How we collect, use, and protect information.

Overview

The Xylo International ("Xylo," "we," "us") provides medical billing and revenue cycle management services to healthcare practices. This Privacy Policy explains how we collect, use, and safeguard information gathered through our website, and how we handle information belonging to our practice clients and their patients in the course of providing services.

Information We Collect

We collect information in a few different ways:

• Information you submit to us — name, practice name, email, phone number, specialty, and any message details you provide through our contact form or by phone/email.
• Automatically collected information — IP address, browser type, device information, and pages visited, gathered through standard web server logs and cookies.
• Client & engagement information — billing, coding, and practice-management data shared with us once a service agreement is in place, handled under the terms of that agreement and any applicable Business Associate Agreement.

How We Use Information

We use the information we collect to:

• Respond to inquiries and requests for a billing audit or consultation
• Provide, maintain, and improve our billing and RCM services for existing clients
• Send service-related communications and, where permitted, occasional updates about our services
• Monitor and improve the security and performance of our website
• Meet legal, regulatory, and contractual obligations

How We Share Information

We do not sell personal information. We may share information with:

• Clearinghouses, payers, and other parties necessary to process claims on behalf of our clients
• Service providers who support our operations under confidentiality obligations (e.g. hosting, email delivery)
• Regulators or authorities where required by law

Cookies

Our website uses cookies to remember basic preferences and understand aggregate traffic patterns. You can disable cookies through your browser settings; some site features may not function as intended if you do.

Data Security

We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction, including access controls, encryption in transit, and audit logging appropriate to the sensitivity of the data involved.

Data Retention

We retain information for as long as necessary to provide our services, meet legal and regulatory recordkeeping requirements, and resolve disputes, after which it is securely deleted or de-identified.

Your Choices & Rights

You may ask us to correct or delete personal information you've submitted through our website by contacting us at info@thexylo.co. Patients seeking access to or correction of their medical records or billing information should contact their healthcare provider directly, as Xylo acts on the provider's behalf.

Children's Privacy

Our website is intended for business use by healthcare practices and is not directed at children. We do not knowingly collect personal information from children through our website.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.

Contact Us

Questions about this Privacy Policy can be directed to info@thexylo.co or +1 (800) 555-0199.