Privacy Policy
Privacy Commitment
At RCM Workshop, we regard the protection of personal information as a cornerstone of trust. This Privacy Policy sets forth the categories of data collected through our website, how it is used, and the limited circumstances under which disclosure may occur.
Information We Collect
Registration Details
Information submitted via online forms is gathered exclusively to facilitate communication with you, whether for professional collaboration, career-related opportunities, or business purposes, and always with your consent. Such data will not be disclosed to external parties except when legally required or necessary to fulfill your request. All registration details are stored securely, with stringent safeguards in place to preserve confidentiality.
System and Access Logs
As is customary across digital platforms, our servers automatically record technical data including IP addresses, browser type, geographic location, referring pages, and session duration.
This information is collected to better understand how visitors engage with our website and applications. It enables us to analyze trends, administer the site, track navigation patterns, and derive demographic insights. The data is processed in aggregate form to enhance services, strengthen platform security, and improve user experience.
Personally identifiable information is not associated with these logs unless required for specific purposes such as investigating security incidents or complying with legal obligations. Log data is retained securely for as long as necessary to achieve these objectives.
Cookies and Tracking Technologies
Our website and applications employ cookies and related technologies to personalize your experience, analyze usage patterns, and optimize our services. You retain control over cookie preferences through your browser settings, though restricting cookies may limit certain functionalities and affect overall site performance.
Data Access and Disclosure
We take the protection of your privacy with the utmost seriousness and remain committed to ensuring that your personal information is accessed solely by individuals whose responsibilities require it. Such access is strictly regulated and carefully limited, to preserve confidentiality and security.
Internal Use
Access to personal data is strictly confined to authorized employees who require it to perform essential functions such as customer support, technical operations, and administrative tasks. All personnel are bound by confidentiality obligations and trained in responsible data handling.
Judicial, Public, and Law Enforcement Authorities
Legal & Regulatory Disclosures
We may disclose personal information to judicial, governmental, or regulatory enforcement agencies when mandated by law or pursuant to valid legal processes, including court orders, subpoenas, or official requests.
Such disclosure may also occur when necessary to protect our rights, privacy, safety, or property, as well as those of our users, employees, or the public; to uphold and enforce our contractual obligations or terms of service; or to prevent, investigate, and address unlawful activity, fraud, or malfeasance.
Compliance & Enforcement
U.S. Healthcare Laws and Regulations Governing Our Services
RCM Workshop complies with federal healthcare privacy and security laws, including HIPAA and HITECH, governing the handling and protection of patient information during billing and revenue cycle activities.
- HIPAA (Health Insurance Portability and Accountability Act): HIPAA (Health Insurance Portability and Accountability Act): RCM Workshop complies with HIPAA by safeguarding patient health information (PHI), limiting its use and disclosure, implementing required security safeguards for electronic PHI, adhering to standardized healthcare transactions, and executing Business Associate Agreements (BAAs) with healthcare providers.
- HITECH Act (Health Information Technology for Economic and Clinical Health Act): We adhere to the HITECH Act, which strengthens HIPAA enforcement by imposing breach notification requirements and expanding penalties for non‑compliance when protected health information is compromised.
- CMS (Centers for Medicare & Medicaid Services) Rules: Our team follows CMS billing, coding, and reimbursement guidelines for Medicare and Medicaid claims. Failure to comply with these rules may result in audits, financial penalties, or exclusion from federal healthcare programs.
- State‑Level Laws: In addition to federal requirements, we comply with applicable state‑specific healthcare and data privacy laws, which may impose obligations beyond national standards. For example:
Compliance with California Privacy Rights
Under California Civil Code sections 1798.83–1798.84, California residents have the right to request information about the categories of personal information we share with third parties or corporate affiliates for direct marketing purposes.
RCM Workshop does not share personal information with third parties or corporate affiliates for their direct marketing purposes.
If you are a California resident and have any questions about this or wish to submit a request, please contact/email us at: info@rcmworkshop.com . We will respond to your request within 30 days.
GDPR Compliance for EU & UK Clients
If a client or its owners are citizens of the EU or the UK, RCM Workshop also complies with applicable GDPR requirements in addition to U.S. healthcare privacy laws when processing EU or UK personal data.
- EU GDPR: We comply with the EU General Data Protection Regulation when processing personal data of EU residents by honoring data subject rights, ensuring lawful processing, and implementing approved data transfer safeguards.
- UK GDPR (Post‑Brexit): We also abide by the UK GDPR laws, enforced by the UK Information Commissioner’s Office, when processing personal data of UK citizens, and apply equivalent safeguards and data protection standards.
Safeguarding Your Information
We deploy advanced security protocols—including encryption, secure access controls, and continuous monitoring—to ensure that only authorized individuals can access your data. These measures are designed to prevent unauthorized access, misuse, or breaches.
Policy Updates
This Privacy Policy may be revised periodically to reflect evolving practices, technological advancements, or regulatory requirements. Updates will be published on our website with a revised “Last Updated” date. Continued use of our services following such updates constitutes acceptance of the amended terms.
Your Rights
You are entitled to understand how your data is retrieved, utilized, and shared. Should you wish to request further details or raise concerns, please contact us at security-pub@rcmworkshop.com.