PRIVACY POLICY
Last updated: August 30, 2026
This Privacy Policy explains how SecondOpinion.org, operated personally by Sunny Jain, MD, collects, uses, stores, and shares information when you visit the website, submit a form, purchase a service, or communicate with us.
By using SecondOpinion.org, you acknowledge the practices described in this policy.
Information We Collect
Information you provide may include:
• Your name, email address, telephone number, and other contact information.
• A brief description of the medical situation you want reviewed.
• Your response concerning whether you have spoken with an attorney.
• Your acknowledgment of the website’s terms, policies, and service limitations.
• Payment and transaction information.
• Communications, questions, feedback, and refund requests.
• Medical records or related information that you later choose to provide after receiving specific instructions.
Information collected automatically may include:
• Internet Protocol address.
• Browser, device, and operating-system information.
• Approximate location derived from an Internet Protocol address.
• Pages viewed, referring pages, links selected, session duration, and general website activity.
• Cookie identifiers, analytics data, and technical or error logs.
How We Collect Information
We collect information when you:
• Complete or submit a form.
• Purchase a service.
• Contact or communicate with us.
• Provide records or other materials for an accepted review.
• Visit or interact with the website.
Wix and other service providers may also collect information automatically through cookies, analytics tools, server logs, and similar technologies.
How We Use Information
Information may be used to:
• Evaluate whether a requested review can be accepted.
• Provide and administer the Independent Medical Case Review.
• Communicate about a submission, payment, records, refund, or completed review.
• Confirm identity, authority, and consent.
• Process payments and refunds.
• Maintain business, accounting, and transaction records.
• Protect the website, investigate suspected misuse or fraud, and troubleshoot technical problems.
• Understand website traffic and improve the website and services.
• Comply with legal, regulatory, professional, or court requirements.
We do not use medical narratives or medical records for advertising.
Medical Information and Records
The initial intake form is intended only for a brief general summary. Do not include a patient’s name, date of birth, medical-record number, Social Security number, insurance information, or complete medical records in the intake description.
Certain Wix form fields designated as personal information may use Wix’s enhanced encryption features. This does not mean that every field, communication channel, or service connected to the website has the same protection.
Do not send medical records until you receive specific instructions. Ordinary email may not be encrypted end to end. If you choose to send medical information by ordinary email, you acknowledge this limitation.
SecondOpinion.org does not represent that the website or ordinary email is HIPAA-compliant. Whether any law, including HIPAA, applies depends on the circumstances and the parties involved.
Payments
Payments are processed through Wix and its payment-processing partners. These providers may collect payment-card, billing, fraud-prevention, device, and transaction information under their own privacy policies and terms.
SecondOpinion.org generally does not directly receive or store the complete payment-card number.
Cookies and Analytics
SecondOpinion.org and its service providers may use cookies and similar technologies that are necessary for website operation, security, preferences, forms, payments, performance, and analytics.
The website may use Wix Analytics, Google Analytics, Google Tag Manager, or similar tools to understand visits and website performance. These tools may receive information such as cookie identifiers, Internet Protocol address, device information, referring pages, pages viewed, and interaction data.
Where available, you may use the website’s cookie settings to accept or decline nonessential cookies. You may also control cookies through your browser. Blocking some cookies may affect website functionality.
Google’s handling of information is described in Google’s Privacy Policy. Wix’s handling of information is described in Wix’s Privacy Policy.
Service Providers and Disclosures
Information may be disclosed to providers that support website and business operations, including:
• Wix for website hosting, forms, databases, communications, analytics, payments, and related functions.
• Payment processors and financial institutions.
• Email providers, including Wix email services and Gmail.
• Website analytics, performance, security, and error-monitoring providers.
• Messaging, social-media, or embedded-widget providers when those features are enabled.
• Professional advisers or contractors who reasonably need information to provide authorized services and are subject to appropriate confidentiality obligations.
Information may also be disclosed when reasonably necessary to comply with law, legal process, court orders, professional obligations, prevent harm, protect legal rights, investigate fraud or misuse, or enforce website policies.
SecondOpinion.org does not sell personal information for monetary compensation.
Third-Party Features and Links
The website may contain links, embedded content, messaging features, or widgets operated by third parties. These providers may collect information when you interact with their features.
Their privacy policies and practices govern their collection and use of information. SecondOpinion.org does not control independent third-party websites or services.
Data Retention
Information is retained only for as long as reasonably necessary to:
• Evaluate and provide the requested service.
• Communicate with you.
• Maintain transaction, accounting, consent, and business records.
• Address disputes, enforce agreements, and comply with legal or professional obligations.
Retention periods may vary depending on the type of information and why it was collected. Information may then be deleted, securely destroyed, or deidentified when it is no longer reasonably required.
Security
Reasonable administrative, technical, and physical safeguards are used in light of the nature of the information and the available systems.
However, no website, database, transmission method, or email system can be guaranteed to be completely secure. You should avoid sending unnecessary identifiers or medical information and follow any instructions provided for transmitting records.
Your Choices and Rights
Depending on applicable law and the circumstances, you may have the right to request:
• Access to certain personal information maintained about you.
• Correction of inaccurate information.
• Deletion of certain information.
• A copy of certain information.
• Restriction of or objection to certain processing.
• Withdrawal of consent where processing depends on consent.
• Opting out of certain targeted advertising, sales, or sharing as those terms are defined by applicable law.
To submit a privacy request, use the contact form at SecondOpinion.org. Provide enough information to identify the relevant submission, but do not include medical records or sensitive medical details in the request.
Identity and authority may need to be verified before a request is completed. Some information may be retained where required or permitted for legal, accounting, security, dispute-resolution, or professional purposes.
You may opt out of nonessential emails through any available unsubscribe method or by contacting us. Service-related communications may still be sent when necessary to complete a transaction or respond to a request.
Children and Minors
The consumer service is intended for individuals who are at least 18 years old.
SecondOpinion.org does not knowingly accept purchases or direct submissions from children. An adult parent, guardian, personal representative, or other legally authorized person may submit information concerning a minor when appropriately authorized.
If you believe a child submitted information without appropriate adult authorization, contact us through the website.
International Processing
Wix and other service providers may process or store information in the United States or other countries. Privacy and data-protection laws may differ between locations.
Service providers are responsible for their own international-transfer mechanisms and compliance obligations.
Changes to This Policy
This Privacy Policy may be updated to reflect changes in the website, services, vendors, or legal requirements. The revised version will be posted with a new “Last updated” date.
Contact
Questions or requests concerning this Privacy Policy may be submitted through the contact form at SecondOpinion.org. Do not include medical records or sensitive medical details in a general privacy inquiry.