Privacy Policy
MAISON DEXARA INCORPORATED PRIVACY POLICY
Effective Date: January 1, 2026
Last Updated: July 20, 2026
Maison Dexara Incorporated, also doing business as The Maison Dexara Firm (collectively, “Maison Dexara,” “we,” “us,” or “our”), is a Texas healthcare revenue cycle consulting firm. We provide business-to-business and consumer services, including revenue cycle assessments, billing and claims reviews, medical auditing, reimbursement and recovery guidance, staff education, corporate compliance support, insurance coverage education, medical bill review, patient advocacy, and bill-resolution support. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit www.maisondexara.com, contact us, schedule or purchase a service, use a secure intake or upload process, receive provider or patient services, or otherwise interact with Maison Dexara.
TEXAS NOTICE REGARDING ELECTRONIC DISCLOSURE OF PROTECTED HEALTH INFORMATION: Maison Dexara creates, receives, obtains, maintains, uses, and may transmit protected health information in connection with certain provider and patient services. Your protected health information may be subject to electronic disclosure. Maison Dexara will electronically disclose protected health information only as authorized by you or as permitted or required by Texas and federal law. A separate authorization generally is not required for an electronic disclosure to another covered entity for treatment, payment, health care operations, certain insurance or health maintenance organization functions, or when otherwise authorized or required by law. When an electronic disclosure does not fall within an applicable exception, Maison Dexara will obtain a valid authorization from you or your legally authorized representative. This notice is provided under Texas Health and Safety Code Section 181.154.
1. Scope of This Policy and Our Privacy Roles: This policy applies to personal information Maison Dexara handles for its own business purposes and to information it receives while directly providing services to patients, consumers, healthcare practices, and other clients. When Maison Dexara performs services for a healthcare provider, health plan, or another regulated organization and receives protected health information on that organization’s behalf, Maison Dexara may act as a “business associate” or service provider. In that role, our use and disclosure of protected health information is also governed by the applicable contract, Business Associate Agreement, the client’s lawful instructions, and federal and Texas health-information laws. The healthcare provider’s or health plan’s Notice of Privacy Practices remains the primary notice describing that organization’s use of your protected health information and your HIPAA rights. This Privacy Policy is not a healthcare provider’s or health plan’s HIPAA Notice of Privacy Practices and does not replace one. It also does not apply to separate services offered by an affiliate under a separate privacy notice, to workforce records governed by internal policies, or to third-party websites and services that Maison Dexara does not control.
2. Personal Information We Collect: The information we collect depends on how you interact with us and which services you request. Contact and identity information: We may collect your name, mailing address, email address, telephone number, date of birth when needed to verify identity or match records, preferred method of contact, signature, and information about a legally authorized representative. Practice and professional information: For provider and business clients, we may collect a practice or company name, location, specialty, tax or organizational identifiers, payer mix, business contact details, employee role information, operational workflows, policies, billing data, revenue cycle reports, and other information needed to perform the engagement. Health, insurance, billing, and claims information When necessary for a requested service, we may collect medical bills, itemized statements, explanations of benefits, claim information, member or policy identifiers, payer information, dates of service, provider information, procedure and diagnosis codes, authorization information, payment history, financial-assistance information, and related records or correspondence. Some of this information may be protected health information or sensitive personal data. Transaction information: We may collect service selections, appointment details, invoices, payment status, transaction identifiers, billing address, and limited payment-related information. Payment card information is generally collected and processed by a third-party payment processor. Maison Dexara generally does not receive or retain complete payment card numbers or security codes. Communications and service records: We may collect emails, telephone or virtual-meeting notes, consultation records, questionnaires, authorizations, service preferences, complaints, survey responses, and documents you choose to provide. Website and device information: When you use our website, we and our website service providers may automatically receive an Internet Protocol address, browser type, device type, operating system, referring page, pages viewed, approximate location derived from an IP address, timestamps, cookie identifiers, and information about how the website performs. We do not intentionally collect biometric identifiers or precise geolocation through ordinary website use. Deidentified or aggregated information: Where allowed by law, contract, and any applicable Business Associate Agreement, we may create and use information that has been deidentified or aggregated so it is not reasonably linkable to an individual. We do not attempt to reidentify properly deidentified protected health information.
3. Sources of Personal Information: We may receive information directly from you; from a parent, guardian, family member, personal representative, or other person you authorize; from a healthcare provider, health plan, payer, clearinghouse, billing company, or business client; from vendors that help us operate our website and services; from publicly available professional or business directories; and automatically from your browser or device when you use our website. If you provide information about another person, you represent that you are authorized to provide it and to request the applicable service on that person’s behalf.
4. How We Use Personal Information We may use personal information to: - evaluate service requests, verify identity and authority, schedule consultations, and communicate with you; - provide revenue cycle assessments, billing and claims reviews, medical auditing, recovery guidance, training, compliance support, insurance education, medical bill review, patient advocacy, and related services; - organize and analyze billing, claims, reimbursement, denial, workflow, and financial information for a client engagement; - communicate with providers, payers, authorized representatives, or other parties when requested, authorized, or permitted by law; - process payments, issue invoices, maintain business records, and administer contracts; - operate, secure, troubleshoot, and improve our website, systems, services, and client experience; - detect, investigate, and help prevent fraud, misuse, security incidents, and unlawful activity; - comply with legal obligations, respond to lawful requests, establish or defend legal claims, and enforce our agreements; and - send service updates, educational information, event announcements, or marketing communications when permitted by law and consistent with your communication preferences. Maison Dexara does not use or disclose protected health information for marketing unless we first obtain the permission or authorization required by applicable law. We do not condition treatment, insurance eligibility, or benefits on signing an authorization that the law does not permit us to require. Maison Dexara does not provide medical diagnosis or treatment, and information used in our services is not used to make clinical decisions.
5. When We Disclose Personal Information: We may disclose personal information only as reasonably necessary for the purposes described in this policy, as directed or authorized by the individual or client, or as permitted or required by law. Provider clients and regulated organizations: When we process information for a healthcare practice, health plan, or another client, we may disclose information to that client and its authorized workforce members in accordance with our contract, Business Associate Agreement, and lawful instructions. Providers, payers, and authorized representatives: For patient services, we may disclose information to a provider, health plan, insurer, billing company, authorized family member, personal representative, or other party when you direct or authorize us to do so or when the disclosure is otherwise permitted or required by law. Vendors and service providers: We use vendors to support website hosting, secure forms and file uploads, email and document collaboration, scheduling, customer relationship management, invoicing, payment processing, analytics, information technology, cybersecurity, and professional services. These vendors may process personal information only for the services they provide to us and subject to appropriate contractual or legal obligations. Examples of platforms used in our operations may include Squarespace for the public website, a HIPAA-enabled Jotform environment for designated secure forms and uploads, Google Workspace under applicable business and health-data terms, Zoho Bigin for non-PHI customer relationship management, and scheduling, invoicing, or payment platforms. We do not intentionally place protected health information in Zoho Bigin or in public website analytics. Professional advisers and legal compliance: We may disclose information to attorneys, accountants, auditors, insurers, consultants, and other professional advisers who need the information to provide services to us. We may also disclose information to courts, regulators, law enforcement, government agencies, or other parties when we reasonably believe disclosure is required or permitted by law, necessary to protect rights or safety, or needed to investigate fraud or security concerns. Business transactions: If Maison Dexara is involved in a merger, financing, reorganization, sale of assets, acquisition, bankruptcy, or similar transaction, information may be reviewed or transferred as part of that transaction, subject to applicable confidentiality, health-information, and privacy requirements.
6. No Sale of Personal or Health Information: Maison Dexara does not sell personal information, sensitive personal data, biometric data, or protected health information. We do not exchange protected health information for direct or indirect payment except as expressly permitted by law for legitimate treatment, payment, healthcare operations, insurance functions, or reasonable preparation and transmission costs. We do not process personal information for targeted advertising based on activity across nonaffiliated websites, and we do not use personal information for profiling that produces legal or similarly significant effects concerning a consumer.
7. Cookies, Analytics, and Website Choices: Our website and website provider may use cookies or similar technologies that are necessary for site operation, security, preferences, and basic analytics. These technologies may collect the website and device information described above. You can control cookies through your browser settings and any cookie controls made available on our website. Blocking some cookies may affect website functionality. Public website forms and analytics are not intended to receive protected health information. Do not enter medical details, policy or member numbers, diagnoses, medical bills, explanations of benefits, claim documents, or other protected health information into a general contact form, public booking note, website chat, social-media message, or another channel that Maison Dexara has not designated for secure transmission.
8. Secure Submission of Health and Billing Information: When documents containing protected health information or other sensitive data are needed, Maison Dexara will provide or identify an approved secure submission method. Please use that method rather than ordinary email, text message, social media, or a public website form unless we have specifically confirmed that the channel is approved for the information being sent. If you send sensitive information through an unapproved channel, we may ask you to resubmit it securely. Never send your Social Security number, complete payment card information, online account password, or security code unless we specifically request the information through an approved process and it is necessary for the service.
9. Data Retention and Secure Disposal: We retain personal information only for as long as reasonably necessary to provide services, fulfill the purposes described in this policy, comply with contracts and Business Associate Agreements, satisfy legal, accounting, insurance, and recordkeeping obligations, resolve disputes, and protect our rights. When we process information for a provider or another business client, return, retention, and deletion may be governed by the client’s instructions, our contract, the Business Associate Agreement, and applicable law. When information is no longer required, we use reasonable methods to delete, destroy, or deidentify it. Records containing sensitive personal information are disposed of in a manner designed to render the information unreadable or indecipherable.
10. Information Security: Maison Dexara uses reasonable administrative, technical, and physical safeguards appropriate to the nature and sensitivity of the information we handle. These safeguards may include role-based access, confidentiality obligations, workforce privacy and security training, secure configuration, access controls, multifactor authentication where appropriate, vendor review, Business Associate Agreements where required, incident response procedures, and secure disposal practices. No method of transmission or storage is completely secure. Although we work to protect information, we cannot guarantee absolute security. If a privacy or security incident occurs, Maison Dexara will investigate and provide notices required by applicable law, contract, and Business Associate Agreement.
11. Your Privacy Rights and Choices Depending on the information involved, Maison Dexara’s role, and applicable law, you may have the right to: - confirm whether we process your personal information and request access to it; - request correction of inaccurate personal information; - request deletion of personal information, subject to legal and contractual exceptions; - request a portable copy of personal information you previously provided in a digital format; - withdraw consent or revoke an authorization for future processing or disclosure, subject to actions already taken in reliance on it and other legal limitations; - opt out of a sale, targeted advertising, or certain profiling, although Maison Dexara does not engage in these activities as described above; - designate an authorized agent where permitted by law; and - appeal a decision concerning a qualifying privacy request. If your request concerns protected health information that Maison Dexara processes for a healthcare provider, health plan, or other client, please direct the request to that organization because it controls the record and the response. Maison Dexara will assist the client as required by law and our agreement. If the information was collected directly by Maison Dexara for a patient service, you may submit the request directly to us. To submit a privacy request, email revenue@maisondexara.com with “Privacy Request” in the subject line or call (512) 612-5452. Please describe the right you wish to exercise and the Maison Dexara service or interaction involved. Do not include medical records or highly sensitive identifiers in your initial email. We may request information reasonably necessary to verify your identity and authority through a secure method. We will respond without undue delay and within the period required by applicable law. Where the Texas Data Privacy and Security Act applies, qualifying requests generally receive a response within 45 days, subject to a permitted extension. To appeal a decision, email revenue@maisondexara.com with “Privacy Appeal” in the subject line and explain the decision you are appealing. Where Texas law applies, we will provide a written appeal response within the legally required period. You may also submit a privacy complaint through the Texas Attorney General’s consumer privacy complaint process. Maison Dexara will not unlawfully discriminate or retaliate against you for exercising an applicable privacy right. Certain information may be exempt from a request or may need to be retained to provide a requested service, comply with law, protect security, maintain required records, or establish or defend legal claims.
12. Communications and Marketing Choices: You may opt out of nonessential marketing email by using the unsubscribe method included in the communication or by contacting us. Even if you opt out of marketing, we may continue to send transactional, service, security, legal, or account-related communications. We keep patient or claims information separate from general marketing activities. We do not use protected health information to create marketing lists or audiences without the permission or authorization required by law.
13. Children’s Privacy: Our public website and services are not directed to children under 13, and Maison Dexara does not knowingly collect personal information directly from a child under 13 through the public website. A parent, guardian, or legally authorized representative may request billing or insurance-education services involving a minor when authorized by law. We may verify the representative’s authority and apply special rules to records for which a minor may have independent confidentiality rights. If you believe a child submitted personal information to us without appropriate permission, contact us so we can evaluate and address the information.
14. Third-Party Links and Services: Our website may link to healthcare, insurance, government, payment, scheduling, social-media, or other third-party services. Those parties operate under their own privacy policies and security practices. Maison Dexara is not responsible for a third party’s practices merely because our website links to it.
15. Changes to This Policy: We may update this Privacy Policy to reflect changes in our services, systems, vendors, or legal obligations. The “Last Updated” date will identify the most recent revision. If a change materially affects how we use or disclose information already collected, we will provide any additional notice or obtain any consent required by law.
16. Contact Maison Dexara For privacy questions, requests, or complaints, contact:
Maison Dexara Incorporated
The Maison Dexara Firm
5900 Balcones Drive, Suite 31779
Austin, Texas 78731
Email: revenue@maisondexara.com
Phone: (512) 612-5452
Fax: (512) 528-3617
Website: www.maisondexara.com
Please do not include protected health information, complete insurance identifiers, medical records, Social Security numbers, or payment card information in an initial privacy inquiry. We will provide a secure method if sensitive information is needed to evaluate the request.