Privacy Policy

Date Last Updated: October 28, 2026

WHO IS MDCALC LTD., INC.?

MDCalc Ltd., Inc. (“MDCalc,” “we,” and “us”) provides online point-of-care clinical decision-support tools, including medical calculators and clinical practice guidelines, and CrossCover available at crosscover.ai (collectively referred to herein as the “Service”), for use by healthcare professionals. The decision-support tools are based on published clinical research, and MDCalc’s content is written by physician authors. In addition, MDCalc publishes an online journal of peer-reviewed articles entitled “Evidence to Action: Official Journal of MDCalc” (the “Journal.”) Neither the Service nor the Journal is intended for use by laypersons.

SCOPE OF PRIVACY POLICY

MDCalc takes the private nature of the personal information we collect seriously, and we are committed to protecting it. Therefore, we have in place controls and procedures designed to manage such information responsibly and in accordance with applicable data protection and privacy laws (collectively, “Privacy Laws”).

This Privacy Policy applies to MDCalc’s practices where we function as a data controller (or an equivalent role as described under the various Privacy Laws in our regions of operation) and describes our processing practices as it relates to Personal Information collected via: (a) our www.mdcalc.com website (“Website”), whether from visitors browsing the site or from healthcare professionals who visit the Website and use our medical calculators; (b) our MDCalc Medical Calculator App (the, “App”), (c) contributions and visits to our Journal, (d) other direct interactions with individuals/corporate entities, (e) data that we collect from third parties and provide to our customers through the Service, (f) third party data sources and (g) our CrossCover service (as defined in our Terms and Conditions), available at crosscover.ai. In addition, if you are participating in a MDCalc sponsored sweepstakes (“Sweepstakes”) offered on our Website, be advised that any information you provide to us when entering the Sweepstakes (and any information you provide if you win the Sweepstakes) will be subject to the Privacy Policy. The information that MDCalc receives through these interactions does not include Protected Health Information, as that term is defined by the Health Insurance Portability and Accountability Act (“HIPAA”). Please see MDCalc’s Terms and Conditions for additional information regarding the submission of Protected Health Information, including in connection with any artificial-intelligence-assisted features of the Service.

This Privacy Policy describes the categories of Personal Information that we collect and the sources of such information, how we use that Personal Information, to whom Personal Information is disclosed and sold and for what purposes, and the rights you have with respect to your Personal Information.

This Privacy Policy does not apply where MDCalc processes Personal Information as a service provider (or an equivalent role under the various Privacy Laws). When we function as a service provider, the privacy statement of the relevant customer and our contract with the entity on whose behalf we process the Personal Information will govern our processing of such Personal Information.

By visiting our Website, participating in a Sweepstakes offered on our Website, using our App or otherwise providing Personal Information to us, you consent to our collection, use, disclosure, sale, sharing and retention of your Personal Information as described herein.

THE SERVICE

MDCalc offers both a free version of the Service and an enterprise version. Healthcare professionals can access the Service for free either via the Website (with or without establishing an account) or via the App, which requires an account. Although the Website can be accessed without an account, more functionality is offered to those who establish an account.

Healthcare professionals can also access the Service through the electronic health record system utilized by the organization for which they work, if such organization has a contract with MDCalc for integrated access and use of the Service (integrated solutions are referred to as, “Enterprise Accounts”). When the Service is used in the context of an Enterprise Account, MDCalc acts as a service provider and the contract between the enterprise and MDCalc as well as any applicable privacy policy of the enterprise with whom we have a contract will govern MDCalc’s processing of Personal Information through the Service.

PERSONAL INFORMATION

“Personal Information” means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal Information includes information referred to as “personal data,” “personally identifiable information” and such similar references as codified in applicable Privacy Laws.

Under most U.S. Privacy Laws, the information we collect from users of our Service is not considered “Personal Information” because it pertains to users in their role as employees or contractors of a commercial entity or nonprofit. However, certain jurisdictions (e.g., California and the European Union) consider such information to be Personal Information. Given that, this Privacy Policy treats information about the individuals that use our Service as Personal Information. Note, however, that your legal rights with respect to Personal Information are determined by the Privacy Law of the jurisdiction in which you reside.

OUR COLLECTION AND USE OF PERSONAL INFORMATION

MDCalc collects Personal Information in a number of ways: (1) from healthcare professionals who use the Service via the Website or the App (“Users”); (2) from visitors to our Website who do not use our Service (“Website Visitors”), including those who participate in a Sweepstakes; (3) from contributors to and editors of our Journal (collectively “Authors”) as well as readers of the Journal (“Readers”), and; (4) through other means of ordinary business interactions with individuals, whether via email, snail mail, telephone or in person (collectively, “Direct Interaction”).

In addition, MDCalc provides advertising services to health care companies (e.g., pharmaceutical companies) who wish to advertise their products and services to healthcare professional / specialties (“Advertising Services.”). In doing so, MDCalc collects Personal Information from those companies along with from third party health networks and advertising agencies, and third parties who sell healthcare provider information (collectively, “Third Party Sources”.)

The table below sets forth the categories of Personal Information MDCalc has collected in the preceding twelve (12) months, the categories of the sources of such information and the purpose or use for which we collect Personal Information.

Please note that MDCalc only uses the Sensitive Personal Information we collect in order to provide the Service to the individual from whom such information is collected and to manage human resource activities as it relates to our job applicants and employees. MDCalc’s Service also includes certain features that use artificial intelligence, including query support connected to third-party artificial intelligence solutions and MDCalc’s CrossCover service. When you use these features, the User Content you submit may be transmitted on a de-identified basis to and processed by third-party artificial intelligence providers to MDCalc in order to generate a response, or to review the output of such providers’ systems. Before any query is transmitted to a third-party AI provider, MDCalc’s CrossCover service applies automated screening designed to detect and remove patient identifiers and other personal information as approved by you, and your account identity is not transmitted with the query. MDCalc may also use such de-identified User Content to train, evaluate, or improve algorithms, including artificial intelligence and machine learning models operated by MDCalc or by third parties. Additional information regarding these features, including restrictions on submitting Protected Health Information in connection with them, is set forth in our Terms and Conditions.

Personal Identifiers

Examples of Data Elements Collected

• Name
• Email address and password
• Mailing address
• Phone number
• National Provider Identifier Standard Code (“NPI Code”)
• IP Address
• Personal identifiers present on a CV
• User ID
• Profile photo
• Healthcare providers age
• Healthcare provider gender

Categories of Sources of Personal Information

• Users and Website Visitors
• Healthcare providers who contribute content to the Service
• Individuals including, without limitation, employment applicants, Advisory Board members, customers, and vendors.
• Third party health information companies, advertising networks and agencies
• Authors and Readers of the Journal
• Cookies
• Operating systems and platforms

Purpose for Collection

• Providing the Service to Users and Website Visitors, maintaining and servicing accounts, providing customer service, processing or fulfilling transactions, verifying information;
• Managing and administering Sweepstakes;
• Enabling publication and editing of Journal articles and facilitating readership and maintaining and servicing Author accounts, providing customer service, processing or fulfilling transactions, verifying information;
• Responding to inquiries and requests of individuals;
• Delivering our content and informing Users and prospects about our commercial offerings;
• Seeking feedback regarding your experience with our business;
• Auditing interactions and transactions;
• Detecting security incidents, protecting against malicious, deceptive fraudulent or illegal activity;
• Better understanding our Users, Website Visitors, Authors and Readers;
• Performing short-term, transient internal use;
• Research for technological development;
• Responding to or defending against subpoenas, court orders, or other legal process;
• Establishing or exercising our legal rights;
• Complying with applicable law;
• Tracking performance and optimizing Website, App and Service performance;
• To distribute our newsletter and provide information about our Services;
• To communicate regarding events we host.
• To perform Advertising Services such as:
• Audience matching: A healthcare company may share a list of healthcare professionals it wishes to reach and we may inform that company which of those professionals we may be able to reach on our platform;
• Engagement reporting: Details about a healthcare professional’s engagement with our Website including whether they viewed or interacted with an advertisement and their responses to sponsored questions or polls;
• Member-level insights: Details regarding use the Services, such as their topics of interest and content preferences.

Sensitive Personal Information

Examples of Data Elements Collected

• Log-in information for a User’s MDCalc account
• Citizenship or immigration status

Categories of Sources of Personal Information

• Users
• Website Visitors who purchase Continuing Medical Education packages
• Employment applicants
• Third party health information companies, advertising networks and agencies

Purpose for Collection

• Providing the Service to Users and Website Visitors;
• Managing and administering Sweepstakes;
• To prevent, detect and investigate security incidents that compromise the integrity of stored Personal Information (e.g., we use log-in information for registered Users to verify identity of such Users when returning to MDCalc.)
• To process applications for employment.

Electronic Network Activity

Examples of Data Elements Collected

• IP address, city
• Device brand, model and name, browser information, operating system, platform version, screen resolution and preferred language
• Performance data and interactions information (e.g., where a Website Visitor clicks, scrolls, moves in between pages, time spent per visit, cumulative time spent across all usage, frequency of usage, features used, buttons clicked, actions taken and frequency of each)
• Ad tracking codes

Categories of Sources of Personal Information

• Users and Website Visitors
• Cookies
• Operating systems and platforms

Purpose for Collection

• Providing the Service to Users and Website Visitors, maintaining or servicing accounts, providing customer service, processing or fulfilling transactions, verifying information, processing payments;
• For bug and performance tracking and to optimize Website, App and Service performance;
• Internal research for technological development;
• Auditing interactions and transactions;
• Better understanding our Users and Website Visitors;
• Tracking performance and optimizing Website, App and Service performance;
• Detecting security incidents, protecting against malicious, deceptive fraudulent or illegal activity;
• Short-term, transient internal use;
• To respond to or defend against subpoenas, court orders, or other legal process;
• To establish or exercise our legal rights;
• To otherwise comply with applicable law.
• To perform Advertising Services such as:
• Audience matching: A healthcare company may share a list of healthcare professionals it wishes to reach and we may inform that company which of those professionals we may be able to reach on our platform;
• Engagement reporting: Details about a healthcare professional’s engagement with our Website including whether they viewed or interacted with an advertisement and their responses to sponsored questions or polls;
• Member-level insights: Details regarding use the Services, such as their topics of interest and content preferences.

Commercial Information

Examples of Data Elements Collected

• Records of Services and Continuing Medical Education courses purchased.

Categories of Sources of Personal Information

• Users and Website Visitors
• Authors and Readers of the Journal

Purpose for Collection

• Providing the Service for Users and Website Visitors, maintaining or servicing accounts, providing customer service, processing or fulfilling transactions, verifying information, processing payments;
• Enabling publication and editing of Journal articles and facilitating readership and maintaining and servicing Author accounts, providing customer service, processing or fulfilling transactions, verifying information;
• Auditing interactions and transactions;
• Short-term, transient internal use;
• To respond to or defend against subpoenas, court orders, or other legal process;
• To establish or exercise our legal rights;
• To otherwise comply with applicable law;
• To respond to inquiries and requests ;
• To communicate regarding events we host;
• To request feedback regarding an individual’s experience with our business.

Professional or employment-related information

Examples of Data Elements Collected

• Associated health system
• Occupation
• Professional designation, medical specialty and level of practice
• Medical school and graduation year and degree obtained
• Information contained on a CV (e.g., work history, experience summary)
• Prescribing, diagnosis, and claims-derived data
• Affiliations to specific healthcare organizations
• Professional licensing information
• Healthcare provider role and specialty group
• Inferred clinical interest

Categories of Sources of Personal Information

• Users and Website Visitors
• Authors of the Journal
• Third party health information companies.
• Direct interactions with individuals including, without limitation, employment applicants, physician contributors, Advisory Board members, customers, and vendors.

Purpose for Collection

• Providing Services to Users and Website Visitors, maintaining or servicing accounts, providing customer service, processing or fulfilling transactions, verifying information, processing payments;
• Evaluating articles submitted for publication to the Journal as well as confirming the professional status of Authors;
• To identify clinicians and healthcare providers to whom MDCalc can market the Service;
• To respond to or defend against subpoenas, court orders, or other legal process;
• To establish or exercise our legal rights;
• To otherwise comply with applicable law.
• To perform Advertising Services such as:
• Audience matching: A healthcare company may share a list of healthcare professionals it wishes to reach and we may inform that company which of those professionals we may be able to reach on our platform;
• Engagement reporting: Details about a healthcare professional’s engagement with our Website including whether they viewed or interacted with an advertisement and their responses to sponsored questions or polls;
• Member-level insights: Details regarding use the Services, such as their topics of interest and content preferences.

Data Collected Through Cookies and Other Third Party Technologies

When you visit our Website, our goal is to make the experience simple and effective. We also like to learn information about our Website Visitors and Users to effectively promote our company to prospective customers, contributors and employees and to monitor the operation and use of the Website and App. To that end, we use text files, known as cookies, to track information about your use of the Website and/or Service. A cookie is a text file that a website stores on a website visitor’s computer to enable recognition of that visitor’s computer each time they return. As you navigate through and interact with our Website, we automatically collect certain information about your equipment, browsing actions and patterns using cookies. This may include information about your connectivity, IP address and browser information, general location data (country location), logs and other communication data, and the resources that you access and use on the Website. The information we collect helps us to improve our Service and the Website and deliver better and more personalized content, enables us to estimate our audience size and usage patterns and recognize when you return to our Website. Please refer to our Cookie Policy for more information on the specific cookies we use, the purpose for such cookies and how you can indicate your choices regarding placement of cookies.

MDCalc also deploys other third party technologies on the Website and / or App that collect Personal Information of Users and Website Visitors as follows:

• Service Providers. These providers collect and process Personal Information only to perform services for us, under written contracts that limit their use of the information to our business purposes. We use these providers because they are necessary to operate and secure the Website and App.
• Session Recording Providers. These providers collect and process Personal Information related to page interactions, session behavior, and custom events, tied to your use of the Website or App. We use these providers to support product analytics and user experience purposes.
• Analytics and Advertising Providers. These providers collect and process Personal Information collected through cookies and similar technologies for their own purposes, including to associate activity across devices, infer that multiple devices belong to a common user, and segment Users and Website Visitors by their probable interests. We use this information to sell or make available advertising space on the Website and App to third parties, including healthcare companies that target categories of healthcare providers.

We may create, derive, and use aggregated, anonymized, and/or de-identified data from the Personal Information (“Aggregated/De-Identified Data”). Aggregated/De-Identified Data does not identify you or any other individual. We may use, disclose, sell, license, publish, and otherwise exploit Aggregated/De-Identified Data for any lawful business purpose, including research, product development, benchmarking, industry reporting, and marketing, without further notice to, consent from, or compensation to you.

MDCALC’S DISCLOSURE OF PERSONAL INFORMATION

Personal Information Disclosed to Third Parties

In providing Advertising Services, MDCalc discloses Personal Information to healthcare companies (e.g., pharmaceutical companies) and their advertising agencies and third party advertising networks. Those entities provide MDCalc with lists of specific healthcare professionals and/or healthcare specialties to whom such entities would like their ads displayed. MDCalc monitors our Website Visitors and Users of our Website and App and displays the ads to specific healthcare providers when they can be identified and / or based on a healthcare provider’s identified or inferred specialty. We then provide back to the such entities information that may include Personal Information such as the IP addresses, name and NPI number of those healthcare providers to whom we presented an ad on behalf of such customers along with their online behavior (e.g., time stamps, clicks, etc.) so that they can analyze campaign performance and optimize advertising content and advertising spend. MDCalc only performs these Advertising Services in the United States using Personal Information collected within the United States. In addition, there are certain circumstances in which we may disclose Personal Information to trusted entities in order to improve, protect and support our business. For instance, MDCalc may disclose Personal Information to: (i) service providers (e.g., hosting providers, business advisors, auditors, etc.); and (ii) potential purchasers or investors in the business. MDCalc requires our service providers to whom we disclose Personal Information to process Personal Information in accordance with our contracts with such service providers. We impose on our service providers to whom we disclose Personal Information privacy and security obligations consistent with this Privacy Policy and applicable laws. In addition, MDCalc may disclose Personal Information if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; or (c) protect the rights, property, or safety of our Authors, Readers, Users, Website Visitors, or the public.

HOW WE PROTECT PERSONAL INFORMATION

The security of your Personal Information is important to us. We maintain industry standard physical, technical and administrative safeguards designed to protect your Personal Information from unauthorized access, use, disclosure, and destruction. We update and assess our security controls on a regular basis including through audits conducted by third party auditors. We train our personnel about the importance of confidentiality, security and consumer privacy and limit our personnel’s access to Personal Information to those who need such in order to perform their job. Electronic Personal Information is stored on restricted database servers housed with a third party cloud provider in the United States. However, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure.

HOW LONG DO WE RETAIN PERSONAL INFORMATION?

MDCalc retains Personal Information collected from Users until such time as the individual deletes their profile via the functionality provided. The information is retained to better understand the usage patterns of our audience. The more we understand usage patterns, the better we can create relevant content and products that ultimately benefit our Users. When a User “deletes” their profile, we will delete such an individual’s Personal Information from our system. However, the User’s historical usage activity and IP address will be retained. MDCalc retains Personal Information about Website Visitors as long as necessary to fulfill the purpose(s) for which it was collected, including legal, accounting, and reporting requirements or as otherwise set forth under applicable law. MDCalc retains the information collected through GA4 for a period of fourteen (14) months. MDCalc retains Personal Information collected from Authors and Readers until such time as the individual requests deletion. MDCalc retains Personal Information collected from data vendors for the period allowed by our contract with such vendor.

NOTE ABOUT CHILDREN’S PERSONAL INFORMATION

Neither the Service, the App, the Website, the Journal, nor the Advertising Services are marketed to, and none of the foregoing is intended for use by, children. Therefore, MDCalc does not knowingly collect any Personal Information from children under the age of 18. If we become aware that we have collected Personal Information about a child under the age of 18, we will delete it.

YOUR RIGHTS TO ACCESS

We will comply with all reasonable requests from you to correct, amend, or delete the Personal Information we have about you, and will provide you access to your Personal Information. There may be limits to the amount of information we can practically provide. For example, we may limit an individual’s access to Personal Information where the burden or expense of providing access would be disproportionate to the risks to your privacy or where doing so would violate others’ rights. You may submit your request through MDCalc’s Data Rights Request Form.

If You Are a California Resident or Reside in Another State with Applicable Privacy Laws

Last Updated Date: October 28, 2026

MDCALC’S COLLECTION AND USE OF PERSONAL INFORMATION

If you are a resident of California or another jurisdiction with applicable privacy laws, you may have additional privacy rights. If you are interested in the Personal Information that MDCalc collects, the sources of that information and the purposes for which we use such Personal Information, please review the section above entitled: OUR COLLECTION AND USE OF PERSONAL INFORMATION.

MDCALC’S SALE AND SHARING OF PERSONAL INFORMATION

Personal Information Sold to and Shared with Third Parties

MDCalc discloses Personal Information we receive via Website Visitors and Users and Third Party Sources to healthcare companies (e.g., pharmaceutical companies and their advertising agencies and advertising networks.) In addition, MDCalc utilizes Google Analytics 4. California’s privacy law considers these activities to be “sales” and “sharing” as each of those terms is defined in the law. The table below sets forth the categories of Personal Information MDCalc has sold to, or shared with, third parties in the preceding twelve (12) months, the categories of third parties with whom the information was sold or with whom it was shared, and the business purpose or use for which the Personal Information was sold or shared. MDCalc has no actual knowledge of selling or sharing Personal Information of consumers under 18 years of age.

MDCalc shares de-identified queries, prompts, and other content submitted through artificial-intelligence-assisted features of the Service (including CrossCover), and may share User Content on a de-identified basis, with third-party artificial intelligence and machine learning providers, in order to generate responses to your queries, to review the output of such providers’ systems, and/or to train, evaluate, or improve algorithms.

Personal identifiers

Is the Personal Information Sold to or Shared with Third Parties: Y

Categories of Third Parties With Whom Shared

• Healthcare companies such as pharmaceutical companies and their advertising Networks and agencies

Business Purpose for Selling or Sharing

• These entities may provide MDCalc with lists of specific healthcare providers and/or healthcare provider specialties to whom such customers want their ads displayed. MDCalc monitors the Website Visitors to and Users of our Website and App, display the ads in accordance with the lists we receive and then provide back to the customers the IP addresses, healthcare provider name and NPI number of those healthcare provider to whom we presented an ad on their behalf so that those customers can analyze campaign performance and optimize advertising content and advertising spend.
• Google Analytics collects information regarding Website Visitors to our Website and provides aggregated, statistical information back to MDCalc regarding Website visits.

Sensitive Personal Information

Is the Personal Information Sold to or Shared with Third Parties: N

Electronic Network Activity Information

Is the Personal Information Sold to or Shared with Third Parties: Y

Categories of Third Parties With Whom Shared

• Healthcare companies such as pharmaceutical companies and their advertising Networks and agencies

Business Purpose for Selling or Sharing

• These entities may provide MDCalc with lists of specific healthcare providers and/or healthcare provider specialties to whom such customers want their ads displayed. MDCalc monitors the Website Visitors to and Users of our Website and App, display the ads in accordance with the lists we receive and then provide back to the customers the IP addresses, healthcare provider name and NPI number of those healthcare providers to whom we presented an ad on their behalf so that those customers can analyze campaign performance and optimize advertising content and advertising spend.
• Google Analytics collects information regarding Website Visitors and provides aggregated, statistical information back to MDCalc regarding Website visits.

Commercial Information

Is the Personal Information Sold to or Shared with Third Parties: N

Professional or Employment-related Information

Is the Personal Information Sold to or Shared with Third Parties: Y

Categories of Third Parties With Whom Shared

• Healthcare companies such as pharmaceutical companies and their advertising Networks and agencies

Business Purpose for Selling or Sharing

• These entities may provide MDCalc with lists of specific healthcare providers and/or healthcare provider specialties to whom such customers want their ads displayed. MDCalc monitors the Website Visitors to and Users of our Website and App, display the ads in accordance with the lists we receive and then provide back to the customers the IP addresses, healthcare provider name and NPI number of those healthcare providers to whom we presented an ad on their behalf so that those customers can analyze campaign performance and optimize advertising content and advertising spend.

Personal Information Disclosed to Service Providers / Contractors for a Business Purpose

There are certain circumstances in which we may disclose Personal Information to trusted entities in order to improve, protect and support our business. For instance, MDCalc may disclose Personal Information to: (i) service providers (e.g., hosting providers, business advisors, auditors, etc.); (ii) contractors; and (iii) potential purchasers or investors in the business. MDCalc requires our hosting provider to whom we disclose Personal Information to process Personal Information strictly for our Users’ use of the Service and in accordance with our contracts with such service providers. We ensure that any service provider and contractor with whom we share Personal Information is subject to privacy and security obligations consistent with this Privacy Policy and applicable laws. In addition, MDCalc may disclose Personal Information if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; or (c) protect the rights, property, or safety of our Users, Website Visitors, Authors, Readers or the public.

The table below sets forth the categories of Personal Information MDCalc has disclosed to service providers and / or contractors for a business purpose in the preceding twelve (12) months and the business or commercial purpose for which the Personal Information was disclosed.

MDCalc only discloses the Sensitive Personal Information we collect in order to provide Services to and process employment applications from, the individuals from whom such information is collected and for no other purposes.

Personal Identifiers

Was the Personal Information Disclosed to Service Providers or Contractors for a Business Purpose: Y

Purpose for Which Disclosed

• We use Stripe for payment processing, associated analytics, and other business services when you purchase Continuing Medical Education packages. As a result, Stripe collects and processes certain Personal Information on our behalf, including names, credit card information and device information. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection and prevention. You can learn more about Stripe and its processing activities via privacy policy at https://stripe.com/privacy.
• Hosting services
• Our Journal is published on the Scholastica website and hosted on Scholastica’s (or its service provider’s) servers. As a result, Scholastica collects and processes a limited amount of Personal Information about Authors and Readers on our behalf. Note that Scholastica, while Scholastica acts as service provider with respect to certain information it collects on MDCalc’s behalf, Scholastica also acts as a controller with respect Authors’ Personal Information. You may learn more at https://scholasticahq.com/privacy-policy
• MDCalc also deploys third party technologies on the Website and / or App that disclose Personal Information of Users and Website Visitors to service providers in order for MDCalc to perform the Advertising Services, as described above.

Sensitive Personal Information

Was the Personal Information Disclosed to Service Providers or Contractors for a Business Purpose: Y

Purpose for Which Disclosed

• We use Stripe for payment processing, associated analytics, and other business services when you purchase Continuing Medical Education packages. As a result, Stripe collects and processes certain Personal Information on our behalf, including names, credit card information and devices information. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection and prevention. You can learn more about Stripe and its processing activities via privacy policy at https://stripe.com/privacy.
• Hosting services

Electronic Network Activity Information

Was the Personal Information Disclosed to Service Providers or Contractors for a Business Purpose: Y

Purpose for Which Disclosed

• We use Stripe for payment processing, associated analytics, and other business services when you purchase Continuing Medical Education packages. As a result, Stripe collects and processes certain Personal Information on our behalf, including names, credit card information and devices information. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection and prevention. You can learn more about Stripe and its processing activities via privacy policy at https://stripe.com/privacy.
• Hosting services
• MDCalc also deploys third party technologies on the Website and / or App that disclose Personal Information of Users and Website Visitors to service providers in order for MDCalc to perform the Advertising Services, as described above.

Commercial Information

Was the Personal Information Disclosed to Service Providers or Contractors for a Business Purpose: Y

Purpose for Which Disclosed

• We use Stripe for payment processing, associated analytics, and other business services when you purchase Continuing Medical Education packages. As a result, Stripe collects and processes certain Personal Information on our behalf, including names, credit card information and devices information. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection and prevention. You can learn more about Stripe and its processing activities via privacy policy at https://stripe.com/privacy.
• Our Journal is published on the Scholastica website and hosted on Scholastica’s (or its service provider’s) servers. As a result, Scholastica collects and processes a limited amount of Personal Information about Authors and Readers on our behalf. Note that Scholastica, while Scholastica acts as service provider with respect to certain information it collects on MDCalc’s behalf, Scholastica also acts as a controller with respect Authors’ Personal Information. You may learn more at https://scholasticahq.com/privacy-policy/.
• Hosting services

Professional or Employment-related Information

Was the Personal Information Disclosed to Service Providers or Contractors for a Business Purpose: Y

Purpose for Which Disclosed

• Hosting services
• Our Journal is published on the Scholastica website and hosted on Scholastica’s (or its service provider’s) servers. As a result, Scholastica collects and processes a limited amount of Personal Information about Authors and Readers on our behalf. Note that Scholastica, while Scholastica acts as service provider with respect to certain information it collects on MDCalc’s behalf, Scholastica also acts as a controller with respect Authors’ Personal Information. You may learn more at https://scholasticahq.com/privacy-policy.
• MDCalc also deploys third party technologies on the Website and / or App that disclose Personal Information of Users and Website Visitors to service providers in order for MDCalc to perform the Advertising Services, as described above.
• Employment recruiting firms

The California Consumer Privacy Act of 2018 and its implementing regulations, each as amended, (collectively the, “CCPA”) is a California law that gives California residents certain rights as it relates to the Personal Information that a business (including MDCalc) collects about them. Those rights include the following:

• Right to Know Before Collection of Personal Information: At or before the point your Personal Information is collected, MDCalc must inform you of the following:
• The categories of Personal Information to be collected and the purposes for which they are collected or used;
• The categories of Sensitive Personal Information to be collected and the purposes for which the information is collected and used.
• Whether Personal Information and/or Sensitive Personal Information is sold or shared.
• The length of time MDCalc intends to retain each category of Personal Information (including Sensitive Personal Information) collected or, if that is not possible, the criteria used to determine that period.

Note that MDCalc does not knowingly collect, sell or share the Personal Information of individuals under the age of 18.

• Right to Know What Personal Information Is Collected and Right to Access: As a California resident, you have the right to request from MDCalc disclosure of the following information, up to twice in a twelve-month period:
  • the categories and specific pieces of Personal Information that MDCalc has collected about you;
  • the categories of sources from which that Personal Information is collected;
  • the business or commercial purpose for collecting, selling or sharing that Personal Information, and;
  • the categories of service providers / contractors to whom MDCalc discloses Personal Information.

Before providing such information to you, MDCalc must verify your identity. We will utilize the information that you submit with your request in order to do so and to locate any information that we maintain about you and for no other purpose.

• Right to Know About Personal Information Disclosed. As a California resident, you have the right to know the categories of Personal Information disclosed about you for a business purpose and the categories of persons to whom each category of Personal Information was disclosed. Before providing such information to you, MDCalc must verify your identity.
• Right to Know About Personal Information Sold or Shared: As a California resident, you have the right to know the categories of Personal Information sold and / or shared about you, the categories of third parties with whom each category of Personal Information was sold and / or shared and the purpose for doing so. Before providing such information to you, we must verify your identity.
• Right to Request Deletion: As a California resident, you have the right at any time to request that MDCalc delete any Personal Information that we collected directly from you. MDCalc collects Personal Information directly from consumers as described in the Section titled “Our Collection and Use of Personal Information” above. The obligation to delete Personal Information upon request is not absolute. The CCPA allows businesses to retain Personal Information for certain purposes even when a deletion request is received. In addition, before deleting Personal Information in response to your request, MDCalc must verify your identity.
• Right to Correct Inaccurate Personal Information: As a California resident, you have the right to request at any time the correction of inaccurate Personal Information that MDCalc maintains about you. Before correcting Personal Information in response to your request, MDCalc must verify your identity.
• Right to Opt Out of Sale or Sharing of Personal Information: As a California resident, you have the right to opt out of MDCalc’s sale and / or sharing of your Personal Information to third parties at any time. Please review the Notice of Right to Opt Out of Sale/Sharing to learn more. The Website is designed to recognize and honor opt-out preference signals, such as the Global Privacy Control (“GPC”), as a request to opt out of the sale or sharing of personal information and of targeted advertising for the browser or device on which the signal is enabled. The Website does not currently respond to browser “Do Not Track” signals.
• Right to Limit Use and Disclosure of Sensitive Personal Information: California residents have the right at any time to direct businesses to limit their use of the resident’s Sensitive Personal Information to that necessary to provide the services requested and to those purposes otherwise allowed by California law. MDCalc only uses Sensitive Personal Information in order to provide Services to, and to process employment applications from, the individuals from whom such information is collected and for no other purposes.
• Right Not to be Retaliated Against: California law prohibits MDCalc from retaliating against you based on your exercise of the privacy rights described above, including when you are a job applicant, an employee or an independent contractor. For example, MDCalc cannot deny you services or provide a different level or quality of services to you as a result of your exercise of such rights.

Method to Submit Requests

Requests to Delete, Correct and to Know

If you wish to exercise your right to delete, correct and / or know (as described above), you may do so by calling MDCalc at the following toll-free telephone number, (866) 715-1606, or via our Website at https://my.datasubject.com/169pv2TNruD8x190V/23896.

We will confirm receipt of your request within 10 business days. If you make a request to know, a request to delete, or a request to correct, MDCalc will then take steps to verify your identity. MDCalc may occasionally request additional information to assist in facilitating verification. Any Personal Information received by MDCalc with respect to a request delete, to correct and / or to know will be held strictly in confidence, used only for the purposes of processing your request and in accordance with applicable data privacy laws and regulations. Within 45 calendar days of receiving your request, we will comply with your request unless there is a legal basis for denying your request. In the event we need additional time to respond, we will inform you of that within the initial 45-day period.

Right to Opt-Out of Sale or Sharing of Your Personal Information

If you wish to exercise your right to opt-out of the sale and/ or sharing of your Personal Information, please click here: DO NOT SELL OR SHARE MY PERSONAL INFORMATION

Certain of these above rights may also apply to you if you reside in another jurisdiction that has applicable privacy laws.

How An Authorized Agent Can Make a Request for You:

California law allows you to designate an agent to submit a request to delete, correct or to know. The agent may call MDCalc at the following toll-free telephone number: (866) 715-1606. We will require that agent to provide proof that you gave the agent signed permission to submit the request on your behalf. We may also require the agent to verify their own identity and confirm that you provided the agent permission to submit the request. If you have provided the agent with power of attorney pursuant to Probate Code section 4121 to 4130, evidence of that power of attorney is sufficient.

IF YOU LIVE IN THE EUROPEAN ECONOMIC AREA, THE UNITED KINGDOM OR SWITZERLAND (collectively, “Europe”),

MDCalc complies with the EU General Data Protection Regulation 2016/679, the UK Data Protection Act of 2018 and the Swiss Data Protection Act of 2020 (collectively, “GDPR”) with respect to the protection of individuals with regard to the processing of Personal Information and the free movement of such Personal Information.

Under the GDPR, you have the following rights:

• Right of Access: You have the right to ask us for copies of your Personal Information. The law provides for some exemptions, which means you may not always receive all the Personal Information we process.
• Right to Rectification: You have the right to ask us to rectify Personal Information you think is inaccurate. You also have the right to ask us to complete Personal Information you think is incomplete.
• Right to Restrict Processing: You have the right to ask us to restrict the processing of your Personal Information in certain circumstances.
• Right to Withdraw Consent: You have the right to revoke your consent to our processing of your Personal Information at any time by contacting us via the Data Rights Request Form. Withdrawing consent will not affect the lawfulness of the processing performed based on your consent before its withdrawal.
• Right to Erasure: You have the right to ask us to erase your Personal Information in certain circumstances.
• Right to Data Portability: This only applies to Personal Information you have given to us and that is held electronically. You have the right to ask that we transfer this information from MDCalc to another organization or give it to you.

If you wish to exercise your rights above, you may contact us by completing this form: Data Rights Request Form. You are not required to pay any charge for exercising your rights. We have one month to respond to you. You may also contact the relevant supervisory authority to lodge a complaint related to our handling of your Personal Information. However, we invite you to give us a chance to resolve the situation directly with you. Your privacy is important to us, and we will do our best to address any concerns.

Though we make our Service available globally, our computer systems are based in the United States, which means Personal Information we collect will be processed by us in the U.S. where data protection and privacy regulations may not offer the same level of protection as in other parts of the world, such as in Europe. For transfers to the United States, we will either rely on a derogation applicable to the specific situation (e.g. consent or if the transfer is necessary to perform our contract with you) or implement the Standard Contractual Clauses adopted by the European Commission and/or an International Data Transfer Addendum with respect to transfers outside of the United Kingdom.

The legal bases for processing your Personal Information include one or more of the following depending on the circumstances:

• To comply with contractual obligations or to take steps at your request before entering into a contract. When you subscribe to the Service or purchase Continuing Medical Education packages, we will process your Personal Information in order to provide the Service to you and answer your requests.
• As a result of your consent.  In certain cases, you consent to the processing of your Personal Information by us (e.g., when you submit the Contact Form via the Website, use our Service, or submit, edit or read a Journal article.) When consent is the basis on which we process your Personal Information, we will inform you if we need to carry out further processing for purposes other than those for which you provided us with your consent and obtain your further consent. You may withdraw your consent at any time. For further information on the right of withdrawal, please contact MDCalc via the Data Rights Request Form.
• Within the scope of a legitimate interest. On occasion, when we have a legitimate interest to process your Personal Information, we may not need your consent to do so, however, we must inform you that we do this. Examples of a legitimate interest include:
• The analysis and optimization of the Website and App;
• Ensuring IT security and the operation of MDCalc’s technology;
• Prevention and investigation of criminal acts.
• On the basis of MDCalc’s legal obligations or in the public interest. In some cases, the processing of your Personal Information will be necessary for us to fulfill legal or public interest obligations.

If MDCalc uses email prospecting, we first obtain the consent of the individual, unless the recipient is already a customer and the email involves products similar to those we already provide to such customer. In such instances, the legal basis of the processing is the legitimate interest of MDCalc, namely to promote our products to our customers. When MDCalc sends commercial solicitations to customers by email regarding products other than those already provided to such customers, the legal basis of the processing is consent.

You have the right at any time to stop us from contacting you for marketing purposes or giving your data to third parties. If you no longer wish to be contacted for marketing purposes, please reach out to us via the Data Rights Request Form

HOW LONG DO WE RETAIN PERSONAL INFORMATION?

MDCalc retains Personal Information collected from Users until such time as the individual deletes their profile via the functionality provided. The information is retained to better understand the usage patterns of our audience. The more we understand usage patterns, the better we can create relevant content and product that ultimately benefits our users. When a User “deletes” their profile, we will delete such an individual’s Personal Information from our system. However, the User’s historical usage activity and IP address will be retained. MDCalc retains Personal Information about Website Visitors as long as necessary to fulfill the purpose(s) for which it was collected, including legal, accounting, and reporting requirements or as otherwise set forth under applicable law. MDCalc retains the information collected through GA4 for a period of fourteen (14) months. MDCalc retains Personal Information collected from Authors and Readers until such time as the individual requests deletion. MDCalc retains Personal Information collected from data vendors for the period allowed by our contract with such vendor.

LINKS TO THIRD PARTY WEBSITES.

The Service contains links to or otherwise integrate with third party websites or services (e.g., Apple App Store, Google Play, LinkedIn, and X). These third party websites or services publish their own privacy statements, which disclose the manner in which those third parties process Personal Information. MDCalc recommends that you review those third party privacy statements when visiting any linked or integrated websites. MDCalc is not responsible for the content of linked or integrated websites or the processing of Personal Information by the companies that own and manage such websites.

CHANGES TO THIS PRIVACY POLICY

As we evolve, we may update this Privacy Policy to align with changes in the Service, the Journal, our business and/or Privacy Laws. The Date Last Updated at the beginning of this Privacy Policy and at the beginning of the section addressing our practices with respect to California consumers will reflect the last date on which the Privacy Policy was updated. We recommend that you periodically review the Privacy Policy to stay informed of changes. We will ask for your consent to such changes if required by Privacy Law. In other cases, please note that your continued use of the Service, the Website, the App and / or the Journal after any change means that you agree to the terms of the updated Privacy Policy. The same is true with respect to Personal Information that we collect via email, snail mail and other communication methods. If you disagree with the Privacy Policy, please reach out to us via the Data Rights Request Form and stop using the Service, Website, App and the Journal.

HOW TO CONTACT US

If you have any questions about this Privacy Policy, please reach out to us via the Data Rights Request Form.

Written inquiries can be sent to:

MDCalc Ltd., Inc.
93 4th Ave, #19
New York, NY 10003