Consumer health data privacy policy.

• The type of medical care concern (for example, a diagnosis, surgery, hospital, birth, or medication concern)
• The facility, if you name it
• Approximate dates of care, and when you first noticed a problem
• How it affected your or the patient’s health: the choices you select and your description
• Whether medical records are available
• Your relationship to the patient
• The fact that you are asking about a possible medical malpractice matter

We link this to your name and contact details.

Only to connect you with a participating law firm that you approve, so that firm can contact you about your request.

Directly from you, through our request form.

We ask for your consent before we collect any health data. Before sharing it, we ask for a separate signed authorization that names the specific law firm, lists what will be shared, and tells you that the firm pays us. The authorization expires after one year, you can revoke it at any time, and we send you a copy. Our service is never conditioned on your signing it.

• The participating law firm you authorize. All of the information above, with your name, contact details, and preferred contact times, goes only to the firm named in your signed authorization. Because the firm pays us, this may be a “sale” of consumer health data. It happens only with your signed authorization.
• Processors that handle data for us under contract and only on our instructions: secure hosting and database services, and email delivery.

We have no affiliates that receive it, and we don’t share health data with advertisers. No third party collects consumer health data about you over time or across websites through our request form.

NOTICE: This website may sell your sensitive personal data. (Fla. Stat. § 501.715.)

• Confirm whether we collect, share, or sell your consumer health data, and see it, including a list of the third parties and affiliates we’ve shared it with or sold it to
• Correct it
• Have it deleted, including from our processors, and have us notify the firm that received it
• Withdraw your consent
• Appeal if we decline your request

To make a request, email support@malpracticeattorneys.com with the subject “Health data request.” We’ll verify your identity and respond within 45 days of verifying your request (up to 45 more if needed, and we’ll tell you why). We delete within 30 days and tell the firm and our processors to delete too. Backup copies are deleted when the backups expire. Two requests a year are free.

Appeals. If we decline your request, reply to our decision with the subject “Appeal.” We’ll answer in writing within 45 days. If we still decline, we’ll give you the contact information for the Nevada Attorney General or your own state attorney general.

Only people who need health data to handle your request can access it. We keep it in a dedicated, access-controlled intake system, not on our website platform or in ordinary email, and we use administrative, technical, and physical safeguards.

We don’t use geofences around healthcare facilities to identify, track, or send messages to people.

[OPERATOR LEGAL NAME], [ADDRESS], support@malpracticeattorneys.com.

Effective date: [DATE]. We’ll post changes here with a new effective date, and give notice on this website before a significant change takes effect.