Data Protection Notice

Publisher and controller

The site publisher identified in the Legal Notice is the data controller for MedicalRide.org platform operations unless a separate written agreement states otherwise.

This page is a practical summary. The MedicalRide Privacy Policy provides the fuller legal notice concerning purposes, legal bases, recipients, transfers, retention, and individual rights.

Operational safeguards

MedicalRide pairs structured intake with consent, vendor, retention, and access-control measures intended to limit unnecessary exposure.

• Clear operator identity

  MedicalRide.org is operated by Tipmunk SASU, with public controller and contact details listed in the Legal Notice and Privacy Policy.

  Legal Notice
• Directory platform boundary

  MedicalRide presents a directory and request platform. Independent providers remain responsible for transportation services, vehicles, drivers, licensing, insurance, pricing, and ride completion.

  Terms
• Consent and privacy choices

  Non-essential analytics and advertising tags stay off unless allowed, Global Privacy Control is honored where applicable, and key consent choices are recorded.

  Privacy Choices
• Rights request workflow

  People can request access, correction, deletion, portability, consent withdrawal, and California privacy choices through a dedicated intake form.

  Data Rights
• Retention and deletion controls

  MedicalRide publishes baseline retention categories and uses review, legal-hold, and approval steps before eligible deletion or redaction runs.

  Retention
• Vendor transparency

  The vendor register lists core provider categories, data categories, transfer evidence, BAA availability, and public legal evidence links.

  Subprocessors
• Security and audit controls

  Admin/session controls, role-based permissions, rate limits, same-origin checks, and sensitive-access audit logs support privacy operations.

  Security
• Organization agreement evidence

  Organizations can accept directory-platform terms through an electronic agreement flow that records authority, accepted text, and request context.

  Organization agreement

Why structured data matters

Medical transportation can become expensive and stressful when key facts are missing. We ask for route, timing, mobility, access, and contact details so pricing and provider matching can be based on the real ride instead of a vague phone message. The goal is to reduce wasted calls, help providers understand the request faster, and make the process easier for patients, older adults, caregivers, and families already under pressure.

Practical limits on sharing

MedicalRide aims to limit sharing to information reasonably relevant to evaluating, coordinating, confirming, or completing the request. Before a provider accepts a request, we may limit direct contact details where practical. After provider acceptance or a customer-selected callback request, contact details may be shared so the ride can be scheduled and completed.

MedicalRide limits and stages direct contact details where practical, depending on the request workflow. Ride logistics may be shared with one or more providers that need the information to evaluate availability, capability, timing, or price. Direct contact details may be withheld, masked, staged, or released later depending on the request type, provider response, customer acceptance, payment status, provider fee status, and safety or fraud controls.

Security practices

We use access controls, secure hosting, encrypted transport where supported, payment processors for card handling, and operational logs to protect and monitor the service. No online system can guarantee absolute security, but we design the platform to avoid unnecessary exposure and to keep sensitive ride data tied to legitimate coordination needs. Additional safeguards are summarized on the Security Measures page.

Provider and vendor access

Independent transportation providers and technology vendors may receive information needed to perform their role. Providers remain responsible for their own drivers, vehicles, licensing, insurance, safety procedures, and privacy obligations. MedicalRide.org is a coordination platform, not a medical provider, ambulance service, insurer, transportation provider, or transportation carrier.

The current vendor categories are listed in the Subprocessors and Vendor Register.

Retention

MedicalRide.org uses a retention schedule to set baseline targets for ride requests, provider records, payment records, consent evidence, privacy requests, communications, analytics, and security logs. The current baseline is available in the Data Retention Schedule.

Questions or requests

For data protection questions, corrections, or access requests, use the Data Rights Request form or email support@medicalride.org.