Privacy Policy

Effective Date: May 5, 2025

Hecown Technologies PVT LTD. ("we," "us," or "our") operates the website www.hecownhealthcare.com (the "Website"). This Privacy Policy outlines how we collect, use, disclose, and protect your personal information when you visit our Website. We provide Revenue Cycle Management (RCM) outsourcing services to healthcare providers and clinics in the United States and are committed to protecting your privacy in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Health Insurance Portability and Accountability Act (HIPAA), and other applicable laws.

1. Information We Collect

We collect the following personal information when you voluntarily provide it through our contact forms or direct communication:

• Name: To address you appropriately.
• Email Address: To respond to inquiries or provide information about our services.
• Phone Number: To contact you regarding your inquiries or service needs.

We do not collect payment information, use cookies, or employ tracking technologies like Google Analytics. We also do not collect user-generated content such as comments or reviews.

2. How We Use Your Information

We use your personal information to:

• Respond to your inquiries about our RCM outsourcing services.
• Communicate with you about our services or updates relevant to your inquiry.
• Comply with legal obligations, including HIPAA requirements for protecting health-related data.
• Improve our Website and services based on user interactions (without using tracking technologies).

3. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted vendors who assist us in operating our Website or services (e.g., email hosting providers), provided they comply with HIPAA, GDPR, and CCPA requirements.
• Legal Compliance: When required by law, such as to comply with a subpoena, court order, or regulatory requirement.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred, with notice provided as required by law.

4. Data Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, or misuse, in compliance with HIPAA standards for health-related data. However, no online transmission is completely secure, and we cannot guarantee absolute security.

5. Your Rights

Depending on your location, you may have the following rights under GDPR, CCPA, or other applicable laws:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate information.
• Deletion: Request deletion of your personal information, subject to legal obligations.
• Opt-Out: Opt out of the sale of your personal information (note: we do not sell your data).
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at info@hecownhealthcare.com. We will respond within the timeframes required by law (e.g., 30 days for GDPR, 45 days for CCPA).

6. HIPAA Compliance

As a provider of RCM services to US healthcare providers, we adhere to HIPAA regulations. Any protected health information (PHI) we process on behalf of our clients is handled in accordance with HIPAA requirements, including secure storage and limited access.

7. International Data Transfers

Our Website is operated from Hyderabad, India, with a US office in Lombard, IL. If you are located in the EU or another region with data protection laws, your information may be transferred to India or the US. We ensure such transfers comply with GDPR and other applicable regulations through appropriate safeguards.

8. Retention of Your Information

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. For example, we may retain inquiry-related data for up to one year unless otherwise required by HIPAA or other regulations.

9. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of these sites. Please review their privacy policies before providing personal information.

10. Visitor Tracking

When you visit our website, we automatically collect certain technical information about your visit. This includes: - Your IP address - Approximate geographic location (city, region, country) - Date and time of access - Browser and device information (indirectly via server logs) We use this data solely for the purpose of: - Monitoring site traffic - Improving website performance and user experience - Ensuring site security and preventing abuse Geolocation data is obtained using the IPinfo.io API, which provides location information based on your IP address. This information does not personally identify you and is not combined with any other data to attempt to do so. We do not use cookies or persistent identifiers for tracking visitors. The location data is stored securely in server log files and is not shared with third parties or used for marketing purposes. By continuing to use our website, you acknowledge and accept the use of such basic, non-personal tracking as outlined above.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our Website with a revised effective date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: info@hecownhealthcare.com
US Office: Hecown Technologies PVT LTD, 246 E Janata Blvd, Lombard, IL 60148
India Office: Hecown Technologies PVT LTD, Hyderabad, India