01Who we are
Marlow (“we”, “us”) provides medical billing services to independent outpatient practices in the United States. The legal entity responsible for this website, and its mailing address, will be named here before Marlow begins working with clinics.
02What this policy covers
This policy covers personal information we collect through this website, including the contact form, the free billing audit request form and the pricing estimate. It does not cover patient health information we receive while providing services to a clinic; that is covered by HIPAA and by the Business Associate Agreement we sign with each client (see section 5).
03Information we collect
Information you give us. When you use a form on this website, we collect what you enter: for example your name, clinic name, work email, phone number, specialty, number of providers, the systems you use, how your billing is done today and any message you write.
Information collected automatically. Our hosting provider keeps standard server logs, such as IP address, browser type and pages requested, for security and troubleshooting.
What the pricing estimate does. The figure you type into the pricing estimate is used in your browser to show a result.
Information we ask you not to send. Please do not include patient information, such as names, dates of birth, member IDs or details of care, in any website form. If we receive it through a form by mistake, we will delete it from the form record.
04How we use it
We use the information described above to:
- reply to your messages and requests;
- send you the audit BAA and the secure upload link, prepare your practice profile and talk it through with you;
- send you a quote, if you ask for one;
- operate, secure and improve this website;
- meet legal obligations and protect our rights.
We will only send you marketing email if you have asked for it or if the law otherwise allows it, and every such email will include a way to opt out.
05Patient information and HIPAA
Remittance files (835s and EOBs), AR reports and other records you send through our secure upload link may contain protected health information (PHI). We handle PHI only through HIPAA-covered systems and only as allowed by HIPAA and our Business Associate Agreement with your clinic. Before any clinic uploads files for a free audit, we sign a short BAA with that clinic; the secure upload link opens only after it is signed. Clients sign a BAA as part of their client agreement. Where this website policy and a BAA differ on PHI, the BAA applies.
07Cookies and similar technology
This website uses only the cookies and browser storage it needs to work, for example to remember that you have already seen the opening animation in this session. We do not use advertising cookies. If that changes, we will update this policy and ask for your consent where the law requires it.
08How long we keep it
We keep form submissions and related messages for as long as we need them to respond to you and for our ordinary business records, and then delete them. If you become a client, information about your clinic is kept as described in our client agreement.
09How we protect it
We use reasonable administrative, technical and physical safeguards to protect personal information, including encryption in transit and limited staff access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. For how we protect patient data, see our Security and compliance page.
10Your choices and rights
You can ask us to access, correct or delete the personal information we hold about you, or to stop sending you marketing email, by writing to us through our contact page. Depending on where you live, you may have additional rights under state law, such as the right to know what we collect and the right not to be discriminated against for using your rights. We will respond within the time the applicable law requires and may need to verify your identity first.
11Children
This website is for businesses and is not directed to children under 13. We do not knowingly collect personal information from children.
12Changes to this policy
We may update this policy. When we do, we will change the “Last updated” date at the top, and if the changes are significant we will say so on this page.
13Contact
Questions about this policy or your information: write to us through our contact page, and a person on our team will reply. A postal address will be added here with the legal entity’s name.
End of policy