Privacy Policy

Your peace of mind matters to us.

Privacy Policy

At Crestalia Medx, the privacy and security of our clients’ information is one of our highest priorities. This Privacy Policy outlines how we collect, use, store, and protect your information when you interact with our website, services, and communication channels.

We do not collect any personal information unless you voluntarily provide it to us. Any personally identifiable information (PII) shared with Crestalia Medx is used strictly for the purpose for which it was provided, such as responding to inquiries or delivering our services. We do not sell, rent, or share your information with third parties for marketing purposes, ensuring the highest level of confidentiality and data integrity.

If you contact us, we may retain a record of that communication in order to respond to your request and improve our services. Any phone numbers collected for SMS or contact purposes will not be shared with third parties for promotional use.

This Privacy Policy applies only to information collected through our website and direct interactions with Crestalia Medx. It does not apply to information collected offline or through third-party websites.

About Crestalia Medx

Crestalia Medx is a medical billing and healthcare solutions company providing integrated Practice Management and Revenue Cycle Management (RCM) services. Our goal is to help healthcare providers optimize financial performance, streamline billing operations, improve compliance, and enhance overall revenue efficiency.

HIPAA Compliance

Crestalia Medx complies fully with the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act.

We take the protection of Protected Health Information (PHI) and Electronic Protected Health Information (ePHI) very seriously. PHI is only shared with authorized entities such as healthcare providers, billing partners, clearinghouses, employees, and insurance companies—and only after a valid Business Associate Agreement (BAA) is in place.

In situations involving third parties such as legal representatives or family members, PHI is disclosed only after receiving explicit authorization from the patient.

We handle all personal and medical data in strict compliance with federal and state regulations, including:

  • Sharing PHI only as permitted under HIPAA for treatment, billing, and healthcare operations

  • Disclosing information for audits or legal requirements when necessary

  • Ensuring secure storage and transmission of medical data

  • Never selling or misusing patient or client data

How We Collect Your Information

We clearly inform you of the information being requested at the time of collection. This may include:

  • Full Name

  • Email Address

  • Phone Number

  • Practice Name

  • City / State

  • Practice Size

  • Message or Attachments

This information is collected when you submit forms, request consultations, or contact us directly.

We do not collect sensitive personal data such as:

  • Racial or ethnic origin

  • Religious or philosophical beliefs

  • Genetic information

  • Biometric data

If you use our systems or platforms, we may request access credentials such as a Practice ID for service delivery purposes.

We may also automatically collect technical data when you visit our website, including:

  • Browser type and operating system

  • Pages visited and time spent

  • IP address

  • Device and usage patterns

This information is used solely for analytics, security, and website optimization.

Use of Information

Crestalia Medx uses collected information to:

  • Respond to inquiries and service requests

  • Improve website functionality and user experience

  • Prevent fraud and unauthorized activity

  • Communicate service updates and relevant information

  • Introduce new features or offerings

  • Provide customer support and account services

We do not use your information for unsolicited marketing.

Cookies

Our website uses cookies to enhance user experience and track website performance. Cookies allow us to understand visitor preferences and improve content delivery.

You may disable cookies through your browser settings at any time. However, some features of the website may not function properly without cookies.

We may also collect IP addresses and usage data to monitor site performance and improve user experience.

Log Files

Crestalia Medx uses standard log files for system analysis and performance monitoring. These files may collect:

  • IP address

  • Browser type

  • Internet Service Provider (ISP)

  • Date and time stamps

  • Referring and exit pages

  • Number of clicks

This data is used only for internal analytics and does not contain personally identifiable information.

Server Security

Our website and systems are hosted on secure cloud infrastructure with continuous monitoring and enterprise-grade security controls, including:

  • Firewalls

  • Intrusion detection systems

  • SSL (Secure Socket Layer) encryption

  • Encrypted data storage

All personal data is protected against unauthorized access, misuse, or disclosure.

Legal Disclosure

Crestalia Medx reserves the right to disclose information when required by law, legal proceedings, court orders, or to prevent fraud, security threats, or criminal activity.

We may also update this Privacy Policy from time to time to reflect changes in legal requirements, technology, or business practices. Any changes will be posted on this page.

Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Crestalia Medx
Email: consult@crestaliamedx.com


This version is:

  • Legally safer

  • HIPAA-aligned

  • Professionally written

  • Suitable for US healthcare compliance

  • Ready for direct website publishing