1. Introduction & Scope
WestBridge RCM ("we," "us," or "our") operates westbridgercm.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, submit consultation inquiries, or utilize our revenue cycle management platform. We are committed to protecting individual privacy and adhering to the highest standards of data protection, including HIPAA, HITECH, GDPR, and the California Consumer Privacy Act (CCPA).
2. Information We Collect
We collect personal information that you voluntarily provide to us when expressing an interest in obtaining information about us or our services. This includes: (a) Contact details such as your full name, business email address, phone number, and physical office location; (b) Professional details including practice name, clinical specialty, number of providers, and billing volume; (c) Technical information including IP address, browser type, operating system, pages visited, and session duration collected via cookies and analytics tools; and (d) Healthcare provider credentials and organizational identifiers.
3. Protected Health Information (PHI) & HIPAA Compliance
In our capacity as a Business Associate providing revenue cycle management services to healthcare Covered Entities, any Protected Health Information (PHI) transmitted to or processed by WestBridge RCM is governed strictly by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HITECH), and the formal Business Associate Agreement (BAA) executed with each client. We implement administrative, physical, and technical safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of electronic PHI.
4. How We Use Your Information
We use personal information collected via our Site for: (a) Delivering requested RCM proposals, practice assessments, and customer support; (b) Operating, maintaining, and enhancing the functionality and security of westbridgercm.com; (c) Sending administrative notices, service updates, and educational newsletters (with explicit opt-out rights); (d) Complying with applicable legal and regulatory obligations; and (e) Enforcing our Terms & Conditions.
5. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data on the following lawful bases: (a) Your explicit consent for marketing communications and non-essential cookies; (b) Contractual necessity to perform services requested by your organization; (c) Compliance with statutory legal obligations; and (d) Our legitimate commercial interests in operating a secure, high-quality RCM advisory platform.
6. Information Sharing & Third-Party Disclosure
We do not sell, rent, or trade your personal information to third parties. We share information only with trusted third-party service providers who assist us in operating our website, hosting our cloud infrastructure, and processing communications, subject to strict confidentiality agreements. We may disclose information if required by law, subpoena, or to protect the safety and rights of WestBridge RCM or our clients.
7. Cookies & Tracking Technologies
We utilize essential, analytics, and advertising cookies to ensure site functionality and evaluate web traffic. You have full control over non-essential cookies through our interactive Cookie Consent banner and preferences center. For detailed disclosures, please review our Cookie Policy.
8. Third-Party Services & Integrations
Our Site may utilize Google Analytics and Google AdSense. These third parties may use cookies and web beacons to collect non-personally identifiable browsing data. You may review Google’s Privacy and Terms at https://policies.google.com/technologies/ads.
9. Data Security & Storage Standards
We maintain industry-leading security measures, including 256-bit AES encryption at rest and TLS 1.3 encryption in transit, SOC 2 Type II certified server environments, continuous vulnerability scanning, and multi-factor authentication. However, no electronic transmission over the Internet can be guaranteed 100% secure.
10. Data Retention Schedule
We retain personal contact information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, satisfy contractual commitments, or comply with statutory record-retention requirements under state and federal law.
11. Your Privacy Rights (GDPR & CCPA)
Depending on your jurisdiction, you possess the right to: (a) Request access to personal data we hold about you; (b) Request rectification of inaccurate records; (c) Request erasure of your personal data ("right to be forgotten"); (d) Restrict or object to processing; (e) Request data portability; and (f) Opt out of marketing messages at any time. To exercise these rights, email privacy@westbridgercm.com.
12. Children's Online Privacy Protection
Our services and website are directed exclusively to healthcare providers, practice administrators, and adult business professionals. We do not knowingly solicit or collect data from children under the age of 13.
13. International Data Transfers
WestBridge RCM operates within the United States. If you visit our website from outside the U.S., your information will be transferred to and processed within the United States under standard contractual clauses ensuring equivalent safeguards.
14. California Privacy Rights (CCPA / CPRA)
California residents are entitled to specific statutory disclosures under the California Consumer Privacy Act. WestBridge RCM does not sell personal information as defined by the CCPA. California users may exercise rights to know, delete, and non-discrimination by contacting us.
15. Policy Updates & Contact Information
We may modify this Privacy Policy periodically to reflect technological or regulatory changes. The date at the top indicates when it was last revised. For inquiries, contact our Data Protection Officer at privacy@westbridgercm.com or by mail at: WestBridge RCM, Attn: Privacy Office, 2526 Ramona Street, Long Island, NY 115533.