Privacy Policy
The Credentialist (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at thecredentialist.org or engage our credentialing and payer enrollment services.
By using our website or services, you consent to the practices described in this policy.
1. Information We Collect
Information You Provide
When you submit a form on our website, request a consultation, or engage our services, we may collect:
- Full name
- Email address
- Phone number
- State(s) where you practice or seek enrollment
- Medical specialty
- Number of providers in your practice
- Any additional information you choose to provide in messages or during consultations
Information Collected Automatically
When you visit our website, we may automatically collect certain technical information, including:
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent on each page
- Referring website or URL
- Date and time of your visit
Information from Third Parties
If you schedule a consultation through our Calendly integration, we receive your name, email address, and appointment details from Calendly.
2. How We Use Your Information
We use the information we collect to:
- Respond to your inquiries and provide requested information
- Deliver credentialing and payer enrollment services
- Communicate with you about your applications and service status
- Schedule and manage consultations
- Improve our website, services, and user experience
- Comply with legal and regulatory obligations
We do not sell your personal information to third parties.
3. HIPAA Compliance
The Credentialist is committed to compliance with the Health Insurance Portability and Accountability Act (HIPAA) when handling Protected Health Information (PHI) in the course of providing credentialing services.
Website forms: The contact and assessment forms on our website collect general business inquiry information (name, email, phone, specialty). This information is not considered PHI under HIPAA.
Credentialing services: When we engage in credentialing work that involves PHI, we execute a Business Associate Agreement (BAA) with clients and implement appropriate administrative, technical, and physical safeguards in accordance with the HIPAA Security Rule.
Our team receives regular training on HIPAA compliance, privacy practices, and information security protocols.
4. Third-Party Services
We use the following third-party services that may collect or process your information:
- Calendly: Used for scheduling consultations. When you book an appointment, Calendly collects your name, email, and appointment preferences. Calendly’s use of your data is governed by their own privacy policy.
- Google Fonts: Our website loads fonts from Google’s servers. Google may collect your IP address and browser information when fonts are loaded. This is governed by Google’s privacy policy.
- Hostinger: Our website is hosted by Hostinger, which processes server logs containing IP addresses and request data as part of standard web hosting operations.
We do not use third-party advertising or retargeting services on our website.
5. Cookies and Tracking
Our website may use cookies and similar technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us recognize your browser and remember certain information.
We may use:
- Essential cookies: Required for basic website functionality
- Analytics cookies: Help us understand how visitors interact with our website
We do not use third-party advertising cookies. You can control cookies through your browser settings. Disabling cookies may affect some website functionality.
6. Data Retention
We retain your information as follows:
- Contact form submissions: Retained for as long as necessary to respond to your inquiry and for reasonable business record-keeping purposes
- Credentialing records: Retained in accordance with regulatory requirements and the terms of your service agreement
- Website analytics data: Retained in aggregated, anonymized form
When information is no longer needed for its original purpose or required by law, we securely delete or anonymize it.
7. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, use, alteration, or disclosure. These measures include:
- Encryption of data in transit
- Access controls limiting who can view personal information
- Regular security assessments and staff training
- Secure handling and storage of credentialing documents
While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that we correct inaccurate or incomplete information
- Deletion: Request that we delete your personal information, subject to legal and contractual obligations
- Portability: Request your data in a commonly used electronic format
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to opt out of the sale of personal information. We do not sell personal information.
To exercise any of these rights, please contact us using the information below.
9. Children’s Privacy
Our website and services are not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete that information promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make changes, we will update the “Last Updated” date at the top of this page.
We encourage you to review this Privacy Policy periodically. Your continued use of our website or services after any changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy, your personal information, or wish to exercise your privacy rights, please contact us:
- Email: info@thecredentialist.org
- Phone: (405) 254-0912
- Hours: Monday – Friday, 9:00 AM – 5:00 PM EST