Privacy policy

1Information we collect

We collect only what we need to respond to you and run the website. The information comes from three places: what you give us, what your browser sends us, and what we learn when you talk to us.

Forms and enquiries

When you use the consultation, contact, inquiry or newsletter forms on this website, we collect the details you choose to enter, such as:

• Your name, work email address and phone number
• Your practice name, specialty, state and the billing software you use
• Anything you write in the message box, such as questions about billing or credentialing

Calls, email and messaging

If you call, email or message us (including through WhatsApp), we keep a record of the conversation and your contact details so we can follow up and answer your questions.

Cookies, analytics and technical data

Like most websites, our servers and tools may log technical information such as your IP address, browser and device type, the pages you view, the site that referred you and the date and time of your visit. See Section 6 for how cookies and similar tools work. [List the analytics tools actually in use, for example Google Analytics, or state that none are used]

Newsletter

If you subscribe to our blog newsletter, we collect your email address and the page you signed up from, and we use them to send you articles. You can unsubscribe at any time using the link in any email or by writing to us.

Back to top ↑

2How we use information

We use the information described above to:

• Reply to your enquiry and set up a consultation or revenue assessment
• Provide, support and improve our services and this website
• Send you the information or newsletter you asked for
• Keep the website secure, prevent spam and abuse, and fix problems
• Understand which pages are useful, so we can make them better
• Meet legal, tax and recordkeeping obligations

We don’t use the information you give us through the website to make automated decisions about you.

Back to top ↑

3Legal bases and consent

Our website and services are intended for healthcare practices in the United States. When we handle personal information collected through the website, we do so because:

• You asked us to. When you submit a form or contact us, you are asking us to respond, and we use your details for that purpose.
• You consented. For things like the newsletter, we rely on your consent, which you can withdraw at any time.
• It’s part of running our business. We have a legitimate interest in keeping the website secure, understanding how it’s used and keeping business records.
• The law requires it. Sometimes we need to keep or share information to follow the law.

Back to top ↑

4Sharing information

We share information only in these limited situations:

• Service providers. Companies that help us run the website and our business, such as website hosting, email delivery, form tools, security and analytics providers. They may use the information only to provide their service to us and are expected to keep it confidential.
• Legal and safety. When required by law, court order or a government request, or to protect the rights, safety and security of Cure MB, our clients or others.
• Business changes. If Cure MB is involved in a merger, acquisition or sale of assets, information may transfer to the new owner, who must honor this policy.

[List the actual providers, for example hosting company, email service, Fluent Forms/WordPress host, analytics tool]

Back to top ↑

5Protected health information and HIPAA

This policy covers information about visitors to curemb.com and people who contact us. It does not cover protected health information (PHI) that we handle on behalf of our clients.

• Client work. When we work with a practice, we act as its business associate. We sign a Business Associate Agreement (BAA) before we access any PHI, and we handle that information under the BAA and HIPAA.
• If you send PHI by mistake. Tell us right away at support@curemb.com or (817) 396-6663. We’ll work with you to limit further use and delete it where we can.

You can read more about how we protect client information on our HIPAA & Data Security page.

Back to top ↑

6Cookies and tracking

Cookies are small files that a website stores in your browser. We use them in two ways:

• Essential cookies. These keep the website working, for example remembering your form session and protecting forms from spam. They can’t be turned off on our site.
• Analytics cookies. If we use analytics, these tell us in aggregate which pages are visited and how people find us. [Describe the analytics or marketing tools in use, or state that none are used]

You can control or delete cookies through your browser settings, and many browsers let you block them altogether. Blocking essential cookies may stop parts of the website from working.

Some browsers can send an opt-out preference signal, such as Global Privacy Control. [Confirm how the website responds to these signals]

We don’t currently show a cookie banner. [Add one if analytics or marketing cookies are enabled and counsel recommends it]

Back to top ↑

7Data retention

We keep personal information only as long as we need it for the purposes in this policy, including to answer your questions, keep business records and meet legal obligations. In general:

• Enquiries and form submissions: [retention period, for example 24 months] after our last contact, unless you become a client.
• Newsletter email addresses: until you unsubscribe.
• Website logs and analytics: [retention period].

When we no longer need information, we delete it or remove anything that identifies you. Client records and PHI are kept and returned or destroyed as set out in each client’s agreement.

Back to top ↑

8Security

We use reasonable administrative, technical and physical safeguards to protect information against loss, misuse and unauthorized access. These include limiting access to people who need it and using secure connections (HTTPS) on this website.

No website or method of transmission is completely secure, so we can’t guarantee absolute security. If you think your information has been compromised, or you spot a security problem on our website, please tell us right away at support@curemb.com.

Learn more about how we protect client information on the HIPAA & Data Security page.

Back to top ↑

9Your rights and choices

You can contact us at any time to ask us to:

• Tell you what personal information we hold about you and give you a copy
• Correct information that is wrong or out of date
• Delete the personal information we hold about you
• Stop sending you emails or newsletters

US state privacy rights, including California

Some US states, including California (under the CCPA, as amended by the CPRA), and others such as Colorado, Connecticut, Virginia and Texas, give residents extra rights over their personal information. Depending on the law, these can include the rights to:

• Know what personal information a business collects, uses and discloses
• Access and receive a copy of it
• Correct inaccurate information
• Delete it, subject to legal exceptions
• Opt out of the sale of personal information, of sharing it for cross-context behavioral advertising and of targeted advertising
• Limit the use of sensitive personal information
• Not be treated unfairly for using these rights

How to make a request

Email support@curemb.com or call (817) 396-6663, tell us what you’d like us to do and which state you live in. We may need to confirm your identity first, usually by matching details you give us to details we already have. You can ask an authorized agent to make a request for you, and we may ask for proof that they’re authorized.

We respond within the time the law requires, which is often 45 days, and we’ll tell you if we need more time. These laws have exceptions, and some of them don’t apply to information we handle as a business associate under HIPAA. If we can’t fully act on a request, we’ll tell you why. If you disagree, you can ask us to reconsider, and you may also contact your state attorney general.

Back to top ↑

10Children’s privacy

Our website and services are for healthcare practices and their staff. They are not directed to children under 13, and we don’t knowingly collect personal information from children. If you believe a child has given us personal information, please contact us and we will delete it.

Back to top ↑

11Third-party links

Our website may link to other websites and services, such as payer portals, social media pages and WhatsApp. We don’t control them and aren’t responsible for their privacy practices or content. Please read their policies before you share information with them.

Back to top ↑

12Changes to this policy

We may update this policy from time to time, for example when our practices or the law change. When we do, we’ll post the new version on this page and change the “Last updated” date at the top. If a change is significant, we’ll make that clear on the website. By continuing to use the website after a change, you accept the updated policy.

Back to top ↑

13Contact us

If you have questions about this policy or how we handle your information, or you’d like to make a request, contact us:

• Call(817) 396-6663
• Emailsupport@curemb.com
• MailCure MB Medical Billing Service, [mailing address]
• Privacy contact[name or title of the person responsible for privacy requests]

Back to top ↑