy; and
• With your consent, or at your direction.

Cookies

We use cookies and similar technologies that are needed to keep you signed in and secure. You can block cookies in your browser, but parts of the Web Site and the Services may not work without them.

Do Not Track and Global Privacy Control

We do not use advertising trackers. Where required by law, we treat a Global Privacy Control signal as a request to opt out of the sale or sharing of personal information.

Retention

We keep personal information only as long as needed for the purposes above or as the law requires. For example, HIPAA security audit records are kept for six years.

Children

The Web Site and the Services are for healthcare businesses and are not directed to children under 16. We do not knowingly collect their personal information through the Web Site.

Other websites

Links to other websites, such as payer portals or government registries, are covered by those sites' own privacy policies.

• Marketing emails: use the unsubscribe link in any marketing email. We will still send service and security notices.
• Account details: update your profile inside the Services, or ask your practice administrator.
• Access, correction, and deletion: depending on where you live, you may ask to see, correct, or delete personal information we hold about you. See Making a Request below.

When you apply for a job, we collect what you choose to give us, such as your résumé, work history, education, and references, plus any background check information you authorize. We use it only to evaluate your application and to meet legal requirements, and share it only with people and service providers involved in hiring. If you are hired, it becomes part of your employment record.

California residents

Under the California Consumer Privacy Act, as amended (CCPA), California residents have the right to:

• Know what personal information we collect, use, and disclose;
• Request deletion or correction of their personal information;
• Opt out of the sale or sharing of personal information (we do neither);
• Limit the use of sensitive personal information (we use it only as the law permits); and
• Not be discriminated against for exercising these rights.

In the last 12 months, we collected the categories of personal information below. Protected health information covered by HIPAA is exempt from the CCPA and is not included.

Residents of other U.S. states

Residents of states with consumer privacy laws, including Colorado, Connecticut, Oregon, Texas, Virginia, and others, may have similar rights to access, correct, delete, and get a copy of their personal information, and to appeal if we deny a request. To appeal, reply to our decision or email support@primemedcure.com with “Appeal” in the subject line.

To make a request, email support@primemedcure.com or call +1 (305) 306-4774. To protect your information, we will verify your identity before acting, usually by confirming details we already hold. An authorized agent may submit a request for you with your signed permission.

We respond within 45 days, and will tell you if we need more time as the law allows. If your information was entered into the Services by your healthcare provider or employer, we may send your request to them, since they control that information.

We may update this Privacy Policy from time to time. The date at the top shows when it last changed. If we make material changes, we will post a notice on the Web Site or email account holders before they take effect.

For questions about this Privacy Policy or our privacy practices, contact: