Consumer Health Data Privacy Notice
Effective October 20, 2026
This notice explains consumer health information handled by UMG, LLC, doing business as AutoAccident.co, 540 Main Street, Suite 12b, Hyannis, MA 02601. Contact Contact@AutoAccident.co or (617) 539-7610. It supplements our Privacy Policy and applies where the relevant consumer-health-data law governs the information or activity.
AutoAccident.co is an advertising-supported information and request service, not a medical provider or law firm. Describing an injury does not by itself make information subject to HIPAA or attorney-client privilege; protections independently supplied by law are preserved.
Categories, Sources And Purposes
We receive the injury or accident information that you choose to include in an inquiry, including a reported injury indicator, accident date and location, passenger responses and an accident narrative. A narrative may reveal a condition, treatment or other health-related circumstance even when we do not ask for a medical record. Contact and technical information associated with the inquiry may also relate to that health information.
The source is principally the person submitting the inquiry. The purpose is to understand and respond to the particular request for assistance connecting with a law firm, administer that request and address applicable privacy or legal obligations. You can request a response without sending detailed treatment records. Do not send Social Security numbers, medical files, biometric information or unnecessary details about another person through ordinary intake.
We do not authorize the initial request process to create injury-based advertising audiences, to determine legal eligibility through health profiling, or to collect precise device location for health-service targeting. This restriction does not mean that a city or accident location voluntarily supplied in a message cannot itself reveal sensitive circumstances.
Collection, Sharing And Recipients
The initial request is handled by the AutoAccident.co operator. Necessary website and communication providers may process information to operate that request process; the website uses WordPress and WP Engine hosting, and new contact-form inquiries are stored in SecureFormPro for AutoAccident.co. Access is for the disclosed function and applicable obligations, not an unrestricted independent advertising use.
An additional law-firm disclosure must be identified as part of the relevant connection and supported by the permission or other basis required for that activity. A general Terms acknowledgment or an exclusive media contract does not authorize every health-data transfer. We do not authorize the website intake workflow to distribute health information to unnamed affiliated businesses or an undisclosed list of purchasers.
Where consent is required, collection and sharing are evaluated separately. A required permission must be obtained before the activity; where law allows a necessary requested-service use, that does not authorize an unrelated use. A use prohibited by law is not made permissible by a checkbox.
Our current initial request workflow does not authorize selling your injury information. Any proposed paid health-data transfer must first be assessed under the applicable definition and restrictions. Where a distinct written sale authorization is required for a permitted transaction, a general website permission is not a substitute; where the transaction is prohibited, it cannot proceed.
Optional Accident Assistant Chat
SecureFormPro stores Accident Assistant conversations. A question may contain health information even when no medical record is requested. Before chat starts, the processing notice and contact permission explain the request. For automated answers, the current question passes through an imperfect redaction step and is sent with reviewed public information to OpenRouter and its model provider. The connection does not send the separate name, email or phone contact fields to the model. Avoid detailed treatment information, identifiers and information about other people in chat.
Chat conversations are retained in SecureFormPro for 30 days, with routine backup copies for up to 14 additional days. A separate contact inquiry and its permission evidence follow the request-retention purposes below. These periods do not promise deletion from every external model provider or independent recipient. See the Accident Assistant privacy information for processing details and the existing privacy-request methods for questions or deletion requests.
Your Requests And Withdrawal
Use Your Privacy Choices, email, phone or the mailing address above to request applicable access, information about recipients, deletion or withdrawal of health-data consent. Specify the request and a way to reach you. Avoid including a detailed medical history in the privacy-request form.
We may verify identity or representative authority using information reasonably necessary for that purpose. A receipt confirms that a request was recorded; it is not proof of identity verification or fulfillment. We assess the request, explain applicable exceptions and take any legally required steps with processors or recipients. Required treatment of backups and other retained copies depends on the applicable obligation and circumstances.
If an appeal is available, contact us with the prior request details and explain that you are appealing. We provide further information about the decision and the relevant regulator complaint process as required. An independent law firm may have additional professional recordkeeping obligations; this notice does not promise that every separate firm record can be erased immediately.
Retention And Protection
We limit retention to the disclosed request, necessary administration and applicable legal obligations. An ongoing request, a specific dispute or a lawful retention duty can affect the period. Limited permission and suppression evidence may be treated differently from the underlying injury narrative. We do not use a generic legal-hold reason to justify keeping unrelated health information indefinitely.
Access and service-provider handling are restricted to appropriate functions. We use safeguards appropriate to the information, but no communication system is guaranteed completely secure. Contact us promptly if you believe information was submitted in error or without authority.
Washington, Nevada And Other State Protections
For information and activities covered by Washington or Nevada consumer-health-data law, the relevant collection, sharing, authorization, deletion and other protections apply even when general assumptions about medical providers or company size would not resolve coverage. Other states may provide additional sensitive-data protections. See State Privacy Information.
Official sources include Washington’s consumer-health-data law and Nevada’s privacy statutes. An agency link does not imply agency endorsement or certification of AutoAccident.co.
A material new use requires the appropriate notice and permission before it begins. Updating this notice alone does not authorize an expanded use of information already collected.