Privacy Policy

01Who we are

This website is operated by [Legal entity name], trading as Reveno MD, registered at [Registered address] in the United States. In this policy “we”, “us” and “our” mean Reveno MD.

We provide medical billing, coding, credentialing, front office, MIPS consulting, healthcare IT, web development and healthcare marketing services to medical practices.

If you have a question about this policy, contact us at info@revenomd.com.

02What this policy covers, and what it does not

When we perform billing, coding, credentialing or front office work for a practice, we act as a business associate under the Health Insurance Portability and Accountability Act. That relationship is governed by the business associate agreement signed with that practice and by HIPAA itself, not by this website policy.

If you are a patient of a practice we support and you have a question about your own health information, please contact that practice directly. They are the covered entity and hold the relationship with you.

03Information we collect

Information you give us

• Contact details such as your name, work email address, phone number and practice name, submitted through our forms.
• Practice information such as your NPI number, specialty, provider count and the systems you use.
• Correspondence, including emails, call notes and anything you choose to send us during an enquiry or audit.

Information collected automatically

• Device and usage data such as IP address, browser type, operating system, referring page, pages viewed and time on page.
• Cookies and similar technologies, described in more detail below.

04How we use information

• To respond to your enquiry and prepare a written audit or proposal.
• To provide, operate and improve the services you engage us for.
• To send service updates, and, where you have opted in, occasional marketing about services relevant to your practice.
• To keep the website secure, diagnose faults and prevent abuse.
• To meet our legal, tax, accounting and regulatory obligations.

We do not sell personal information, and we do not share it with third parties for their own advertising purposes.

05Cookies and analytics

We use a small number of cookies to keep the site working and to understand how it is used. These fall into three groups:

• Strictly necessary cookies, which enable core functions such as form security. These cannot be switched off.
• Analytics cookies, which tell us which pages are read and where visitors leave. These are aggregated and are not used to identify you.
• Marketing cookies, where enabled, which help us measure whether an advertisement led to an enquiry.

You can block or delete cookies through your browser settings. Blocking strictly necessary cookies may stop parts of the site from working.

We configure analytics and advertising tools so that no information capable of identifying a patient or a medical condition is transmitted to them.

06How we share information

We share personal information only in these situations:

• Service providers who host our site, send our email or provide analytics, each bound by contract to process data only on our instructions.
• Professional advisers such as auditors, lawyers and insurers, where necessary.
• Legal requirements, where disclosure is required by law, court order or a lawful request from a public authority.
• Business transfers, if the business is sold or reorganised, in which case the recipient is bound by this policy.

07Data retention

We keep enquiry information for as long as needed to answer it and for a reasonable period afterwards, unless you ask us to delete it sooner. Client records are kept for the term of the engagement and then for the period required by our legal, tax and professional obligations.

Protected health information handled under a business associate agreement is retained, returned or destroyed in accordance with that agreement.

08Security

We use administrative, technical and physical safeguards appropriate to the sensitivity of the information we hold. These include encryption in transit and at rest, role-based access control, multi-factor authentication on administrative accounts, logging of record access and regular review of who has access to what.

No method of transmission or storage is completely secure. If a breach affects your information and the law requires us to tell you, we will do so without undue delay.

09Your rights and choices

Depending on where you live, you may have the right to request access to the personal information we hold about you, to have it corrected or deleted, to obtain a copy in a portable format, to opt out of certain processing, and not to be discriminated against for exercising these rights.

Residents of California, Virginia, Colorado, Connecticut, Utah and other states with comprehensive privacy laws have specific rights under those laws. To exercise any right, email info@revenomd.com with the subject line “Privacy request”. We will verify your identity before acting and respond within the period the applicable law requires.

You can unsubscribe from marketing email at any time using the link in any message. We will still send you operational messages about a service you have engaged.

We honour Global Privacy Control signals where the applicable law requires it.

10Children

This website is intended for healthcare professionals and practice administrators. It is not directed to children, and we do not knowingly collect personal information from anyone under 16 through this site. If you believe a child has provided us with information, contact us and we will delete it.

11Third-party links

Our site links to payer portals, software vendors and other third-party sites. We do not control those sites and are not responsible for their content or their privacy practices. Read their policies before providing information to them.

12Changes to this policy

We may update this policy as our services, technology or the law changes. The effective date at the top of this page shows when it was last revised. Material changes will be signalled clearly on this page, and where appropriate we will notify clients directly.