DECC Medical Solutions LLC

Effective Date:

1. Introduction

DECC Medical Solutions LLC (“DECC,” “we,” “us,” or “our”) is committed to protecting the privacy, security, and confidentiality of all information entrusted to us. This Privacy Policy explains how we collect, use, disclose, and safeguard information through our website and in connection with our Revenue Cycle Management (RCM) and medical billing services.

By using this website, you agree to the terms of this Privacy Policy.

2. Information We Collect

We may collect the following types of information:

2.1 Information You Provide Voluntarily

• Name, email address, phone number, and other contact details submitted through forms.

• Business or practice information submitted for inquiries or onboarding.

• Files or documents uploaded for billing audits or consultations.

2.2 Automatic Website Data

When you visit our website, we may automatically collect:

• IP address

• Browser type and device information

• Pages viewed

• Cookies and tracking technologies

This information is used to improve website performance and user experience.

2.3 Protected Health Information (PHI)

If you are an existing healthcare provider client, or if you submit patient-related data for audit purposes, DECC may receive Protected Health Information (PHI) as defined by HIPAA. PHI is handled strictly in accordance with our HIPAA Compliance Program and Business Associate Agreements (BAAs).

We do not collect PHI through general website forms.

3. How We Use Your Information

We use collected information to:

• Respond to inquiries and service requests

• Provide RCM, billing, credentialing, and prior-authorization services

• Improve the website and user experience

• Perform analytics and performance optimization

• Comply with legal and regulatory obligations

We do not sell, rent, or lease your information to third parties.

4. How We Share Information

We may share information only in the following circumstances:

4.1 Service Providers

Trusted subcontractors or third-party vendors who support billing operations, technology, or communications — all of whom must be HIPAA-compliant and bound by confidentiality agreements.

4.2 Legal Requirements

We may disclose information if required to:

• Comply with federal or state law

• Respond to lawful requests

• Protect our rights or the rights of others

4.3 Business Associate Arrangements

For PHI, we only share information in accordance with:

• HIPAA

• HITECH

• Signed Business Associate Agreements (BAAs)

We never disclose PHI for marketing or non-operational purposes.

5. Data Security Measures

DECC employs administrative, technical, and physical safeguards to protect all data, including:

• Encrypted devices and secure communication channels

• Multi-factor authentication

• Role-based access controls

• Secure data storage and transmission

• Audit logging and monitoring

• Staff training on privacy and cybersecurity

Although no system is 100% secure, we maintain rigorous protection standards meeting and exceeding industry guidelines.

6. HIPAA Compliance Statement

DECC Medical Solutions LLC operates as a Business Associate under HIPAA regulations.

We comply fully with:

• HIPAA (Health Insurance Portability and Accountability Act)

• HITECH Act

• 45 CFR Parts 160 & 164 (Privacy, Security, Breach Notification Rules)

Our HIPAA Commitment Includes:

• Signing Business Associate Agreements (BAAs) with all Covered Entity clients

• Ensuring our subcontractors are HIPAA-compliant and sign BAAs where required

• Establishing strict access controls and encryption protocols

• Implementing safeguards for the confidentiality, integrity, and availability of PHI

• Maintaining breach notification procedures compliant with federal law

• Limiting PHI use strictly to permitted billing and RCM functions

We do not request or store PHI through general website contact forms.

7. Your Privacy Rights

Depending on state and federal law, you may have rights to:

• Access information we retain

• Request corrections

• Request deletion (where legally permissible)

• Restrict certain types of data handling

For PHI-related rights, please refer to the Covered Entity’s Notice of Privacy Practices. As a Business Associate, DECC processes PHI on behalf of healthcare providers and does not directly control patient rights under HIPAA.

8. Data Retention

We retain information only for as long as necessary to fulfill:

• Service obligations

• Legal and regulatory requirements

• Audit and compliance standards

PHI is retained or destroyed per HIPAA rules and Business Associate Agreements.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party sites.

10. Children’s Privacy

This website is not intended for individuals under 18. We do not knowingly collect information from minors.

11. Updates to This Policy

We may update this Privacy Policy periodically. Changes will be posted with a revised “Effective Date.”

12. Contact Us

For privacy or HIPAA-related questions:

DECC Medical Solutions LLC
Email: info@deccmedicalsolutions.com