← Back to Credimed

Notice of Privacy Practices (HIPAA)

Effective Date: April 27, 2026 · Last Revised: April 27, 2026 · Version 1.4

Draft template. This Notice is provided as a starting point and must be reviewed by qualified healthcare counsel before Credimed accepts paying customers. The exact wording and structure of an HIPAA Notice of Privacy Practices is regulated under 45 C.F.R. § 164.520.
THIS NOTICE DESCRIBES HOW YOUR PROTECTED HEALTH INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

1. Our Role

Credimed LLC ("Credimed," "we," "us") provides claim preparation and submission support services to assist patients in seeking reimbursement from their dental insurance carriers for out-of-network dental work performed in Mexico.

Credimed is not a healthcare clearinghouse, healthcare provider, health plan, or insurance company. We act under your written authorization solely to prepare and submit your reimbursement claim on your behalf. We use third-party clearinghouses to transmit prepared claims to insurance carriers.

When handling Protected Health Information ("PHI"), Credimed may act as a Business Associate where an executed Business Associate Agreement is in place with a covered entity. In other cases, we act as a service provider under your direct authorization. In either capacity, we comply with applicable provisions of the HIPAA Privacy Rule and Security Rule.

2. Our Legal Duties

Credimed is required by law to:

3. How We Use and Disclose PHI

We use and disclose PHI only as necessary to provide our Service or as permitted by law.

3.1 Claim Preparation and Submission

We use PHI to:

3.2 Payment

We may use limited information to:

PHI is not transmitted to payment processors.

3.3 Healthcare Operations

We may use PHI for:

3.4 Uses and Disclosures Required or Permitted by Law

We may disclose PHI as permitted or required by HIPAA, including:

We do not currently disclose PHI for all of the above purposes but reserve the right to do so as permitted by law.

3.5 Authorization-Based Uses

We will use or disclose PHI for any purpose not described above only with your written authorization. You may revoke authorization at any time in writing.

4. Special Protections (HITECH Act)

Sale of PHI

HIPAA prohibits the sale of PHI without your explicit written authorization. We do not sell PHI.

Marketing

Use of PHI for marketing requires your explicit written authorization. We do not use PHI for marketing purposes.

5. Your Rights

You have the following rights regarding your PHI:

5.1 Right to Access

You have the right to inspect and obtain a copy of your PHI.

5.2 Right to Amendment

You have the right to request correction of inaccurate or incomplete PHI.

5.3 Right to Restrict Use

You have the right to request restrictions on certain uses and disclosures of your PHI. We are not required to agree to your request, except that we must agree to restrict disclosures to a health plan when the disclosure is for the purpose of carrying out payment or healthcare operations and pertains solely to a healthcare item or service for which you have paid in full out of pocket (45 C.F.R. § 164.522(a)(1)(vi)).

5.4 Right to Confidential Communications

You may request that we communicate with you:

We will accommodate reasonable requests.

5.5 Right to Accounting of Disclosures

You may request a list of disclosures of your PHI made for purposes other than:

The accounting covers up to six (6) years prior to your request.

The accounting does not include disclosures: (a) for treatment, payment, or healthcare operations; (b) to you or your personal representative; (c) for national security or intelligence purposes; (d) to correctional institutions or law enforcement officials regarding individuals in their custody; or (e) made prior to April 14, 2003.

5.6 Right to a Paper Copy

You have the right to receive a paper copy of this Notice at any time upon request.

6. How to Exercise Your Rights

To exercise your rights, contact:

privacy@credimed.us

We will respond to:

We will notify you in writing if an extension is needed and the reason.

7. Data Security

We implement administrative, technical, and physical safeguards as required by the HIPAA Security Rule (45 C.F.R. Part 164, Subpart C), including:

8. Breach Notification

If your unsecured PHI is compromised, we will notify you:

9. Changes to This Notice

We reserve the right to change this Notice. Updated versions will be posted on our website and will apply to all PHI we maintain, regardless of when it was created or received.

Material changes will be highlighted on the posted Notice for at least sixty (60) days from the effective date of the change.

10. Complaints

If you believe your rights have been violated, you may:

Contact us: privacy@credimed.us

Or file a complaint with:

U.S. Department of Health and Human Services
Office for Civil Rights
1-800-368-1019
www.hhs.gov/ocr/complaints/index.html

We will not retaliate against you for filing a complaint.

11. Contact

Credimed LLC
30 N Gould St Ste N, Sheridan, WY 82801

Privacy Officer: privacy@credimed.us
Mailing address: [TO BE PROVIDED]

Related: Privacy Policy · Terms of Service · Cookie Policy · Disclosures · Contact

← Back to Credimed