DRAFT, ATTORNEY REVIEW REQUIRED. This template is a starting point only and is not legal advice. Have a California attorney review and finalize it before publishing. Replace every highlighted placeholder.

Privacy Policy

Effective date: [DATE]

This Privacy Policy explains how [EnrollNorth LLC] ("EnrollNorth", "we", "us") collects, uses and protects information when you visit enrollnorth.com or request our credentialing services. We are based in Irvine, California.

1. Information we collect

  • Information you give us: your name, work email, practice name, role, practice type, state, number of providers and any notes you submit through our credentialing review form or by email.
  • Provider credentialing information: if you become a client, documents and details needed to complete enrollment, such as licenses, NPI numbers, CAQH information, malpractice certificates, work history and practice tax and banking details.
  • Automatic information: basic device, browser and usage data collected through cookies and similar tools, including Google Analytics and Google Ads, if enabled.

Our website form is not intended for patient information. Please do not submit protected health information through this website.

2. How we use information

  • To respond to your request and prepare your credentialing plan
  • To provide, manage and bill for our services
  • To communicate with you by email about your request or account
  • To measure and improve our website and advertising
  • To comply with law and protect our rights

3. How we share information

We do not sell your personal information. We share information only:

  • With payers, government programs and credentialing databases (for example CAQH, NPPES, PECOS and Medi Cal PAVE) when you engage us to submit applications on your behalf
  • With service providers that help us operate, such as our form processor [Netlify / Formspree / Tally], email provider [PROVIDER], secure document storage [PROVIDER] and analytics providers, under appropriate confidentiality terms
  • When required by law or to protect rights and safety

4. HIPAA and business associate agreements

Where our work for a client involves protected health information, we will enter into a Business Associate Agreement and handle that information as required by HIPAA and the California Confidentiality of Medical Information Act. [ATTORNEY TO CONFIRM SCOPE]

5. Cookies and analytics

We may use Google Analytics and Google Ads tags to understand site traffic and measure advertising. You can limit cookies in your browser settings and opt out of Google Analytics using Google's browser add on. [UPDATE BASED ON TAGS ACTUALLY ENABLED]

6. Data security and retention

We use reasonable administrative, technical and physical safeguards, including secure upload links and restricted access. We keep information only as long as needed for the purposes above or as required by law. [RETENTION PERIOD]

7. Your California privacy rights

Depending on applicable law, including the California Consumer Privacy Act as amended, you may have rights to know, access, correct or delete personal information and to opt out of certain sharing. To make a request, email team@enrollnorth.com. We will not discriminate against you for exercising your rights. [ATTORNEY TO CONFIRM CCPA APPLICABILITY]

8. Children

Our services are for healthcare businesses and are not directed to children under 16.

9. Changes

We may update this policy. The effective date above shows when it last changed.

10. Contact

[EnrollNorth LLC], Irvine, California. Email: team@enrollnorth.com