Effective Date: July 1, 2026
Last Updated: July 1, 2026
Introduction
At ASK Provider Services, we take privacy seriously. The nature of our work means we regularly handle sensitive personal and professional information on behalf of healthcare providers, medical practices, and their staff. We understand the responsibility that comes with that, and we want to be completely transparent about what information we collect, why we collect it, how we use it, and how we protect it.
This Privacy Policy applies to all visitors of our website at www.askproviderservices.com and all clients who engage ASK Provider Services for professional administrative services. It covers information collected through our website, through direct communication with our team, and through the course of providing our services.
Please read this policy carefully. By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our website and refrain from engaging our services until your concerns have been addressed.
If you have questions about anything in this policy, you are welcome to contact us directly. We would rather answer your questions than have you proceed without understanding how your information is handled.
1. Who We Are
ASK Provider Services is a fully virtual healthcare administrative services company serving providers across all 50 states of the United States. We assist healthcare providers with medical credentialing, insurance panel enrollment, provider enrollment, recredentialing, CAQH management, NPI registration, and Medicare and Medicaid enrollment.
Because our services involve working directly with insurance companies, government agencies, hospitals, and credentialing organizations on behalf of our clients, we necessarily collect and handle a significant amount of personal and professional information. This policy explains exactly how that information is managed.
Our website is located at www.askproviderservices.com. All references to “ASK Provider Services,” “we,” “us,” or “our” in this policy refer to ASK Provider Services as a company. All references to “you” or “your” refer to any individual visiting our website or engaging our services, whether as a prospective client, active client, or general site visitor.
2. Information We Collect
We collect different types of information depending on how you interact with us. This section explains each category of information we may collect and the context in which we collect it.
2.1 Information You Provide Directly
When you contact us through our website form, by phone, or by email, or when you engage our services as a client, you may provide us with the following types of information:
Personal Identification Information
- Full legal name
- Date of birth
- Social Security Number or Individual Taxpayer Identification Number
- Home address and mailing address
- Personal email address
- Personal phone number
Professional Information
- Medical license numbers and issuing states
- National Provider Identifier (NPI) number
- DEA registration number
- CDS certificate information
- Board certifications and specialty designations
- Medical school, residency, and fellowship history
- Work history and employment records
- Hospital affiliations and privileges
- Malpractice insurance information and claims history
- Curriculum vitae or professional biography
- CAQH ProView login credentials (where applicable and authorized)
- Tax identification numbers for billing purposes
- Medicare and Medicaid provider numbers
Practice Information
- Practice name and legal entity name
- Practice address and contact information
- Group NPI numbers
- Payor contracts and agreement details
- Information about other providers within a group practice
Communication Information
- Any information you share with us through email, phone calls, contact forms, or other communications, including questions, requests, concerns, and instructions
2.2 Information Collected Automatically Through Our Website
When you visit our website, certain information is collected automatically through standard web technologies. This information is generally non-identifying on its own but may be combined with other data in some circumstances.
Technical Information
- IP address
- Browser type and version
- Operating system
- Device type
- Referring URL (the page you came from before visiting our site)
- Pages visited on our website
- Time and date of your visit
- Time spent on each page
Cookie Information
Our website may use cookies, small text files stored on your device, to improve your browsing experience and understand how visitors use our site. Cookies we may use include:
- Essential cookies that are necessary for the website to function properly
- Analytics cookies that help us understand visitor behavior and improve our content
- Preference cookies that remember your settings and preferences
You can control cookie settings through your browser. Most browsers allow you to refuse cookies or delete existing ones. Please note that disabling certain cookies may affect how some parts of our website function.
2.3 Information Received From Third Parties
In the course of providing our services, we may receive information about you or your practice from third-party organizations. This includes:
- Verification results from primary source verification of your licenses and certifications
- Information returned by the NPPES system related to your NPI registration
- Information from the CAQH ProView database related to your provider profile
- Responses and status updates from insurance companies, government agencies, and credentialing bodies
- Information from the PECOS system related to your Medicare enrollment status
- State Medicaid agency responses related to your enrollment applications
This information is received solely for the purpose of managing your credentialing, enrollment, or licensing applications and is handled with the same level of care as information you provide directly.
3. How We Use Your Information
The information we collect is used for specific, defined purposes. We do not use your information beyond what is necessary to provide our services and operate our business responsibly.
3.1 To Provide Our Services
The primary reason we collect personal and professional information is to carry out the services outlined in your service agreement. This includes:
- Preparing credentialing, enrollment, and licensing applications on your behalf
- Submitting those applications to insurance companies, government agencies, hospitals, and credentialing organizations
- Following up with third-party organizations regarding the status of your applications
- Updating your CAQH profile and maintaining your provider records
- Communicating with payors and credentialing bodies on your behalf as your authorized representative
Without this information, we cannot effectively prepare or submit applications, and the quality and accuracy of your applications would be compromised.
3.2 To Communicate With You
We use your contact information to communicate with you about your applications, service updates, and any information we need from you. This includes:
- Sending weekly or biweekly status updates on your open applications
- Notifying you of decisions, approvals, or denials received from third-party organizations
- Requesting additional documents or information needed to process your applications
- Responding to your questions and inquiries
- Sending administrative communications related to your service agreement, including payment reminders and renewal notices
We do not use your contact information to send unsolicited marketing communications. If we introduce a newsletter or informational update service in the future, participation will be optional and you will have the ability to opt out at any time.
3.3 To Improve Our Services and Website
We use anonymized and aggregated data collected through our website to understand how visitors interact with our content and identify areas for improvement. This may include:
- Analyzing which pages receive the most traffic
- Understanding how visitors find our website
- Identifying common questions or concerns that inform our content
- Improving the structure and usability of our website
This data is used in aggregate form and is not linked to any individual visitor’s identity.
3.4 To Comply With Legal Obligations
In some circumstances, we may be required to use or disclose your information to comply with applicable laws, regulations, or legal processes. This includes:
- Responding to lawful requests from government authorities or regulatory agencies
- Complying with court orders or subpoenas
- Meeting reporting obligations under applicable healthcare regulations
- Cooperating with investigations by regulatory bodies where required by law
We will notify you of any such request where we are legally permitted to do so.
3.5 To Protect Our Business and Clients
We may use information to detect, investigate, and prevent fraudulent activity, unauthorized access, or any other conduct that violates our Terms and Conditions or applicable law. This includes monitoring for unusual account activity and verifying the identity of individuals claiming to represent a client organization.
4. How We Share Your Information
We understand that sharing your information is a serious matter, particularly given the sensitive nature of healthcare provider data. We share your information only when necessary, and only under the circumstances described below.
4.1 With Third-Party Organizations for Service Purposes
The most significant sharing of your information occurs when we submit your applications to third-party organizations on your behalf. This includes:
- Insurance companies and managed care organizations for enrollment and panel applications
- The Centers for Medicare and Medicaid Services (CMS) for Medicare and Medicaid enrollment
- State Medicaid agencies for state-level Medicaid enrollment
- CAQH ProView for profile setup and management
- The National Plan and Provider Enumeration System (NPPES) for NPI registration
- Hospitals, clinics, and health systems for credentialing and privilege applications
- Credentialing verification organizations (CVOs) involved in the review process
- State medical boards and licensing authorities for license applications and verifications
This sharing is carried out solely to fulfill the services you have engaged us for and is authorized by you when you sign your service agreement.
4.2 With Service Providers Who Support Our Operations
We may share limited information with trusted third-party service providers who assist us in operating our business. These may include:
- Cloud storage and document management providers
- Communication and email platform providers
- Website hosting and security providers
- Payment processing companies
All third-party service providers who have access to client information are required to handle that information securely and use it only for the specific purpose for which it was shared. We do not authorize any service provider to use your information for their own purposes.
4.3 In Connection With a Business Transfer
If ASK Provider Services is involved in a merger, acquisition, sale of assets, or similar business transaction, client information may be transferred as part of that transaction. In such a case, we will notify affected clients prior to the transfer and ensure that the receiving party is bound by privacy obligations no less protective than those outlined in this policy.
4.4 When Required by Law
We may disclose your information when required to do so by law, including in response to a court order, subpoena, regulatory requirement, or lawful request from a government authority. Where permitted by law, we will make reasonable efforts to notify you before disclosing your information in response to such a request.
4.5 What We Will Never Do
To be completely clear about our commitment to your privacy:
- We will never sell your personal or professional information to any third party
- We will never share your information with marketing companies or data brokers
- We will never use your information for any purpose unrelated to the services we provide you
- We will never disclose your information to unauthorized individuals or organizations
5. HIPAA and Healthcare Privacy
5.1 Our Commitment to HIPAA Compliance
To the extent that our services involve the handling of protected health information (PHI) as defined under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations, ASK Provider Services is committed to handling such information in full compliance with applicable HIPAA requirements.
5.2 Business Associate Agreements
When our services involve access to PHI belonging to a covered entity, ASK Provider Services is prepared to enter into a Business Associate Agreement (BAA) as required under HIPAA. Clients who require a BAA should request one before or at the time of signing their service agreement. We will not unreasonably delay or refuse to execute a BAA where one is legally required.
5.3 Safeguards for Protected Health Information
We implement administrative, physical, and technical safeguards to protect any PHI we handle in the course of providing our services. These safeguards are designed to prevent unauthorized access, use, or disclosure of PHI and are reviewed and updated on a regular basis.
5.4 Breach Notification
In the event of a breach of unsecured PHI that affects your information, ASK Provider Services will notify you in accordance with the breach notification requirements under HIPAA. Notifications will be made promptly and will include information about what occurred, what information was involved, and what steps are being taken to address the situation.
6. Data Security
6.1 Our Security Practices
ASK Provider Services takes the security of your information seriously. We implement a range of measures to protect the personal and professional information we collect and handle, including:
- Secure, encrypted storage of client documents and records
- Access controls that limit who within our organization can view client information
- Use of secure communication channels for transmitting sensitive information
- Regular review of our security practices and procedures
- Use of reputable, security-conscious third-party platforms for document management and communication
6.2 Limitations of Online Security
While we take every reasonable precaution to protect your information, no method of electronic storage or internet transmission is completely secure. We cannot guarantee that your information will never be subject to unauthorized access, and we encourage clients to take their own precautions when transmitting sensitive information online.
6.3 What to Do if You Suspect a Security Issue
If you believe that your information held by ASK Provider Services has been compromised, or if you notice any suspicious activity related to your accounts or applications, please contact us immediately. We will investigate the matter promptly and take appropriate action.
7. Data Retention
7.1 How Long We Keep Your Information
We retain client information for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with our legal obligations. In practical terms, this means:
- Information related to active service agreements is retained throughout the duration of the engagement
- Following the conclusion of a service agreement, we retain client records for a reasonable period to address any follow-up questions, disputes, or legal requirements
- Information collected through our website for analytics purposes is retained in anonymized form and does not have a set expiration
7.2 Deletion of Records
Once the retention period for your information has passed, we dispose of your records securely. For digital records, this means permanent deletion from our systems. For any physical records, this means secure destruction.
7.3 Requesting Early Deletion
If you would like to request that your information be deleted before the end of our standard retention period, you may contact us directly. We will evaluate your request and respond in a timely manner. Please note that in some cases, we may be required to retain certain information for legal or regulatory reasons even if a deletion request is made.
8. Your Rights Regarding Your Information
Depending on your location and applicable law, you may have certain rights with respect to the personal information we hold about you. ASK Provider Services respects these rights and will respond to any requests in a timely and transparent manner.
8.1 Right to Access
You have the right to request a copy of the personal and professional information we hold about you. We will provide this information in a readable format within a reasonable timeframe following your request.
8.2 Right to Correct Your Information
If any information we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Given the importance of accuracy in credentialing and enrollment applications, we encourage clients to notify us of any inaccuracies as soon as they become aware of them.
8.3 Right to Request Deletion
You have the right to request that we delete your personal information, subject to any legal obligations that require us to retain it. We will respond to deletion requests in writing and explain the outcome of your request.
8.4 Right to Restrict Processing
You have the right to request that we limit how we use your information in certain circumstances, such as when you dispute the accuracy of the information we hold or when you object to a particular use of your data.
8.5 Right to Data Portability
Upon request, we will provide you with a copy of the information you have provided to us in a structured, commonly used format so that you can transfer it to another service provider if needed.
8.6 Right to Withdraw Consent
Where we process your information based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing that occurred before the withdrawal but may affect our ability to continue providing services to you.
8.7 How to Exercise Your Rights
To exercise any of the rights described above, please contact us through our website contact form, by email, or by phone. We will verify your identity before processing any request and will respond within a reasonable timeframe. We do not charge a fee for processing rights requests unless a request is clearly excessive or repetitive.
9. Children’s Privacy
ASK Provider Services is a professional services company whose website and services are intended exclusively for adult healthcare providers, medical practices, and related organizations. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected information from a minor, we will delete that information promptly. If you believe a minor has submitted information to us through our website or otherwise, please contact us immediately.
10. Third-Party Websites and Links
Our website may contain links to external websites, including insurance company portals, government agency websites, and professional resources. These links are provided for informational purposes only. ASK Provider Services does not control the content or privacy practices of any third-party website, and this Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any external website you visit through a link on our site before submitting any personal information.
11. Cookies and Tracking Technologies
11.1 What Cookies We Use
As described in Section 2.2, our website may use cookies and similar tracking technologies to improve your experience and understand how our site is used. The categories of cookies we may use include essential cookies, analytics cookies, and preference cookies.
11.2 Managing Your Cookie Preferences
You can manage your cookie preferences through your browser settings. Most modern browsers allow you to:
- View which cookies are stored on your device
- Delete existing cookies
- Block all cookies or cookies from specific websites
- Receive a notification before a cookie is placed
Please be aware that blocking certain cookies may affect the functionality of our website. Essential cookies, in particular, are necessary for the site to operate properly and cannot be disabled without impacting your experience.
11.3 Analytics Tools
We may use third-party analytics tools such as Google Analytics to collect anonymized information about how visitors interact with our website. These tools use cookies to track user behavior in aggregate. The data collected is used solely to improve our website and is not linked to any individual’s identity. You can opt out of Google Analytics tracking by using the Google Analytics Opt-Out Browser Add-on available at tools.google.com/dlpage/gaoptout.
12. Changes to This Privacy Policy
ASK Provider Services reserves the right to update or modify this Privacy Policy at any time. When we make changes, we will update the effective date at the top of this page. If the changes are significant, we will make reasonable efforts to notify active clients directly, either by email or through a notice on our website.
We encourage you to review this Privacy Policy periodically to stay informed about how we handle your information. Your continued use of our website or services following any update to this policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, please discontinue use of our website and contact us to discuss your service agreement.
13. California Privacy Rights
If you are a resident of California, you may have additional privacy rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These rights include:
- The right to know what personal information we collect, use, share, or sell
- The right to delete personal information we hold about you, subject to certain exceptions
- The right to correct inaccurate personal information
- The right to opt out of the sale or sharing of your personal information
- The right to non-discrimination for exercising your privacy rights
ASK Provider Services does not sell personal information. California residents who wish to exercise any of the above rights may contact us through the methods described in Section 14. We will respond to verified requests within the timeframe required by applicable California law.
14. Contact Us About This Privacy Policy
If you have questions, concerns, or requests related to this Privacy Policy or how your information is handled, please reach out to us through any of the following channels:
Website: www.askproviderservices.com
Contact Form: Available on our website’s Contact Us page
Email: info@askproviderservices.com
Phone: Available on our Contact Us page
We are committed to addressing privacy concerns promptly and transparently. If you contact us with a question or concern about your information, we will respond as quickly as possible and work with you to resolve the matter to your satisfaction.
If you feel that your privacy rights have been violated and we have been unable to resolve the matter to your satisfaction, you may have the right to file a complaint with the appropriate regulatory authority in your jurisdiction. In the United States, privacy complaints related to healthcare information may be directed to the U.S. Department of Health and Human Services Office for Civil Rights.
