Call (866) 991-4900 Get a quote →
A wholly owned company of Baker Benefits Administrators, Inc.
Last Updated: July 2, 2026
This Privacy Policy describes how RightRoute Pay ("RightRoute Pay," "we," "us," and "our") collects, uses, protects, retains, and shares information when you visit https://www.rightroutepay.com, use our public web pages, portals, payment links, contact forms, onboarding flows, demo requests, SMS/RCS opt-in pages, email communications, support channels, payment-related communications, and other services that link to or reference this Privacy Policy.
RightRoute Pay provides payment, provider-payment, billing, payment-routing, member-support, merchant-support, provider-support, transaction-management, and related financial technology services. RightRoute Pay may support self-funded health plan administration, member navigation, direct provider payment, cash-pay healthcare options, benefit-related workflows, and related payment or administrative services.
RightRoute Pay is wholly owned by Baker Benefits Administrators, Inc.. We may work with Baker Benefits Administrators, Inc., its affiliates, customers, employers, health plans, providers, payment processors, banks, card networks, service providers, and other approved partners to deliver the services.
This Privacy Policy applies to https://www.rightroutepay.com and wherever it is posted, linked, incorporated, or referenced, including through Baker Benefits Administrators, Inc. pages, portals, payment links, onboarding workflows, communications, or documents.
RightRoute Pay does not sell, rent, buy, or share SMS/RCS opt-in consent data with third parties or affiliates for their own marketing or promotional purposes.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
This Privacy Policy explains our public-facing and user-facing privacy practices. It does not replace any customer agreement, employer agreement, plan document, provider agreement, Business Associate Agreement, payment processor agreement, bank partner agreement, card network rule, legally required privacy notice, or other contract that may apply to specific services.
This Privacy Policy applies to information we collect or process:
This Privacy Policy does not apply to third-party websites, services, applications, payment processors, banks, providers, employers, health plans, or platforms that we do not control, even if they link to or are linked from our services.
We collect information only as reasonably needed for service operation, payment support, member support, provider support, customer support, communications, compliance, security, fraud prevention, legal obligations, and other legitimate business purposes.
Depending on the service, RightRoute Pay may process information related to health benefits, self-funded health plans, member navigation, provider search, appointment navigation, direct provider payment, cash-pay healthcare options, claims-adjacent workflows, eligibility, plan-design rules, pricing, member responsibility, provider information, and other administrative or payment-support data.
Some information may be protected health information ("PHI") or electronic protected health information ("ePHI") when handled on behalf of a Covered Entity or Business Associate. Where RightRoute Pay processes PHI/ePHI, that processing is governed by the applicable Business Associate Agreement, customer agreement, plan instructions, HIPAA/HITECH requirements, and applicable compliance controls.
We may use cookies and similar technologies for website operation, authentication, analytics, performance measurement, fraud prevention, security, debugging, and user-experience improvement. These technologies may help us recognize users and sessions, maintain account security, understand how users find and use services, diagnose errors, measure campaign effectiveness, improve content, detect suspicious activity, and support fraud prevention and compliance controls.
You can control cookies through your browser settings and other tools made available by analytics providers. Some cookies may be necessary for website functionality, authentication, security, or payment-related operations.
If you opt in to receive SMS, RCS, WhatsApp, or similar messages from RightRoute Pay, we may collect and use your phone number or messaging handle, opt-in method, consent status, disclosure version, timestamps, HELP/STOP requests, message metadata, and related records to operate, secure, document, and support the messaging program.
Messaging may include account alerts, payment reminders, payment confirmations, provider-payment updates, navigation support, security notifications, support communications, service updates, onboarding messages, or other communications related to your relationship with RightRoute Pay or a participating customer, employer, plan, provider, or transaction participant.
Message and data rates may apply. Message frequency may vary. You may opt out of SMS/RCS messaging by replying STOP. You may request help by replying HELP.
RightRoute Pay does not sell, rent, buy, or share SMS/RCS opt-in consent data with third parties or affiliates for their own marketing or promotional purposes.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
Text messaging consent data is used only to operate, secure, support, document, and comply with the RightRoute Pay messaging program, including disclosures to messaging service providers where necessary to deliver and administer the messages.
We use information we collect or receive for the following purposes:
We do not sell personal information. We may share information only as needed for the purposes described in this Privacy Policy, including:
RightRoute Pay is wholly owned by Baker Benefits Administrators, Inc.. We may share information with Baker Benefits Administrators, Inc. and its affiliated entities for ordinary business, administrative, compliance, support, accounting, legal, security, payment, audit, reporting, customer-service, member-support, and service-delivery purposes.
Where RightRoute Pay processes information on behalf of a customer, employer, health plan, provider, merchant, or other contracted party, sharing may also be governed by the applicable customer agreement, Business Associate Agreement, data protection agreement, service order, plan document, provider agreement, payment agreement, or other written agreement.
All categories of sharing described above exclude text messaging originator opt-in data and consent, except as needed to operate, secure, support, document, and comply with the RightRoute Pay messaging program.
RightRoute Pay does not sell, rent, buy, or share SMS/RCS opt-in consent data with third parties or affiliates for their own marketing or promotional purposes.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
You may contact us at help@rightroutepay.com or by mail at 28 Raintree Cove, Lake Charles, LA 70605 to request access to, correction of, or deletion of personal information that you provided directly to RightRoute Pay, subject to applicable law, identity verification, contractual obligations, payment processing requirements, fraud prevention needs, security requirements, legal obligations, and retention requirements.
Depending on where you live and the context in which we process your information, you may have rights to request access, correction, deletion, restriction of certain processing, portability of certain information, objection to certain processing, information about certain disclosures, or opt-out of certain sales, sharing, targeted advertising, or profiling where applicable.
Because RightRoute Pay may provide payment, provider-payment, benefit-navigation, and administrative services, some information may need to be retained to complete transactions, maintain financial records, comply with legal or regulatory requirements, prevent fraud, resolve disputes, support audits, enforce agreements, or comply with payment network, processor, bank, health plan, Business Associate Agreement, or customer obligations.
You may opt out of SMS/RCS messaging by replying STOP. You may request help by replying HELP. You may use browser settings and provider tools to limit cookies and analytics technologies.
In some deployments, RightRoute Pay may handle PHI/ePHI on behalf of Covered Entity customers or Business Associate partners. In those circumstances, PHI/ePHI is governed by applicable Business Associate Agreements, customer instructions, HIPAA/HITECH requirements, and RightRoute Pay compliance controls.
Do not submit PHI, medical details, claim details, credentials, bank credentials, payment card numbers, government identification documents, or other sensitive information through public or unsecured channels unless RightRoute Pay, Baker Benefits Administrators, Inc., your health plan, your employer, or an approved workflow specifically instructs you to use that channel.
Privacy requests involving customer-controlled health plan data, employer plan data, provider data, or PHI/ePHI may need to be routed through the applicable Covered Entity, customer, employer, health plan, provider, or administrator unless direct handling has been contractually delegated to RightRoute Pay.
RightRoute Pay maintains administrative, technical, and organizational safeguards designed to protect personal information, payment information, transaction data, account data, business information, member-support information, PHI/ePHI where applicable, and other sensitive information.
These safeguards may include access controls, least-privilege permissions, multi-factor authentication where appropriate, encryption in transit and at rest where supported, tokenization or masking of payment information where available, logging and monitoring, vendor review, workforce training, incident response procedures, security testing, fraud detection controls, data minimization, and privacy-by-design practices.
No website, network, payment system, messaging channel, or transmission method is completely secure. We maintain safeguards appropriate to the nature of the data and our role, but we cannot guarantee absolute security. You are responsible for keeping account credentials confidential and notifying us promptly if you believe your account, credentials, payment method, device, or communications with RightRoute Pay have been compromised.
We retain information for as long as reasonably necessary to provide services, process payments, respond to requests, maintain account and transaction records, maintain consent records, operate and secure systems, comply with legal or contractual obligations, resolve disputes, prevent fraud, preserve audit evidence, and enforce agreements.
Payment, transaction, tax, accounting, compliance, risk, fraud, dispute, chargeback, security, audit, legal, HIPAA/HITECH, Business Associate Agreement, customer, and consent records may be retained for longer periods where required or permitted by applicable law, payment network rules, financial institution requirements, contractual obligations, or internal compliance requirements.
Our public-facing services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18 through public-facing services. If you believe a child has provided personal information to us, please contact us using the contact information below.
Depending on where you live and the context in which we process your information, you may have privacy rights under state, federal, or international privacy laws. These rights may include the right to request access, correction, deletion, portability, restriction, objection, or information about certain disclosures.
We do not sell personal information. We do not share SMS/RCS opt-in consent data with third parties or affiliates for their own marketing or promotional purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
International users should understand that RightRoute Pay may process and store information in the United States or other jurisdictions where we or our service providers operate. By using the services, you understand that information may be transferred to, stored in, or processed in jurisdictions that may have different data protection laws than your location.
Certain RightRoute Pay services may be subject to additional financial privacy notices, payment processor terms, bank partner terms, card network rules, provider agreements, merchant agreements, customer agreements, employer agreements, plan documents, Business Associate Agreements, or legally required disclosures.
Where a separate financial privacy notice, merchant agreement, payment processor agreement, bank partner notice, plan document, provider agreement, Business Associate Agreement, or customer contract applies, that notice or agreement may provide additional information about how financial, health plan, provider, transaction, or member information is collected, used, shared, retained, and protected.
We may update this Privacy Policy from time to time to reflect changes in practices, technologies, legal requirements, payment services, security measures, ownership structure, or business operations. When we make changes, we will post or provide the updated policy and update the "Last Updated" date.
Your continued use of the services after the updated Privacy Policy is posted or provided means that you acknowledge the updated Privacy Policy, subject to applicable law.
For questions, support requests, privacy requests, security inquiries, compliance inquiries, or legal notices, contact RightRoute Pay using the information below.