Credimed LLC ("Credimed," "we," "us," or "our") provides a service that helps US-based patients prepare and submit dental insurance reimbursement claims for dental work performed by licensed providers in Mexico.
Credimed is not a healthcare clearinghouse, healthcare provider, health plan, or insurance company. We provide administrative support services for claim preparation and submission, and use a third-party clearinghouse (currently Availity) to transmit prepared claims to insurance carriers.
When we handle Protected Health Information, we do so as a service provider to you and, where applicable, as a Business Associate to covered entities pursuant to applicable agreements. We do not provide medical care or make coverage determinations.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile experience, and related services (collectively, the "Service").
Legal basis: we process your information to perform the Service you request (including under your written authorization for claim submission), to comply with legal obligations, and for our legitimate interests in operating, securing, and improving the Service.
If you use Credimed to submit an insurance claim, please also review our Notice of Privacy Practices, which describes how we handle Protected Health Information ("PHI") in accordance with HIPAA, where applicable to our role for that claim.
We use your information for the following business purposes:
We apply data minimization and use only the information necessary for the stated purposes.
With your opt-in consent (for example, when you provide an email through our refund estimator), we may send educational and marketing emails about our Service.
Marketing communications are limited to general product information and will not include claim-specific details or Protected Health Information.
Every marketing email includes a one-click unsubscribe link, and we honor opt-out requests promptly. We do not send marketing SMS without separate, explicit opt-in.
We share necessary information, including PHI, with your insurance carrier or its claim-processing intermediaries strictly as required to prepare and submit your claim, and always under your written authorization.
We share information with vendors that process information on our behalf under contractual obligations to safeguard your data:
We design our systems to segregate payment data from claim data so that Protected Health Information is not transmitted to payment processors.
We may disclose information:
We may share information for other purposes with your explicit, written consent, which you may revoke at any time except to the extent we have already acted in reliance on it.
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
We honor Global Privacy Control (GPC) signals as opt-out requests by default. For browser "Do Not Track" signals, we follow the practices described in this Policy.
We implement administrative, technical, and physical safeguards designed to protect your information:
No system is completely secure. In the event of a breach involving your unsecured PHI, we will notify you within sixty (60) days as required by HIPAA's Breach Notification Rule, and sooner where required by state law. Where state law requires shorter timelines, we comply with the stricter requirement.
We retain information for the periods required to provide the Service and to comply with legal and regulatory obligations:
We may retain information longer if required by law, an active legal hold, or an ongoing dispute.
Depending on your jurisdiction, you may have the right to:
HIPAA grants additional rights; see our Notice of Privacy Practices.
To exercise rights: privacy@credimed.us
We will respond within 45 days, with one possible extension as permitted by law. We may need to verify your identity before fulfilling certain requests.
If you are a California resident, you have specific additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.
Categories of personal information we collect: identifiers (name, email, phone), customer records (insurance information, signatures), commercial information (transaction history), internet activity (device and usage data described in §2.2), and protected classification characteristics solely as required to file your claim (e.g., date of birth). We collect Protected Health Information as further described in §2.1.
Sources: directly from you, automatically through your device, and from Stripe (limited payment metadata).
Business purposes for collection: claim preparation and submission, billing, fraud prevention, security, service improvement, and legal compliance.
Categories of third parties with whom we share: your insurance carrier (under your authorization), our cloud and payment-processing service providers (under contract), and government authorities (when legally required).
We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
You have the right to:
We use sensitive personal information solely as necessary to provide the Service and as permitted by law.
We honor Global Privacy Control (GPC) browser signals as opt-out requests. To exercise any right, email privacy@credimed.us with the subject line "California Privacy Request." We may need to verify your identity before fulfilling certain requests.
The Service is not directed to children under thirteen (13). We do not knowingly collect personal information from children under thirteen. If we learn that we have inadvertently collected such information, we will delete it promptly.
The Service is not intended for users under eighteen (18). A parent or legal guardian may use the Service on behalf of a covered minor dependent, in which case the parent or guardian represents that they have legal authority to provide the minor's information and to authorize claim submission.
If you believe a child has provided us with personal information without parental consent, please contact us at privacy@credimed.us.
Credimed operates and stores data in the United States.
Information may originate from services performed outside the US (e.g., Mexico), but all processing occurs within the US.
By using the Service, you acknowledge and consent to the transfer of your information to, and processing in, the United States.
We may update this policy. Material changes will be communicated at least 30 days in advance.
Credimed LLC
Privacy Officer
Email: privacy@credimed.us
Mailing address: [TO BE PROVIDED]
Related: Cookie Policy · Disclosures · Terms of Service · HIPAA Notice · Contact
← Back to Credimed