Consumer Health Data Privacy Policy

Who we are

FusionByte Media LLC, doing business as TortMatics, 5830 E 2nd St, Casper, Wyoming 82609, US. Contact: privacy@tortmatics.com.

Consumer health data we collect

When you request a review, we may collect:

• health conditions, diagnoses, symptoms, and diagnosis dates;
• treatments, surgeries, and medical devices or implants;
• use of medications and consumer products, and exposure to chemicals or environmental hazards;
• information about sexual assault or abuse, and about injuries;
• the fact that you are seeking information about, or a legal review related to, a health condition — which, together with your contact details, can itself be consumer health data; and
• our screening result (whether your request appears to fit what a participating firm is reviewing).

Sources

Directly from you, when you answer questions on a campaign page. We do not collect consumer health data from other sources, we do not buy it, and we do not use precise geolocation or geofencing around health care facilities.

Why we collect and use it

• to review your request against the criteria participating law firms are evaluating;
• to deliver your request to those firms when you consent, so they can evaluate it and contact you;
• to keep records of your consents and requests, and to comply with law.

We collect consumer health data only with your consent, which you give by checking a separate box before answering health questions. We do not use it for advertising and never send it to advertising platforms.

Consumer health data we share, and with whom

With your separate consent to share, we disclose the categories above, together with your contact details, to:

• Participating law firms and legal intake partners for the campaign you selected. They are named, by campaign, on our partner list.
• Processors that store or handle data only on our instructions: Vercel (hosting), Neon (database), and Resend (email delivery). Processors may not use the data for their own purposes.

We have no affiliates that receive consumer health data.

Sale of consumer health data

Participating firms pay TortMatics, so delivering your request to them may be a sale. For Washington and Nevada residents, we sell consumer health data only with a separate, signed authorization that names the purchasers, states the purpose, and expires one year after signing; we keep a copy for six years and you may revoke it at any time. We never condition our service on your signing it. Maryland residents: we do not sell your sensitive data. Connecticut residents: we sell consumer health data only with your consent.

Your rights

• Confirm and access: ask whether we collect, share, or sell your consumer health data, get a copy, and get a list of every third party and affiliate that received it, with an active email address or other contact for each.
• Withdraw consent to collection and sharing, and revoke any sale authorization.
• Delete your consumer health data. We delete it from our systems, including archives and backups (backups within 6 months), and notify every processor and third party that received it.
• Appeal a decision on your request. If your appeal is denied, you may contact the Washington Attorney General (atg.wa.gov), the Nevada Attorney General (ag.nv.gov), or the Connecticut Attorney General (portal.ct.gov/ag).

To exercise these rights, use our privacy request form (choose “Consumer health data”) or email privacy@tortmatics.com. We respond within 45 days, extendable once by 45 days when reasonably necessary, and we will tell you if we extend. Exercising your rights is free, and we will not treat you differently for doing so.

Security and access

Access to consumer health data is limited to staff who need it to process requests. See Data security.