Privacy Policy

At MD Revenue Group, LLC, we are committed to safeguarding the privacy of every client, prospective client, and visitor. This policy explains what information we collect, how we use it, the choices you have, and the protections we apply in accordance with all applicable laws and regulations.

Collection of Information

When you visit our website or register for our services, we may collect personal details that you choose to provide, including:

• Name and business address
• Contact details such as email address and phone number
• Scheduling and appointment information
• National Provider Identifier (NPI) and fax number

We also automatically collect certain technical information for internal purposes, including IP addresses, operating system, and browser data. Visitors to the public areas of our website are not required to provide personal information, though registration for certain services does require it. Our site uses cookies and tracking mechanisms to identify and log users.

Handling and Usage

We treat your information with the utmost confidentiality and utilize it only for the purposes of service provision, analysis to improve our marketing strategies, and communication with you.

We do not sell your information to third parties. Where information is shared, it is strictly anonymized unless your explicit consent has been obtained. SMS opt-in data and phone numbers are never shared with third parties or affiliates for marketing purposes. Affiliated entities may access information only within the framework of this policy or with your explicit written consent.

Conditions for Disclosure

We disclose your information only when legally required to do so, or where necessary to protect our interests, resources, or contractual obligations, including for security purposes and the enforcement of our legal rights.

Your Rights Under GDPR

Where the General Data Protection Regulation (GDPR) applies, you have the right to:

• Be informed about how your data is collected and used
• Access and update your personal information
• Unsubscribe from communications and request deletion of your data
• Know whether your information is shared with third parties
• Withdraw your consent at any time

HIPAA Privacy

In compliance with the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule, we adhere to additional measures to protect and notify clients about the security of their personal information. Our Notice of Privacy Practices outlines the conditions under which protected health information may be used or disclosed in accordance with HIPAA requirements.

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor's IP address and browser user agent string to help with spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available at automattic.com/privacy.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site, you may opt in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen option cookies last for a year. If you select "Remember Me," your login will persist for two weeks. If you edit or publish an article, an additional cookie is saved in your browser; it includes no personal data and simply indicates the post ID of the article you just edited. It expires after one day.

Embedded Content From Other Websites

Articles on this site may include embedded content (e.g. videos, images, articles). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.

Who We Share Your Data With

If you request a password reset, your IP address will be included in the reset email. Beyond the limited circumstances described in this policy, we do not share your personal data with outside parties.

How Long We Retain Your Data

If you leave a comment, the comment and its metadata are retained indefinitely so that we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. For users that register on our website, we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What Rights You Have Over Your Data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where Your Data Is Sent

Visitor comments may be checked through an automated spam detection service.

Bot Protection (Cloudflare Turnstile)

We use Cloudflare Turnstile on our website to protect our forms from automated abuse and bot traffic. Turnstile is a security service provided by Cloudflare, Inc. that distinguishes human visitors from bots without requiring traditional CAPTCHAs.

When you interact with a form on our site, Turnstile may collect certain client-side signals, including:

• Your IP address
• TLS fingerprint data
• Browser user-agent header
• The site key associated with our website

This data is processed by Cloudflare as a data processor on our behalf to determine whether a visitor is human. Cloudflare also processes this data as a data controller to improve Turnstile's bot detection capabilities. These signals are strictly necessary for the security of our website and do not enable Cloudflare to directly identify any individual.

For more information, please review Cloudflare's Turnstile Privacy Policy. If you have concerns about this processing, you may contact Cloudflare's Data Protection Officer at dpo@cloudflare.com.

Web Analytics, Optimization and User Tracking (PostHog)

We use PostHog, a product analytics platform provided by PostHog, Inc., to analyze visitor interactions with our website. This helps us understand how users interact with our content, diagnose performance bottlenecks, improve navigation, and optimize our marketing efforts.

PostHog utilizes cookies, local storage, and client-side scripts to collect and process the following metrics and event types to support website operation:

• Custom CTA Clicks & Interaction Tracking: Capture custom events when you click on our call-to-action (CTA) buttons, menu links, page resources, and navigation headers to measure user engagement.
• Form Funnels & Submissions: Capture progression metrics when you begin filling out a form (such as the Contact Us or Free Audit forms) and track successful form submissions.
• User Identification: When you successfully submit a form, we associate your submitted contact details (such as email, name, and practice information) with your anonymous prior page navigation history to provide a personalized user journey and better customer support.
• Session Replays & Console Logs: Capture visual session recordings of website interactions (mouse paths, clicks, and scroll behaviors) and JavaScript console error logs to troubleshoot issues, reproduce bugs, and improve user experience.

The information collected is used solely to evaluate website usage, compile activity reports, and optimize our services. This data is kept secure and is never sold or shared with third parties for external marketing. You can control cookie preferences using our cookie consent banner.

For more details on how PostHog processes data, please refer to the PostHog Privacy Policy.

Policy Alterations

MD Revenue Group reserves the right to modify this Privacy Policy at any time. Any changes will be communicated through appropriate channels, and continued use of our website or services following such updates constitutes acceptance of the revised policy.

Contact Information

If you have any questions about this Privacy Policy or how we handle your data, please reach out to us: