Expert Privacy Notice
Version 1.0 · Effective November 10, 2026
This notice explains how we collect and use personal data about experts who apply to or take part in the Claimee platform (the “Platform”). It forms part of the Expert Platform Participation Terms.
1. Who we are
The controller of your personal data is UAB Spine Revolution, company code 306210193, registered address Aludarių g. 3, Vilnius, Lithuania (“we”, “us”). Contact for privacy matters: matas@tripdash.net.
When a brand company confirms you for a product and you sign a Brand Agreement with it, that brand company becomes a separate, independent controller of the data it receives and uses under its own privacy notice.
2. What data we collect and why
| Data | Why we use it | Legal basis (GDPR) |
|---|---|---|
| Identity and contact data: name, surname, e-mail, phone, country and state of practice | Create and run your account, contact you | Performance of the Participation Terms (Art. 6(1)(b)) |
| Professional data: field and specialty, licence, registration or certification number and issuing authority, NPI (US clinicians), board certification, CV, education, employer | Verify that you are qualified in the field you review in, as required for expert endorsements under US law | Contract (Art. 6(1)(b)); legitimate interest in running a verified expert network and preventing fraud (Art. 6(1)(f)) |
| Public register and disciplinary data: results of checks against official licensing registers, public disciplinary actions and US federal and state exclusion lists | Confirm your licence is active and unrestricted, initially and at least monthly | Legitimate interest (Art. 6(1)(f)); we do not request criminal records |
| Identity video call: date, outcome, and the identity document type shown | Confirm that the person applying is the licence holder | Legitimate interest (Art. 6(1)(f)). The call is not recorded and no biometric data is extracted |
| Conflicts and commercial relationships: current brand relationships, exclusivities, employer or residency restrictions | Avoid conflicts of interest and breaches of your other obligations | Contract and legitimate interest |
| Platform activity: products applied for, reviews submitted, attestations, approvals of assets, withdrawals, acceptance logs with version and timestamp | Run the workflow, prove that each endorsement was approved by you, handle takedowns | Contract; legitimate interest in demonstrating compliance and defending legal claims |
| Calibration and quality score | Internal quality control of reviews | Legitimate interest. A human reviews every score; no decision about you is made solely by automated means |
| Proposed hourly rate | Show brand companies your rate and maintain the rate card | Contract |
We do not need, and you must not upload, any patient data or any health data about yourself.
Payment and tax details (bank account, IRS Form W-9 or W-8BEN) are collected directly by the brand company that pays you, not by us, because the Platform does not hold or transfer money.
3. Where the data comes from
Mostly from you. We also obtain data from public sources: official licensing and certification registers, the US National Plan and Provider Enumeration System (NPPES), public disciplinary and exclusion databases, and your public professional profiles.
4. Who can see your data
-
Public: only your name, surname and field of expertise on your Platform profile.
-
Brand companies: when you apply for a product, the brand company sees your profile, credentials summary, conflicts declaration and rate. After you sign a Brand Agreement, it also receives what is needed to perform it.
-
Our staff: verification data, licence numbers and quality scores are accessible only to the verification and legal team on a need-to-know basis.
-
Service providers acting on our instructions under data processing agreements: hosting, e-signature, e-mail, video call and verification tools.
-
Authorities, courts and advisers where required by law or needed to establish, exercise or defend legal claims.
We never sell your personal data and never share it for cross-context behavioural advertising.
5. International transfers
Because you practise in the United States and brand companies may be located outside the EU, your data may be transferred outside the European Economic Area. We use the EU-US Data Privacy Framework where the recipient is certified, or the European Commission's Standard Contractual Clauses, together with any additional safeguards required.
6. How long we keep it
| Data | Retention |
|---|---|
| Applications that are not approved | Deleted 6 months after the decision |
| Account, professional and verification data | While your account is active; deleted within 30 days after you leave, except as below |
| Licence numbers and identity call outcome | Deleted within 30 days after you leave |
| Records proving your approvals, attestations, endorsements and withdrawals, and acceptance logs | Kept for as long as any asset using your name is live, and then for 6 years, to defend legal claims and respond to regulators |
| Data needed for an ongoing dispute or legal requirement | Until the matter is closed |
7. Security
Verification data and licence numbers are stored with restricted access, encryption in transit and at rest, and access logging. Quality scores and private reviews are never published.
8. Your rights
You can ask us to give you access to your data, correct it, delete it, restrict or object to its use, or give it to you in a portable format. Where we rely on legitimate interest, you can object at any time. Some data cannot be deleted while you have live endorsements or while we need it to defend legal claims; we will tell you if that applies.
To exercise your rights, write to matas@tripdash.net. We respond within one month. You can also complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, www.vdai.lrv.lt) or to the data protection authority where you live or work.
9. Additional information for US residents
If you live in a US state with a consumer privacy law, such as California, you also have the right to know what personal information we collect, to delete and correct it, and not to be discriminated against for using these rights. We do not sell or share personal information, and we use sensitive information (such as licence numbers) only to verify you. Requests can be sent to matas@tripdash.net.
10. Changes
We will tell you about material changes to this notice by e-mail or in your account before they take effect.