Privacy Policy
This Privacy Policy explains how Provider Compliance Bureau ("we," "us") collects, uses, and protects information when you visit this website or submit a form. Provider Compliance Bureau is a private healthcare compliance services organization and is not affiliated with HHS, OCR, CMS, or any federal or state regulatory agency.
Please do not submit patient information
This website is not designed to receive protected health information (PHI). Do not submit patient names, medical records, or any other PHI through our forms or by email. If an engagement requires us to review PHI, we will arrange a secure method and the appropriate agreements first.
Information we collect
Information you provide. When you request a compliance review, request a resource, or contact us, we collect the information you enter, such as your name, job title, organization, work email, phone number, preferred contact method, organization details, and the description of your compliance concerns.
Information collected automatically. Like most websites, our hosting provider records technical information when you visit, such as IP address, browser type, pages requested, and the date and time of the request. We use this information to operate and secure the website.
Cookies. We do not use advertising cookies. If we add analytics in the future, we will update this policy to describe it.
How we use information
- To respond to your request and contact you by your preferred method
- To understand your organization's needs and prepare for a conversation
- To provide resources you request
- To operate, maintain, and secure this website
- To comply with legal obligations
We do not sell your personal information, and we do not share it with third parties for their own marketing.
Service providers
We use trusted service providers to host this website, process form submissions, and deliver email. They may access your information only to perform services for us and are expected to protect it. Fonts on this website are loaded from Google Fonts, which receives your IP address when fonts are requested.
Retention
We keep form submissions for as long as needed to respond to your request and maintain our business records, and then delete or de-identify them unless we are required to keep them longer.
Security
We use reasonable administrative, technical, and physical measures to protect the information we collect, including encrypted (HTTPS) connections and restricted access to form submissions. No method of transmission or storage is completely secure.
Your choices and rights
You may ask us to access, correct, or delete the personal information you submitted, or to stop contacting you. Depending on where you live, you may have additional rights under state privacy laws. To make a request, use the contact options on our Compliance Review page. We will not discriminate against you for exercising your rights.
Children
This website is intended for healthcare professionals and organizations. We do not knowingly collect information from children under 13.
Links to other websites
This website links to external sites, such as HHS and the Electronic Code of Federal Regulations. We are not responsible for their privacy practices.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last updated.