Privacy Policy

This site is a static marketing page. It sets no cookies and runs no analytics or advertising trackers. There are no forms on the site itself. If you book a call with us, the link opens our scheduling provider, where you enter your name and email address so we can hold the appointment.

Our hosting provider records standard server logs, including IP addresses and request metadata, for security and reliability purposes. We do not use those logs to identify or profile individual visitors.

If you email us, we receive your address and whatever you include in your message, and use it only to reply. We do not add you to a mailing list, and we do not sell or share it.

The information we hold about you exists only if you chose to contact us: the email you sent, or the name and email address you entered when booking a call.

You can ask us at any time to tell you what we hold about you, to correct it, or to delete it. Write to us at the privacy address below and we will respond within thirty days. There is no cost, and we will not ask you to create an account to make the request.

Two limits are worth stating plainly. Our hosting provider keeps standard server logs, including IP addresses, under its own retention schedule, and we cannot selectively remove individual entries from them. And if we have already exchanged email with you, deleting our copy does not delete yours.

If you are a patient asking about your own medical records, we cannot help you directly and we are not permitted to. Those records belong to the EMS agency that treated you, and your request should go to them. Arno Labs handles that data only on the agency's behalf, under a written agreement with them.

Separately from this website, Arno Labs processes patient care report data on behalf of EMS agencies. In that work the agency is the covered entity and Arno Labs acts as a business associate. We do not process agency data without a business associate agreement in place with the agency, and with every infrastructure and model provider in the path.

Every patient care report is treated as protected health information. Analysis runs in a HIPAA-eligible cloud environment, and patient data is never used to train models. Retention, access, and deletion are governed by the agreement with each agency rather than by this policy.