1. Introduction
Welcome to Accuix RCM (“Company,” “we,” “us,” “our”). Accuix RCM is committed to protecting your privacy and ensuring transparency about how we collect, use, protect, and share your information. This Privacy Policy describes our practices regarding information we collect through our website and services.

As a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA), Accuix RCM is subject to strict regulations governing the protection of Protected Health Information (PHI) and Personally Identifiable Information (PII).

2. Scope and Applicability
This Privacy Policy applies to:
* Information collected through our website: www.accuixrcm.com
* Information received in connection with our Revenue Cycle Management services
* All users accessing our services, including healthcare providers, medical practices, hospitals, and other covered entities.

3. Information We Collect
3.1 Information Provided Directly by You
We collect information you voluntarily provide, including:
* Name, title, and contact information (email, phone, address).
* Organization name and type (medical practice, hospital, healthcare facility).
* Insurance information and payment details.
* Healthcare and billing information necessary to provide RCM services.
* Patient Protected Health Information (PHI) shared as part of our service engagement.

3.2 Information Collected Automatically
When you visit our website, we automatically collect:
IP address and device information Browser type and operating system
* Pages visited and time spent on pages
* Referral source and clickstream behavior
* Cookies and similar tracking technologies

3.3 Information from Third Parties
We may receive information from:
* Healthcare providers and business partners
* Insurance companies and clearinghouses
* Government agencies (where legally required)
* Third-party service providers and vendors

 4. How We Use Your Information
Accuix RCM uses collected information for:
Primary Uses:
* Providing Revenue Cycle Management services (billing, coding, claim submission, collections).
* Processing and submitting healthcare claims.
* Communicating with healthcare providers and patients regarding billing and payments.
* Improving our services and operations.
* Complying with legal and regulatory obligations.

Secondary Uses:
* Fraud detection and prevention.
* sutry assuray and in performance monitoring.
* Training and compliance programs.
* Generating de-identified analytics and reports.
We do NOT use information for:
* Marketing or promotional purposes without explicit consent
Sale to third parties for commercial gain
* Any purpose beyond the scope of our Business Associate Agreement

5. Legal Basis for Processing
Our collection and use of information is based on:
* HIPAA Compliance: Processing PHI as a Business Associate under written Business.
* Contractual Obligations: Fulfilling services outlined in service agreements.
* Legal Requirements: Compliance with federal and state healthcare laws.

Legitimate Business Interests: Operating our RCM business securely and efficient.
Explicit Consent: When you provide additional consent beyond contract u requirements.

6. Information Security and Protection
6.1 Technical Safeguards
Accuix RCM implements industry-standard security measures:
* Encryption: 256-bit SSL/TLS encryption for data in transit.
* Access Controls: Role-based access with unique login credentials.
* Authentication: Multi-factor authentic.
*Audit Trails: Complete logging of all data access and modifications.
*Network Security: Firewalls, intrusion detection systems, and regular security scanning.
*Data Encryption at Rest: Encrypted storage for all Protected Health Information.

6.2 Administrative Safeguards

• Workforce security policies and authorization procedures
• Workforce security training and awareness programs
• Annual security risk assessments
• Incident response and breach notification procedures
• Business Associate agreements with all third-party vendors
•  Designated HIPAA Privacy and Security Officer

6.3 Physical Safeguards

• Restricted access to facilities housing patient data
• Secure disposal of paper records and electronic media
• Environmental controls (fire suppression, climate control)
• Video surveillance and access logging systems

7. Information Sharing and Disclosure

7.1 Permitted Disclosures

We may share your information with:

Business Associates: Service providers, vendors, and technology partners who have signed Business Associate Agreements

Legal Entities: As required lov law or court order

• Legal Entities: As required by law or court order.
• Government Agencies: To comply with regulatory requirements.
• Law Enforcement: When required by legal process or to protect rights and safety.
  
  

7.2 Prohibited Disclosures

We do NOT:

• Sell patient information to third parties.
• Share information for marketing purposes without explicit consent.
• Disclose PHI outside the scope of the Business Associate Agreement.
• Share information with entities that have not signed required BAAs.
• Use information for any purpose not authorized under HIPAA.

 8. Patient Rights

As required by HIPAA, patients have the following rights:

8.1 Right to Access

Patients have the right to access and obtain copies of their Protected Health Information maintained by Accuix RCM, subject to applicable exceptions.

8.2 Right to Amendment

Patients may request amendment or correction of inaccurate or incomplete health information.

8.3 Right to Accounting of Disclosures

Patients have the right to receive an accounting of all non-standard disclosures of their

8.4 Right to Confidential Communication

Patients may request that communications regarding their health information be sent to alternative addresses or locations.

8.5 Right to Restrict Uses and Disclosures

Patients may request restrictions on the use and disclosure of their health information hough Accuix RCM may deny such requests if they conflict with regulatory requirement an Acacis aly of these rights, patients should contact the HIPA Privacy Officer

9. Data Retention and Deletion

9.1 Retention Periods

Accuix RCM retains information according to:

• HIPAA Requirements: Minimum of six years from creation or receipt
• State Law Requirements: As mandated by applicable state regulations
• Medicare/Medicaid Rules: As required by federal healthcare programs
• Service Agreement Terms: Duration specified in individual service contracts
  
  

9.2 Deletion and Destruction

Upon termination of services or as requested, information is:

• Securely deleted using DOD-approved data destruction methods for electronic records
• Physically shredded for paper records
• Returned to the covered entity as agreed in the service agreement

Records required for legal compliance are retained for the applicable retention period.

10. Cookie Policy

Our website uses cookies and similar technologies to:

• Remember your preferences
• Track website usage and performance
• Enhance user experience
• Prevent fraud and security threats

Types of Cookies Used:

• Essential Cookies: Required for site functionality
• Analytics Cookies: Track usage patterns (Google Analytics)
• Security Cookies: Detect and prevent fraudulent activity
• Preference Cookies: Remember user choice

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

11. Third-Party Links and Services

Dur website may contain links to third-party websites and services. Accuix RCM is no responsible for the privacy practices of external sites. We encourage you to review the privacy policies of any third-party services before providing information.

12. Data Breach Notification

12.1 Breach Identification

If a breach of unsecured Protected Health Information occurs, Accuix RCM will:

• Immediately investigate and assess the scope of the breach
• Determine affected individuals and data compromised
• Evaluate risk of harm to affected individuals
  
  

12.2 Notification Procedures

Affected individuals will be notified:

• Without unreasonable delay
• By mail, email, or phone, depending on contact information available
• With details of the breach, information affected, and steps to protect themselves The Department of Health and Human Services Office for Civil Rights (OCR) will be notified if the breach affects 500 or more individuals.
  
  

12.3 Notification Content

Breach notifications will include:

• Description of what happened
• Type of information involved Steps individuals should take

• What Accuix RCM is doing to investigate and prevent future breaches
• Contact information for questions

13. International Data Transfers

Accuix RCM primarily operates within the United States. If information is transfere internationally. we ensure

• Adequate safeguards are in place
• Transfers comply with applicable laws
• Standard contractual clauses or similar mechanisms are used
  
  

14. Children’s Privacy

Accuix RCM services are directed to healthcare providers and business entities, not to individuals under 18 years old. We do not knowingly collect personal information directly from children. If we become aware that a child has provided information, we will take steps to delete such information.

15. California Privacy Rights (CCPA)

For California residents, additional rights apply under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected and how it is used
• Right to delete personal information (subject to exceptions)
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising CCPA rights

To exercise California privacy rights, contact Accuix RCM.

16. Updates to This Privacy Policy

Accuix RCM may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The “Last Updated” date at the beginning of this policy indicates the date of the most recent revision.

Material changes will be communicated via email or prominent notice on our website.

Continued use of our services following notification of changes constitutes acceptance of the updated Privacy Policy.

17. Contact Information

HIPAA Privacy Officer:

Accuix RCM

Email: contact@accuixrcm.com

For Complaints:

If you believe your privacy rights have been violated, you may file a complaint with:

• Accuix RCM directly using contact information above
• Department of Health and Human Services Office for Civil Rights (OCR):
• Website: https://www.hhs.gov/hipaa/filing-a-complaint/index.html
• Phone: 1-800-368-1019
•  Email: OCRComplaint@hhs.gov