Privacy Policy

Effective Date: June 1, 2023  |  Last Updated: May 25, 2026

Who this policy covers: This Privacy Policy governs general use of the eadarhealth.com website and services by authorized users from an organization, facility, or provider.

Note: This Privacy Policy shall not be construed as the HIPAA or 42 C.F.R. Privacy Policy that governs the relationship between a patient and their treatment provider(s). Eadar has either a Business Associate Agreement ("BAA") and/or a Qualified Service Organization Agreement ("QSOA") with the organization, facility, or provider that governs the use of patient information.

Eadar LLC, a/k/a medrecordsrequest.com ("Eadar," "we," "us," or "our") is a Florida limited liability company that provides the Eadar websites and platform for the purpose of sharing health information between our customers. We know you care how information about you is collected, used, shared, and protected. This Privacy Policy governs how we use Personal Data that we collect, receive, and store about users in connection with our website and services.

By accessing or using the Service or visiting the Sites, you agree and consent to this Privacy Policy.

1. Definitions

"Anonymized Data" means anonymized and aggregated information that may be created or derived from your Personal Data or Usage Data.

"Cookies" are small pieces of data sent to your browser and stored on your device when you use the Services, unique to your device or account.

"Data Controller" means a natural or legal person who determines the purposes for which and the manner in which Personal Data is processed. For the purpose of this Privacy Policy, we are a Data Controller of your data.

"Data Processor" or "Service Provider" means any natural or legal person who processes data on behalf of the Data Controller.

"Personal Data" means data identifying, relating to, describing, or reasonably capable of being associated with a living individual or household — including name, email address, phone number, and similar information.

"Usage Data" is data about how you access and use the Services, collected automatically through use of the Services or from the Services infrastructure itself.

"User" is the individual using our Services, corresponding to the Data Subject.

2. What Personal Data We Collect and How

Eadar collects several types of data from users, administrators, authorized employees, and authorized contractors of our Service.

User Accounts

In order to use certain portions of the Service, each individual must have a separate User Account. Account registration requires you to submit your name, mobile phone number, and email address. We may contact you via phone, text, or email for verification and to confirm your account. We also use multi-factor authentication (MFA) — by accessing Eadar's services, you provide unequivocal consent to receive MFA messages via SMS and/or email.

Contact Form Information

When you submit a contact form, we collect your name, facility name, email address, role, and any message you provide. These records may be monitored or recorded to ensure quality service.

Usage Data & Cookies

We may collect Usage Data including IP addresses, browser type, device type, pages visited, time and date of visit, and other diagnostic data. We use Cookies and similar tracking technologies to track activity on our Services and remember your preferences. You can instruct your browser to refuse Cookies, though doing so may limit your ability to use some portions of the Services.

Analytics

We may use analytics tools such as Google Analytics to collect data about how users access and use the Services. This helps us maintain and improve the platform.

3. How We Use and Share Personal Data

We use Personal Data to:

We do not sell Personal Data. We will not sell, market, share, rent, or otherwise distribute Personal Data to others in ways different from what is disclosed in this Privacy Policy.

We may share Personal Data with trusted third-party service providers who assist with our business operations — including hosting, billing, security, analytics, and customer support — who are bound by contract to protect your data. We may also share data with other authorized users within your organization, or as required by law.

In the event of a merger, acquisition, or bankruptcy, we reserve the right to transfer Personal Data. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

4. How We Protect Your Data

We have implemented physical, electronic, and managerial procedures to safeguard and help prevent unauthorized access to your information. We follow generally accepted industry standards to protect Personal Data during transmission and once received.

However, no method of transmission over the Internet or electronic storage is 100% secure. We assume no liability for disclosure due to errors in transmission or unauthorized third-party access beyond our control. You should not share your username, password, or security information with anyone.

Security questions: admin@medrecordsrequest.com

5. Your Rights

Depending on where you live, you may have certain rights regarding your Personal Data, including:

To exercise any of these rights, contact us at admin@medrecordsrequest.com. We may ask you to verify your identity before responding.

Opting Out of Marketing Emails

You may opt out of promotional emails by clicking the "unsubscribe" link in any email we send, or by emailing admin@medrecordsrequest.com. We will still send service and administrative emails necessary to facilitate your use of the Service.

Multi-Factor Authentication

You have the right to opt out of MFA SMS messages, though doing so will limit your ability to access the Eadar platform.

6. GDPR — Legal Basis for Processing

If you are from the European Economic Area (EEA), our legal basis for collecting and using Personal Data includes:

7. California Privacy Rights

Eadar is a business-to-business service provider. We receive personal information solely from covered entities and their authorized organizations for the purpose of providing the Service under written agreements. We do not collect personal information directly from California consumers, do not sell personal information, and do not share personal information for cross-context behavioral advertising. Accordingly, the personal information we process on behalf of covered entities is exempt from California Consumer Privacy Act (CCPA) consumer rights obligations, as it is processed in our capacity as a service provider under contract.

California residents may contact us at admin@medrecordsrequest.com. California residents under 18 who have publicly posted content through the Service may request its removal by contacting us with "California Minor Removal Request" in the subject line.

8. Additional Notices

Children's Privacy

The Sites and Service are not intended for children under the age of 18. We do not knowingly collect Personal Data from anyone under 13. If we learn we have collected such data, we will delete it promptly. Contact us at admin@medrecordsrequest.com if you believe we have collected data from a minor.

Third-Party Links

Our Services may contain links to third-party websites not owned or controlled by us. We are not responsible for the privacy practices of such sites and encourage you to review their privacy policies.

International Transfers

Your Personal Data may be transferred to and maintained on computers located outside your state, province, or country. Your consent to this Privacy Policy represents your agreement to any such transfer.

Data Retention

We retain your Personal Data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by law. To request deletion, contact admin@medrecordsrequest.com.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we will also notify you via email or a prominent notice on our Services prior to the change becoming effective.

Your continued use of the Services after any changes constitutes your acceptance of the updated Privacy Policy.

10. Contact Us

If you have any questions, comments, or concerns regarding this Privacy Policy or the use of your Personal Data, please contact us:

Email: admin@medrecordsrequest.com

Website: www.eadarhealth.com