Privacy Policy

1. Introduction

Blue Rock Physicians Group LLC (“Blue Rock Physicians Group,” “we,” “us,” or “our”) is a physician-led management services organization. We provide administrative, operational, and technology services — including credentialing, staffing support, compliance support, and practice management — to healthcare organizations. We do not provide medical care.

This Privacy Policy describes how we collect, use, disclose, and protect information in connection with our website at www.bluerockphysicians.com (the “Site”). The Site is informational: it exists so that healthcare organizations, prospective network providers, and other interested parties can learn about us and get in touch. It applies to visitors to the Site and to people who contact us through it.

This Privacy Policy does not apply to information handled under a separate services agreement between Blue Rock Physicians Group and a client organization, which is governed by that agreement and any applicable business associate agreement. It also does not apply to information held by healthcare providers, practices, pharmacies, or laboratories, each of which maintains its own privacy practices.

By accessing or using the Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, please discontinue use of the Site. This Privacy Policy is incorporated into and subject to our Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

The Site does not require you to create an account or provide any information to browse it. We collect information only when you choose to send it to us:

• Contact Form. The contact form does not transmit anything to us or store anything on the Site. It assembles what you type — your name, email address, phone number (optional), and your message — into a draft email in your own email application, which you then review and send yourself. We receive it as an ordinary email from your email account, and we receive nothing at all if you close the draft without sending it.
• Other Correspondence. Information contained in messages you send us by email or share with us by phone, including your contact details and whatever you choose to tell us about your organization or inquiry.

Please send only the information needed for us to route and answer your inquiry. Do not send protected health information, medical records, clinical details about yourself or anyone else, government identification numbers, or payment card details through the Site or by email. These channels are not encrypted and are not intended for sensitive information.

2.2 Information Collected Automatically

Like most websites, our Site and our hosting provider generate standard server logs when you visit, which may include:

• Device Information. Browser type and version, operating system, and device type.
• Log Data. Internet Protocol (IP) address, pages requested, referring URLs, access times, date and time stamps, and error and diagnostic data.
• Approximate Location. General geographic location derived from your IP address. We do not collect precise geolocation data.

2.3 Cookies and Similar Technologies

We do not currently use cookies, web beacons, pixels, analytics tools, or advertising trackers on the Site, and the Site does not build a profile of your browsing activity. If we add any such technology in the future, we will update this Privacy Policy and provide any notice or choice required by applicable law.

You may manage cookies generally through your browser settings. Because our Site does not rely on cookies, disabling them should not affect how it works.

2.4 Information We Do Not Collect Through the Site

We do not collect health or medical information, prescription or medication information, health insurance details, payment card or financial account information, Social Security numbers, or government identification documents through the Site. We do not purchase personal information about Site visitors from data brokers, and we do not receive prescription orders, claims data, or patient records through the Site.

3. How We Use Your Information

We use the information described above for the following purposes:

• Responding to Inquiries. To review, route, and respond to messages you send us, and to follow up about a potential working relationship with you or your organization.
• Business Communications. To send you information about our services where you have asked for it or where otherwise permitted by law. You may opt out at any time as described in Section 8.
• Operating and Improving the Site. To host, maintain, troubleshoot, and improve the Site and its content.
• Safety and Security. To detect, prevent, and respond to fraud, spam, abuse, unauthorized access, and other harmful or illegal activity.
• Legal Obligations. To comply with applicable laws and regulations, respond to lawful requests, and establish, exercise, or defend legal claims.

We do not use information collected through the Site for automated decision-making that produces legal or similarly significant effects, and we do not use it for profiling or targeted advertising.

4. How We Share Your Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We may share information with the following categories of recipients:

4.1 Service Providers

We engage third-party service providers to support our business operations, including website hosting, email delivery, and IT infrastructure. These providers may process information on our behalf and are contractually obligated to use it only for the purposes for which it was disclosed and to maintain appropriate security measures.

4.2 Professional Advisors

We may share information with our attorneys, accountants, auditors, insurers, and similar advisors where reasonably necessary in the course of the services they provide to us.

4.3 Legal Requirements and Protection of Rights

We may disclose information when we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request.
• Enforce our Terms of Service or other agreements.
• Protect the safety, rights, or property of Blue Rock Physicians Group, our users, or the public.
• Detect, prevent, or address fraud, security issues, or technical problems.

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or other business transaction involving all or a portion of our assets, information may be transferred as part of that transaction. We will provide notice of any such change in ownership or control of personal information where required by applicable law.

4.5 With Your Consent

We may share information for purposes not described in this Privacy Policy with your express consent.

5. Health Information and HIPAA

Blue Rock Physicians Group does not provide medical care, and the Site is not a patient portal. We do not ask for, and you should not send us, protected health information (“PHI”) through the Site, by email, or by text message. Information you volunteer through the contact form is treated as ordinary business contact information, not as PHI, and is not protected by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) simply because it mentions a health-related topic.

If you are a patient and you have questions about your medical records or your rights under HIPAA — including the rights to access, amend, restrict, or receive an accounting of disclosures of your health information — those rights are exercised with the healthcare provider, practice, or pharmacy that treats you. Please contact that entity directly and refer to its notice of privacy practices.

Where we act as a business associate of a HIPAA-covered entity under a services agreement, our handling of PHI in that role is governed by that agreement and the applicable business associate agreement, not by this Privacy Policy.

6. Data Security

We implement and maintain administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, disclosure, alteration, and destruction. These measures include:

• Encryption of Site traffic in transit using industry-standard protocols.
• Access controls that limit access to inquiry information to personnel who need it.
• Monitoring and maintenance of our systems and hosting environment.
• Employee training on privacy and security practices.

No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and information you send us through the Site or by email travels over channels that are not encrypted end to end. If you become aware of any unauthorized access to information you have sent us, please contact us at info@bluerockphysicians.com or (855) 425-7995.

7. Data Retention

We retain inquiry and correspondence information for as long as necessary to respond to you, to maintain a record of our business communications, and to satisfy legal, accounting, and reporting requirements. Server logs are retained for a limited period for security and troubleshooting purposes. Specific retention periods are determined based on:

• The nature of the information and the purpose for which it was collected.
• Applicable federal and state laws and regulations.
• Statute of limitations periods for potential legal claims.

When information is no longer required, we will securely destroy or de-identify it in accordance with our data retention and destruction practices and applicable law.

8. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information.

8.1 Access and Portability

You may request access to the personal information we hold about you and, where applicable, a copy of that information in a portable, commonly used format.

8.2 Correction

You may request that we correct or update inaccurate or incomplete personal information we hold about you.

8.3 Deletion

You may request that we delete your personal information, subject to certain exceptions, including where we are required to retain it to comply with a legal obligation or to establish, exercise, or defend legal claims.

8.4 Opt-Out of Business Communications

You may opt out of receiving marketing or promotional communications from us at any time by:

• Clicking the “unsubscribe” link in any marketing email.
• Replying to any message from us asking to be removed.
• Contacting us at info@bluerockphysicians.com or (855) 425-7995.

Even if you opt out of marketing communications, we may still reply to an inquiry you sent us or contact you about an existing business relationship.

8.5 Cookie Preferences and Do Not Track

As described in Section 2.3, the Site does not use tracking cookies or analytics technologies, so there is nothing to opt out of. The Site does not respond to “Do Not Track” browser signals, and there is no tracking for such a signal to disable.

To exercise any of the rights described in this section, please contact us using the information provided in Section 13. We will respond within the timeframe required by applicable law and may need to verify your identity before processing your request.

9. State-Specific Privacy Rights

Residents of certain states may have additional privacy rights under applicable state law. Note that many state privacy laws apply only to businesses that meet specific revenue or data-volume thresholds; we honor the requests described below regardless of whether a particular law applies to us.

9.1 California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), may provide you with additional rights regarding your personal information, including:

• Right to Know. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete. You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct. You have the right to request the correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing. Blue Rock Physicians Group does not sell personal information and does not share it for cross-context behavioral advertising, so there is no sale or sharing to opt out of.
• Right to Limit Use of Sensitive Personal Information. We do not collect sensitive personal information through the Site.
• Right to Non-Discrimination. We will not discriminate against you for exercising any of your rights under the CCPA/CPRA.

In the twelve months preceding the date of this Privacy Policy, the only categories of personal information we have collected through the Site are identifiers (such as name, email address, phone number, and IP address) and the contents of communications you chose to send us. We collected them for the business purposes described in Section 3.

To exercise your CCPA/CPRA rights, please contact us at info@bluerockphysicians.com or (855) 425-7995. You may also designate an authorized agent to submit a request on your behalf.

9.2 Other State Privacy Laws

Residents of other states with comprehensive privacy laws, including but not limited to Colorado, Connecticut, Virginia, and Texas, may have additional rights under their respective state privacy laws, such as:

• The right to access, correct, and delete personal information.
• The right to data portability.
• The right to opt out of targeted advertising, the sale of personal information, and profiling. We do not engage in any of these activities through the Site.
• The right to appeal a denial of a privacy request.

To exercise any state-specific privacy rights, please contact us using the information provided in Section 13. We will process your request in accordance with the applicable state law.

10. Children’s Privacy

The Site is intended for a business audience and is not directed to children. We do not knowingly collect personal information from children under 18 through the Site. If a parent or legal guardian becomes aware that their child has provided us with personal information, they should contact us at info@bluerockphysicians.com. If we become aware that we have collected personal information from a child under 18 through the Site, we will take steps to delete it promptly.

11. Third-Party Links

The Site may contain links to third-party websites, applications, or services that are not owned or controlled by Blue Rock Physicians Group. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will post the updated policy on the Site with a revised “Date of last revision” at the top. We may also provide additional notice if required by applicable law.

Your continued use of the Site after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Blue Rock Physicians Group
Phone: (855) 425-7995
Email: info@bluerockphysicians.com
Website: www.bluerockphysicians.com

If you are a patient with a concern about your medical records or your rights under HIPAA, please contact the healthcare provider, practice, or pharmacy that treats you. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr/complaints or by calling (800) 368-1019.