Privacy
Privacy policy
What we collect, why, how long we keep it, and who can see it. If the form didn't make you read this, the short version is: your medical records are used for your opinion, nothing else, and deleted when you ask.
Collection
What we collect, and why
- 01Contact detailsName, email, location, and enquiry message from the contact form — so we can reply and prepare your intake.
- 02Medical recordsImaging, reports, notes, and medications you upload to the secure intake portal. Used solely to produce your opinion and treatment plan.
- 03Payment dataProcessed by our payment providers (Payoneer / Elevate Pay). We do not store card numbers.
- 04Basic site analyticsAggregate, privacy-respecting metrics. No advertising trackers, no fingerprinting, no selling of data.
Use & sharing
Who sees your records
- 01The reviewing consultantOnly the consultant and, where your jurisdiction requires it, a licensed in-country intermediary.
- 02SubprocessorsEncrypted storage, secure intake portal, and payment providers. Each bound by contract to use data only for the service you requested.
- 03Never soldWe do not sell, rent, or share your data for marketing — ever.
- 04Legal requestsDisclosure only where required by law, and we will tell you first where we are permitted to.
Retention
How long we keep data
- 01RecordsRetained for five years after the last interaction, then destroyed. You may request earlier deletion at any time.
- 02Contact detailsKept while we might still be helping you. Unsubscribe or ask, and they are removed.
- 03Your rightsAccess, correction, export, and deletion — request any of these by contacting us through the contact page. We respond within 30 days.
Subprocessors and data-processing agreements
- 01Encrypted storageMedical records are stored encrypted at rest and in transit with a subprocessor bound by a data-processing agreement (DPA).
- 02Secure intake portalFile uploads and report delivery run through a dedicated portal. No records travel over WhatsApp or ordinary email.
- 03Payment providersCard payments are processed by Payoneer / Elevate Pay. We never see or store card numbers.
- 04Copies on requestA list of current subprocessors and copies of our DPAs are available on request through the contact page.
This policy is a summary, not legal advice. For a specific question about your jurisdiction (including GDPR or HIPAA), consult a licensed professional or your health authority.