Privacy Policy

RCM Advisory Group (“RCM Advisory Group,” “we,” “us,” or “our”) respects your privacy and is committed to the responsible handling of information collected through our website, communications, services, assessments, calculators, forms, and other interactions.

This Privacy Policy explains what information we may collect, how we may use and disclose it, the choices available to you, and certain rights that may apply under federal and state privacy laws.

By using this website, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

Depending on how you interact with RCM Advisory Group, we may collect information including:

Information You Provide Directly

This may include your name, business email address, telephone number, job title, company or healthcare organization, practice type, organization size, revenue information, billing or revenue cycle information, technology platforms, operational challenges, and information submitted through forms, assessments, calculators, consultation requests, emails, telephone calls, or other communications.

Business and Professional Information

This may include information concerning your organization, services, revenue cycle operations, billing processes, payer mix, technology environment, vendors, systems, financial performance, staffing, workflows, and business needs.

Technical and Usage Information

This may include IP address, browser type, operating system, device information, referring URL, pages viewed, links clicked, approximate geographic location, session information, and interactions with the website.

Marketing and Communications Information

This may include your communication preferences and information about your interactions with emails, advertisements, marketing campaigns, and website content.

We may also receive information from referral partners, service providers, business partners, publicly available sources, and other third parties.

2. Healthcare and Sensitive Information

RCM Advisory Group provides consulting, advisory, technology, revenue cycle, implementation, optimization, and related business services to healthcare organizations.

Please do not submit patient records, Protected Health Information (“PHI”), medical records, Social Security numbers, payment card information, or other sensitive patient information through ordinary website forms, email addresses, calculators, or other public-facing features unless we specifically provide a secure method for doing so and have authorized its use.

Submitting an inquiry through this website does not, by itself, establish a HIPAA Business Associate relationship or make RCM Advisory Group responsible for information as a Business Associate under HIPAA.

Where RCM Advisory Group performs services that involve PHI on behalf of a HIPAA Covered Entity or Business Associate, the parties may enter into a separate Business Associate Agreement (“BAA”), and applicable information will be handled in accordance with that agreement and applicable law.

3. How We Use Information

We may use information we collect to:

• Operate, maintain, secure, and improve our website and services
• Respond to inquiries and consultation requests
• Evaluate potential client relationships
• Provide assessments, recommendations, demonstrations, proposals, or requested information
• Perform revenue cycle, operational, technology, implementation, optimization, marketing, or advisory services
• Communicate with clients and prospective clients
• Analyze website performance and user behavior
• Improve our tools, resources, calculators, services, and content
• Maintain security and prevent fraud, abuse, or misuse
• Comply with legal and regulatory obligations
• Conduct legitimate business development and marketing activities

We may use aggregated or de-identified information for analytics, benchmarking, research, service improvement, and other lawful business purposes.

4. Cookies, Analytics and Tracking Technologies

Our website may use cookies, pixels, tags, analytics services, session technologies, advertising technologies, and similar tools.

These technologies may help us understand website traffic, measure marketing performance, remember preferences, improve functionality, diagnose technical issues, and understand how visitors interact with the website.

Some technologies may be operated by third-party providers.

Because healthcare-related browsing and submitted information can be sensitive, RCM Advisory Group intends to evaluate tracking technologies carefully and avoid knowingly transmitting PHI through advertising or analytics technologies in circumstances where such disclosure would violate applicable law.

Users may be able to control certain cookies through browser settings or a cookie/privacy preference mechanism provided on the website.

5. How We Disclose Information

We may disclose information to service providers and contractors that assist with hosting, analytics, communications, CRM systems, security, marketing, professional services, technology infrastructure, and business operations.

We may also disclose information to consultants, referral partners, implementation partners, technology providers, or other organizations where reasonably necessary to respond to a request or provide services, subject to applicable contractual and legal restrictions.

We may disclose information when reasonably necessary to:

• Comply with law, legal process, regulatory requirements, court orders, or government requests
• Protect our rights, users, clients, or others
• Investigate fraud, security issues, or violations of our agreements
• Facilitate a merger, acquisition, financing, restructuring, sale of assets, or similar corporate transaction

6. Sale and Sharing of Personal Information

RCM Advisory Group does not intend to sell personal information for money in the ordinary meaning of the word “sell.”

Certain state privacy laws define “sale” or “sharing” broadly enough that some advertising, analytics, or cross-context behavioral advertising activities may qualify even when no money changes hands.

Where required by applicable law, we will provide mechanisms allowing eligible individuals to opt out of covered sale, sharing, or targeted advertising activities.

7. California Privacy Rights

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), if and to the extent the law applies to RCM Advisory Group and the particular information involved.

Applicable rights may include:

• The right to know what personal information is collected, used, disclosed, sold, or shared
• The right to request deletion
• The right to request correction
• The right to obtain certain information about our collection and disclosure practices
• The right to opt out of certain sales or sharing
• The right to limit certain uses of sensitive personal information where applicable
• The right to receive equal service without unlawful discrimination for exercising privacy rights

We may need to verify your identity before processing a request. Authorized agents may submit requests where permitted by law, subject to appropriate verification.

8. Privacy Rights in Other States

Residents of other U.S. states may have additional privacy rights under applicable state law.

Depending on the jurisdiction and whether the relevant law applies to RCM Advisory Group, these rights may include access, correction, deletion, portability, and the ability to opt out of certain targeted advertising, profiling, sale, or sharing activities.

We will process qualifying requests in accordance with applicable law.

9. Data Security

We use administrative, technical, and organizational safeguards that we believe are reasonable and appropriate for the nature of the information we maintain.

However, no website, database, transmission method, or information system can be guaranteed to be completely secure. Users should exercise care when transmitting confidential or sensitive information electronically.

Where we enter into agreements requiring additional security measures, including Business Associate Agreements where applicable, those agreements may establish additional requirements.

10. Data Retention

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining business records, resolving disputes, enforcing agreements, meeting contractual obligations, complying with legal requirements, and protecting legitimate business interests.

Retention periods may vary depending on the nature of the information and our relationship with you.

11. Security Incidents and Data Breaches

If a security incident affects personal information, we will evaluate and respond to the incident in accordance with applicable law and contractual obligations.

Where applicable, we will provide notifications required by federal or state law.

12. Email, Telephone and Marketing Communications

If you provide your contact information, we may contact you regarding your inquiry, requested services, existing business relationship, or other communications permitted by law.

Where required, marketing communications will include an appropriate method for opting out.

Opting out of marketing communications will not necessarily prevent transactional, administrative, security, contractual, or service-related communications.

13. Third-Party Websites and Services

Our website may link to websites, software platforms, healthcare technology providers, vendors, resources, or other services operated by third parties.

RCM Advisory Group does not control the privacy, security, content, or practices of independent third parties.

Your interactions with those services are governed by their respective terms and privacy policies.

14. Children's Privacy

Our website and services are intended for businesses and professionals and are not directed to children under 13.

We do not knowingly collect personal information from children under 13 through this website.

15. International Visitors

RCM Advisory Group primarily operates in the United States.

If you access our website from another country, information you provide may be processed in the United States, where privacy laws may differ from those in your jurisdiction.

16. Changes to This Privacy Policy

We may revise this Privacy Policy periodically to reflect changes in our services, technology, business practices, or legal requirements.

The “Last Updated” date at the top of this page identifies the most recent revision.

17. Contact Us

Questions, concerns, or applicable privacy requests may be directed to: