Privacy Policy
Last updated: October 12, 2026
SecondOpinion.org is operated personally by Sunny Jain, MD. This Privacy Policy explains how information is collected, used, stored, and disclosed when you visit the website, submit an inquiry, purchase a service, communicate with us, or provide materials for review.
The Terms of Service, Medical Disclaimer, and Refund Policy describe service eligibility, acceptance, limitations, and payment terms. The consumer Independent Medical Case Review is a retrospective educational review of supplied records. It does not establish a physician-patient relationship or provide diagnosis, treatment, emergency care, or legal advice. Attorney and expert-witness work requires conflict clearance and a separate written engagement. These service limitations do not remove applicable privacy or confidentiality obligations.
Information We Collect
Information you provide may include your name, email address, telephone number, general inquiry or case summary, whether you have consulted an attorney, consent and policy acknowledgments, payment and transaction information, and communications about the service.
For an accepted review, information may also include medical records, clinical histories, laboratory and imaging reports, hospital notes, timelines, related case materials, and documents establishing your authority to submit them. Review notes, correspondence, and written findings may contain sensitive medical information.
Wix and other enabled service providers may collect technical information such as your IP address, approximate location derived from that address, browser and device information, cookie identifiers, pages viewed, referring pages, interactions, and security or error logs.
Initial Forms and General Inquiries
Use the intake description, quote request, general contact form, and website messaging only for a brief general summary. Provide the submitting adult's contact details in the designated contact fields.
Do not include a patient's name, date of birth, medical-record number, Social Security number, insurance details, complete medical records, or other unnecessary identifying medical information in a narrative field or chat message. Do not provide passwords or healthcare-portal login credentials.
Website forms and communications may be stored in Wix systems and related business communications. Certain fields may have additional encryption features; this does not establish that every field, message, notification, or connected service has the same protection. If you inadvertently submit sensitive information through a general channel, contact us without repeating that information so we can address the submission.
Submitting Medical Records
Do not send medical records until you receive specific instructions for your review. Submitting a form or paying for the consumer service does not guarantee acceptance.
Records may be provided through a private Google Drive or Dropbox folder shared with the account identified in our instructions, or another specifically agreed transfer method. Attorney materials may be supplied through the retaining party's file-transfer service, such as ShareFile. Use restricted access rather than a public or unrestricted link, and share only materials relevant to the agreed review.
You must be the patient or have the authority and permission needed to provide the patient's information. We may request verification of identity, representative authority, or an appropriate authorization before accessing records or releasing findings. We do not independently obtain records from healthcare facilities or access a patient's healthcare portal unless separately agreed in writing and appropriately authorized.
Email and Delivery of Findings
Email may be used for inquiries, instructions, links to shared folders, and communications about a review. Medical records or written findings may also be sent by email when that delivery method has been specifically arranged.
Ordinary email may not be encrypted end to end. Messages and attachments may be stored by the sender's and recipient's email providers and on their devices, and may be exposed through forwarding or incorrect addressing. Request a restricted file-sharing method before transmitting records or receiving a report if you do not want sensitive material sent by ordinary email. Acknowledging email's limitations does not waive legal rights or relieve us of applicable privacy obligations.
Website Chat and Messaging
If available, website chat or automated messaging helps with general service information, navigation, and contact requests. It is not a medical-record submission channel, a clinical consultation, or an emergency service.
Messages, contact details you choose to provide, and associated technical information may be stored and processed by Wix or the provider operating the feature and may be accessible to Dr. Jain for responding to inquiries. Do not submit medical records or identifying medical details through chat. Forms, chat, and email are not continuously monitored; for a medical emergency, call 911 or go to the nearest emergency department.
How We Use Information
We use information to evaluate requests and conflicts, verify identity and authority, administer accepted services, review supplied records, prepare and deliver findings, respond to questions, and process payments, cancellations, and refunds.
Information may also be used to maintain consent, business, and accounting records; protect the website and investigate misuse; troubleshoot services; understand general website activity; address disputes; and meet legal, contractual, or professional obligations.
Medical records and identifying clinical narratives are not used for advertising. SecondOpinion.org does not sell personal information for monetary compensation.
How Records Are Stored and Shared
Dr. Jain personally performs the medical review. Records may be accessed, downloaded, organized, and retained as electronic working files, together with review notes, timelines, correspondence, and written findings. Removing access to a shared folder does not delete copies already downloaded or created for the review.
Access is limited to Dr. Jain and service providers or authorized persons who need information to perform or administer the requested service, subject to applicable confidentiality requirements. Providers may include Wix for website hosting, forms, messaging, and related functions; Gmail or other email services; Google Drive, Dropbox, ShareFile, or another agreed file-transfer service; providers used for document processing and storage; payment processors; and enabled analytics or security services. A provider receives the information relevant to the function it performs, which may include sensitive information when it handles records or reports.
Findings are delivered to the client or an appropriately authorized recipient. Consumer records and findings are not routinely sent to treating clinicians, relatives, employers, insurers, or attorneys without appropriate authorization, except where disclosure is otherwise required or permitted as described here. Attorney matters are handled according to the written engagement and any applicable confidentiality or business associate agreement.
Information may also be disclosed to professional advisers or authorized contractors with a need to know, or when reasonably necessary and legally permitted to comply with law or legal process, meet professional obligations, prevent serious harm, protect legal rights, investigate fraud, or address a dispute. This policy does not promise that material submitted for a review is protected by attorney-client privilege or immune from lawful disclosure.
Security and Applicable Privacy Requirements
We use reasonable administrative, technical, and physical safeguards appropriate to the information and systems involved. No website, transmission method, email account, storage service, or device can be guaranteed completely secure.
The public website, general forms, chat, and ordinary email are not represented as HIPAA-compliant medical-record intake systems. Encryption or a private sharing link alone does not establish HIPAA compliance. Whether HIPAA applies depends on the parties, their roles, and the particular engagement.
Where HIPAA, other privacy laws, or a written confidentiality or business associate agreement applies, those requirements remain applicable. This policy does not replace required authorizations or agreements, or waive any required safeguards, disclosure restrictions, or notification duties.
Data Retention and Deletion
We retain submissions, supplied records, review materials, findings, and related business information for as long as reasonably necessary to evaluate or provide the service, respond to questions, maintain consent and transaction records, address disputes, and meet legal, contractual, or professional obligations. Retention varies by information type and engagement.
Completion of a review, declination of a request, or issuance of a refund does not itself constitute a deletion request. Expiration of a sharing link does not delete copies already downloaded. You may request deletion using the contact details below. We may retain information where required or permitted by law, an applicable agreement, or a legitimate recordkeeping or dispute-related need.
Deletion from active systems may not immediately remove copies in backups, email archives, or third-party systems. Copies you or another recipient retain are outside our control. Information no longer reasonably needed may be deleted, securely destroyed, or deidentified.
Payments
Payments are processed through Wix and its payment-processing partners under their own terms and privacy policies. They may collect payment-card, billing, fraud-prevention, device, and transaction information. SecondOpinion.org generally does not receive or store your complete payment-card number.
Cookies and Analytics
Wix and other enabled services may use cookies and similar technologies for website operation, security, preferences, forms, payments, performance, and analytics. Enabled analytics tools may receive technical identifiers and information about visits and interactions. These website functions are distinct from the instructed record-transfer process.
Where available, use the website's cookie settings to manage nonessential cookies. You may also adjust browser settings; blocking cookies can affect functionality. Independent links and embedded features may collect information under their providers' privacy policies. See the Wix Privacy Policy, Google Privacy Policy, and the policies of other providers you use.
Your Choices and Requests
Depending on applicable law and circumstances, you may request access, a copy, correction, or deletion of personal information, restrict or object to certain processing, withdraw consent where processing relies on consent, or exercise applicable rights concerning sales, sharing, or targeted advertising.
We may need to verify your identity and authority and may apply lawful exceptions. Withdrawal of consent does not undo processing already lawfully completed and may affect our ability to complete a review. Cancellation and refund rights remain governed by the Terms of Service, Refund Policy, and applicable law.
You may opt out of nonessential emails through an available unsubscribe method or by contacting us. Communications needed to respond to your request or administer a service may continue.
Children and Minors
You must be at least 18 years old to purchase or directly submit a service request. An authorized adult may provide a minor's records when appropriately permitted. If a child submitted information without appropriate adult authorization, contact us.
International Processing
Wix and other service providers may process or store information in the United States or other countries, where privacy laws may differ. Applicable legal and contractual requirements continue to govern that processing.
Changes to This Policy
Updates will be posted on this page with a revised date. Where applicable law requires additional notice or consent for a material change, we will follow those requirements; posting an update does not itself authorize a new use of previously collected sensitive information.
Contact
For a privacy question or request, contact Sunny Jain, MD at drsunnyjain@gmail.com. Include your contact information and enough detail to identify the relevant submission. Do not include medical records, patient identifiers, or sensitive medical details in the initial privacy inquiry; we will arrange any verification or follow-up separately.