Privacy, HIPAA, and security

Scope of this notice

This notice explains how MakBPO LLC handles information collected through this website. It covers the contact form and standard server logs. It does not cover protected health information that MakBPO processes on behalf of a client, which is governed by the business associate agreement in place with that client.

Information we collect

When you submit the contact form we collect the name, work email, organization, and message you provide, along with any optional details you choose to add such as phone number, role, specialty, monthly claim volume, and the functions you are interested in.

Our hosting provider records standard technical information with each request, including IP address, user agent, and timestamp. We use the IP address to rate limit form submissions and reduce automated abuse.

Do not send patient information

This website is not an approved channel for protected health information. Please do not enter any protected health information into the contact form.

Protected health information means anything that identifies a patient or could be used to identify one. That includes patient names, dates of birth, addresses, telephone numbers, email addresses, Social Security numbers, medical record numbers, health plan or member identification numbers, account numbers, diagnoses, treatment details, and any other clinical information.

If you need to discuss a specific patient account, contact us first. We will establish a secure channel and execute a business associate agreement before any protected health information is exchanged.

How we use your information

We use what you submit to respond to your inquiry, to scope a potential engagement, and to follow up with you about it. We do not sell your information, and we do not share it with third parties for their own marketing.

Information you submit is transmitted through our email provider so that it reaches our team.

Security and compliance

MakBPO is HIPAA compliant and ISO 27001 certified. Our information security management program governs access control, staff training, and how we handle client data across our operations in the United States and North Macedonia.

Access to client systems and to any protected health information is limited to what a staff member's role requires. Staff are trained in handling protected health information before being placed on a client engagement.

Retention

We keep contact form submissions for as long as needed to respond to your inquiry and to maintain a record of our business correspondence. You can ask us to delete your inquiry at any time.

Your choices

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it. Write to the email address below and we will respond.

Contacting us

Questions about this notice, about our security posture, or about a business associate agreement can be sent to our contact address, or by post to MakBPO LLC, 440 E. Washington St, Syracuse, NY 13202.