Privacy Policy

Information you provide. When you submit the intake form or email us, we receive what you choose to share: typically your name, organization, role, work email, and your description of the problem, what you have tried, what is at stake, and your timeline.

Information collected automatically. When you browse the site, our hosting provider records standard server request logs, including IP address, browser type, and request metadata, for security and operational purposes. We also use analytics tools, described in the next section, that collect usage data such as pages visited, approximate location derived from IP address, device and browser information, and how you arrived at the site.

We do not ask for, and you should not send, sensitive personal information through this site. There are no user accounts and no payments are processed here.

This site uses Google Tag Manager to load measurement tools, including Google Analytics, which set cookies and similar technologies to help us understand how the site is used: which pages are visited, how visitors arrive, and where the site can be improved. This data is aggregated and is not used to build advertising profiles. You can learn how Google handles this data at policies.google.com/technologies/partner-sites.

You can block or delete cookies through your browser settings, or opt out of Google Analytics specifically with the Google Analytics opt-out browser add-on. The site will continue to work with analytics cookies blocked.

We do not run third-party advertising on this site and we do not use cross-site tracking pixels for ad targeting.

We use the information described above to:

• Respond to your inquiry and evaluate whether an engagement is a fit
• Conduct and manage engagements once agreed
• Communicate with you about relevant work, with the option to opt out
• Operate, secure, and improve the website
• Comply with legal obligations and enforce our terms

We do not sell personal information, and we do not share it with third parties for cross-context behavioral advertising.

This website is not intended for the submission of patient information or protected health information (PHI) as defined by HIPAA. Do not include PHI in intake submissions, email, or any other communication sent through this site. The website and its forms are not covered by a business associate agreement.

Where client work involves PHI or other regulated data, that handling is governed by a separate written agreement, including a business associate agreement where required by law.

We share personal information only with the service providers needed to run this site, and only so they can perform their function:

• Cloudflare, which hosts the site and provides content delivery and security, and in that role processes server logs
• Resend, a transactional email provider, which delivers your intake form submission to us as email
• Google, which provides the tag management and analytics services described above

We may also disclose information when required by law, to protect our rights or the safety of others, or as part of a business transaction such as a sale or merger, in which case this policy would continue to apply to information collected under it.

We keep personal information only as long as needed for the purposes described in this policy: to respond to and evaluate inquiries, to perform engagements, and to meet legal and record-keeping obligations. Intake submissions we do not pursue are deleted in the ordinary course of business.

We apply reasonable administrative, technical, and physical safeguards appropriate to the nature of the information, including encrypted connections (HTTPS) across the site. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have legal rights over your personal information, including the right to know what we hold about you, to access a copy of it, to correct it, to delete it, and to opt out of certain processing. Several US state privacy laws provide these rights, as does the GDPR for visitors in the European Economic Area and the UK.

We honor these requests regardless of where you live. To exercise any of them, contact us using the details in the last section. We will verify your request and respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

You can also opt out of non-essential communications from us at any time by replying to any message or contacting us directly.

This site is a business-to-business service directed at healthcare operators and investors. It is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

We operate from the United States, and information collected through this site is processed and stored in the United States, where privacy laws may differ from those in your jurisdiction. By using the site, you understand that your information will be transferred to and processed in the United States as described in this policy.

We may update this policy from time to time. The date at the top reflects the most recent revision. If we make material changes to how we handle personal information, we will update this page before the changes take effect. Continued use of the site after an update means the revised policy applies.

Questions about this policy, or requests regarding your information, can be raised through our contact page. We respond to privacy requests directly, not through an automated system.