On this page(12)
This notice explains how Malpractice Center handles consumer health data: information that identifies you and relates to your health, including what you tell us in our free case review. It is written to meet Washington's My Health My Data Act, similar laws in other states such as Nevada and Connecticut, and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
What we collect
| Category | What it includes | Why we collect it |
|---|---|---|
| Health information | What happened, the kind of harm, how serious it is, the dates of the incident and of when you found out, and your description | To understand your request and estimate your filing deadline |
| Location | Your country, state or province, and city | To apply the right law and find a featured partner that serves your area |
| Contact details | Name, email address, phone number and how you prefer to be contacted | So you, or the law firm you agree to, can reach you |
| Consent record | The version of the consent text you agreed to, and when | To show what you agreed to |
| Technical information | A one-way hash of your IP address | To limit spam and abuse |
We collect this information directly from you. We do not buy health information, infer it from your browsing, or use geofencing around health care facilities.
How we use it
- To estimate the filing deadline that likely applies to you
- To find a featured partner law firm that serves your area
- To send your request to that law firm, if you agree
- To contact you about your request
- To keep a record of your consent and to meet legal obligations
- To prevent spam and fraud
Who receives it
A featured partner law firm, with your consent
If a featured partner law firm serves your area, and you agree, we send your request to that firm so it can contact you. In Canada, our featured partner is Diamond & Diamond. In the United States, a featured partner may serve your market.
No one, if there is no partner
If no featured partner serves your area, we hold your request and do not share it with any law firm without your further consent.
Service providers
Companies that host our site and data and deliver our email process it for us under contracts that limit them to that work.
Authorities, only when the law requires it
We disclose information if we are legally required to.
We do not share consumer health data with advertisers, data brokers or social media platforms.
We do not sell it
We do not sell consumer health data, and we do not receive anything of value for it. We do not use it for targeted advertising.
Consent
We ask for your consent before we collect consumer health data, and separately before we share it with a law firm, through the consent boxes on the case review. You can withdraw consent at any time. Withdrawing stops future sharing; it cannot recall a request already sent to a law firm, but we will tell that firm you have withdrawn.
How long we keep it
We keep case review information for 18 months from the day you send it, then delete it. If you ask us to delete it sooner, we will, unless the law requires us to keep it.
How we protect it
Case review fields are encrypted at rest, access is limited to the people who need it to handle your request, and the case review sends data over an encrypted connection. The case review pages carry no advertising or analytics pixels.
Your rights
| Right | What it means |
|---|---|
| Confirm and access | Ask whether we collect, share or sell your consumer health data, get a copy, and get a list of every third party we shared it with and how to contact them |
| Delete | Ask us to delete your consumer health data. We will also tell any law firm we shared it with to delete it |
| Withdraw consent | Stop us from collecting or sharing it from now on |
| Correct | Ask us to fix information that is wrong |
| Appeal | Ask us to reconsider if we refuse a request |
How to make a request
Email us
Write to [email protected] with Health data request in the subject line. Tell us what you want us to do.
We confirm it is you
We verify the request by writing back to the email address you used on the case review.
We respond
We respond within 45 days, as Washington law requires; we may extend once by up to another 45 days when reasonably necessary, and will tell you if we do. Under PIPEDA we respond within 30 days unless an extension is allowed.
Appeal if you disagree
If we refuse your request, reply with Appeal in the subject line and we will reconsider it and tell you the result in writing. If you are in Washington and we deny your appeal, you can contact the Washington State Attorney General. In Canada, you can complain to the Office of the Privacy Commissioner of Canada.
You will not be charged for a request, and using your rights will not affect how we treat you.
Where your information is stored
Case review information may be stored and processed in the United States and Canada by us and our service providers. Information stored outside your province or country may be accessible to authorities there under local law.
Children
A parent or legal guardian may use the case review on behalf of a child. Please do not send information about another adult unless you have the authority to act for them.
Changes to this notice
If we change how we handle consumer health data, we will update this notice and its date, and we will ask for your consent again before using data in a new way.