Privacy Policy

BridGap Corporation LLP(“we”, “our”, or “us”) respects your privacy and is dedicated to protecting the confidentiality of healthcare providers, dental practices, practice administrators, and their associated patient information.

This Privacy Policy governs our data collection, processing, and disclosure practices when you visit our website (BRIDGAPCORP.COM), utilize our remote administrative verification platform, purchase custom practice supplies, or complete financial transactions via our secure payment partners.

We may collect the following categories of information:

• Practice & Contact Details: Provider name, practice legal entity name, clinic physical address, business email address, telephone numbers, and specialty.
• Clinical Administration & Patient Records (Under BAA): Patient demographics, insurance carrier details, policy numbers, benefit breakdowns, pre-authorization forms, and billing codes necessary to perform contracted administrative support services.
• Transactional & Billing Records: Invoiced amounts, service subscription tiers, payment confirmation IDs, and transaction timestamps.
• Technical & Usage Data: IP addresses, browser types, device identifiers, and anonymized user behavior collected via secure server logs and standard cookies.

All online monetary transactions are encrypted and transmitted directly to our PCI-DSS certified banking partner—HDFC Bank Payment Gateway (SmartGateway)—using industry-standard 256-bit Secure Sockets Layer (SSL) / TLS 1.3 encryption. The payment gateway handles card tokenization and authentication in accordance with Reserve Bank of India mandates.

As a specialized B2B partner to clinical and dental providers, BridGap Corporation LLP executes a binding Business Associate Agreement (BAA) on Day 1 prior to handling any Protected Health Information (PHI).

• Role-Based Access Control: Only credentialed coordinators directly assigned to your clinic account are authorized to access your verification queues.
• Encrypted Data Transmission: All data transmissions between your practice management software and our team are secured with end-to-end encryption.
• No Consumer Re-Marketing: We never sell, lease, rent, or trade patient information or clinic operational data to third-party advertisers or data brokers.

Our website uses essential cookies necessary to maintain authenticated sessions, secure form submissions, and optimize navigation. You may control cookie preferences through your web browser settings; however, disabling certain cookies may impact the functionality of portal features.

We retain account and transaction records for the duration required to service your practice, satisfy statutory accounting and tax regulations, and comply with clinical audit mandates. Clients may request an export of their administrative logs or request the secure deletion of non-statutory records by writing to our compliance officer.

In compliance with the Information Technology Act, 2000, and the Consumer Protection (E-Commerce) Rules, 2020, the contact details for our designated Grievance Redressal Officer are provided below: