ValhallaCare← Back to Home

Privacy Policy

Last updated: July 16, 2026

Introduction & Scope

This Privacy Policy describes how ValhallaCare LLC ("ValhallaCare," "we," "our," or "us") collects, uses, shares, and protects your personal information when you visit our website at valhalla.care and use the services available on it, including our contact, careers, and partner inquiry forms. By using our website, you agree to the collection and use of information as described in this policy. This Privacy Policy is NOT a HIPAA Notice of Privacy Practices (NPP). For HIPAA-related inquiries, please contact us at the email address provided below.

Information We Collect

We collect personal information that you voluntarily provide and information that is collected automatically when you use our website. Contact, Careers, and Partner Forms: • Full name (required) • Email address (required) • Phone number (optional) • Practice or organization name (optional) • Topic of inquiry (required) • Message content (required) Automatically Collected Information: • Bot protection tokens • IP address and browser type • Technical cookies set by our hosting and security providers Important: Our website is not intended for the collection of Protected Health Information (PHI). Please do not submit medical records, diagnoses, treatment information, insurance details, or other health data into any form or field. If health-related information is inadvertently submitted, we will take reasonable steps to delete or segregate it.

How We Use Your Information

We use the information you provide for the following purposes: • Responding to inquiries — We use your name, email, and message to reply to your question or request. • Internal routing — Your selected topic helps us direct your inquiry to the appropriate team member. • Business communications — If you inquire about partnership or career opportunities, we may follow up with relevant information. • Bot protection and fraud prevention — We use security tools to verify that form submissions come from real users. We do not sell, rent, or trade your personal information to third parties. We do not use your information for advertising or behavioral profiling.

Service Providers & Subprocessors

We share your personal information with a limited number of third-party service providers who assist us in operating our website. These providers process your data only as necessary to perform their services and are bound by data processing agreements. • Email delivery provider — Receives your email address and message content to process and deliver inquiry responses on our behalf. • Security and bot protection provider — Processes your IP address and browser fingerprint to prevent automated abuse of our forms. • Hosting and infrastructure providers — Process standard web server logs (IP address, request timestamps, pages visited) to serve our website. We do not share your personal information with any other third parties except as described in the "Information Sharing & Disclosure" section below.

No Analytics or Behavioral Tracking

We do not use third-party analytics services such as Google Analytics, PostHog, or similar tools. We do not use advertising cookies, cross-site tracking technologies, or behavioral profiling. We do not serve targeted advertisements or participate in ad networks. Your activity on our services is not tracked for marketing or advertising purposes.

Cookies & Technical Identifiers

Our services use minimal cookies and technical identifiers necessary for functionality: • Technical cookies — Temporary cookies set by our hosting and bot-protection providers to keep the site secure and functioning. These expire shortly after your visit. • Bot protection tokens — Generated to verify you are a real user when submitting forms. This is not a tracking cookie. We do not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. You can instruct your browser to refuse all cookies. However, if you do not accept cookies, some features of our services may not function properly.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy. Our retention periods are: • Active inquiries — Retained until the inquiry is resolved. • Completed inquiries — Retained for up to 24 months for reference purposes. • Career inquiries — Retained for up to 12 months unless you request earlier deletion. You may request deletion of your personal information at any time by contacting us at [email protected]. We will process your request within 30 days (or within the timeframe required by applicable law), subject to any legal obligations that require us to retain certain information.

Information Sharing & Disclosure

We do not sell your personal information. We share personal information only in the following circumstances: • Service providers — As described in the "Service Providers & Subprocessors" section above, we share information with providers who assist in delivering our services under data processing agreements. • Legal obligations — We may disclose information if required by law, regulation, subpoena, court order, or other legal process. • Protection of rights — We may disclose information if we believe it is necessary to protect the rights, property, or safety of ValhallaCare, our users, or others. • Business transfers — In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of the transaction. We will notify you of any such change.

Data Security

We take the security of your personal information seriously and implement reasonable administrative, technical, and physical safeguards to protect it, including: • Encryption in transit — All data transmitted between your browser and our services is encrypted using TLS/HTTPS. • Access controls — Access to personal information is restricted to authorized personnel on a need-to-know basis. • Regular review — We periodically review our security practices and update them as needed. No method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

HIPAA Disclaimer

ValhallaCare is a healthcare organization. However, this website (valhalla.care) is an informational and administrative tool only and is NOT designed or intended for the collection, transmission, or storage of Protected Health Information (PHI). Please do not submit medical records, diagnoses, treatment information, insurance details, clinical notes, or any other health-related data through our website forms. This Privacy Policy is not a HIPAA Notice of Privacy Practices (NPP). If you have questions regarding HIPAA or your health information rights, please contact us at [email protected].

Your Rights — California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information. Categories of Personal Information We Collect: • Identifiers (name, email address, phone number, IP address) • Internet or electronic network activity (browser type, session data) • Professional or employment-related information (organization name, career inquiries) Purposes for Collection: • Providing and improving our services • Responding to inquiries • Security and fraud prevention Sale and Sharing: We do NOT sell or share your personal information as defined under the CCPA/CPRA. We have not sold or shared personal information in the preceding 12 months. Sensitive Personal Information: We do not collect sensitive personal information as defined under the CPRA. Your Rights: • Right to Know — Request the categories and specific pieces of personal information we have collected about you. • Right to Delete — Request deletion of your personal information. • Right to Correct — Request correction of inaccurate personal information. • Right to Opt-Out of Sale/Sharing — Not applicable; we do not sell or share your data. • Right to Limit Use of Sensitive Personal Information — Not applicable; we do not collect sensitive personal information. • Right to Non-Discrimination — We will not discriminate against you for exercising your rights. How to Exercise Your Rights: Email [email protected] with the subject line "California Privacy Rights Request." We may verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf with written authorization. Global Privacy Control (GPC): We respect browser-based opt-out preference signals such as the Global Privacy Control (GPC). If we detect a GPC signal from your browser, we will treat it as a valid opt-out request under applicable law. Response Time: We will respond within 45 days. If we need additional time, we will notify you of the extension (up to an additional 45 days).

Your Rights — EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) provides you with certain data protection rights. Data Controller: ValhallaCare LLC 169 Madison Ave STE 38532 New York, NY 10016 Email: [email protected] Legal Bases for Processing: • Consent — When you voluntarily submit a contact form or other inquiry. • Contract Performance — To respond to inquiries and fulfill related communications. • Legitimate Interests — To maintain security, prevent fraud, and improve our services. Your Rights: • Access — Request a copy of the personal data we hold about you. • Rectification — Request correction of inaccurate or incomplete data. • Erasure — Request deletion of your personal data ("right to be forgotten"). • Restriction — Request restriction of processing of your personal data. • Portability — Request your data in a structured, machine-readable format. • Objection — Object to processing based on legitimate interests. • Withdraw Consent — Withdraw your consent at any time where processing is based on consent. Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your EU/EEA member state. International Transfers: Your personal data is processed in the United States. Where required by applicable law, we rely on appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses (SCCs) approved by the European Commission. We take reasonable steps to ensure your data is treated securely and in accordance with this policy. To exercise any of these rights, contact us at [email protected].

State Privacy Laws

In addition to the CCPA/CPRA, we are committed to complying with applicable state privacy and health data protection laws where they apply to our operations, including but not limited to: • Washington My Health My Data Act (MHMDA) • Virginia Consumer Data Protection Act (CDPA) • Colorado Privacy Act (CPA) • Connecticut Data Privacy Act (CTDPA) • Utah Consumer Privacy Act (UCPA) • Texas Data Privacy and Security Act (TDPSA) • Florida Digital Bill of Rights • Iowa Consumer Data Protection Act • Tennessee Information Protection Act • Minnesota Consumer Data Privacy Act • Indiana, Montana, Oregon, Delaware, and New Jersey privacy laws If you are a resident of any state with applicable privacy legislation, you may exercise your rights under that law by contacting us at [email protected]. We will respond to your request in accordance with the applicable law's requirements.

FTC Health Breach Notification

Where applicable, we acknowledge our obligations under the Federal Trade Commission's Health Breach Notification Rule. In the event of a breach involving unsecured personally identifiable health information, we will notify affected individuals and relevant authorities as required by law.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided personal information to us, please contact us at [email protected] so we can take steps to remove that information.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. For material changes, we will provide additional notice by posting a prominent notice on our website. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: • Email: [email protected] • Subject Line: Privacy Policy Inquiry • Mailing Address: ValhallaCare LLC, 169 Madison Ave STE 38532, New York, NY 10016 We will respond to your request within 30 days (or within the timeframe required by applicable law).