1. Who we are
PRISCO MedCode Solutions Pvt Ltd ("PRISCO", "we", "us") is a company registered in India, with its office at Ganapathy, Coimbatore - 641006, Tamil Nadu, India. We provide revenue cycle management, medical coding, denial management and quality assurance services to US healthcare providers, and coding courses to students. Contact: info@priscomedcodesolutions.com.
2. What this policy covers
This policy has two parts. Part A explains how we handle personal information from this website, such as enquiries, job applications and course enrollments. Part B explains how we protect Protected Health Information (PHI) that US healthcare clients entrust to us. PHI is never collected through this website.
Part A. Website, enquiries, applications and students
3. Information we collect
- Details you submit in our forms: name, email, phone, company, job or education details, your message, and your resume if you apply.
- Basic technical data your browser sends, such as device and browser type. This site does not use advertising cookies. If we add analytics, we will update this policy and, where required, ask for consent.
4. How we use it
To reply to enquiries, run consultations and pilots, process job applications, enroll and support students, keep our site secure, and meet legal duties. We do not sell personal information.
5. Sharing
We share information only with service providers that help us run the site and forms, and when the law requires it. Form submissions are delivered through a third-party form service (Web3Forms), and course or enquiry emails may pass through our email provider. These providers may process your details only to deliver them to us.
6. Retention and your choices
We keep personal information only as long as needed for the purposes above or as the law requires. To access, correct or delete your information, email us. Personal data of individuals in India is handled in line with applicable Indian law.
Part B. Protected Health Information (PHI) and HIPAA
7. Our role
For US covered entities, PRISCO acts as a HIPAA Business Associate. We handle PHI only on a client's behalf and only after a signed Business Associate Agreement (BAA). We do not use PHI for our own purposes or sell it.
8. How an India-based company safeguards US PHI under federal law
- HIPAA applies to us directly. Under HIPAA and the HITECH Act (45 CFR Parts 160 and 164), a Business Associate must meet the Security Rule, the permitted-use limits of the Privacy Rule, and the Breach Notification Rule. This applies wherever the Business Associate is located.
- Contracts you can enforce. Our BAA binds us to those duties, flows them down to any subcontractor, gives HHS access to our practices and records, and can name the US governing law and venue you choose.
- Safeguards. Administrative, physical and technical controls: risk analysis, workforce training and confidentiality agreements, controlled facilities, unique user IDs and role-based access, multi-factor sign-in, encrypted transfer, activity logs and secure disposal.
- PHI stays under the client's control. We work inside the client's own systems over a secure connection where possible, and external printing and removable media are disabled on our work systems.
- Breach response. We report security incidents and breaches of unsecured PHI to the client without unreasonable delay, as the BAA and the Breach Notification Rule require.
- Return or destruction. PHI is returned or destroyed at the end of the engagement as the BAA states.
Read more on our BAA and offshore PHI safeguards page.
9. Individuals' rights over PHI
We hold PHI for the covered entity, not as the provider of your care. If you are a patient and want to access or correct your health information, please contact your provider. We will help the provider respond.
10. Changes and contact
We may update this policy and will change the date above when we do. Questions: info@priscomedcodesolutions.com.
CPT® is a registered trademark of the American Medical Association. This policy is not legal advice.