Effective October 8, 2026
Our commitment to confidentiality
EPC Billing Co treats your personal information as confidential. We use information you provide to respond to your inquiry, discuss requested services, and support our business relationship. We do not sell your personal information or publish your contact-form submissions.
HIPAA compliance and Business Associate Agreements
EPC Billing Co is HIPAA-compliant in its handling of protected health information (PHI) for contracted billing and credentialing services. We sign Business Associate Agreements (BAAs) with covered-entity clients before receiving or handling PHI on their behalf. These agreements define permitted uses and disclosures, confidentiality obligations, and applicable safeguards under HIPAA.
PHI handled under a BAA is used or disclosed only as permitted by the agreement and applicable law. This website privacy policy is not a patient Notice of Privacy Practices and does not replace a signed BAA. Patients should contact their treating provider regarding medical records or patient privacy rights.
Information collected through this website
When you contact us, you may provide your name, business email address, facility name, service of interest, and message. Our website hosting and form-processing provider, Netlify, processes website requests and submissions on our behalf and may receive technical information such as an IP address and browser information when you visit or submit the form.
Please do not submit patient information
The public contact form is for general business inquiries, not patient information. Do not send patient names, medical records, diagnoses, dates of birth, insurance identifiers, or other PHI through this form or ordinary email. Contact us to arrange an appropriate transfer method and a BAA before sharing PHI. The HIPAA statement for contracted services does not mean the public website form is approved for PHI.
How information is used and shared
Personal information remains confidential and is disclosed only to authorized personnel or service providers who need it to process your inquiry or provide agreed services, or when disclosure is required by law. We may also disclose information where legally necessary to protect rights or address security incidents. Confidentiality does not mean that legally required or contractually authorized disclosures never occur.
Retention and security
Information is retained as needed to respond to inquiries, support agreed services, and meet applicable legal or contractual requirements. No method of internet transmission or electronic storage can be guaranteed to be entirely secure; please avoid including sensitive information in a general inquiry.
Questions and privacy requests
To ask about this policy, request a correction, or request deletion of your business inquiry information, contact contact@epcbilling.com or call 781-366-3953. Requests are subject to applicable legal and contractual retention requirements.
Policy updates
We may update this policy as our website or services change. The effective date above identifies the current version.