1. Information We Collect
Depending on how you use the Services, we may collect the following categories of information.
1.1 Information You Provide
You may provide information when you:
- create an account;
- create or manage a Provider profile;
- submit an inquiry to a Provider;
- submit a review or rating;
- contact us;
- subscribe to communications;
- request information or access educational resources, including e-books, guides, or other downloadable materials;
- request information;
- participate in surveys or promotions;
- communicate with customer support; or
- otherwise use features that allow you to submit information.
This information may include your name, email address, telephone number, account credentials, location, professional information, and other information you choose to provide. When you request access to an e-book, guide, or other educational resource, we may collect your email address to provide or facilitate access to the requested resource, communicate with you regarding your request, and, where permitted by law and with any required consent, send related communications.
We collect personal information only for identified, reasonable, and legitimate purposes connected with the Services, subject to applicable law.
1.2 Health-Related Information
Because Liver Directory is focused on liver health, users may voluntarily provide health-related information.
This may include information concerning:
- symptoms;
- diagnoses or medical conditions;
- treatments;
- medications;
- laboratory or test information;
- healthcare providers;
- insurance;
- medical history;
- health concerns; and
- other information relating to an individual's health.
Please do not provide more health information than is reasonably necessary for the particular feature you are using.
Where applicable law requires express or affirmative consent for the collection, use, or sharing of sensitive or consumer health data, we will obtain that consent before the applicable processing, unless a legal exception applies.
If you submit a public review, comment, or other publicly visible content containing health information, that information may become publicly available.
1.3 Provider Information
Physicians and other healthcare Providers may provide information such as:
- name;
- professional title;
- specialty;
- license information;
- certifications;
- practice information;
- practice locations;
- contact information;
- professional biography;
- services offered;
- affiliations;
- photographs;
- insurance information; and
- other professional information.
Providers are responsible for ensuring that information they submit is accurate and that they have the authority and appropriate permissions to provide it.
1.4 Automatically Collected Information
When you use the Services, we and our service providers may automatically collect certain technical information, including:
- IP address;
- browser type;
- device type;
- operating system;
- pages viewed;
- referring and exit pages;
- approximate location;
- date and time of access;
- interactions with the Services;
- device identifiers; and
- other technical or usage information.
We may also collect your IP address and related technical information when you submit forms, sign up for newsletters or other communications, request information or educational resources, create an account, submit an inquiry, or otherwise interact with features of the Services.
We use this information for purposes such as operating and securing the Services, preventing fraud and abuse, maintaining records, understanding website usage, and complying with applicable legal requirements.
1.5 Cookies and Similar Technologies
We do not use advertising or analytics cookies, and we do not place tracking pixels or tags on the Services.
We use only what the Services need to work:
- one cookie that keeps a Provider signed in to the provider portal, set only when a Provider signs in; and
- your browser's session storage, which keeps your conversation with Aimy, our AI assistant, and your agreement to Aimy saving it, or a review you are writing while you move between pages. Your browser clears it when you close the tab.
Maps on the Services come from Google, and Provider introduction videos and the videos in our blog posts from YouTube or Vimeo. A map loads with any page that shows one; a video loads only when you play it. Google and YouTube may then set their own cookies under their own privacy policies.
Our newsletter emails may tell us whether an email was opened and which links were clicked.
If we add other cookies or similar technologies, we will update this Privacy Policy first and, where the law requires, ask for your consent.
1.6 Free Guides by Email
When you ask us to email you one of our free guides, we collect the email address you enter, your first name or initial if you choose to give it, the guide you asked for, and whether you also asked for our newsletter.
We use this information only to email you a link to download the guide, which works for 30 days, and to keep a record of your request. We send the guide only after you agree, in the request form, that we may use the information you submit for this purpose.
To protect you and others from unwanted emails, we limit how many guides can be requested in a day for each email address and each IP address.
If you also choose to receive our newsletter, we add your email address to our newsletter list. You can unsubscribe at any time with the link in every newsletter.
Our email service provider sends these emails on our behalf. You may ask us to delete your request at any time, as described in Section 8.3.
1.7 Writing a Review
When you write a review, we ask for your name and email address along with it. We use them only to verify your review: we never publish your email address, and your review shows your name only as you choose, as your first name and last initial or not at all.
To make sure every review comes from a real person, we email you a link to confirm your review, which works for 7 days. We consider a review for publication only after you confirm it, and our team checks every review before it is published. If a review is not confirmed within 30 days, we delete it along with the email we sent.
When you submit and when you confirm a review, we also record your IP address, your approximate location (the city, region and country associated with your IP address), the time zone and language your device is set to, and your device and browser type. We use these details only to keep reviews authentic, to detect and prevent fake or fraudulent reviews, and to protect the Services. Only our moderation team can see them, they are never published, and we keep them for as long as we keep the review.
To prevent abuse, we limit how many reviews can be submitted in a day for each email address and each IP address.
Our email service provider sends these emails on our behalf. You may ask us to delete your review and these details at any time, as described in Section 8.3.
1.8 Conversations with Aimy
When you chat with Aimy, our AI assistant, we keep a copy of the conversation: your questions, Aimy's answers, the page you asked from, whether you used your voice, whether you rated an answer as helpful, and your device type (for example, “iPhone · Safari”).
We save a conversation only if you agree: in the chat, by selecting “I agree, start chatting” before your first question, or on Liver Science Aimy, by ticking the box before you start.
Before saving, we remove email addresses, phone numbers and long numbers such as card numbers. We do not store your IP address. A coded identifier groups your questions into one conversation for two days; after that, a saved conversation can no longer be linked to you.
We use saved conversations to improve Aimy's answers, keep Aimy safe and accurate, and learn which topics visitors ask about. We keep them until we delete them.
Please don't include your name, contact details or anything else that identifies you. To have a conversation deleted, contact us as described in Section 8.3 and tell us roughly when you chatted and what you asked.
1.9 Liver Health Scores
When you take one of our liver scores, such as the Liver Health Score, the Truckers Liver Health Score or the Liver Transplant Score, we collect your answers to its questions, which include information about your health and habits, along with your first and last name, your email address, and whether you also asked for our newsletter.
We use this information only to calculate your score, to email you a private link to your result, which works for 7 days, and to keep a record of your answers and your consent. We collect it only after you agree, in the questionnaire, that we may use the information you submit for these purposes. For your privacy, the email does not show your score.
We store your answers encrypted, and only our authorized staff can see them. We do not share them with Providers, and we do not use them for advertising.
To prevent abuse, we limit how many scores can be submitted in a day for each email address and each IP address. For this we keep a coded form of your IP address, never the address itself, and delete it after two days.
If you also choose to receive our newsletter, we add your name and email address to our newsletter list. You can unsubscribe at any time with the link in every newsletter.
Our liver scores are meant for adults 18 and over. They provide general information only and are not a diagnosis or medical advice.
Our email service provider sends these emails on our behalf. We keep your answers until you ask us to delete them, which you may do at any time, as described in Section 8.3.
2. How We Use Information
We may use information we collect to:
- provide and operate the Services;
- create and manage accounts;
- maintain Provider profiles;
- facilitate communications between users and Providers;
- process Provider inquiries;
- publish reviews and other user content;
- respond to requests and support inquiries;
- improve and personalize the Services;
- analyze usage and performance;
- maintain security;
- prevent fraud, abuse, and unauthorized activity;
- comply with legal obligations;
- enforce our Terms and other agreements;
- communicate with you about the Services;
- send marketing communications where permitted by law; and
- perform other purposes disclosed at the time information is collected or otherwise permitted by law.
We do not use health-related information for purposes incompatible with the purpose for which it was collected.
We may also use collected non-personalized health information data and aggregate that data with other collected data to improve Services and to share with Providers and others working and researching to improve health.
If we intend to use personal information, including consumer health data, for a new purpose not previously disclosed, we will provide any notice and obtain any consent required by applicable law before doing so.
3. Provider Inquiries and Communications
If you submit an inquiry or request to contact a Provider through the Services, information you provide may be shared with the Provider or other parties involved in facilitating the inquiry.
For example, this may include your:
- name;
- contact information;
- inquiry;
- selected Provider;
- location; and
- information you voluntarily include in your message.
The Provider will be responsible for its subsequent use and handling of information after receiving it.
You should review the Provider's own privacy practices before providing additional information directly to that Provider.
Liver Directory does not control how an independent Provider uses information after receiving it from you, except to the extent required by applicable law or a contractual arrangement.
4. Reviews and Public Information
Some features of the Services may allow you to submit reviews, ratings, comments, questions, photographs, or other content.
Information that you choose to make public may be visible to other users and may be indexed by search engines or copied by third parties.
Do not publicly post another person's private or health information without appropriate authorization.
We may moderate, remove, restrict, or decline to publish content that violates our Terms, applicable law, or our content policies.
6. HIPAA and Protected Health Information
6.1 HIPAA Applicability
The Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) applies to certain healthcare providers, health plans, healthcare clearinghouses, and their business associates.
Not every entity that handles health-related information is a HIPAA covered entity or business associate. HHS explains that HIPAA's Privacy Rule applies to covered entities and, in relevant circumstances, business associates.
Accordingly, the fact that Liver Directory may receive or process health-related information does not by itself mean that all information handled through the Services is “protected health information” (“PHI”) under HIPAA.
6.2 When Liver Directory May Act as a Business Associate
In certain arrangements, Liver Directory may provide services to a healthcare Provider that involve creating, receiving, maintaining, or transmitting PHI on the Provider's behalf.
Where the relationship legally qualifies as a business associate relationship under HIPAA, the parties may enter into a separate Business Associate Agreement (“BAA”).
A BAA is generally used to establish permitted uses and disclosures of PHI and appropriate safeguards when a business associate performs covered functions or services for a covered entity.
Where applicable, the BAA will govern the parties' HIPAA-specific obligations.
6.3 Our Handling of PHI
If we are acting as a business associate and receive PHI on behalf of a covered entity, we will handle that PHI in accordance with the applicable BAA and applicable HIPAA requirements.
We will not use or disclose PHI except as permitted or required by the applicable BAA, HIPAA, or other applicable law.
6.4 Provider Responsibilities
Providers remain responsible for their own HIPAA obligations and for determining whether they are covered entities or otherwise subject to HIPAA.
Providers are responsible for ensuring that they have appropriate legal authority to provide information to Liver Directory and that their use of the Services complies with applicable privacy, security, confidentiality, and professional obligations.
6.5 HIPAA Is Not a General Guarantee
Liver Directory does not represent that every feature of the Services is subject to HIPAA or that every type of information submitted to the Services constitutes PHI.
Unless expressly stated in a separate agreement, you should not assume that a particular feature, communication, or information submission is a HIPAA-covered service.
Where applicable, privacy obligations may also arise under non-HIPAA laws that protect consumer health data. Compliance with HIPAA does not replace or limit obligations under other applicable privacy laws.
7. California Privacy Rights
Depending on your circumstances and whether applicable thresholds and exemptions apply, California privacy laws may provide certain rights concerning your personal information.
California law treats certain information relating to a consumer's health as sensitive personal information.
Depending on applicable law, these rights may include rights relating to:
- knowing about personal information collected;
- accessing personal information;
- correcting inaccurate personal information;
- deleting personal information;
- obtaining information about disclosures;
- opting out of certain sales or sharing activities;
- limiting certain uses of sensitive personal information; and
- non-discrimination for exercising applicable privacy rights.
The availability and scope of these rights depend on applicable law, your relationship with us, and applicable exemptions.
You may contact us using the information in Section 14 to exercise applicable privacy rights.
We may need to verify your identity before processing certain requests.
7.1 Canadian Privacy Rights
If you are in Canada and applicable law applies to our processing, you may have rights to know what personal information we collect, the purposes for which it is collected, how it is used or disclosed, access and correct your information, withdraw consent where permitted, and challenge our privacy practices. These rights may arise under PIPEDA or applicable substantially similar provincial privacy legislation, including Québec's private-sector privacy law as amended by Law 25.
For Québec residents, where applicable, we will provide privacy information in clear and simple language, obtain consent as required, maintain appropriate safeguards, address privacy complaints, and comply with requirements for transfers of personal information outside Québec, including applicable privacy impact assessments and contractual protections.
8. Your Privacy Choices
8.1 Marketing Communications
You may opt out of promotional emails by using the unsubscribe mechanism included in the communication.
Opting out of marketing communications does not prevent us from sending transactional, administrative, security, or service-related communications.
8.2 Cookies
We do not use advertising or analytics cookies, so there are no cookie settings to manage.
You can block or delete cookies, including those set by Google or YouTube, in your browser settings. Providers who block cookies cannot stay signed in to the provider portal.
8.3 Privacy Requests
You may contact us to request access, correction, deletion, or other privacy rights available to you under applicable law.
You may also withdraw consent for future collection, use, or sharing where withdrawal is permitted by applicable law. Withdrawal does not affect processing already carried out lawfully before withdrawal and may affect our ability to provide certain Services.
9. Data Retention
We retain personal information for as long as reasonably necessary to:
- provide the Services;
- maintain accounts and business records;
- fulfill the purposes described in this Privacy Policy;
- comply with legal, regulatory, accounting, or reporting obligations;
- resolve disputes;
- enforce agreements; and
- protect our legal rights.
Retention periods may vary depending on the type of information and the purpose for which it was collected.
When information is no longer reasonably necessary, we may delete, de-identify, aggregate, or otherwise dispose of it, subject to applicable law and legitimate business requirements.
Where applicable law requires deletion or anonymization when the purposes for which information was collected have been achieved, we will follow those requirements, subject to lawful exceptions and required retention periods.
10. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, or destruction.
However, no internet transmission, electronic storage system, or security measure is completely secure.
We cannot guarantee the absolute security of information transmitted to or stored by us.
If a privacy or security incident occurs, we will take reasonable measures to contain and address it and provide notifications or reports when required by applicable law.
11. Children's Privacy
The Services are intended for individuals who are 18 years of age or older.
We do not knowingly permit individuals under 18 to create accounts, submit reviews, or use features requiring submission of personal information.
If we learn that we have collected personal information from a person under 18 in violation of our policies or applicable law, we may take steps to delete the information and restrict the associated account.
Parents or legal guardians may contact us regarding information concerning a minor.
12. Third-Party Services
The Services may integrate with or link to third-party services.
Those third parties may independently collect information according to their own privacy policies.
We are not responsible for the privacy practices of third-party services that we do not control.
You should review the privacy policies of third-party services before using them.
13. International Users
Liver Directory is intended primarily for users in the United States.
If you access the Services from outside the United States, your information may be transferred to, stored in, or processed in the United States or other jurisdictions where we or our service providers operate.
Privacy and data protection laws in those jurisdictions may differ from the laws of your country.
If personal information of a Québec resident is communicated or entrusted to a person or service provider outside Québec, we will conduct and document any privacy impact assessment and use any written contractual protections required by applicable Québec law before the transfer, where the law applies.
14. Contact Us
If you have questions about this Privacy Policy or wish to submit a privacy request, contact us at:
Amsety GmbHEmail: service@amsety.usPhone: (442) 244-5115Address: Teerofendamm 1, 14532 Kleinmachnow, GermanyPrivacy Contact / Data Protection Office: tresha@amsety.usGeneral Privacy Contact: service@amsety.us