Privacy Policy
Last updated: 5/27/2026
1. Data Controller
Vitalink Media FZ-LLC (License FBDC3062), Compass Building, Al Shohada Road, AL Hamra Industrial Zone-FZ, Ras Al Khaimah, UAE.
2. Data Collection & Purpose
We collect data to verify professional status and facilitate peer-to-peer exchange:
- Identity: Name, professional email, and National Registry ID (e.g., GMC, NPI, GLN).
- Case Data: Study type, clinical questions, and Expert responses (text and transcripts).
- Temporary Data: Video uploads (stored for 30 days only).
- Verification: Results of the anatomical "RadCAPTCHA" and manual registry checks.
3. Health Data Exclusion (No PHI)
CorrelateMD does not process or store "Health Data" or "Patient Identifiers" as defined under the UAE Data Protection Law or GDPR. We do not host DICOM files. The responsibility for de-identification rests with the Inquirer.
4. Data Retention Policy
- Account Data: Retained as long as the account is active.
- Video Feedback: Automatically purged 30 days after upload to minimize data exposure.
- Transcripts & Transaction Records: Retained permanently for accounting, audit, and dispute resolution.
5. UAE Data Protection Compliance
In accordance with UAE Federal Decree-Law No. 45 of 2021, we implement strict technical and organizational measures to protect your data. Since we exclude UAE-based Inquirers, we do not process health data of UAE residents.
6. Sub-processors
- Lovable/Supabase: Hosting, Database, and Storage (GDPR compliant).
- Stripe: Payment processing (PCI-DSS compliant).
- Resend: Transactional email delivery.
- RapMed: Case study handoff (External service; users are subject to RapMed's own privacy terms).
7. Your Rights
You may request access to, correction of, or deletion of your professional data by contacting info@correlatemd.com. Transactional records required for UAE tax/audit purposes may be retained following account closure.