Privacy Policy
Technology Partners, LLC – imaginepay.com
PRIVACY POLICY
Last Updated: October 15, 2026
1. Introduction
Technology Partners, LLC d/b/a ImagineSoftware (the “Company,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process information through the ImaginePay payment portal at https://pay.imaginepay.com/, the ImaginePay site at https://imaginepay.com/, and related online services that link to this Privacy Policy (collectively, the “Sites”). “ImaginePay” means the Company’s payment platform known as ImaginePay.
ImaginePay provides payment processing and related services to healthcare providers and other customers (the “Services”). In providing the Services, ImaginePay generally processes personal information on behalf of its customers and in accordance with their instructions, except as otherwise described in this Privacy Policy or as required by law.
Questions About ImaginePay. If you need assistance using the ImaginePay payment portal or processing a payment, please contact support@imaginepay.com. If you have a question about your medical bill, including the amount owed, charges, insurance coverage, or your account balance, please contact the healthcare provider identified on your bill. For questions related to this Privacy Policy or to exercise a privacy right, please contact compliance@imagineteam.com or through the request methods described in Section 13 below.
Company contact information: Technology Partners, LLC, 8757 Red Oak Blvd., Charlotte, NC 28217; telephone: (704) 553-1004.
2. Important Notice About HIPAA and Customer Data
We regularly act as a Business Associate under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”) for our covered entity customers or other business associate customers. Protected health information (“PHI”) that we create, receive, maintain, or transmit for those customers is handled under our applicable Business Associate Agreements and HIPAA policies and procedures, not under the consumer rights request process described in this website Privacy Policy.
Under the California Consumer Privacy Act, as amended (the “CCPA”), medical information governed by the Confidentiality of Medical Information Act and protected health information collected by a covered entity or business associate under HIPAA is exempt from the CCPA’s consumer rights provisions (Cal. Civ. Code § 1798.145(c)). In addition, to the extent we process personal information on behalf of a covered-entity or business-associate customer under a Business Associate Agreement, we act as that customer’s service provider, not as the “business” responsible for CCPA consumer-rights disclosures for that data; the customer, not us, is generally the appropriate party to receive and evaluate a consumer’s CCPA request concerning that data, and we will assist our customers with such requests as required by our service provider contracts and applicable law.
This Privacy Policy applies to information collected through the Sites and related sales, marketing, and business development activities. It does not replace, modify, or supersede any Business Associate Agreement or other contract governing our services to customers.
When we process personal information solely on behalf of a customer through a customer-facing product, service, or portal (such as the ImaginePay payment portal when you use it to pay a healthcare provider’s bill), that processing is governed by the applicable Business Associate Agreement or other customer contract, not by this Privacy Policy. This Privacy Policy still applies to the Sites, including information we collect for our own purposes, such as account, security, support, and analytics information. This Privacy Policy may still apply to personal information we collect for our own business purposes in connection with those products, services, or portals, such as business contact, account registration, security, and support information. Links to these portals may appear in this website’s footer for convenience only.
Role of ImaginePay. ImaginePay provides payment portal, payment-processing support, and related services to healthcare providers and other customers. In many circumstances, ImaginePay processes personal information and payment-related information on behalf of the applicable healthcare provider, customer, or other records custodian and in accordance with that party’s instructions, applicable agreements, and applicable law. In those circumstances, ImaginePay is not the controller or records custodian of the underlying provider-maintained records.
3. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last Updated” date and will be effective when posted, unless otherwise stated. We encourage you to review this Privacy Policy periodically. Consistent with Cal. Civ. Code § 1798.130(a)(5), we review and update the California-specific disclosures in Section 14 at least once every 12 months.
4. Information We Collect
We may collect information directly from you, automatically when you use the Sites, and from third-party sources. The categories below are intended to describe our current website and related sales/marketing practices.
4.1 Information You Provide to Us
We may collect personal information that you provide to us, including name, business contact information, company name, job title, phone number, email address, survey responses, event registration information, and the content of communications you send to us.
When you use the Sites, we may also collect personal information that you provide to us, such as your name, address, phone number, email address, date of birth, age, and login credentials. Payment data (such as credit card information) that you provide through the Sites is stored by third-party payment processor(s).
See Section 10 (Third-Party Websites and Services) regarding sites we link to but do not operate.
4.2 Information Collected Automatically
When you use the Sites, we and our service providers may collect information such as IP address, browser type, device characteristics, operating system, language preferences, referring URLs, device name, country or general location, pages viewed, links clicked, dates and times of visits, session identifiers, cookie identifiers, and other site usage data and transaction history.
We may use cookies, pixels, web beacons, tags, and similar technologies to collect this information. Our cookie banner allows users to manage cookie and tracking preferences, including opting out of certain data collection on the Sites. You may update your cookie preferences at any time by clicking the Cookie Preferences link in the footer of our website. This will reopen our cookie preference tool, where you can change or withdraw your prior choices.
We currently use Google Analytics, HubSpot, Hotjar, and ShareThis for analytics, marketing, and site-functionality purposes. For imaginePay.com, but not pay.imaginepay.com, we use Google Analytics to understand how the website is used and to help us secure and improve it.
4.3 Information from Third-Party Sources
We may collect limited business contact or business-related information from public sources, marketing platforms, social media platforms, event partners, business partners, service providers, or other third-party sources. We also receive information from the healthcare providers, billing companies, and other customers that use ImaginePay, such as your name, contact information, mobile telephone number, account number, and balance, so that you can be contacted and can make a payment. To the extent that you gave your information to your medical service provider and consented to being contacted regarding your bill, your information was given to us pursuant to that consent.
4.4 Information We Do Not Intend to Collect Through the Sites
The Sites are not intended to collect PHI, patient information, or medical information. Please do not submit PHI or patient information through general website forms unless we specifically provide a secure, contract-authorized method for doing so. This Section does not apply to information that you submit through the Sites to make or manage a payment, which is handled as described in Section 2.
4.5 4.5 De-Identified and Aggregated Information
To the extent permitted by our agreements with healthcare providers and other customers and by applicable law, we may create and use de-identified or aggregated information for analytics, service improvement, and business operations. We maintain and use de-identified information in de-identified form, we do not attempt to re-identify it (except solely to test whether our de-identification processes satisfy applicable legal requirements), and, to the extent shared, we require any recipient to do the same.
5. How We Use Information
- To operate, maintain, secure, and improve the Sites;
- To create and manage your account;
- To process transactions and payments and to provide the Services;
- To respond to inquiries, requests, and communications;
- To provide information about our services, features, events, and business updates;
- To send marketing or promotional communications, subject to applicable law and user preferences;
- To deliver, measure, and improve advertising, marketing, and promotional campaigns;
- To analyze Site usage and understand the effectiveness of our Sites and communications;
- To enforce our Terms of Use at https://imaginepay.com/terms-of-use and our other terms, policies, and agreement.;
- To detect, prevent, investigate, or respond to security incidents, fraud, illegal activity, or threats to safety;
- To comply with legal, regulatory, contractual, and audit obligations;
- To evaluate or conduct a merger, divestiture, restructuring, reorganization, financing, sale, or other business transaction;
- For any other purpose disclosed at the time of collection or with your consent.
- We do not use payment information, account information you provide through the Sites, or information about your healthcare or billing to market or advertise to you, and we do not send you marketing text messages or emails.
6. How We Disclose Information
We may disclose personal information to the following categories of recipients, depending on the nature of the interaction and applicable law:
- Hosting, infrastructure, security, and IT service providers;
- Third-party payment processor(s) and other payment-processing, banking, and financial-institution partners;
- Healthcare providers, customers, and other records custodians on whose behalf we process information;
- Our affiliates (parent companies, related companies, and subsidiaries);
- Analytics providers (including Google Analytics, with whom we share personal information as described in Section 14.3);
- Advertising and marketing service providers;
- Customer relationship management, sales enablement, and communications providers;
- Event, webinar, and business development partners;
- Professional advisors, such as lawyers, auditors, consultants, and insurers;
- Government authorities, law enforcement, courts, or other parties when required or permitted by law;
- Parties involved in a merger, acquisition, financing, sale, reorganization, or similar business transaction;
- Other parties with your consent or at your direction.
For information about how we handle mobile telephone numbers and text messaging opt-in data and consent, see Section 16.
7. Cookies, Analytics, Advertising, and Opt-Out Choices
We use cookies and similar technologies to operate the Sites, remember preferences, understand Site usage, improve our services, and, where applicable, support advertising or marketing activities. You can manage certain cookie and tracking choices through our cookie banner or preference center at the bottom of the page.
We use Google Analytics, which uses cookies and similar technologies to collect information about your use of the Sites and generate reports on Site activity. You can learn more about how Google collects and processes data at https://policies.google.com/technologies/partner-sites, and you can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout, or by using the cookie preference tool described above.
You can manage cookie preferences at any time by clicking the Cookie Preferences link in the footer of our website.
Our cookie preference tool, CookieYes, is configured to detect and honor Global Privacy Control (GPC) signals as an opt-out of the sharing of your personal information, consistent with Cal. Civ. Code § 1798.135(b). Our Sites do not respond to browser “Do Not Track” signals, but we honor Global Privacy Control signals as described above.
8. Data Retention
We retain personal information for as long as reasonably necessary and proportionate to achieve the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law, contract, audit, security, tax, accounting, or other legal obligations.
When we no longer have a legitimate business need or legal basis to retain personal information, we will delete, deidentify, anonymize, or securely store and isolate it from further processing until deletion is possible.
9. Security
We maintain technical and organizational measures designed to protect personal information against unauthorized or illegal access, destruction, use, modification, or disclosure. However, no website, network, or transmission of information over the Internet is completely secure. You should use the Sites only in a secure environment.
10. Third-Party Websites and Services
The Sites may link to third-party websites, online services, or mobile applications. We cannot guarantee the safety and privacy of data you provide to any third parties. Any data collected by third parties is not covered by this privacy policy. We are not responsible for the content or privacy and security practices and policies of any third parties, including other websites, services, or applications that may be linked to or from the Sites.
The Sites may display offers for a third party services. We may receive compensation from the third party if you enroll. Enrolling is optional and is not a condition of making a payment. We do not use your payment information, account information, or information about your healthcare or billing to select or target the offer, and we do not send you marketing communications about it. The third party’s code may collect information about your interaction with the offer, such as your IP address and device and browser information, as described in Section 14.3.
11. Children
The Sites are not directed to children under 18, and we do not knowingly collect personal information directly from children. A parent or guardian may use the Sites to pay for a minor’s care, in which case we process the minor’s information on behalf of the healthcare provider as described in Section 2.12.
12. State Privacy Rights – General
Depending on where you reside, you may have rights under applicable state privacy laws. These rights may include the right to confirm whether we process your personal information, access your personal information, correct inaccuracies, delete personal information, obtain a portable copy of certain personal information, opt out of certain processing for targeted advertising, sale, or profiling, and limit or withdraw consent for certain uses of sensitive personal information. The exact scope of these rights varies by state.
Like the CCPA, most other comprehensive state privacy laws exempt medical information and protected health information governed by HIPAA and similar medical-information statutes, either for the business entirely (if it is a HIPAA-regulated covered entity or business associate) or for that specific information, so the same Business Associate Agreement framework described in Section 2 generally applies across states as well. Unlike the CCPA, several other state privacy laws also require us to offer an internal appeal process if we deny a consumer’s request; see Section 12.1 below.
To exercise privacy rights, please use the request methods in Section 13. We will respond as required by applicable law.
12.1 Right to Appeal
If we deny your request to exercise a right described in this Section, we will explain the reason for the denial and, where applicable state law provides a right to appeal, describe how to appeal our decision.
To appeal a denial, contact us at compliance@imagineteam.com with the subject line “Privacy Rights Appeal,” referencing your original request. We will inform you of our decision on your appeal, in writing, within 45 days of receipt, and may extend that period once by up to 60 days when reasonably necessary, provided we notify you of the reason for the extension within the initial 45-day period.
If we deny your appeal, we will provide you with information on how to submit a complaint to the Attorney General in your state of residence.
13. How to Submit Privacy Requests
You may submit a privacy request using the following designated methods:
- Complete the webform: https://u2w3j.share.hsforms.com/2lxAOjkI8RaKbUkKfzVDVYA
- Call in your request to 1-800-457-0433
- Email: compliance@imagineteam.com
We may need to verify your identity before fulfilling certain requests. We will use personal information provided in connection with a request only to verify and respond to the request, prevent fraud, maintain records of the request, or as otherwise permitted by law. We will not require you to create an account solely to submit a privacy request.
You may authorize another person to submit a request on your behalf where permitted by law. We may require proof that the person is authorized to act for you and may also require you to verify your identity directly with us, except where prohibited by law.
For information that ImaginePay processes on behalf of a healthcare provider, customer, or other records custodian, ImaginePay may refer you or your request to that provider, customer, or records custodian, as appropriate and subject to applicable law, contractual obligations, security requirements, fraud-prevention obligations, payment-processing requirements, accounting and legal obligations, backup practices, and record-retention requirements.
13.1 Verification of Privacy Requests
For requests to access, delete, correct, or receive a copy of personal information, we may need to verify your identity before processing the request. The information we request for verification will depend on the nature of the request, the sensitivity of the information involved, and the information we maintain.
If you have an account on the Sites, we may verify your request through your account login. Otherwise, we generally match at least two of the following against our records: your full name, the email address or mobile telephone number associated with your account or our communications to you, and the last four digits of a payment card you used through the Sites. For a deletion or correction request, we may ask for additional details, such as the approximate date of a payment or a description of the information you believe is inaccurate. We do not require identity verification for opt-out requests, though we may need enough information (such as an email address, browser, device, or cookie identifier) to process them. We will use information provided for verification only to verify and process the request, maintain records of the request, comply with applicable law, or protect against fraud, misuse, or unauthorized access.
We may deny a request if we cannot verify the identity or authority of the person making the request, if the request is subject to a legal exception, or if we are otherwise permitted or required to deny the request under applicable law.
13.2 Authorized Agents
You may designate an authorized agent to submit a privacy request on your behalf, where permitted by applicable law.
If an authorized agent submits a request, we may require the agent to provide proof that you authorized the agent to act on your behalf. We may also require you to verify your identity directly with us or confirm that you provided the agent permission to submit the request.
Authorized agents may submit requests by emailing compliance@imagineteam.com with the subject line “Authorized Agent Privacy Request,” or through any other designated method listed in Section 13.
We may deny a request from an authorized agent if the agent does not provide sufficient proof of authorization or if we are unable to verify the request as required by applicable law.
13.3 Timing and Response Process
We will respond to privacy requests within the time required by applicable law.
For California privacy requests to know, access, delete, or correct personal information, we will confirm receipt of the request within 10 business days and will respond within 45 calendar days after receiving the request. If we need additional time, we may extend the response period as permitted by law and will notify you of the reason and extension period.
Our response may include:
| Request outcome | What we may provide |
| Approved request | The requested access, correction, deletion confirmation, portability file, or other applicable response |
| Partially approved request | A description of the portion we fulfilled and the portion we could not fulfill |
| Denied request | The reason for denial, where required or appropriate |
| Unable to verify | An explanation that we could not verify the request and any next steps available |
| No responsive information | A statement that we do not maintain personal information responsive to the request, subject to applicable law |
We will not require you to create an account with us solely to submit a privacy request. However, if you already have an account or business relationship with us, we may use existing account or business-contact information to verify and process your request.
13.4 Effect of Deletion Requests on Medical Bills and Records
A request to delete personal information under this Section does not affect, reduce, cancel, or otherwise change any outstanding balance, invoice, or payment obligation owed to a healthcare provider or other creditor. Submitting a privacy request under this Policy is not a method for disputing or resolving a medical bill. If you have questions about a bill, please contact the healthcare provider or billing entity directly.
A request to delete personal information under this Section also does not affect medical records, health information, or other information maintained by a healthcare provider or other covered entity, or information we maintain on their behalf. As described in Section 2 above, we act as a Business Associate for certain customers, and information we create, receive, maintain, or transmit on their behalf is governed by our Business Associate Agreements and applicable law, including recordkeeping and retention requirements under HIPAA and state law, not by this Privacy Policy or the process described in this Section.
14. California Privacy Notice
This California Privacy Notice supplements the rest of this Privacy Policy and applies to California residents. The disclosures below describe our practices during the 12 months before the “Last Updated” date of this Privacy Policy.
This California Privacy Notice describes personal information we collect and use as a business, such as account, security, support, analytics, and marketing information. For personal information we process as a service provider or business associate on behalf of a healthcare provider or other customer, such as payment and account information you submit to pay that provider’s bill, the provider is the business responsible for CCPA disclosures and requests, and we assist as described in Sections 2 and 13.
Categories of Personal Information We Collect, Their Sources, and Business Purposes
In the preceding 12 months, we have collected the following categories of personal information, as those categories are defined by Cal. Civ. Code § 1798.140(v)(1), from the sources and for the business or commercial purposes described in Sections 4 and 5 above, including, as applicable, from third-party sources such as marketing platforms, event partners, and other business partners as described in Section 4.3:
- Identifiers (such as name, email address, IP address, and online identifiers) – collected directly from you and automatically through the Sites;
- Customer records information (such as name, business address, and telephone number) – collected directly from you;
- Account and payment information (such as account login credentials, and a token and the last four digits of your payment card; full card numbers are collected and stored by our payment processors, which are independent service providers) – collected directly from you through the Sites;
- Age and date of birth (a protected classification characteristic under California law) – collected directly from you through the Sites;
- Commercial information (such as products or services considered or inquired about, and transaction history) – collected directly from you;
- Internet or other electronic network activity information (such as browsing history and Site usage data) – collected automatically through the Sites;
- General geolocation information (such as country or region derived from an IP address) – collected automatically through the Sites;
- Professional or employment-related information (such as job title, employer, and, for applicants, application information) – collected directly from you. Information about job applicants is addressed separately in our Notice Regarding Information Collection of Employees and Applicants, not in this section;
- Inferences (such as inferences about your interests derived from your interactions with our marketing communications) – generated from information collected directly from you and automatically through the Sites.
We do not intentionally collect protected classification characteristics (other than age and date of birth, as described above), biometric information, audio/visual/olfactory information, education information, or sensitive personal information (other than as described in Section 14.2) through the Sites. See Section 14.2.
The categories of third parties to whom we disclose each category of personal information for a business purpose are described in Section 6 above.
14.1 Retention of Personal Information
We retain personal information for the periods described below or, where a specific period is not possible, based on the criteria listed below.
| Category | Typical retention period | Criteria used |
| Contact information | For the duration of our business relationship, and for a limited period afterward as needed for legal, tax, audit, or dispute-resolution purposes | CRM, sales, legal, and relationship-management needs |
| Website/device data | For the period needed to support security, analytics, and Site functionality, consistent with our vendors’ standard data-retention settings and applicable cookie preferences | Analytics, security, cookie settings, and vendor platform settings |
| Marketing preferences | Until you update or withdraw your preference, plus a limited period afterward to maintain suppression and opt-out records | Suppression-list and opt-out compliance |
| Request/verification records | For the period necessary to document our compliance with privacy-request obligations and applicable statutes of limitations | Legal compliance and request-handling records |
| Payment and account information | For as long as necessary to comply with our contractual obligations, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements) | Contractual obligations, payment-processing, tax, accounting, and legal requirements |
14.2 Sensitive Personal Information
We do not intentionally collect sensitive personal information through the Sites, other than account login credentials and payment card information that you provide through the Sites to create an account or make a payment and other than protected health information handled as described in Section 2. Please do not submit sensitive personal information through website forms or other public-facing features unless we specifically request it. We use the account login credentials and payment card information that you provide only to create and secure your account, process transactions you request, prevent fraud, comply with legal obligations, and otherwise provide the Services, and we do not use them to infer characteristics about you.
To the extent we incidentally receive sensitive personal information, we use it only for the purpose for which it was submitted, to provide requested information or services, for security and legal compliance, or as otherwise permitted by law. We do not use sensitive personal information collected through the Sites to infer characteristics about individuals.
| Category | Typical retention period | Criteria used |
| Sensitive personal information, if any | Not intentionally collected through the Sites, except for payment card information and account login credentials, which are retained as described in Section 14.1 | Not applicable |
14.3 Categories Sold or Shared
California law requires disclosure of categories of personal information sold or shared, or a prominent statement that no personal information has been sold or shared.
We have not sold personal information during the 12 months before the “Last Updated” date of this Privacy Policy. If you choose or have chosen to enroll in a third party’s offer displayed on the Sites, you direct us to connect you with that third party, and its handling of your information is governed by its own privacy policy. We have shared the following categories of personal information with the following categories of third parties for cross-context behavioral advertising, as defined under the CCPA:
- Identifiers and internet or other electronic network activity information (such as IP address, device/browser identifiers, and Site usage data) – shared with analytics and advertising technology providers, including Google Analytics.
- Transaction details, identifiers, and internet activity information (such as IP address and device identifiers) – shared with provider of a third-party identity-protection offer displayed on the Sites.
14.4 California Privacy Rights
Subject to applicable exceptions, California residents may have the following rights:
- Right to know/access: request the categories and specific pieces of personal information we have collected about you;
- Right to delete: request deletion of personal information we collected from you;
- Right to correct: request correction of inaccurate personal information;
- Right to data portability: receive certain information in a portable and readily usable format;
- Right to opt out of sale or sharing: direct us not to sell or share your personal information;
- Right to limit use and disclosure of sensitive personal information, if applicable;
- Right to non-discrimination/no retaliation for exercising privacy rights.
We do not knowingly sell or share personal information of individuals under 16 years of age.
14.5 14.5 How California Residents May Exercise Rights
California residents may submit requests using the methods listed in Section 13. For opt-out of sale or sharing, use our cookie preference center or another method listed below, as applicable.
- Our privacy request email address, compliance@imagineteam.com
- 1-800-457-0433
- Weblink to privacy form: https://u2w3j.share.hsforms.com/2lxAOjkI8RaKbUkKfzVDVYA
14.6 Authorized Agents
You may authorize another person to submit a California privacy request on your behalf. We may require the authorized agent to provide proof of authorization and may require you to verify your identity directly with us, unless the agent has a valid power of attorney or applicable law provides otherwise.
14.7 Request Verification and Timing
We will verify and respond to California privacy requests as required by law. We generally respond to verifiable consumer requests within 45 days of receipt. If reasonably necessary, we may extend the response period by an additional 45 days and will notify you of the extension within the first 45-day period. We are not required to provide access to the same consumer more than twice in a 12-month period.
14.8 Financial Incentives
We do not offer financial incentives or price or service differences in exchange for the collection, retention, sale, or sharing of personal information.
14.9 Non-Discrimination
We will not discriminate against you for exercising your privacy rights, including by denying services, charging different prices or rates, providing a different level or quality of services, or suggesting that you may receive a different price, rate, level, or quality of service because you exercised your rights, except as permitted by applicable law.
14.10 Shine the Light
California Civil Code Section 1798.83 permits California residents to request information regarding our disclosure of certain personal information to third parties for their direct marketing purposes. To make such a request, contact us using the methods in Section 13.
15. Individuals Outside the United States
The Sites are intended for users in the United States and are not directed to individuals located in the European Economic Area, United Kingdom, Switzerland, or other jurisdictions where we do not market our services.
16. SMS/Text Messaging
If you provide your mobile telephone number and opt in to receive text (SMS) messages from ImaginePay, we will collect and use your mobile telephone number, your opt-in consent and related consent records, and information about the delivery of the messages we send to you, in order to send you the text messages you requested and to maintain records of your consent. Your consent to receive text messages is not a condition of purchasing any goods or services or of making a payment through the Sites.
At ImaginePay, no mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
You may opt out of receiving text messages at any time by replying STOP to any text message you receive from us. For help, reply HELP or contact us at support@imaginepay.com. Message frequency varies. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.
17. Contact Us
Technology Partners, LLC d/b/a ImagineSoftware
8757 Red Oak Blvd., Charlotte, NC 28217
Telephone: (704) 553-1004
Email: support@imaginepay.com