This privacy policy (“Policy”) outlines how Horizon Medical Billing and its affiliated companies, subsidiaries, and parent companies (referred to as “Horizon,” “we,” “us,” “our,”) collect, use, and disclose information obtained from you through various websites and applications, including https://horizonmso.com/, that link to this Policy (collectively referred to as the “Sites”). This Policy also governs the collection of information that occurs offline, such as when you visit our physical offices, attend Horizon events, or interact with our representatives at other events, or in any other circumstances where this Policy is made available to you.
The terms of this Policy are not applicable to Horizon product offerings that have separate privacy policies or to third-party websites that we may link to. We have no control over and cannot be held responsible for the privacy practices of third-party websites. Therefore, we advise you to review any relevant privacy policies of these third-party websites independently.
Horizon processes data on behalf of healthcare providers in accordance with the agreements we have with our customers. These agreements may require Business Associate Agreements as per the Health Insurance Portability and Accountability Act (“HIPAA”). Your healthcare provider may have its own policies and practices regarding the collection and use of your data. We are not responsible for how your healthcare provider handles your information, and it is advisable that you review their privacy policies.
Horizon, headquartered in the United States, is a company that provides network-enabled services to healthcare, hospital, and ambulatory customers across the country. Our healthcare cloud-based solutions provide healthcare providers with various options such as electronic health records, patient engagement tools, and revenue cycle management. For further details regarding Horizon, kindly refer to the “About” section on https://horizonmso.com.
At Horizon, we prioritize transparency, compliance, and respect in all our communications. As a medical billing, medical coding, provider credentialing, and revenue cycle management (RCM) company, we ensure our practices align with the highest standards. Below, we outline how we communicate with our clients and staff, as well as our commitment to safeguarding your information and respecting your preferences.
We strictly use SMS for:
A contracted healthcare provider may receive an SMS like: “Dear [Provider Name], your billing update for January is now available in your portal. Please let us know if you have any questions. — Horizon Team”
We never send promotional or marketing messages to any individual or business.
We exclusively use RingCentral to communicate with:
We use RingCentral only for work-related discussions—there is no promotional or marketing communication through this platform.
At Horizon, we do not initiate contact with healthcare providers through unsolicited marketing messages or promotions.
If a healthcare provider fills out our “Contact Us” form on the Horizon website to schedule a consultation or request information, they explicitly provide their consent to be contacted by our Customer and Sales Team for the requested discussion.
When submitting the form, the provider agrees to the following terms: “I consent to receive SMS from Horizon. Reply STOP to opt-out; Reply HELP for support; Message and data rates apply; Messaging frequency may vary.”
Important Clarification: While this consent is collected as an added precaution, we never send SMS to healthcare providers who simply fill out the contact form on our website. Our primary mode of communication in such cases is always via phone calls, ensuring a direct and professional approach.
Once a healthcare provider becomes a contracted client, we use RingCentral and/or SMS to communicate about:
Examples:
Note:
Before we send any SMS communication, clients explicitly provide their consent to receive messages. This consent is solely for messages related to work purposes or service-specific, work-relevant updates. These communications are directed exclusively to contracted healthcare providers (our clients).
Once a healthcare provider decides to discontinue our services or their medical billing contract with Horizon has ended, we automatically stop sending them messages. However, for their added peace of mind, we also provide an easy opt-out option for SMS communications.
“You have successfully opted out of SMS communication from Horizon. Thank you for working with us. If you need assistance in the future, feel free to contact us directly.”
Horizon, as a message sender, maintains a private healthcare relationship with the recipient, who is one of their contracted clients. Consent for messaging is obtained either verbally or through digital forms.
If consent is given verbally, the sender clearly identifies themselves as Horizon and explains the purpose of the messages, which may include general medical billing consultancy or business communications. Recipients are informed about how to opt out by replying “STOP” at any time and can receive assistance by replying “HELP.” They are also made aware that message frequency may vary and that standard messaging and data rates may apply. Additionally, recipients are notified about Horizon’s privacy policy and terms of service related to messaging communication.
When consent is obtained through online forms, the following statement is presented:
“By providing your phone number and clicking ‘Submit,’ you consent to receive text messages from Horizon if you become a contracted customer. You also agree to our Communications Policy and Privacy Policy. Consent is not required for purchase. Message frequency may vary, and standard message/data rates may apply. Reply HELP for assistance or STOP to opt out.”
At Horizon, we are committed to maintaining transparent and compliant communication with our clients. To ensure compliance with carrier SMS policies and obtain clear consent from our customers, we have implemented a verbal consent process that adheres to all necessary guidelines.
When a customer registers for our services for the first time, Horizon’s trained staff members follow a standardized verbal script to obtain consent for SMS-based notifications related to their contracted service.
The verbal consent script is as follows:
“Thank you for choosing Horizon. To keep you informed, we offer SMS notifications for billing reminders, account updates, and service-related alerts. Before confirming your opt-in, I need to share a few details:
May we send you SMS notifications with these details in mind?”
“Yes, I agree.”
“Thank you! You’ll receive a confirmation text shortly. Remember, you can unsubscribe anytime by replying to STOP.”
To further ensure proper consent, we also offer our clients an SMS Consent Form, which outlines the details of the communication they will receive and provides them with an opportunity to formally agree. The SMS Consent Form includes the following statements:
To further ensure proper consent, we also offer our clients an SMS Consent Form, which outlines the details of the communication they will receive and provides them with an opportunity to formally agree.
By using this comprehensive verbal consent process, Horizon ensures that our customers are fully informed and can easily manage their communication preferences. This approach demonstrates our commitment to protecting our clients’ rights and maintaining compliance with SMS regulations.
At Horizon, the forms available on our website are specifically designed to help healthcare providers conveniently schedule a free demo or consultation regarding our services. This process ensures that the providers themselves are in control of appointing a time to engage with us.
Here’s a detailed breakdown of how our forms are used and how we handle communication:
A healthcare provider might fill out the form to request a demo. Our team would then contact them with a call like: “Hello Dr. James, this is John from Horizon. Thank you for filling out our Contact Us form and scheduling a consultation. We’d love to walk you through our services. Do you have a few minutes now to discuss?”
Example of Work-Related SMS After Contracting:
“Hi Dr. Jasica, your latest claim submissions have been processed. Please check your portal for details or let us know if you need assistance. —Horizon Team”
We safeguard Protected Health Information (PHI) through:
Your information is protected with enterprise-grade measures:
Example of Our Commitment:
We believe in clear, honest, and respectful communication. Whether you are an existing client or a prospective one, our practices ensure that we communicate only for legitimate reasons and always with your consent.
If you have any questions about this policy or wish to learn more, please contact us via the form on our website or call our designated contact number.
Our forms let healthcare providers schedule consultations or demos. Once submitted, we call the provider directly—no SMS is sent at this stage.
No, we never send marketing or promotional messages. SMS is strictly for work-related updates and queries for contracted clients.
We use SMS only after a provider becomes a contracted client, and only for service-related updates and support.
Consent is obtained when clients provide their details or fill out our forms. However, SMS is used only after they become contracted clients.
Yes, clients can reply STOP to any SMS, and we immediately stop sending messages. This is also an option if their contract ends.
No, we do not currently use automated messaging. If used in the future, it will fully comply with RingCentral’s policies and guidelines.
We comply with RingCentral’s policies, such as not exceeding message limits, avoiding link shorteners, and obtaining express consent.
Yes, we do not send messages related to loans, debt relief, political ads, or any prohibited content as per RingCentral guidelines.
We stop all SMS communication once a contract ends, but we still provide opt-out instructions for added peace of mind.
Yes, Horizon is fully HIPAA-compliant, ensuring all communication and client information is secure.
If you have inquiries, remarks, or wish to exercise your rights under an applicable state law concerning this Policy, the ways in which Horizon collects and uses your information as described here, or your choices and rights regarding such use, please contact us via:
Personal information is data that can be utilized to identify an individual. The specific types of personal information we gather depend on the nature of your interactions with us. In the last 12 months, we have obtained personal information that falls under the following broad categories:
Identifiers, which includes details like your name, email address, or IP address.
Information from our customer records, like your postal address or phone number.
Commercial information, such as information regarding products or services that you have purchased.
Electronic network activity information, such as your engagement with our website.
Professional or employment-related information, such as your job title or employer.
Geolocation data, which may include general location information (such as city/state) derived from your IP address or precise location information obtained via GPS-based functionality. In cases where we require precise geolocation information, we will seek your permission to collect or use it, in accordance with relevant legal requirements, particularly if it is classified as “sensitive” information under applicable law.
We may obtain your personal information in various ways, which include the following:
Information that you directly provide to us, such as when you voluntarily fill out fields on the Sites, request specific services or information, participate in surveys, or contact our customer service. Depending on how you interact with us, we may ask for details like your name, organization/practice name, email address, phone number, and user type (e.g., patient, provider, partner). If you have an account with us, we may also collect login information like your username or Practice ID. If you attend our physical events or visit our offices, we may ask for information such as health and travel details to ensure the safety of our personnel, clients, guests, and the public.
Automatic data collection technologies, like those mentioned in the “Cookies and Automated Data Collection Technologies” section below, may be used to collect information about your device and your visit to our Sites. This data may include your IP address, geolocation, browser type, device type, mobile device identifiers, and activity reflecting your browsing history on our Sites (such as mouse movements, clicks, touches, scrolls, and keystrokes).
Information from other sources, such as lead generation companies, social networks, or business partners offering co-branded services or assisting with the sale or distribution of our products, may also be collected. We may also obtain information from other users of our services or publicly available sources.
We utilize your personal information in the following ways:
In ways that are expected based on the reason for collecting it. For instance, if you contact us with a request for information, we will use your information to respond to your request. To provide, enhance, and improve our services, including optimizing our Sites’ functionality and identifying areas of interest for our visitors and users. Feedback from surveys, screeners, and other feedback mechanisms may be used to develop new products and services. To identify and authenticate you as an existing user or a prospective client. To enable cross-device/cross-context tracking for your account(s). To communicate with you through emails, newsletters, announcements, and other types of communication. To maintain the safety, security, and integrity of our Sites and services, and for legal compliance purposes. To ensure the safety of our personnel, clients, guests, and the public. For purposes explained at the time of collection or other business purposes consistent with the context of the collection.
We may use non-identifiable information (such as aggregated, anonymized, or de-identified data) for any purpose that is not prohibited by applicable law.
The personal information we reveal for commercial purposes falls into these categories: identifiers, commercial data, internet activity, and geolocation data.
We may share your personal information outside of Horizon in the following circumstances:
We may also reveal your information to other entities in the following situations: When you provide us with your consent to share or utilize information about you; When we believe it is necessary to share information about you to fulfill a service you have requested from us or others; When we are legally obligated or compelled to disclose information, such as in response to a lawful request by public authorities or to meet national security or law enforcement requirements; When we deem it necessary to prevent legal violations or liability; To safeguard the rights, property, life, health, security, or safety of ourselves, the Sites, or anyone else; In the event of an actual or potential purchase, merger, or acquisition of all or a part of our business by an actual or potential buyer (and their agents and advisers); At your request or direction, such as when you elect to share information about your activities on the Sites with a social network; or With any other party with your consent and advance notice of the disclosure.
However, we may still disclose information that does not identify you and could not reasonably be used to identify you (including aggregated, anonymized, or de-identified data) as allowed by relevant laws. Concerning de-identified patient information, we only share such data with third parties if it is authorized under our agreements with our clients and is in accordance with the requirements of HIPAA or other applicable laws. We use either the safe harbor method or the expert determination method as set out in HIPAA. The third parties who receive the de-identified data include third-party vendors and service providers with whom we have partnerships or relationships, as well as academic researchers and institutions that contribute to the healthcare industry.
We safeguard your information using various security measures, including encryption for sensitive information. However, we can’t guarantee that your information is completely secure. We keep information for different periods depending on why we collected it, and we won’t keep it longer than needed unless required by law. Sometimes we may be unable to delete or de-identify your information for technical or operational reasons, but we’ll take steps to prevent further processing.
Our websites use various automated data collection technologies including cookies, pixels, ad tags, SDKs, clear GIFs, session replay scripts, and JavaScript to enhance user experience, gather statistical information on website usage, and maintain website security. Cookies, which are small text files stored on your device, are among these technologies and help the website to function effectively.
We use cookies and other similar technologies on our Sites to help us gather statistical information about how visitors use the Sites, maintain security, and improve your experience. Additionally, cookies enable us to deliver advertisements, some of which may be personalized based on your behavior on the Sites. To help us deliver these ads, we work with third-party partners who may collect information about you across our Sites and third-party sites over time to gain insights into the goods and services that may interest you. This information can also be used to associate different devices that you use.
To manage your cookie preferences, you can access the “cookie preferences” link located at the bottom of any of our websites.
Our services and websites may contain integrations with social media and technology platforms that are operated by separate entities. Additionally, we may collect information from third-party social media and marketing companies to improve our data sets. Our sites contain hyperlinks to websites, platforms, and other services that are not operated or controlled by us. We may use a pixel or SDK on our Sites that enables you to “like”, “share” or log in to your account through social media. If you decide to interact with this integration, we may receive information from the social network you have authorized to share with us. Please be aware that the social network may also collect information about you independently. We may provide our content on social media platforms, and any information you give us while interacting with our social media content will be handled in accordance with this Policy. If you publicly mention our Sites on social media, we may use your mention on or in relation to our Sites. Our Sites may allow you to link your account with a partner or another service to retrieve certain data about your account. If you link your account, we may obtain information such as your username and email address. To learn more about how these platforms handle your information, please refer to their respective privacy policies and terms of use.
When you engage with third-party entities, such as when you leave our Sites, they may collect information from you and store it according to their own policies and practices. This includes what information they share with us, your rights and choices, and where they store information. To understand how these entities handle your information, we recommend reviewing their privacy policies and terms of use.
Residents of states with applicable consumer privacy laws may have the following rights: the right to know whether we process their personal information; the right to access their personal information; the right to correct inaccuracies in their personal information; the right to have their personal information deleted; the right to receive a portable and readily usable copy of their personal information; the right to opt out of the sale or sharing of their personal information; the right to opt out of the processing of their personal information for targeted advertising or automated decision-making purposes.
If you reside in a state that mandates prior consent for processing sensitive personal information for specific purposes, we will obtain such consent, and you may withdraw it at any time.
We may ask you to provide us with information necessary to reasonably verify your identity before responding to your request. We will consider all requests and provide our response within the time period required by applicable law. Please note, however, that certain information may be exempt from such requests. If we deny your request in whole or in part, you may have the right to appeal the decision. In such circumstances, we will provide you with information regarding the appeals process.
Before responding to your request, we may ask you to provide information to verify your identity. We will respond to your request within the time period required by law and consider all requests. However, some information may be exempt from requests. If we deny your request, you may have the right to appeal the decision and we will provide information about the appeals process.
We aim to respond to your request as a consumer within 45 days of receiving it. If we need more time (up to 90 days), we will notify you in writing or by email and explain the reason for the extension.
Here are the categories of information we may have collected about you in the past year, along with the reasons for collection and the third parties with whom your personal information may have been shared, disclosed, or sold.
Categories: identifiers, information contained in our customer records, commercial information, internet or other electronic network activity information, professional or employment information, geolocation data, inferences drawn from other personal information.
Purposes for the collection or sharing: to provide, improve, and/or personalize the Sites, for marketing and advertising, for business operations, to identify where you have provided consent, as required by law, to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets.
Third parties to whom this data was disclosed, shared, or sold: service providers, third party partners, our related entities, other users through the Sites because you made your information public or otherwise accessible, with our customers, where you have given us your consent.
If you are a California resident, you may have the following rights with respect to the personal information we process about you:
You, or a legally authorized representative, may submit a verifiable consumer request regarding your personal information. If you are making a request on behalf of a minor child, you may do so as well. To verify your identity, we may request information from you. We may require you to use your email address to verify your identity. Once we receive a request, we will respond within the time period required by law. Some information may be exempt from requests. If we deny your request, you have the right to appeal the decision. You may make a consumer request for access or data portability twice within a 12-month period. We will not discriminate against you for exercising your rights.
We strive to respond to consumer requests within 45 days of receiving them. However, if we need more time (up to 90 days), we will let you know the reason for the delay and the extended timeline through email or written communication. It’s important to note that any disclosures we provide will only pertain to the 12-month period leading up to the consumer request. Additionally, if we cannot fulfill a request, we will provide an explanation as to why we are unable to do so.
If you are a California resident, you may request information under California’s “Shine the Light” law (Civil Code Section § 1798.83) regarding our disclosure of personal information to third parties for their direct marketing purposes. Specifically, you may request (i) a list of the categories of personal information disclosed by us to third parties during the immediately preceding calendar year for those third parties’ own direct marketing purposes; and (ii) a list of the categories of third parties to whom we disclosed such information. To make such a request, please write to our Chief Compliance Officer at Horizon Medical Billing. Please note that we may require additional information from you to verify your identity, and we are only required to respond to one request per calendar year.
The Sites are not intended for individuals under the age of eighteen. Horizon does not want to obtain any information from or about minors through the Sites. We do not knowingly collect personal information about children under the age of 13, as defined by the U.S. Children’s Privacy Protection Act (COPPA). If you are a parent or guardian and believe that we have collected information from your child in violation of the law, please contact us using the information provided in the “Contact” section below, and we will remove the data in compliance with applicable laws. We do not “sell” the personal information of California residents under the age of 16, as defined under the CCPA.
If you access our Sites from outside the U.S., please note that we are governed by U.S. law, and the information we collect may be processed, stored, and used in the U.S. and other locations. The data protection laws in the U.S. and other jurisdictions may differ from those in your country. By using our Sites or providing us with your information, you agree to the transfer, processing, usage, sharing, and storage of your information in the U.S. and other jurisdictions as described in this Policy.
We may update and modify this Policy at our discretion and at any time. Any changes will be posted on www.horizonmso.com, along with the effective date, and will be considered effective as of that date. Your continued use of the Sites after the posting of changes indicates your acceptance of the revised Policy.
Horizon Medical Billing is one of the the best medical billing company in the USA available to serve you with medical billing issues.
