Legal

Privacy Policy

Last updated: September 8, 2026

This Privacy Policy explains how Mark Rendez Maranan, an individual freelance Revenue Cycle Management (RCM) and medical billing service provider based in Pasig City, Metro Manila, Philippines (referred to here as "I," "me," or "Mark"), collects, uses, and protects information from visitors to markrendezmaranan.com (the "Site") and from prospective clients who contact me through it.

I operate this Site as an individual freelancer. It is not a registered corporation, and it is not operated by any agency or outsourcing company on my behalf.

This policy covers this website only. If we later sign a separate services agreement for ongoing billing work, that agreement — and any client-side confidentiality, HIPAA, or Business Associate arrangements it contains — governs how I handle patient data, not this Site policy.

1. What information I collect

a) Information you submit through the contact/intake form

When you fill out the intake form, I collect the name, email address, phone number (optional), practice challenge/category, and message you provide. Submitting this form requires you to check a consent box; see the Form Consent Notice for details on exactly how that data is handled.

b) Information collected automatically

Like most websites, my hosting provider automatically logs standard technical data for every visitor — such as IP address, browser type, device type, referring page, and pages viewed — for security and basic traffic monitoring. I do not currently run any analytics platform (e.g., Google Analytics), advertising pixel, or visitor-tracking script on this Site.

c) The NPI lookup tool

The "Verify Any NPI" tool on the homepage runs entirely in your browser. The number you type is not transmitted to me or stored anywhere; the tool only opens the official CMS NPI Registry in a new tab for you to search yourself.

d) Third-party services embedded or linked on this Site

ServicePurposeWhat it may collect
Web3FormsDelivers intake form submissions to my email inboxName, email, phone, message you submit; see Web3Forms' Privacy Policy
YouTube (privacy-enhanced embed)Displays an embedded videoNo cookies are set until you press play; once played, standard YouTube/Google data practices apply
CalendlyLets you book a call (external link, opens in a new tab)Governed by Calendly's own privacy policy once you visit their site
Google Favicon serviceLoads small logo icons for the tools/payers listed on the SiteYour IP address is sent to Google when these icons load
LinkedInExternal profile linkGoverned by LinkedIn's own privacy policy once you visit their site

See the Cookie Policy for the full breakdown of what each of these stores in your browser.

2. Why I use this information

I do not use your information for advertising, do not sell it, and do not share it with anyone beyond the service providers listed above and as required by law.

3. Legal basis for processing

As I am based in the Philippines, this Site is primarily governed by the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, under which I act as a Personal Information Controller for the data described above. My processing relies on your consent (for the intake form) and on my legitimate interest in running and securing this Site.

Because visitors may reach this Site from the United States, the European Union, or elsewhere, I aim to also honor the general principles of frameworks such as the EU General Data Protection Regulation (GDPR) and U.S. state privacy laws (e.g., the California Consumer Privacy Act) where they apply to you, including the rights described in Section 5 below.

4. How long I keep information

Intake form messages that reach my email inbox are kept for as long as reasonably needed to respond to and follow up on your inquiry, and are deleted on request (see Section 5). Copies held by Web3Forms are subject to their own retention period (currently 30 days on free plans, or up to 1 year on paid plans, per their published policy).

5. Your rights

Subject to applicable law, you may ask me to:

To exercise any of these rights, email markrendezmaranan56@gmail.com. If you are in the Philippines and unsatisfied with my response, you may also lodge a complaint with the National Privacy Commission.

6. Security

I take reasonable, industry-standard steps to protect information submitted through this Site — for example, the intake form only transmits data over HTTPS and through a GDPR-friendly, encrypted-at-rest third-party processor. No method of transmission or storage is ever 100% secure, and I cannot guarantee absolute security.

7. Children's privacy

This Site is directed at business owners and professionals and is not intended for, or knowingly directed at, children under 18.

8. International visitors

Because this Site is hosted and operated from the Philippines, any information you submit will be processed there, which may have different data protection laws than your own country.

9. Changes to this policy

I may update this Privacy Policy from time to time to reflect changes to the Site or applicable law. The "Last updated" date at the top will always reflect the latest revision.

10. Contact

Questions about this policy can be sent to markrendezmaranan56@gmail.com.

This page is a general-purpose template and not a substitute for advice from a Philippine lawyer familiar with the Data Privacy Act. If your engagements later involve handling U.S. patient data directly, you should also review HIPAA Business Associate obligations with each client separately.