Privacy policy.

When you browse this website: device and usage information such as IP address, browser type, pages viewed, and referring site. Our website platform, Shopify, collects this using cookies and similar technologies, under its own privacy policy. Our request form is separate from this website and doesn’t use cookies for tracking, and no third party collects anything through it. This website doesn’t respond differently to Do Not Track signals.

When you send a request: where the care took place and where you live; the type of concern and approximate dates; your description of what happened and how it affected you or the patient; your relationship to the patient and whether you already have a lawyer; your name and your contact details and preferences; and records of the consents and authorizations you give, including your electronic signature, the date and time, and technical details of your device. We also note the approximate state your internet connection appears to come from, which we work out on our own systems from your IP address. We keep only the state, not the address itself.

When an attorney contacts us about participating: their name, firm, work contact details, bar numbers, licensed states, service area, and practice information.

We don’t ask for medical records, Social Security numbers, insurance information, or payment information.

• To connect you with a participating firm that you approve
• To confirm your contact details, keep duplicate requests from going out, and spot automated or misdirected requests
• To contact you about your request, by the method you choose
• To run, secure, and improve our website and service
• To meet our legal duties, including lawyer-advertising rules

The participating law firm you approve. We share your request with one firm at a time, only after you see the firm’s name and office location and sign a separate authorization. That firm pays us for our service, so under some state laws this sharing is considered a “sale” of personal information. We do it only with your signed authorization. The firms we deliver requests to are listed on our Participating firms page. The firm you approve may share your information further, for example with co-counsel or experts, as your authorization explains.

NOTICE: This website may sell your sensitive personal data. Florida law requires this notice from any business that may sell sensitive data, which includes information revealing a health diagnosis (Fla. Stat. § 501.715). Here, that means the paid delivery of your request to the one firm you approve, and it happens only with your prior, signed consent.

Service providers that help us run the service, such as secure hosting and database services and email delivery, under contracts that limit how they may use the information.

Legal and safety reasons: when required by law or legal process, or to protect rights and safety.

A business transfer: if our business is sold or reorganized, subject to this policy.

We don’t give information about your health to advertisers, and we don’t sell or share personal information for targeted advertising.

When requests open, they will be kept in a dedicated, access-controlled intake system that is separate from the platform that runs this website. The details of a request won’t be stored on our website platform, and our notification emails won’t include them. Access will be limited to people who need it to handle your request, with safeguards such as encryption, multi-factor authentication, and access logging.

If a security breach affects your personal information, we’ll notify you as the law requires (in Florida, within 30 days).

• Request details: [RETENTION PERIOD] after your request is delivered or withdrawn, unless you ask us to delete them sooner
• Signed sharing authorizations: 7 years after you sign (6 years after the authorization expires), as Nevada and Washington law require
• Attorney business contacts: while we work together and for [PERIOD] afterward
• Website logs: kept by Shopify under its own retention periods

You can ask us to show you, correct, or delete the personal information we hold about you, and you can withdraw a consent at any time. Email support@malpracticeattorneys.com with the subject “Privacy request,” or use the form on our Contact page. If you sent us a request, you can also use the link in your confirmation email. We’ll verify your identity, respond within 45 days (we’ll tell you if we need up to 45 more), and delete health information within 30 days of verifying a deletion request. We won’t treat you differently for making a request.

Depending on where you live, you may have additional rights. These can include the right to opt out of the sale or sharing of personal information, to limit the use of sensitive personal information, to use an authorized agent, and to appeal a decision we make about your request. We honor Global Privacy Control browser signals as a request to opt out of sale or sharing.

We email you only to confirm your address and about your request. These emails don’t advertise anything. We don’t send text messages and we don’t call. If you ask for a call, only the participating firm you approve will call you, from its own phone, about your request, and only with your permission. You can tell the firm to stop calling at any time, or tell us and we’ll pass it on. We don’t send marketing.

This service isn’t directed to children. You must be 18 or older to send a request, and we don’t knowingly collect personal information from anyone under 18. A parent or guardian may send a request about a child’s care and gives the consents and authorization. If we learn that someone under 18 sent a request, we’ll delete it.

We’ll post any changes here with a new effective date. If a change is significant, we’ll give notice on this website before it takes effect.

[OPERATOR LEGAL NAME], [ADDRESS], support@malpracticeattorneys.com.