Privacy Policy
Effective Date: 06/01/2014
At Heartland RCM, protecting patient privacy and maintaining strict HIPAA compliance are our highest priorities. This Privacy Policy explains how we collect, use, share, and protect your information when you visit our website, use our services, or interact with our content.
🔒 HIPAA Compliance & Patient Privacy
As a medical billing company, we are fully committed to protecting all health-related information in accordance with the Health Insurance Portability and Accountability Act (HIPAA). Any personal health information (PHI) we access, store, or process is handled with the highest standards of security and confidentiality.
We do not collect or store PHI directly through this website unless you are a client using secure client portals or uploading documents through encrypted channels approved by us.
📸 Media
If you upload images to our website, please ensure they do not contain embedded location data (EXIF GPS). Images with such data can expose your location, and visitors may be able to download and extract that information.
🍪 Cookies
Our website uses cookies for your convenience and better user experience. Cookies are small data files stored on your device.
• Comments: If you leave a comment on our site, you may choose to save your name, email address, and website in cookies so you don’t have to re-enter them in the future. These cookies last for 1 year.
• Login Page: When you visit our login page, we create a temporary cookie to check if your browser accepts cookies. This cookie contains no personal data and is deleted when you close your browser.
• Account Login: When you log in, we set cookies to save your login status and screen preferences.
o Login cookies last 2 days (or 2 weeks if “Remember Me” is selected).
o Screen preference cookies last for 1 year.
• Publishing Content: If you edit or publish content, a cookie is stored to record the post ID. It expires after 1 day and does not store personal data.
• Comments: If you leave a comment on our site, you may choose to save your name, email address, and website in cookies so you don’t have to re-enter them in the future. These cookies last for 1 year.
• Login Page: When you visit our login page, we create a temporary cookie to check if your browser accepts cookies. This cookie contains no personal data and is deleted when you close your browser.
• Account Login: When you log in, we set cookies to save your login status and screen preferences.
o Login cookies last 2 days (or 2 weeks if “Remember Me” is selected).
o Screen preference cookies last for 1 year.
• Publishing Content: If you edit or publish content, a cookie is stored to record the post ID. It expires after 1 day and does not store personal data.
🌐 Embedded Content from Other Websites
Some of our pages may include embedded content (e.g., videos, images, or articles). Embedded content behaves the same way as if you visited the other website directly.
These external websites may:
• Collect data about you,
• Use cookies,
• Track your interaction with their content (especially if you are logged in to those sites).
We do not control or assume responsibility for how these third-party sites handle your data.
🔐 Who We Share Your Data With
We do not sell or rent your personal information to any third parties.
If you request a password reset, your IP address may be included in the reset email for security purposes.
📁 Data Retention
• Comments: If you leave a comment, it and its related metadata are kept indefinitely so we can automatically approve future comments.
• Registered Users: If you create an account, we store the personal information in your profile. You can view, update, or delete your data (except your username). Site administrators can also access and edit this information.
⚖️ Your Rights Over Your Data
You may request:
• A copy of the personal data we store about you.
• That we delete any personal data we hold (except data required for legal, security, or administrative purposes).
To make such requests, please contact us at: [info@heartlandrcm.com]
🧠 Spam Detection
Visitor comments may be checked through an automated spam detection service to protect our website and users.
📍 Where Your Data Is Sent
We may use third-party services to process or analyze limited user data for website performance, but never for any PHI or billing-related information without secure, HIPAA-compliant methods.
📞 Contact Us
If you have any questions about this Privacy Policy or how your data is handled, feel free to contact us: