Privacy policy

This policy explains how Ortva (“we”, “us”) handles personal data when you visit ortva.com or contact us. It applies wherever you are. The sections on US privacy rights and India explain the extra rights you have under the laws where you live.

What this website collects

• Nothing automatically. The site sets no cookies, runs no analytics or advertising trackers and loads no third-party scripts. Fonts are served from our own domain.
• Our hosting provider keeps standard technical server logs (such as IP address, browser type and the pages requested) for security and reliability.

When you contact us

If you email us or book a call, we receive the details you choose to share. These may include:

• Identifiers: your name, email address and phone number.
• Professional information: your hospital or organisation, your role and specialty.
• Your message: the reason you’re getting in touch.

We use them only to reply, to arrange and hold the conversation, and to keep a record of it. We don’t use them for automated decision-making or profiling.

Patient data

Please don’t send patient scans or health information by email or through this website. If we work on a case together, patient data is shared through a separate secure channel and handled under a written agreement with the hospital or surgeon, with identifying details removed wherever possible. Where US law requires it, that includes a HIPAA business associate agreement.

Sharing

We don’t sell your personal data, and we don’t share it for cross-context behavioural advertising. We share it only:

• with service providers that help us run Ortva, such as website hosting and email, under contracts that limit how they can use it;
• where the law requires it, or to protect our rights and the safety of others;
• with a successor organisation if Ortva is reorganised, merged or sold, under the same protections as this policy.

Where your data is processed

We work from the United States and India, and our service providers may process data in other countries. Wherever your data is processed, we protect it as this policy describes.

How long we keep it

We keep contact details for as long as we’re in touch, and for a reasonable period afterwards for our records, unless you ask us to delete them sooner or the law requires otherwise. Server logs are kept for a short period by our hosting provider.

Security

We use reasonable technical and organisational safeguards, including encryption in transit (HTTPS) and limited access to personal data. No system is perfectly secure, so please contact us right away if you think your data has been put at risk.

US privacy rights

Depending on the state where you live (for example California, Virginia, Colorado, Connecticut, Texas or Oregon), you may have the right to:

• know what personal data we hold about you and how we use it, and get a copy;
• correct inaccurate personal data;
• delete your personal data;
• opt out of the sale or sharing of personal data, targeted advertising and profiling (we don’t do any of these);
• appeal if we decline your request;
• not be treated differently for using these rights.

You can make a request yourself or through an authorised agent. We’ll verify your identity before acting on it, and we’ll respond within 45 days, or tell you if we need more time.

California residents: in the past 12 months we have collected only the categories listed under “When you contact us” and server logs, for the purposes described above. We have not sold or shared personal information, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.

Global Privacy Control and Do Not Track: we don’t track visitors across websites. If your browser sends a Global Privacy Control signal, we treat it as a valid request to opt out of sale and sharing.

India

Under India’s Digital Personal Data Protection Act, 2023, you can ask to access, correct or erase your personal data, withdraw consent, and nominate someone to exercise these rights for you. If you’re not satisfied with how we handle a complaint, you can approach the Data Protection Board of India.

Children

This website isn’t intended for children, and we don’t knowingly collect personal data from anyone under 18. If you think a child has sent us personal data, contact us and we’ll delete it.

Contact and requests

For any privacy question, request or complaint, email hello@ortva.com with “Privacy” in the subject.

Changes

We’ll update this page if our practices change. The date at the top shows the latest version. If we make significant changes, we’ll make them clear on this page.