When you contact us, we collect the information you choose to provide, such as your name, business email address, telephone number, practice details, monthly collections, total accounts receivable, and the contents of your message. Please share only the business information needed for your inquiry.

Do not submit patient records, diagnoses, insurance member IDs, Social Security numbers, payment card details, or other sensitive patient information through public website forms, ordinary email, or social media messages. If an audit or service requires patient-level information, contact our team first to arrange an authorized transfer method and the appropriate agreements.

Website hosting and related services may record technical information such as your IP address, browser type, device information, pages requested, referring pages, and access times. These records support website operation, troubleshooting, and protection against misuse.

WordPress uses cookies for login sessions and administrative preferences. If comments are enabled and you choose to save your details, cookies may remember your name, email address, and website. You can manage or delete cookies through your browser settings; blocking some cookies may affect site functionality. Third-party content, when present, may use its own cookies under that provider’s privacy policy.

Information supplied through the website is used to respond to inquiries, arrange consultations or billing audits, prepare proposals, communicate about requested services, maintain business records, and improve website operation. It may also be used to prevent fraud or misuse and meet applicable legal obligations. You may ask us to stop sending optional promotional communications by contacting us or using an unsubscribe option where provided.

During an authorized client engagement, billing work may involve patient demographic information, insurance and eligibility details, procedure and diagnosis codes, claims, payments, and related records. These records are separate from general website inquiries.

Where Next Step RCM acts as a business associate under the Health Insurance Portability and Accountability Act (HIPAA), protected health information (PHI) must be handled in accordance with applicable HIPAA requirements, the relevant Business Associate Agreement (BAA), and the healthcare provider’s authorized instructions. Uses and disclosures must remain within the purposes permitted by those requirements, such as authorized billing, claims processing, payment follow-up, and related administration.

This website policy does not replace a BAA or your healthcare provider’s Notice of Privacy Practices. Visiting this website or submitting an inquiry does not authorize the use of PHI for marketing or other unrelated purposes.

Information may be shared with authorized personnel and service providers where needed to deliver requested services, host and maintain the website, support communications, or meet legal obligations. During an authorized billing engagement, relevant information may be exchanged with the client practice, insurers, clearinghouses, and other authorized parties involved in claims and payment processing.

Access and disclosure must be limited to the relevant purpose and applicable permissions. Vendors or subcontractors handling PHI must meet applicable contractual and HIPAA obligations, including a BAA where required. Information may also be disclosed when required by law or valid legal process. A website inquiry is not consent to sell patient information or disclose it for advertising.

Handling of sensitive client information is subject to the safeguards required by applicable law and client agreements. No website or electronic transmission can be guaranteed completely secure. Please request an appropriate transfer method before sending confidential records.

Retention depends on the purpose of collection, the client relationship, contractual requirements, and applicable legal obligations. Information may need to be retained for billing follow-up, recordkeeping, security, or dispute resolution. Return, deletion, or continued retention of client PHI is governed by the applicable agreement and law.

You can contact us to request access to, correction of, or deletion of personal information you supplied through this website. Requests will be handled subject to applicable law and any recordkeeping obligations. We may need to verify your identity before acting on a request; please do not send identity documents unless an appropriate method has been arranged.

For access to patient records, corrections, billing questions, or other rights involving PHI held on behalf of a healthcare provider, contact that provider first. Next Step RCM assists the provider as required by the applicable agreement and law.

Links to social media and other external websites are governed by those services’ privacy policies. Choosing to contact us through a third-party platform also involves that platform’s handling of your information. Avoid sharing patient information through those channels.

This website is intended for healthcare professionals and business inquiries, rather than use by children. If you believe a child has submitted personal information through the website, contact us so we can review the request. Authorized billing records relating to pediatric patients are handled under the client relationship and applicable requirements described above.

We may update this policy to reflect changes to the website, services, or applicable requirements. The latest version will be posted on this page. Changes to this website policy do not override existing contractual obligations or applicable privacy law.

For website privacy questions or requests, contact Next Step RCM:

Email: info@nextsteprcm.com
Telephone: +1 (512) 254-0640
Contact page: nextsteprcm.com/contact/

Please describe your request without including patient records or other sensitive information. Our team can arrange the next steps if confidential documentation is needed.