Privacy, Security & HIPAA Compliance

How DelPorto protects sensitive information and supports healthcare organizations.

Effective Date: June 2026

Our Commitment to Privacy and Data Protection

DelPorto Practice Solutions ("DelPorto," "we," "our," or "us") is committed to protecting the privacy, confidentiality, and security of the information entrusted to us.

DelPorto is an administrative and operational support company that provides services to healthcare practices, medical offices, specialists, and other healthcare organizations. Our services may include virtual assistant support, appointment scheduling, insurance verification, credentialing assistance, billing support, medical records coordination, referrals management, and other administrative functions.

DelPorto does not provide medical treatment, diagnosis, or clinical care.

Instead, we operate as a support partner to healthcare providers and may access certain information solely to perform authorized administrative services on behalf of our clients.

We take data protection seriously and implement reasonable administrative, technical, and physical safeguards designed to protect sensitive information and support HIPAA-compliant workflows where applicable.

Our Role as a Business Associate

In many situations, DelPorto serves as a Business Associate to healthcare providers.

This means that:

  • The healthcare provider remains responsible for patient care and medical decision-making.
  • The healthcare provider remains the Covered Entity under HIPAA.
  • DelPorto provides authorized administrative and operational support services.
  • Any access to Protected Health Information (PHI) is limited to what is necessary to perform contracted services.
  • Data handling is governed by applicable Business Associate Agreements (BAAs), client agreements, and relevant privacy regulations.

Our role is to help healthcare organizations improve operational efficiency while maintaining patient trust and privacy.

Information We May Handle

Depending on the services requested by our clients, DelPorto may process or access information such as:

Patient Information

  • Name and contact information
  • Appointment details
  • Insurance and referral information
  • Patient intake information
  • Administrative communications
  • Other information required to support scheduling, billing, or operational workflows

Provider Information

For credentialing and payer enrollment services, we may handle:

  • Professional licenses, National Provider Identifier (NPI), and DEA registrations
  • Board certifications and curriculum vitae (CV)
  • Malpractice insurance information
  • Employment and credentialing records
  • Other information required by payers, healthcare organizations, or regulatory entities

We only collect or process information necessary to perform the services requested by our clients.

How Information May Be Used

Information may be used to support authorized administrative functions, including:

Virtual Front Desk Services

  • Answering incoming calls
  • Scheduling and rescheduling appointments
  • Appointment confirmations
  • Patient communication support

Administrative Coordination

  • Patient intake support
  • Insurance verification
  • Referral coordination and medical records requests
  • Communication between healthcare providers and patients

Credentialing & Enrollment Support

  • Provider credentialing
  • Payer enrollment applications
  • Recredentialing support
  • Documentation collection and submission

Billing & Revenue Cycle Support

  • Claims support and payment posting assistance
  • Insurance follow-up
  • Administrative billing workflows
  • Revenue cycle support activities

Quality Improvement & Operations

Information may also be used to improve service quality, train personnel, maintain operational records, monitor workflow performance, support compliance requirements, and improve client experience.

Information Sharing

DelPorto does not sell personal information.

Information may be shared only as necessary to perform authorized services and may include sharing with:

  • Healthcare providers and their staff
  • Insurance companies and payers
  • Credentialing organizations
  • Regulatory entities when required by law
  • Authorized technology providers supporting our operations

Information is disclosed only to the extent necessary to perform contracted services or comply with legal obligations.

HIPAA Compliance

Where applicable, DelPorto supports HIPAA-compliant workflows and follows reasonable safeguards designed to protect Protected Health Information (PHI).

These safeguards may include:

  • Role-based access controls
  • Secure communication practices
  • Workforce training
  • Password and authentication controls
  • Secure storage systems and access monitoring
  • Vendor management procedures

While no system can guarantee absolute security, DelPorto is committed to maintaining responsible security practices and continuously improving operational safeguards.

Electronic Communications

DelPorto may communicate through telephone calls, email, SMS/text messages, and secure online forms for appointment coordination, administrative notifications, scheduling updates, service-related communications, and client support.

Users should avoid sending highly sensitive information through unsecured communication channels unless specifically instructed to do so.

Your Privacy Rights

Because DelPorto generally operates on behalf of healthcare providers, requests regarding patient medical records, amendments, restrictions, or disclosures should typically be directed to the healthcare provider responsible for your care.

If you have questions regarding information handled by DelPorto, we will work with the appropriate healthcare provider to address your concerns when applicable.

Data Security

Protecting confidential information is a core responsibility of our organization.

We maintain policies, procedures, and operational safeguards designed to prevent unauthorized access, protect sensitive information, support regulatory compliance, reduce operational risk, and promote responsible data stewardship.

Security practices are reviewed periodically and may evolve as technology, regulations, and business requirements change.

Third-Party Services

Our website and operational systems may utilize trusted third-party platforms for website hosting, scheduling tools, communication services, analytics, customer support, and operational infrastructure.

These providers may have their own privacy practices and security measures. We make reasonable efforts to work with reputable vendors that support secure business operations.

Changes to This Policy

DelPorto may update this Privacy, Security & HIPAA Compliance Statement periodically to reflect changes in operations, regulatory updates, service enhancements, and security improvements.

The most current version will always be available on this website and will include the effective date shown at the top of this page.

Contact Us

If you have questions regarding privacy, security, or HIPAA-related matters, please contact DelPorto Practice Solutions.