Privacy Policy

Effective Date: January 01, 2026
Last Updated: August 21, 2026

PrecisionPoint Health Solutions LLC (“PrecisionPoint,” “we,” “us,” or “our”) is committed to protecting the privacy, confidentiality, integrity, and security of information entrusted to us.

This Privacy & HIPAA Policy explains how we collect, use, disclose, and safeguard information obtained through our website and how we protect Protected Health Information (“PHI”) when providing medical coding, revenue cycle management, billing support, denial management, consulting, and related healthcare services.

1. Our Commitment to Privacy

PrecisionPoint recognizes the sensitive nature of healthcare and personal information.

We maintain administrative, physical, and technical safeguards designed to protect information from unauthorized access, use, disclosure, alteration, or destruction.

When PrecisionPoint performs services involving PHI on behalf of a healthcare provider, health plan, or other HIPAA-regulated organization, we may operate as a Business Associate under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), as amended by the Health Information Technology for Economic and Clinical Health Act (“HITECH”), and applicable regulations.

2. Website Information We May Collect

When you visit our website or communicate with us, we may collect information that you voluntarily provide, including:

• Name
• Company or healthcare organization
• Job title
• Business email address
• Telephone number
• Mailing address
• Information submitted through contact or consultation forms
• Information provided when requesting services, proposals, or assessments
• Communications you send to PrecisionPoint
• Other information you voluntarily provide

Our website may also automatically collect limited technical information, such as:

• IP address
• Browser type
• Device type
• Operating system
• Referring website
• Pages visited
• Approximate geographic location
• Date and time of visits
• Website interaction and performance information

This information may be used to operate, secure, analyze, and improve our website and services.

3. Please Do Not Submit PHI Through General Website Forms

Unless a webpage or portal is specifically identified by PrecisionPoint as an approved secure method for transmitting Protected Health Information, do not submit patient records, medical information, Social Security numbers, insurance information, medical record numbers, diagnoses, treatment information, or other PHI through our general website contact forms or standard email.

Healthcare clients should transmit PHI only through communication methods and systems specifically approved by PrecisionPoint and the applicable healthcare organization.

4. Protected Health Information

In providing services to healthcare organizations, PrecisionPoint may create, receive, maintain, access, or transmit PHI.

PHI may include information concerning an individual’s:

• Health condition
• Diagnosis
• Treatment
• Medical history
• Healthcare services
• Medical records
• Billing information
• Health insurance information
• Claims information
• Patient identifiers
• Other individually identifiable health information protected by law

PrecisionPoint uses and discloses PHI only as permitted by applicable law, our agreements with healthcare clients, applicable Business Associate Agreements (“BAAs”), and as otherwise required by law.

5. Business Associate Responsibilities

When PrecisionPoint acts as a Business Associate, we are committed to:

• Using or disclosing PHI only as permitted by the applicable BAA or as required by law
• Implementing appropriate safeguards to protect PHI
• Applying applicable administrative, physical, and technical safeguards to electronic PHI (“ePHI”)
• Limiting access to PHI to authorized workforce members and service providers with a legitimate business need
• Reporting impermissible uses, disclosures, security incidents, or breaches as required by applicable law and contractual obligations
• Requiring applicable subcontractors that create, receive, maintain, or transmit PHI on our behalf to agree to appropriate privacy and security obligations
• Supporting healthcare clients in fulfilling applicable HIPAA obligations
• Returning or destroying PHI following termination of services when required and feasible

6. How We May Use Information

PrecisionPoint may use information for legitimate business purposes, including to:

• Respond to inquiries
• Provide requested services
• Prepare proposals and service agreements
• Communicate with clients
• Provide customer support
• Manage client relationships
• Perform medical coding and revenue cycle services
• Improve our website and services
• Maintain business records
• Protect our systems and information
• Detect or prevent security incidents, fraud, or misuse
• Meet contractual obligations
• Comply with applicable laws and regulations

PHI received from healthcare clients is not used for unrelated marketing purposes.

7. HIPAA Minimum Necessary Standard

Where applicable, PrecisionPoint follows the HIPAA principle of limiting the use, disclosure of, and requests for PHI to the minimum necessary to accomplish the intended purpose, subject to exceptions provided by applicable law.

Access to PHI is restricted according to job responsibilities, contractual requirements, and legitimate business needs.

8. Information Security

PrecisionPoint maintains safeguards designed to protect confidential information and ePHI.

Depending on the systems and services involved, safeguards may include:

• Role-based access controls
• Multi-factor authentication
• Encryption
• Managed devices
• Endpoint security
• Secure network controls
• Password and authentication requirements
• Workforce security training
• Security risk assessments
• System monitoring
• Backup and recovery procedures
• Incident response procedures
• Access termination procedures
• Vendor and subcontractor security requirements

No method of electronic transmission or storage can be guaranteed to be completely secure. PrecisionPoint therefore continually evaluates appropriate safeguards based on its operations, applicable requirements, and identified risks.

9. Workforce Privacy and Security

PrecisionPoint workforce members who may access confidential information or PHI are subject to applicable privacy and security requirements.

These may include:

• HIPAA privacy and security training
• Confidentiality agreements
• Role-based access restrictions
• Information security policies
• Acceptable-use requirements
• Incident reporting requirements
• Disciplinary procedures for violations
• Prompt removal of system access following termination or changes in responsibilities

10. Business Associate Agreements

Before PrecisionPoint receives PHI from a healthcare organization in circumstances requiring a BAA, PrecisionPoint and the applicable organization will enter into an appropriate Business Associate Agreement.

The BAA establishes the permitted uses and disclosures of PHI and the parties’ respective privacy and security obligations.

Where required, PrecisionPoint will also enter into appropriate agreements with subcontractors that create, receive, maintain, or transmit PHI on PrecisionPoint’s behalf.

11. Patient Privacy Rights

PrecisionPoint primarily provides services to healthcare organizations and generally does not maintain the direct provider-patient relationship.

Patients may have rights under HIPAA and other applicable laws concerning their health information, including, where applicable, rights relating to:

• Access to health information
• Amendment of health information
• Restrictions on certain uses or disclosures
• Confidential communications
• Accounting of certain disclosures
• Complaints regarding privacy practices

If PrecisionPoint maintains PHI on behalf of a healthcare client, requests involving these rights should generally be directed to the healthcare provider, health plan, or other covered entity responsible for the patient’s records.

PrecisionPoint will cooperate with its healthcare clients as required by applicable law and contractual obligations.

12. Security Incidents and Breach Response

PrecisionPoint maintains procedures for identifying, investigating, documenting, mitigating, and responding to suspected privacy or security incidents.

When an incident involving PHI or other legally protected information requires notification, PrecisionPoint will comply with applicable federal and state notification requirements and applicable contractual obligations.

13. Vendors and Service Providers

PrecisionPoint may use third-party vendors to support business operations, including technology, hosting, communications, cybersecurity, accounting, and other services.

We evaluate the nature of information accessible to service providers and implement appropriate contractual and security requirements.

When a subcontractor creates, receives, maintains, or transmits PHI on behalf of PrecisionPoint and applicable law requires a Business Associate Agreement, PrecisionPoint will require the subcontractor to enter into an appropriate agreement.

14. Cookies and Website Technologies

Our website may use cookies and similar technologies to support website functionality, security, performance, and analytics.

We seek to configure website technologies appropriately for the information handled through our website.

We do not intentionally permit tracking technologies on pages or systems designated for the transmission of PHI unless their use has been evaluated and determined to comply with applicable privacy, security, and contractual requirements.

15. Data Retention

PrecisionPoint retains personal information, business information, and PHI only for periods reasonably necessary to:

• Provide contracted services
• Fulfill business purposes
• Meet contractual requirements
• Comply with applicable legal and regulatory obligations
• Maintain required business and compliance records
• Resolve disputes
• Protect legal rights

PHI handled on behalf of healthcare clients is retained, returned, or destroyed according to applicable agreements, legal requirements, and PrecisionPoint policies.

16. Information Sharing

PrecisionPoint does not sell PHI.

We may disclose other information when reasonably necessary to:

• Provide requested services
• Work with authorized service providers
• Fulfill contractual obligations
• Protect PrecisionPoint, our clients, or others
• Investigate security incidents
• Comply with subpoenas, court orders, or other lawful processes
• Meet other requirements imposed by law

Any disclosure of PHI is subject to applicable HIPAA requirements, contractual obligations, and other applicable laws.

17. Children’s Privacy

PrecisionPoint’s website and services are intended for healthcare organizations, professionals, businesses, and other adult users.

Our website is not directed toward children under 13, and we do not knowingly collect personal information directly from children through the general public portions of our website.

18. Indiana Privacy and Security Requirements

PrecisionPoint is headquartered in Indiana and complies with applicable Indiana privacy and data security requirements in addition to applicable federal requirements.

Where state law provides protections or requirements applicable to information handled by PrecisionPoint, we will address those obligations as required by law.

19. Changes to This Policy

PrecisionPoint may update this Privacy & HIPAA Policy periodically to reflect changes in our operations, technology, services, legal requirements, or privacy and security practices.

The “Last Updated” date at the top of this page identifies the most recent revision.

We encourage visitors and clients to periodically review this page.

20. Contact PrecisionPoint

Questions about this Privacy & HIPAA Policy, our privacy practices, or information security may be directed to:

PrecisionPoint Health Solutions LLC
Indianapolis, Indiana
Privacy & Compliance Office

Email: [Insert Privacy/Compliance Email]
Phone: [Insert Business Phone Number]

Healthcare clients should report suspected privacy or security incidents involving PrecisionPoint through the contact method designated in their Business Associate Agreement or services agreement.

Our Commitment

PrecisionPoint Health Solutions is committed to protecting the confidentiality, integrity, and availability of the information entrusted to us.

Privacy, security, compliance, and responsible handling of healthcare information are fundamental components of how we deliver medical coding and revenue cycle services.