The privacy notice in force

Who is responsible

NextConsensus, Inc., a Delaware corporation, is the controller for the personal data described here. Reach us at legal@nextconsensus.com.

What this site collects

Two things, and nothing else.

• The contact form. Your work email and the claim or authority decision you are asking about, with the date you need to know by. Everything else on the form is optional: the authority or payer, the date your team needs and the time left before it, the therapeutic area, the kind of help you want, the decision it would inform, the people who would use it, and evidence you already know has moved. The form also records the page you submitted from, the guide that sent you there if one did, the time you submitted, the version of this site's public boundary you saw, and the country Cloudflare reports for your connection. It does not keep your IP address or browser details.
• Aggregate traffic measurement. We do not load a third-party analytics script. Our own server counts, in aggregate, which buttons and links on this site are clicked, which step of the contact form is reached, and how far down a page a visit gets (opened, then a quarter, half, three quarters and the end), with the kind of place the visit came from (a search engine, an AI assistant, a social site, another site, this site, or none). It records the page and the button's label, or the depth and that kind, and nothing that identifies you: no cookie, no identifier, no IP address, no browser details, and not the address of the page you came from.

What this site does not do

• No advertising or tracking cookies, and no third-party trackers.
• No cross-site tracking, data brokers, or sale of personal data.
• No PHI, patient data, or special-category health data — we ask you not to send it, and the form is not designed to receive it.
• Browser storage holds two things, both kept on your device: your light or dark theme choice, and, if you start a question in the home page's question box, that text, held for the current tab only so the contact form can show it. The contact form deletes it as soon as it reads it, and it leaves your device only if you send the form.

Why we process it, and on what basis

• Answering your inquiry — because you asked us to, and to take steps toward a possible agreement at your request. GDPR Art. 6(1)(b).
• Aggregate traffic measurement, abuse prevention, and the country recorded with a form — our legitimate interest in knowing whether the site works, in keeping the form from being abused, and in knowing which privacy law applies to a submission, weighed against a method that identifies nobody. Art. 6(1)(f).

Who else sees it

Cloudflare hosts this site, filters bot traffic on the form, and forwards submissions onward. GitHub holds the source code and contains none of your data. Both are listed on Security & Compliance, which stays current with this notice. We do not share your data with anyone else, and no third-party AI provider is in the path.

How long we keep it

• Contact form submissions: two years from our last exchange with you, then deleted.
• Aggregate analytics: retained by Cloudflare on their schedule; it is not tied to you and cannot be traced back.

Your rights

If you are in the UK, EU, or a US state with a privacy statute, you can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or receive it in portable form. Email legal@nextconsensus.com and we will reply as quickly as we can, and within the period the applicable law allows. You may also complain to your data protection authority.

Where the data goes

We are a US company using a US-headquartered provider, so your data may be processed in the United States. Transfers out of the UK or EEA rely on the 2021 Standard Contractual Clauses in our agreement with Cloudflare.

Children

This site is for professional use and is not directed at anyone under 16. We do not knowingly collect their data.

Changes

If this notice changes, the effective date at the top changes with it, and the previous version stays available on request.