Privacy Policy

Last Updated: September 8, 2026

The Credentialist (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at thecredentialist.org or engage our credentialing and payer enrollment services.

By using our website or services, you consent to the practices described in this policy.

1. Information We Collect

Information You Provide

When you submit a form on our website, request a consultation, or engage our services, we may collect:

  • Full name
  • Email address
  • Phone number
  • State(s) where you practice or seek enrollment
  • Medical specialty
  • Number of providers in your practice
  • Any additional information you choose to provide in messages or during consultations

Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including:

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and time spent on each page
  • Referring website or URL
  • Date and time of your visit
  • If you arrived by clicking one of our advertisements, the advertising click identifier Google adds to the web address, together with the page you landed on and, where available, the campaign and search term associated with that ad

Information from Third Parties

If you schedule a consultation through our Calendly integration, we receive your name, email address, and appointment details from Calendly.

2. How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and provide requested information
  • Deliver credentialing and payer enrollment services
  • Communicate with you about your applications and service status
  • Schedule and manage consultations
  • Improve our website, services, and user experience
  • Measure which of our advertisements lead to enquiries, so that we advertise where it is genuinely useful
  • Comply with legal and regulatory obligations

We do not sell your personal information to third parties.

3. HIPAA Compliance

The Credentialist is committed to compliance with the Health Insurance Portability and Accountability Act (HIPAA) when handling Protected Health Information (PHI) in the course of providing credentialing services.

Website forms: The contact and assessment forms on our website collect general business inquiry information (name, email, phone, specialty). This information is not considered PHI under HIPAA.

Credentialing services: When we engage in credentialing work that involves PHI, we execute a Business Associate Agreement (BAA) with clients and implement appropriate administrative, technical, and physical safeguards in accordance with the HIPAA Security Rule.

Our team receives regular training on HIPAA compliance, privacy practices, and information security protocols.

4. Third-Party Services

We use the following third-party services that may collect or process your information:

  • Calendly: Used for scheduling consultations. When you book an appointment, Calendly collects your name, email, and appointment preferences. Calendly’s use of your data is governed by their own privacy policy.
  • Google Fonts: Our website loads fonts from Google’s servers. Google may collect your IP address and browser information when fonts are loaded. This is governed by Google’s privacy policy.
  • Hostinger: Our website is hosted by Hostinger, which processes server logs containing IP addresses and request data as part of standard web hosting operations.
  • Formspree: Contact and assessment request forms are delivered to us through Formspree. When you submit a form, Formspree processes the information you entered in order to transmit it to us. Formspree’s use of your data is governed by their own privacy policy.
  • Google Ads: We advertise on Google. When you arrive from one of our ads, Google adds a click identifier to the web address, which we store so we can tell which ads lead to enquiries. If you submit a form or book a consultation, we report that as a conversion to Google Ads. See section 5 for details.

We do not sell your personal information to third parties, and we do not share the information you submit through our forms with anyone other than the service providers listed above.

5. Cookies, Tracking, and Advertising

Our website uses cookies and similar technologies. Cookies are small text files stored on your device that help us recognize your browser and remember certain information.

We use:

  • Essential cookies: Required for basic website functionality
  • Analytics cookies: Help us understand how visitors interact with our website
  • Advertising cookies: Used to measure the performance of our Google Ads campaigns, as described below

Advertising and Conversion Measurement

We advertise on Google Search. To understand which advertisements bring people to us, we use Google Ads conversion tracking, which works as follows:

  • Click identifier: When you click one of our ads, Google appends an identifier (commonly called a “GCLID”) to the web address. We store this identifier in a cookie on your device for up to 90 days, along with the page you arrived on and, where present, the campaign and search term associated with the ad. If you later submit a form, this identifier is submitted with it.
  • Conversion reporting: When you submit a form or book a consultation, we notify Google Ads that a conversion occurred. This allows Google to attribute the enquiry to the advertisement you clicked.
  • Enhanced conversions: When you submit a form, your email address and phone number are converted into an irreversible scrambled value (a cryptographic hash) within your own browser before being sent to Google. This helps Google match your enquiry to the advertisement you clicked. Google receives only the scrambled value, never your actual email address or phone number, through this mechanism.
  • Offline conversion reporting: If an enquiry later becomes a client, we may report the outcome and its value to Google Ads using the stored click identifier, so that Google can direct our advertising toward the kinds of enquiries that are genuinely useful to us. We do not send your name, contact details, or any information about your practice as part of this.

The Google tag may also add your browser to audience lists that allow us to show relevant advertising to people who have already visited our website. We do not use it to make automated decisions about you, and we do not sell or share these lists.

Google’s handling of this information is governed by the Google Privacy Policy.

You can control cookies through your browser settings, and you can manage how Google personalises advertising to you at myadcenter.google.com. Disabling cookies may affect some website functionality, but you can still submit forms and book consultations.

6. Data Retention

We retain your information as follows:

  • Contact form submissions: Retained for as long as necessary to respond to your inquiry and for reasonable business record-keeping purposes
  • Credentialing records: Retained in accordance with regulatory requirements and the terms of your service agreement
  • Website analytics data: Retained in aggregated, anonymized form
  • Advertising click identifier: Stored in a cookie on your device for up to 90 days, after which it expires automatically. Where a click identifier has been submitted with a form, it is retained alongside that enquiry record

When information is no longer needed for its original purpose or required by law, we securely delete or anonymize it.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, use, alteration, or disclosure. These measures include:

  • Encryption of data in transit
  • Access controls limiting who can view personal information
  • Regular security assessments and staff training
  • Secure handling and storage of credentialing documents

While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request that we correct inaccurate or incomplete information
  • Deletion: Request that we delete your personal information, subject to legal and contractual obligations
  • Portability: Request your data in a commonly used electronic format
  • Opt out of advertising measurement: Block or delete cookies in your browser, and manage how Google personalises advertising to you at myadcenter.google.com

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, please contact us using the information below.

9. Children’s Privacy

Our website and services are not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make changes, we will update the “Last Updated” date at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of our website or services after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, your personal information, or wish to exercise your privacy rights, please contact us: