Privacy Policy
Effective Date: September 11, 2026 · Last Updated: September 11, 2026
Praxis MedServices ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit praxismedservices.com or contact us about our medical billing, credentialing, and healthcare IT services.
1. Information We Collect
We collect information you provide directly to us, including:
- Contact Information: Name, email address, phone number, practice name, and role when you submit a consultation request or contact form.
- Practice Information: Practice type, size, specialty, and services of interest.
- Communications: Messages, notes, or other content you send us.
- Usage Data: Information about how you interact with our website, including pages visited, time spent on site, and referring URLs.
- Device Information: IP address, browser type, operating system, and device identifiers.
2. SMS / Text Message Communications
Your Mobile Information Will Not Be Sold or Shared
Your mobile information will not be sold or shared with third parties for promotional or marketing purposes.
All SMS opt-in data and consent; this information will not be shared with any third parties. We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in consent is never shared with or sold to any third party for any purpose.
Message Frequency and Rates
Message frequency varies based on your interactions with Praxis MedServices. You may receive up to 4–6 messages per month related to consultations, appointment reminders, and service updates. Marketing messages are sent no more than 2–4 times per month.
Message and data rates may apply. Standard carrier messaging and data rates apply to all SMS messages sent and received. Praxis MedServices is not responsible for any charges incurred from your mobile carrier.
Opt-Out Instructions
You may opt out of SMS communications at any time by replying STOP to any message you receive from us. After opting out, you will receive one final confirmation message. To re-subscribe, reply START. For help, reply HELP or contact us at support@praxismedservices.com or +1 (662) 641-4887.
3. How We Use Your Information
We use the information we collect to:
- Respond to your consultation requests and inquiries
- Schedule and manage appointments and follow-ups
- Send you service-related communications and updates
- Send SMS messages you have opted into (see Section 2)
- Improve our website and services
- Comply with legal obligations
- Analyze usage trends to enhance user experience
- Send marketing communications where you have provided consent
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:
- Service Providers: Trusted vendors who assist in operating our website and delivering services (e.g., email delivery, CRM platforms), bound by confidentiality agreements.
- Legal Requirements: When required by law, court order, or governmental authority.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to you.
- With Your Consent: For any other purpose with your explicit consent.
Your mobile information will not be sold or shared with third parties for promotional or marketing purposes.
5. HIPAA Compliance Program
Praxis MedServices maintains a comprehensive HIPAA compliance program that includes:
5.1 HIPAA Compliance Officer
We have designated a HIPAA Compliance Officer responsible for overseeing HIPAA compliance, managing breach notifications, conducting risk assessments, coordinating staff training, and responding to compliance inquiries.
Contact our HIPAA Compliance Officer:
5.2 Protected Health Information (PHI) Handling
- We handle PHI only as necessary to provide billing and credentialing services
- All PHI is encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access to PHI is limited to authorized personnel on a need-to-know basis
- All staff with PHI access complete HIPAA training annually
5.3 Business Associate Agreements (BAAs)
- We execute BAAs with all covered entity clients before accessing PHI
- BAAs define permitted uses, safeguards, and breach notification procedures
- BAAs are reviewed annually and updated as needed
5.4 Breach Notification Procedures
In the event of a breach of unsecured PHI, we will:
- Notify the covered entity within 48 hours of discovery
- Provide detailed information about the breach
- Cooperate with the covered entity's breach notification obligations
- Mitigate any harmful effects of the breach
5.5 Risk Assessments
- We conduct annual risk assessments of our PHI handling practices
- Risk assessments are documented and reviewed by management
- Identified risks are remediated within 30 days
5.6 Staff Training
- All employees complete HIPAA training within 30 days of hire
- Annual refresher training is required
- Training completion is documented and retained for 6 years
6. Data Breach Notification
In the event of a security breach involving your personal information:
6.1 Investigation
- We will immediately investigate the breach
- We will identify the scope and cause of the breach
- We will take steps to prevent further unauthorized access
6.2 Notification Timeline
- Covered Entities (HIPAA): We will notify you within 48 hours of discovering a breach of PHI
- California Residents: We will notify you within 72 hours if required by CCPA
- Other States: We will notify you as required by applicable state law
6.3 Notification Method
- Written notice via email or postal mail
- If contact information is outdated, we will post notice on our website
6.4 Content of Notice
- Description of the breach
- Types of information involved
- Steps we are taking to investigate and mitigate
- Steps you can take to protect yourself
- Contact information for questions
6.5 Breach Reporting Contact
7. State Privacy Rights
Depending on your state of residence, you may have additional privacy rights:
7.1 California Residents (CCPA/CPRA)
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out: We do not sell your personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
- Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
To exercise your California privacy rights, contact us at privacy@praxismedservices.com.
7.2 Virginia Residents (VCDPA)
- Right to access, correct, and delete personal data
- Right to data portability
- Right to opt-out of processing for targeted advertising
7.3 Colorado Residents (CPA)
- Similar rights to Virginia residents
- Right to opt-out of profiling
7.4 Other States
- We comply with all applicable state privacy laws
- Contact us to exercise your state-specific rights
8. Data Security
We implement industry-standard security measures to protect your personal information, including:
- Encrypted data transmission (SSL/TLS 1.3)
- Secure server infrastructure with AES-256 encryption at rest
- Access controls limiting data access to authorized personnel
- Regular security assessments and penetration testing
- Multi-factor authentication for all staff accounts
- Regular backups with encrypted storage
While we take reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.
9. Data Retention
We retain your personal information only as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
Retention Periods:
- Contact information: 3 years after last contact
- Billing records: 7 years (IRS requirement)
- Credentialing records: 10 years after credentialing completion
- Website analytics: 26 months (Google Analytics default)
After the retention period, we securely delete or anonymize your data.
10. International Data Transfers
Praxis MedServices is based in the United States. Your personal information is processed and stored in the United States.
If we transfer data to countries outside the US, we will:
- Ensure adequate data protection safeguards are in place
- Comply with applicable data transfer laws
- Notify you of the transfer
By using our services, you consent to the transfer of your data to the United States.
11. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Analyze website traffic and usage patterns (Google Analytics / GA4)
- Improve website functionality and user experience
- Track website marketing campaign effectiveness
Important: Our analytics tools track website interactions only, page views, clicks, and session data. They do not collect, process, or have access to your mobile phone number, SMS opt-in status, or any SMS-related data. Mobile numbers and SMS consent are stored securely in our own systems and are never passed to any analytics or advertising platform.
You may disable cookies through your browser settings. Note that disabling cookies may affect website functionality. Our analytics tools are configured to respect user privacy and comply with applicable regulations.
12. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal obligations.
- Opt-Out: Opt out of marketing communications at any time by clicking "unsubscribe" in emails or replying STOP to SMS messages.
- Data Portability: Request your data in a portable format where technically feasible.
To exercise any of these rights, contact us at privacy@praxismedservices.com.
13. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.
14. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately at support@praxismedservices.com or +1 (662) 641-4887.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.
16. Contact Us
Praxis MedServices is a registered brand of Praxis Computing LLC, a Wyoming limited liability company.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
