Privacy Policy
Your privacy is important to us. Learn how we collect, use, and protect your personal information.
Introduction
At The Credentialing, we are committed to protecting your privacy and ensuring the security of your personal and professional information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our credentialing services.
We understand the sensitive nature of healthcare information and comply with all applicable privacy laws, including HIPAA (Health Insurance Portability and Accountability Act), to ensure your data is handled with the highest level of confidentiality and security.
Information We Collect
Personal Information
- Full name, contact information (email, phone, address)
- National Provider Identifier (NPI) number
- Medical license numbers and state of licensure
- DEA registration number (if applicable)
- Tax Identification Number (TIN) or Social Security Number
- Date of birth and professional credentials
- Education and training history
- Work history and references
Professional Documentation
- Malpractice insurance certificates
- Board certifications and specialty credentials
- Hospital privileges and affiliations
- Continuing Medical Education (CME) records
- Professional liability claims history
Usage Information
- IP address, browser type, and device information
- Pages visited, time spent on site, and navigation patterns
- Referring website and search terms used
- Cookie data and tracking preferences
How We Use Information
We use the collected information for the following purposes:
Credentialing Services
Process provider enrollment and credential verification
Payer Enrollment
Submit applications to insurance companies and payers
Compliance
Ensure regulatory and payer requirement compliance
Communication
Send updates, notifications, and respond to inquiries
Service Improvement
Analyze usage to enhance our services
Legal Obligations
Comply with applicable laws and regulations
Information Disclosure
We may share your information with third parties only under the following circumstances:
- 1
Insurance Companies & Payers
To complete credentialing and enrollment applications
- 2
Verification Organizations
For primary source verification of credentials (CAQH, NPDB, state boards)
- 3
Service Providers
Trusted third-party vendors who assist in our operations (with confidentiality agreements)
- 4
Legal Requirements
When required by law, court order, or government regulations
- 5
Business Transfers
In connection with mergers, acquisitions, or asset sales (with continued protection)
- 6
With Your Consent
When you explicitly authorize us to share information
Data Security
We implement industry-standard security measures to protect your information:
Encryption
SSL/TLS encryption for data transmission
Access Controls
Restricted access to authorized personnel only
Secure Servers
Protected servers with firewalls and monitoring
Authentication
Multi-factor authentication for system access
Regular Audits
Periodic security assessments and updates
Secure Disposal
Safe destruction of outdated documents
Note: While we implement robust security measures, no method of transmission over the internet is 100% secure. We continuously work to improve our security practices.
HIPAA Compliance
The Credentialing is committed to compliance with the Health Insurance Portability and Accountability Act (HIPAA) and maintains strict protocols for protecting Protected Health Information (PHI).
- We act as a Business Associate under HIPAA regulations
- All staff members receive regular HIPAA training
- We maintain appropriate Business Associate Agreements (BAAs)
- PHI is encrypted both in transit and at rest
- We conduct regular compliance audits and risk assessments
- Breach notification procedures are in place as required by law
Your Privacy Rights
You have the following rights regarding your personal information:
Access
Request a copy of the personal information we hold about you
Correction
Request correction of inaccurate or incomplete information
Deletion
Request deletion of your personal information (subject to legal requirements)
Restriction
Request limitation of processing of your information
Objection
Object to certain types of processing of your information
Portability
Request transfer of your data to another service provider
Withdraw Consent
Withdraw consent for data processing at any time
To exercise any of these rights, please contact us using the information in the Contact Us section below.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Credentialing files: Maintained for the duration of your enrollment plus 7 years
- Financial records: Retained according to IRS and regulatory requirements
- Communication records: Kept for 3-5 years for service quality purposes
- Website usage data: Typically retained for 12-24 months
Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
Last Updated: January 27, 2026
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date.