Privacy Policy
Learn how Blue Care RCM LLC collects, uses, and safeguards information, and our commitment to HIPAA compliance.
Blue Care RCM LLC Privacy Policy
Effective Date: October 1, 2024
Last Updated: October 1, 2026
Blue Care RCM LLC ("Blue Care RCM LLC," "we," "us," or "our") provides medical billing, revenue cycle management, credentialing, and related healthcare support services to healthcare providers and practices across all medical, dental, and specialty fields, including practice owners and practice managers. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have when you visit our website, contact us, or use our services.
This policy covers information collected through our website and our business communications. Protected Health Information (PHI) that we handle for healthcare clients is governed by HIPAA and by our Business Associate Agreements, as described in Section 4.
By using our website or services, you agree to the practices described in this policy. If you do not agree, please do not use the website.
1 Information We Collect
Information you give us
When you submit a form, send an email, call us, or otherwise contact us, we may collect your name, email address, phone number, practice or company name, job title, location, and the details of your inquiry.
Business and practice information
If you are a healthcare provider, practice owner, practice manager, or other representative of a medical, dental, or specialty practice, we may collect information needed to deliver our services, such as practice details, provider information (including NPI numbers, licenses, certifications, and other credentialing records), billing and payer information, tax and banking details used for billing, service requirements, operational documents, and access credentials for approved systems or platforms.
Protected Health Information (PHI)
In providing services such as medical billing, claims support, eligibility verification, prior authorization, credentialing, and medical scribe support, we may receive PHI from or on behalf of our healthcare clients. See Section 4.
Website usage information
When you visit our website, we automatically collect limited technical data, including IP address, browser and device type, pages viewed, time spent on pages, referring website, and approximate location. We also collect this through cookies and similar technologies.
Important Notice:
Please do not send PHI through our website forms or general email. Our contact forms are meant for business inquiries. Client PHI should only be shared through the secure channels set out in your service agreement.
2 How We Use Information
We use information to:
- Respond to inquiries and service requests
- Provide and manage our services, including billing, claims, eligibility, credentialing, and administrative support
- Communicate with clients and prospective clients
- Maintain business records and documentation
- Improve our website, services, and user experience
- Send service updates and, where permitted, marketing messages
- Meet legal, regulatory, contractual, and HIPAA obligations
- Protect our systems, clients, and users from fraud, misuse, and security threats
3 How We Share Information
We share information only when it is needed and appropriate. Recipients may include:
- Our employees and contractors who need the information to perform their work
- Service providers that support our website, communications, and operations
- Billing systems, EHR/EMR platforms, practice management software, clearinghouses, payer portals, and credentialing platforms used to deliver agreed services
- Parties you or your organization have authorized, or that a signed agreement requires
- Government, regulatory, or legal authorities when the law requires it
- A successor organization if Blue Care RCM LLC is involved in a merger, acquisition, or sale of assets
Our contractors and service providers are required to protect the information they receive and to use it only for the purposes we specify. We do not disclose PHI except as permitted by HIPAA, the applicable Business Associate Agreement, or written authorization.
HIPAA and Protected Health Information
Business Associate GovernanceWhen we handle PHI on behalf of a healthcare provider or other covered entity, we act as a Business Associate under HIPAA. Our use and disclosure of that PHI is limited to what HIPAA and the Business Associate Agreement allow.
We maintain administrative, technical, and physical safeguards designed to protect PHI from unauthorized access, use, disclosure, alteration, or destruction. If a breach involving PHI occurs, we will notify the affected client and take other steps as required by HIPAA and our agreements.
As a healthcare client, you remain responsible for your own HIPAA obligations as a covered entity, including patient notices, responses to patient rights requests, internal policies, workforce training, and compliance programs.
Before sharing PHI with us, you should have a signed Business Associate Agreement in place with Blue Care RCM LLC. If a patient contacts us directly about their health information, we will refer them to the treating provider or practice.
5 Third-Party Services
Our website and services rely on third-party tools and platforms, which may include hosting providers, contact form tools, analytics tools, email and communication platforms, EHR/EMR systems, practice management software, clearinghouses, payer portals, credentialing platforms, and advertising or marketing tools.
These providers may collect or process information under their own privacy policies. We are not responsible for the privacy practices, security, or content of third-party platforms, so we encourage you to review their policies.
6 Cookies and Tracking Technologies
We use cookies and similar technologies to keep the website working properly, understand how visitors use it, identify performance problems, and measure the effectiveness of our marketing.
You can block or delete cookies through your browser settings. Some parts of the website may not work as intended if cookies are disabled. Our website may not respond to "Do Not Track" signals.
7 Data Security
We use reasonable safeguards to protect information from unauthorized access, loss, misuse, alteration, and disclosure. These include access controls, password protection, secure communication practices, limiting access to sensitive information to those who need it, and internal confidentiality procedures. We apply the same care to provider credentials and system access details that clients share with us, and we limit their use to the services you have asked us to perform.
No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. Please use care when sending information to us over the internet.
8 Data Retention
We keep personal, business, and service-related information for as long as needed to fulfill the purposes in this policy, unless a longer period is required or permitted by law, contract, regulation, or billing record requirements.
PHI is retained and returned or destroyed according to HIPAA, the applicable Business Associate Agreement, and our client's instructions.
9 Your Privacy Rights
Depending on where you live, you may have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information
- Request limits on certain uses of your information
- Opt out of marketing communications
- Ask how your information is used
To make a request, contact us at the address in Section 14. We may need to verify your identity before acting on a request. We may decline or limit a request where we are required or permitted to keep the information, for example for legal, contractual, or compliance reasons. Requests relating to PHI are handled as described in Section 4.
10 Marketing Communications
If you give us your contact information, we may send you updates about our services and other business communications. You can opt out of marketing emails at any time by using the unsubscribe link in the message or by contacting us. If you opt out, we may still send you service-related or legal notices.
11 Children's Privacy
Our website and services are intended for healthcare professionals and businesses and are not directed to children under 13. We do not knowingly collect personal information from children. If we learn that we have done so, we will delete it promptly.
12 Links to Other Websites
Our website may link to third-party websites for your convenience. We do not control these sites and are not responsible for their content, security, or privacy practices.
13 International Visitors
Blue Care RCM LLC operates in the United States. If you access our website from another country, your information may be transferred to, stored, and processed in the United States or other locations where we or our service providers operate, which may have different data protection laws than your country.
14 Contact Us
For questions about this Privacy Policy or to make a privacy request, contact:
15 Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and change the "Last Updated" date. Your continued use of the website or services after an update means you accept the revised policy.