Privacy Policy

Information We Collect

Depending on how you interact with BYOND™ Credentialing Solutions, we may collect information such as:

• Name and contact information
• Practice or organization information
• Account and subscription information
• Purchase and transaction information
• Communications and support requests
• Credentialing and enrollment information
• Provider professional information
• Provider identification information necessary for credentialing activities
• Licensing, certification, provider profile systems, NPI/NPPES, Medicaid, Medicare, and related enrollment information
• Ownership, managing employee, and disclosure information when required for credentialing or enrollment
• Documents uploaded in connection with credentialing requests
• Information submitted through forms or the Client Credentialing Portal
• Website usage information, analytics, cookies, and device information
• Other information voluntarily provided to us

Protected Health Information

In certain client relationships, BYOND™ Credentialing Solutions may create, receive, maintain, or transmit Protected Health Information (“PHI”) while performing services for a covered entity or another business associate.

Where BYOND™ Credentialing Solutions is acting as a HIPAA business associate and a Business Associate Agreement is required, our use and disclosure of PHI will also be governed by the applicable Business Associate Agreement (BAA) and HIPAA requirements.

HHS explains that business associates that create, receive, maintain, or transmit PHI on behalf of covered entities are subject to specific HIPAA requirements, and applicable BAAs must address permitted uses and disclosures, safeguards, reporting, subcontractors, and other obligations.

If this Privacy Policy conflicts with an applicable BAA concerning PHI, the BAA will control with respect to that PHI.

How We Use Information

We may use information to:

• Provide purchased products and services
• Perform credentialing, enrollment, contracting, and maintenance activities
• Communicate with payors and other organizations when authorized
• Process and track Credentialing Support Requests
• Maintain client portal information
• Communicate with clients and providers
• Request missing information or documentation
• Monitor applicable credential expirations
• Process purchases and recurring subscriptions
• Administer accounts and subscriptions
• Provide customer support
• Send service-related notices
• Send marketing or educational communications where permitted
• Improve our website, products, and services
• Maintain security and prevent misuse
• Comply with legal and contractual obligations

How Information May Be Shared

We may share information when reasonably necessary to provide requested services, including with:

• Payors and health plans
• Credentialing organizations
• Government enrollment programs and agencies
• Licensing or certification organizations, where appropriate and authorized
• Technology and hosting providers
• Secure form and document-management providers
• Electronic signature providers
• Payment processors
• Email and communication providers
• Analytics and website service providers
• Other service providers supporting our operations

We may also disclose information where required by law, legal process, or to protect the rights, security, or integrity of BYOND™ Credentialing Solutions, our clients, or others.

Where a third-party service provider is acting as our HIPAA business-associate subcontractor and creates, receives, maintains, or transmits PHI on our behalf, HIPAA requires applicable safeguards and contractual restrictions.

Payment Processing

Payments may be processed by third-party payment processors. BYOND™ Credentialing Solutions does not intentionally store complete payment card information on its own servers when payment information is handled directly by the applicable payment processor.

Payment providers maintain their own privacy and security practices.

Data Security

BYOND™ Credentialing Solutions uses reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

Where HIPAA applies to electronic PHI, applicable safeguards will be maintained consistent with our obligations under HIPAA and the applicable BAA.

However, no internet transmission, electronic communication, or information-storage system can be guaranteed to be completely secure.

Client Responsibilities for Sensitive Information

Clients should submit sensitive credentialing information only through methods approved by BYOND™ Credentialing Solutions for that purpose.

Clients should not send sensitive personal information, account credentials, or PHI through unsecured channels when a designated secure method is available.

Clients are responsible for ensuring that individuals submitting information on behalf of their organization are appropriately authorized to do so.

Data Retention

We may retain information for as long as reasonably necessary to:

• Provide services
• Maintain business and transaction records
• Fulfill contractual obligations
• Resolve disputes
• Meet legal, regulatory, tax, security, or compliance requirements
• Protect legitimate business interests

Retention periods may vary depending on the type of information and applicable contractual or legal requirements.

Where an applicable BAA governs PHI, return, destruction, or continued protection of PHI following termination will be handled in accordance with that BAA and applicable law. HHS identifies return or destruction of PHI at termination, where feasible, as one of the provisions addressed in business associate agreements.

Cookies & Analytics

Our website may use cookies and similar technologies to operate the site, remember preferences, understand website usage, measure performance, and improve the user experience.

Users may be able to manage cookies through their browser or applicable website cookie settings. Disabling certain cookies may affect website functionality.

Third-Party Links & Services

Our website and services may contain links to or integrations with third-party websites and services.

Third-party services maintain their own privacy policies, terms, and security practices. BYOND™ Credentialing Solutions is not responsible for the privacy practices of unrelated third-party websites or services.

Privacy Requests

Depending on applicable law and your relationship with BYOND™ Credentialing Solutions, you may have rights concerning certain personal information.

Requests concerning personal information may be submitted using the contact information below. We may need to verify the requester's identity and authority before fulfilling a request.

Requests involving PHI maintained on behalf of a covered entity may need to be directed to or coordinated with the applicable covered entity in accordance with HIPAA and the applicable BAA. HHS notes that covered entities retain obligations concerning individual access, amendment, and accounting rights, including where relevant information is maintained by a business associate.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised “Last Updated” date.