Effective Date: January 1, 2025 | Last Updated: May 30, 2026
1. Introduction
Mustang Solution ("Company", "we", "our", or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website www.mustangsolution.com or engage with our healthcare outsourcing services.
We operate in full compliance with applicable data protection laws, including the Health Insurance Portability and Accountability Act (HIPAA), and are dedicated to maintaining the confidentiality of all information entrusted to us.
2. Information We Collect
We may collect the following types of information:
a) Information You Provide Directly
- Name, email address, phone number, and job title submitted through contact or career application forms
- Messages or inquiries submitted via our website
- Resume or professional background information submitted for career opportunities
- Business information provided during client onboarding or service engagement
b) Information Collected Automatically
- IP address, browser type, operating system, and referring URLs
- Pages visited, time spent on pages, and navigation patterns
- Device identifiers and cookie data
c) Protected Health Information (PHI)
In the course of providing Revenue Cycle Management and related healthcare outsourcing services to our clients, we may process Protected Health Information (PHI) as a Business Associate under HIPAA. Such information is handled strictly in accordance with executed Business Associate Agreements (BAAs) and applicable federal and state regulations.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To respond to inquiries, service requests, and career applications
- To deliver and manage our healthcare outsourcing services
- To communicate updates, newsletters, or relevant industry information (where consent has been provided)
- To improve our website functionality, content, and user experience
- To comply with legal obligations and regulatory requirements
- To detect and prevent fraud or unauthorized access
4. HIPAA Compliance
Mustang Solution acts as a Business Associate to its healthcare provider clients. We do not independently collect, use, or disclose PHI beyond what is permitted under our BAAs and HIPAA regulations. Our internal policies include:
- Role-based access controls limiting PHI access to authorized personnel only
- Encryption of PHI in transit and at rest
- Regular HIPAA training for all staff handling protected health information
- Documented incident response and breach notification procedures
- Annual security risk assessments in compliance with the HIPAA Security Rule
5. Disclosure of Information
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:
- Service Providers: Trusted vendors who assist in operating our website or delivering services, bound by confidentiality agreements
- Legal Requirements: When required by law, court order, or governmental authority
- Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to equivalent privacy protections
- Client Instructions: PHI disclosed only as directed by the covered entity client under the applicable BAA
6. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience. These include:
- Essential Cookies: Required for basic website functionality
- Analytics Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics)
- Preference Cookies: Remember your settings and preferences
You may disable cookies through your browser settings; however, some features of the website may not function properly as a result.
7. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. PHI is retained and disposed of in accordance with HIPAA requirements and applicable state regulations. Upon termination of a client engagement, PHI is returned or destroyed as specified in the applicable BAA.
8. Data Security
We implement industry-standard administrative, technical, and physical safeguards to protect your information, including:
- SSL/TLS encryption for all data transmitted through our website
- Secure, access-controlled data storage environments
- Multi-factor authentication for internal systems
- Regular vulnerability assessments and penetration testing
- Employee background verification and confidentiality agreements
While we take every reasonable precaution, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
9. Your Rights
Depending on your location and applicable law, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of your personal information, subject to legal obligations
- Opt out of marketing communications at any time
- Lodge a complaint with a supervisory authority
To exercise any of these rights, please contact us at Connect@mustang.com.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external sites you visit.
11. Children's Privacy
Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately.
12. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with a revised effective date. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: