Privacy Policy

Effective Date: November 10, 2026

1. Introduction

OrthoAthlete ("OrthoAthlete," "we," "our," or "us") respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how OrthoAthlete collects, uses, shares, retains, and protects personal information through ortho-athlete.com (the "Website").

This Policy applies to information processed through the Website. Separate privacy notices may apply to the Injured application, healthcare providers, and other independently operated services.

2. Information We Collect

Depending on how you interact with our Website, we may collect the following categories of information.

Personal and Contact Information

  • Name
  • Email address
  • Phone number
  • Business or organization name
  • Professional title and affiliation
  • Mailing or billing address
  • Information submitted through contact or inquiry forms

Professional Information

  • Provider specialty and credentials
  • Professional biography
  • Practice or business location
  • Professional photographs and media
  • Marketing preferences and service selections
  • Other information submitted for professional listings

Transaction Information

  • Products or services selected
  • Order details and purchase history
  • Billing information
  • Payment status
  • Transaction identifiers

Payment card information may be collected and processed directly by third-party payment processors rather than stored by OrthoAthlete.

Technical and Usage Information

Depending on the technologies implemented, we may collect IP addresses, device and browser information, Website interaction data, referral sources, approximate location derived from IP addresses, and cookie identifiers.

Health-Related Information

If users voluntarily submit injury, recovery, rehabilitation, consultation, or other health-related details through Website forms, that information may be collected and processed to respond to the request or facilitate the requested service.

We encourage users not to submit unnecessary sensitive medical information through general contact forms.

3. How We Use Information

We use personal information for legitimate business and operational purposes, including:

  • Responding to inquiries and providing customer support.
  • Processing purchases and managing service orders.
  • Creating and maintaining professional profiles.
  • Delivering marketing and promotional services.
  • Facilitating requested introductions or connections with providers.
  • Providing access to relevant information about Injured.
  • Managing customer relationships and service communications.
  • Improving Website functionality and user experience.
  • Detecting fraud and protecting Website security.
  • Meeting legal, accounting, and regulatory obligations.
  • Sending marketing communications where permitted by law and applicable consent requirements.

We do not use sensitive health information for unrelated advertising or marketing without any legally required authorization or consent.

4. Information Sharing

We may share personal information with appropriate third parties when reasonably necessary for the purposes described in this Policy.

Recipients may include:

Service Providers: Companies that support Website hosting, customer communications, analytics, payment processing, security, and business operations.

Healthcare Professionals: Providers or organizations selected by users or otherwise involved in fulfilling a user's requested connection, subject to applicable consent and legal requirements.

Injured and Related Services: Information may be transferred to Injured when users request an integrated service, authorize a transfer, or otherwise initiate a process requiring that connection.

Professional Marketing Partners: Vendors involved in producing authorized photography, videos, websites, or marketing materials.

Legal and Regulatory Authorities: Information may be disclosed where required by law, valid legal process, or other legally permitted circumstances.

Business Transactions: Information may be transferred as part of a merger, acquisition, restructuring, or sale of business assets, subject to applicable legal requirements.

We do not sell personal health information.

We will provide additional disclosures and choices where applicable law treats advertising-related data sharing as a sale or sharing of personal information.

5. Healthcare Privacy and HIPAA

OrthoAthlete provides technology, marketing, and healthcare navigation-related services.

Certain information processed in connection with healthcare providers or related services may be subject to the Health Insurance Portability and Accountability Act (HIPAA) or other health privacy laws, depending on the nature of the information and OrthoAthlete's legal role.

Where OrthoAthlete acts as a business associate of a HIPAA-covered entity, applicable protected health information will be handled according to relevant legal requirements and contractual obligations.

Other health-related information may be protected by state privacy laws, consumer protection laws, or other applicable regulations even when HIPAA does not apply.

Nothing in this Policy is intended to reduce protections required by applicable health privacy laws.

6. Injured Application and External Platforms

OrthoAthlete may provide links or connections to the Injured application, including services related to athlete recovery, scheduling, provider communication, and rehabilitation resources.

When users leave our Website or access separately operated services, additional privacy policies and terms may apply.

Information transferred between platforms will be handled according to applicable law, contractual requirements, and any necessary user authorizations.

Users should review the privacy policy associated with Injured before submitting sensitive information through that platform.

7. Cookies and Analytics

We may use cookies and similar technologies to operate the Website, remember preferences, measure Website performance, and understand visitor interactions.

Where applicable, users may control certain cookies through browser settings or Website privacy controls.

Any nonessential tracking technologies will be subject to applicable notice and consent requirements.

We will not knowingly disclose protected health information through analytics or advertising technologies in violation of applicable law.

8. Data Security

OrthoAthlete uses reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information processed.

Such measures may include access restrictions, secure transmission, authentication controls, vendor oversight, and other security procedures.

However, no method of electronic storage or internet transmission is completely secure.

We cannot guarantee absolute security, and we encourage users to avoid submitting unnecessary sensitive information.

9. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, maintain business records, comply with legal obligations, resolve disputes, and protect legitimate business interests.

Retention periods vary based on the category of information, service relationship, legal requirements, and applicable contractual obligations.

When information is no longer required, we will delete, de-identify, or otherwise securely dispose of it as appropriate.

10. Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

  • Request access to personal information we maintain about you.
  • Request correction of inaccurate personal information.
  • Request deletion of eligible personal information.
  • Request information about certain disclosures or data processing activities.
  • Opt out of certain marketing communications.
  • Exercise applicable rights concerning targeted advertising or other regulated data uses.
  • Appeal a privacy request decision where required by law.

To submit a privacy request, please send us a message on our contact page.

We may need to verify your identity before processing certain requests.

We will respond within the timeframes required by applicable law and will not unlawfully discriminate against individuals for exercising their privacy rights.

11. Children's Privacy

OrthoAthlete may feature youth athletes and provide information relevant to parents, guardians, coaches, and athletic organizations.

The Website is not intended to independently solicit personal information from children under 13 without appropriate legally required parental consent.

Where personal information about minors is collected, used, or disclosed, we will comply with applicable children's privacy laws and any additional protections required for sensitive information.

Parents or legal guardians may contact us to inquire about information associated with their children.

12. Photography, Videos, and Testimonials

OrthoAthlete may publish photographs, videos, testimonials, and other promotional content featuring athletes, providers, or other individuals.

We will obtain legally required permissions and authorizations before using identifiable personal information, likenesses, testimonials, or protected health information for promotional purposes.

Individuals may contact us regarding concerns about media featuring them.

Requests to remove content will be evaluated under applicable law, existing agreements, and relevant consent or authorization terms.

13. Marketing Communications

We may send promotional emails or other marketing communications when permitted by applicable law.

Recipients may unsubscribe from promotional emails using the unsubscribe mechanism provided in those messages.

Marketing text messages, if offered, will be subject to applicable consent and opt-out requirements.

Consent to receive promotional text messages is not a condition of purchasing services unless a lawful exception applies.

Transactional and service-related communications may continue when necessary to fulfill requested services or meet legal obligations.

14. Third-Party Links

The Website may link to third-party platforms, including healthcare providers, scheduling services, payment processors, social media platforms, and the Injured application.

We do not control the independent privacy practices of third-party websites.

Users should review the privacy notices of external services before providing personal information.

15. Data Breach Notifications

If a security incident affects personal information, OrthoAthlete will evaluate the incident and provide notifications to affected individuals, regulators, or other parties when required by applicable law.

Any applicable health information breach notification requirements will also be followed.

16. Changes to This Privacy Policy

We may update this Privacy Policy as our business, services, technologies, or legal obligations change.

The latest version will be published on the Website with an updated effective date.

Where required by law, we will provide additional notice or obtain consent before implementing material changes.

17. Contact Us

For privacy questions, data requests, or concerns, please send us a message on our contact page.