Privacy Policy & Terms of Service — IHateCarAccidents.com

Last Updated: April 26, 2025

1. Introduction

IHateCarAccidents.com ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Attorney Portal.

Please read this policy carefully. If you disagree with its terms, please discontinue use of the site.

2. Information We Collect

Information You Provide Directly

Attorneys: When registering for the portal, we collect your full name, law firm name, Florida Bar number, email address, and phone number.
Referral Forms: When submitting a referral, we collect patient name, contact information, injury description, insurance information, and any documents you upload.
Communications: Any messages or information you send us directly.

Information Collected Automatically

IP address and browser type
Pages visited and time spent on the site
Referring URLs
Device type and operating system

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Attorney Portal
Process and route chiropractic referrals
Verify attorney credentials and manage account approvals
Send account notifications, confirmations, and updates
Respond to your comments and questions
Improve and optimize our website
Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share information only in these circumstances:

Chiropractic Providers: Referral information is shared with the specific chiropractic provider you select in the portal.
Service Providers: We use Supabase (database and authentication), Resend (email delivery), and Cloudflare (hosting and security). These providers have their own privacy policies and are contractually obligated to protect your data.
Legal Requirements: We may disclose information if required by law or in response to valid legal process.

5. Data Security

We implement industry-standard security measures to protect your information:

SSL/TLS Encryption: All data transmitted to and from our site is encrypted in transit.
Supabase Infrastructure: Our database runs on Supabase, which is SOC 2 Type 2 certified and hosted on AWS with encrypted storage at rest.
Access Controls: Attorney accounts require email verification and manual admin approval before access is granted.
Password Security: Passwords are hashed using industry-standard bcrypt — they are never stored in plain text.

⚠️ No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us.

7. Your Rights

You have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your account and data
Opt out of non-essential communications

To exercise any of these rights, contact us at brettg83@gmail.com.

8. Cookies

We use cookies and similar tracking technologies to maintain your session when logged into the Attorney Portal. These are strictly necessary cookies and cannot be disabled without affecting portal functionality.

9. Third-Party Links

Our site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. Children's Privacy

Our site is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes by email. Your continued use of the site after changes constitutes acceptance of the updated policy.

12. Contact Us

Privacy Questions?

Last Updated: April 26, 2025

1. Acceptance of Terms

By accessing or using IHateCarAccidents.com and its Attorney Portal ("the Service"), you agree to be bound by these Terms of Service. If you do not agree to these terms, do not use the Service.

2. Description of Service

IHateCarAccidents.com provides:

A public website featuring car accident news, resources, and information
An Attorney Portal allowing licensed Florida attorneys to submit chiropractic referrals for their clients
A directory of participating chiropractic providers in Florida

3. Attorney Portal — Eligibility

Access to the Attorney Portal is restricted to:

Licensed attorneys in good standing with the Florida Bar
Individuals who have completed the registration process and received approval from the site administrator

By registering, you represent and warrant that you are a licensed Florida attorney. Providing false information during registration may result in immediate account termination.

4. Attorney Responsibilities

As a registered attorney using the portal, you agree to:

Only submit referrals for clients who have provided informed consent
Ensure all patient information submitted is accurate and authorized
Comply with all applicable Florida Bar Rules regarding client confidentiality
Not use the portal for any unlawful purpose
Maintain the confidentiality of your login credentials
Notify us immediately of any unauthorized use of your account

5. Patient Information & HIPAA

IHateCarAccidents.com operates as a HIPAA Business Associate when handling Protected Health Information (PHI) on behalf of participating healthcare providers (Covered Entities).

How we handle PHI

PHI is encrypted at rest in AWS S3 using AES-256 with AWS KMS-managed keys
All transmissions use TLS 1.2+ encryption in transit
Document access is logged with user ID, IP address, and timestamp
Access is enforced via role-based authentication and database row-level security
A signed Business Associate Agreement (BAA) is in place with AWS, our PHI storage sub-processor
Healthcare providers (Covered Entities) execute a Business Associate Addendum with IHateCarAccidents.com as Schedule A of the Provider Agreement before uploading any PHI
Non-PHI administrative data (account info, timestamps, patient initials, referral IDs) is stored separately in systems that do not handle PHI

Before any user uploads PHI through the platform, they must accept the Provider Agreement (including the Business Associate Addendum). This acceptance is permanently logged with user ID, role, agreement version, timestamp, IP address, user agent, and typed full name as a binding e-signature.

Your responsibilities as a user

Obtain proper patient authorization before submitting any health information
Use minimum-necessary PHI when uploading
Safeguard your account credentials and notify us of any suspected compromise
Comply with your own HIPAA obligations and applicable professional responsibility rules
Report any suspected breach or unauthorized access to us immediately

IHateCarAccidents.com is not a Covered Entity (we are not a healthcare provider, health plan, or healthcare clearinghouse). We operate as a Business Associate to participating Covered Entities under signed BAAs and HIPAA-aligned administrative, physical, and technical safeguards.

The complete Provider Agreement, including the Business Associate Addendum (Exhibit A), is available at /provider-agreement.

ℹ️ Important: IHateCarAccidents.com operates under HIPAA-aligned safeguards as a Business Associate. Users remain responsible for their own HIPAA obligations, patient authorization, and compliance with all applicable professional responsibility and privacy laws.

6. Prohibited Uses

You may not use the Service to:

Violate any applicable law or regulation
Submit false, misleading, or fraudulent referrals
Harass, abuse, or harm another person
Attempt to gain unauthorized access to any part of the Service
Interfere with or disrupt the integrity or performance of the Service
Collect or harvest any information about other users

7. Intellectual Property

All content on IHateCarAccidents.com — including text, graphics, logos, and software — is the property of IHateCarAccidents.com and is protected by applicable intellectual property laws. You may not reproduce, distribute, or create derivative works without our express written permission.

8. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS.

9. Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY LAW, IHATECARACCIDENTS.COM SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM YOUR USE OF THE SERVICE, INCLUDING BUT NOT LIMITED TO LOSS OF DATA, LOSS OF PROFITS, OR BUSINESS INTERRUPTION.

10. Indemnification

You agree to indemnify and hold harmless IHateCarAccidents.com, its owners, officers, and employees from any claims, damages, or expenses (including reasonable attorney fees) arising from your use of the Service or violation of these Terms.

11. Account Termination

We reserve the right to suspend or terminate your account at any time, with or without notice, for conduct that we believe violates these Terms or is harmful to other users, us, or third parties.

12. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the State of Florida, without regard to its conflict of law provisions. Any disputes shall be resolved in the courts of Florida.

13. Changes to Terms

We reserve the right to modify these Terms at any time. We will notify registered users of material changes by email. Continued use of the Service after changes constitutes acceptance of the updated Terms.

Legal