Skip to content

PRIVACY NOTICE

Last updated on October 23, 2026

This Privacy Notice describes the information collection, use, retention and sharing practices of Doctor Note, LLC and its affiliates (“Doctor Note”, “we”, “our”, or “us”) when you interact with us through our website, getmydoctornote.com (the “Website”), and when you interact with us offline, such as when you contact us via telephone or by other offline means (collectively, the “Services”).

As used in this Privacy Notice, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular person.

HIPAA AND HBNR

Although Doctor Note is not a covered entity or business associate, as defined under the Health Insurance Portability and Accountability Act of 1996, as amended, and implementing regulations (collectively, “HIPAA”), it may receive your protected health information from a health care provider that is a HIPAA covered entity, or its business associate, when you connect with a health care provider through the Services. For information on how your health care provider creates, receives, maintains, and transmits your protected health information as a HIPAA covered entity, please refer to your health care provider’s HIPAA Notice of Privacy Practices. This Privacy Notice does not apply to your protected health information.

Doctor Note is subject to the health breach notification rule adopted by the Federal Trade Commission (“FTC”) (the “HBNR”) as a vendor of personal health records (“PHR”) when it receives your PHR identifiable health information (“PHR Information”) from health care providers that you interact with through the Services. The HBNR requires Doctor Note to provide citizens or residents of the United States with notice of any breach of security of PHR Information.

PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG

We collect personal information as you engage with our Services, including when you:

  • Contact us. When you contact us, we collect, from you, your personal identifiers (name and email address or telephone number) and any additional information you choose to include in your message. We use this information to respond to your questions or inquiries and to troubleshoot where necessary.

  • Create an account. When you create an account, we collect, from you, your personal identifiers (name, email address, telephone number, state), sensitive identifiers (government-issued ID), health and medical information (medical records, medical conditions disclosed in response to the questionnaire), and your sensitive financial information (credit/debit card number, security code, expiration date). We use this information to create and manage your account, help facilitate your application, process your payment, and to connect you with a physician licensed in the state you selected. Note that we process payments through Stripe, our payment processor, and only get access to card type, and the last four digits of the card. Please see Stripe’s Privacy Policy for information regarding its collection and use of information.

  • Participate in our messaging programs. If you consent to participate in any of our messaging programs, we will send automated messages to the telephone number provided (personal identifier) for the purposes disclosed at the time you provided your consent. Consent is not a condition of purchase. Message and data rates may apply. Message frequency varies. You can opt out at any time by replying STOP to any text message and can reply HELP for help. For more information, please see our Terms and Conditions. We do not share text messaging originator opt-in data and consent information with any third parties except service providers that assist us in the delivery of text messages.

  • Interact with our AI chatbot. When you interact with our AI chatbot, we collect, from you, your internet or other electronic network activity information (location, IP address, device identifiers) and any additional information you choose to provide in the chat. We (through our chatbot provider) use this information to respond to your questions or inquiries and troubleshoot where necessary. We retain this information for as long as you maintain an account with us.

  • Subscribe to marketing emails. When you subscribe to our marketing emails, we collect, from you, your personal identifiers (email address). We use this information to send you news and updates about our products and services, as well as updates on sick-leave policies, workplace documentation, and online healthcare. You can unsubscribe at any time by clicking on the “unsubscribe” link included within each email we send to you. However, we will continue to send you service-related messages. We will share this information with our third-party email marketing provider to facilitate the sending of the emails. Our communications contain tracking technologies (i.e. pixels), to analyze whether a predefined action took place by a recipient, such as opening our communications and other engagement metrics such as timestamps, delivery status, whether an email was forwarded, clicks within an email, as well as sender and recipient addresses to better adapt and distribute our communications. When you opt-in to our marketing communications, you will be automatically opted-in to the use of these technologies. You can avoid downloading the pixel by rejecting the download of images in the email.

  • Interact with us on social media. When you interact with our social media pages on social networking websites, such as Facebook (Meta), X, LinkedIn, and Instagram, we collect basic engagement metrics and use these metrics to tailor content and improve our marketing efforts. Please note that we do not control the use or storage of the information that you have posted to any social networking websites. This information is collected and processed by the social networking websites for their own purposes, including marketing. For more information on how Facebook, X, LinkedIn, and Instagram use your personal information, please see Facebook’s Privacy Policy, X’s Privacy Policy, LinkedIn’s Privacy Policy, and Instagram’s Privacy Policy.

  • Interact with the Website. In addition to the personal information you provide directly to us, we also collect information from you automatically as you use our Website via cookies, pixels, web beacons, and similar tracking technologies.

    We use essential, performance, marketing, and analytics cookies and other technologies, like pixels, to automatically collect certain internet and other electronic network activity information when you interact with the Website. This includes things like Internet Protocol address (e.g. IP address), location, device type, browser type, browser version, the pages of our Website that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data. We use this information to: (i) track you within the Website; (ii) enhance user experience; (iii) conduct analytics to improve the Website; (iv) prevent fraudulent use of the Website; (v) diagnose and repair Website errors, and, in cases of abuse, track and mitigate the abuse; and (vi) deliver targeted advertisements.

    Third party marketing and analytics cookies and trackers may be considered sale or sharing (i.e., disclosure for targeted advertising purposes) under state data privacy laws. To opt out, please visit Your Privacy Choices. In general, you can also disable cookies by setting your browser to refuse cookies or indicate when a cookie is being sent. Please note, if you opt out of these targeted advertising cookies, your opt-out will be specific to the web browser, app, or device from which you accessed the opt-out. If you use multiple devices or web browsers, you will need to opt out of each browser or device that you use.

    Certain third-party marketing and analytics cookies to note on our Website include the following:

  • Google Analytics. We use Google Analytics to collect information on your use of the Website for its improvement. To collect this information, Google Analytics installs cookies on your browser or reads cookies that are already there (for more information about how Google collects and uses the information see here). Google Analytics also receives information about you from applications you have downloaded or services that you use that partner with Google. Google’s ability to use and share information collected by Google Analytics about your visits to our Website or to another application which partners with Google is restricted by the Google Analytics Terms of Use and Privacy Policy. To prevent your data from being used by Google Analytics, you can download the Google Analytics opt-out browser add-on, which can be accessed here. You can also adjust your Ad Settings or change settings in your Google My Activity if you are signed into your Google Account. To opt out, please visit Your Privacy Choices.

  • Google Tag Manager. Google Tag Manager is a tag management system to manage tags used for tracking and analytics on our Website. Tags are small code elements that, among other things, are used to manage traffic and visitor behavior and to test and optimize websites. We utilize Google Tag Manager to manage and organize all third-party tags on our Website and to control when those tags are triggered. You can view more information about Google Tag Manager’s privacy practices here.

  • DoubleClick. We utilize DoubleClick by Google to serve ads based on a user’s prior visits to our Website. Each visitor to our Website receives a different cookie, and the information collected by the cookie is used to generate conversion statistics and allows us to see the total number of individuals who clicked on our ads. DoubleClick enables Google and its partners to serve ads to you based on your visits to our Website in addition to other websites on the Internet. Please review Google’s Privacy Policy for additional information on how Google uses the information collected. To opt out of targeted advertising by Google and this sharing, you can go to Google’s Ad Settings, or you can install the DoubleClick opt-out browser plugin. To opt out, please visit Your Privacy Choices.

  • Meta Pixel. We use Meta Pixel to serve you ads on your social media based on your browsing behavior. Meta Pixel sets a cookie on your device that allows your behavior to be tracked after you have been redirected to the Website by clicking on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes and to provide targeted advertising. We do not have access to the information collected through the Meta Pixel. The information collected via Meta Pixel is stored and processed by Meta. Meta may link this information to your Facebook account and use it for its own promotional purposes in accordance with Facebook’s Data Usage Policy. You can opt out of displaying Facebook ads and sharing by visiting your Facebook Ad Settings. To opt out, please visit Your Privacy Choices.

  • X Pixel. We utilize X Pixel to serve ads based on a user’s prior visits to our Website. Each visitor to our Website receives a different cookie, and the information collected by the cookie is used to generate conversion statistics and allows us to see the total number of individuals who clicked on our ads. X Pixel enables X and its partners to serve ads to you based on your visits to our Website in addition to other websites on the Internet. For more information, please review X’s Privacy Policy. To opt out, please visit Your Privacy Choices.

  • Microsoft Clarity. We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our Website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement. To opt out, please visit Your Privacy Choices.

  • TikTok Pixel. We use TikTok Pixel, a tracking technology that collects and shares information about how users interact with our Website and third parties, including TikTok. TikTok uses the data collected through the TikTok Pixel to provide measurement services, serve targeted advertisements, and optimize ad delivery based on your browsing activity. Please review TikTok’s Privacy Policy for additional information regarding its collection and use of personal information. To opt out of targeted advertising by TikTok, please visit their Ads and your data page, which provides information on how you can adjust your personalization and data settings within your TikTok account.

We deidentify and/or aggregate the data we collect and use and share it, in deidentified and/or aggregated form, for benchmarking purposes, advertising, and internal analytics. We maintain and use this data in deidentified form. We will not attempt to reidentify the data unless it is necessary to determine whether our deidentification processes satisfy applicable data protection laws.

Doctor Note will also use the personal information we collect as described in this section to comply with the law, to efficiently maintain our business, and for other limited circumstances as described in HOW WE SHARE YOUR PERSONAL INFORMATION.

Doctor Note collects and uses personal information for the purpose of training large language models. However, such personal information is not used to train any third-party models; it is used exclusively to train Doctor Note’s proprietary model.

DATA RETENTION

Unless otherwise stated in this Privacy Notice, we retain your personal information (i) for as long as you maintain an account with us, (ii) until we receive a valid request to delete the information, (iii) until we no longer need the information to fulfill the purposes for which we collected it, or (iv) until the information is no longer needed for a service provider or contractor’s operational purpose(s).

We use the following criteria to determine whether it remains reasonably necessary to retain your personal information for such purposes or a service provider’s or contractor’s operational purpose(s): (i) whether there is a retention period required by statute or regulations; (ii) the existence of actual or threatened litigation for which we are required to preserve the information; and (iii) the statutes of limitations for potential legal claims. When we determine that it is no longer reasonably necessary to retain your personal information for one or more disclosed operational purposes based on the above criteria, we will delete or anonymize your personal information.

HOW WE SHARE YOUR PERSONAL INFORMATION

A. General Sharing

Doctor Note shares personal information in the following instances:

  • Within Doctor Note: We share your personal information within Doctor Note for the legitimate business purposes of efficiently and effectively providing our services, such as accounting and customer service support. Access to your personal information is limited to those on a need-to-know basis.

  • In the event of a corporate reorganization: In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, acquisition, sale, joint venture, assignment, consolidation, transfer, change of control, or other disposition of all or any portion of our business, assets or stock, including without limitation bankruptcy or liquidation, we would share personal information with third parties, including the buyer or target (and their agents and advisors) for the purpose of facilitating and completing the transaction.

  • For legal purposes: We share personal information where we are legally required to do so, such as in response to court orders, subpoenas, governmental/regulatory bodies, law enforcement or legal process, including for national security purposes. We may share your information with our legal advisors or auditors to establish, protect, or exercise our legal rights or as required to enforce our terms of service or other contracts or to defend against legal claims or demands. We also share this information with third parties as necessary to: detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights, property, or personal safety of any person; to comply with the requirements of any applicable law; or to comply with our legal obligations.

  • With your consent: Apart from the reasons identified above, we may request your permission to share your personal information for a specific purpose. We will notify you and request consent before you provide the personal information or before the personal information you have already provided is shared for such purpose. You may revoke your consent at any time by contacting us at [email protected].

All of the above categories exclude text messaging originator opt-in data and consent. We will not share this information with any third parties except for service providers that assist us in the delivery of text messages.

B. Sharing in the Last Twelve (12) Months

In the preceding twelve (12) months, Doctor Note has disclosed the following categories of personal information for a business purpose to the following categories of service providers or contractors:

  • We have disclosed your personal information to service providers that assist us in providing the App. These service providers assist us with the following: information technology (“IT”) support; website hosting; cloud storage; data analysis; customer relationship management; email delivery; text message delivery; LLM processing; marketing; shipping; auditing; payment processing; chatbot support; and similar services.

  • We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify and repair the Website and platform errors.

  • We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to update, improve, and maintain the Website.

C. Sale of Personal Information

In the preceding twelve (12) months, Doctor Note has shared your internet or other electronic network activity information collected via cookies and other tracking technologies with our data analytics providers and ad networks as described in PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG to provide targeted advertising. Such sharing may be deemed a sale or sharing (i.e., disclosure for targeted advertising purposes) under state data privacy laws. To opt out of the sale/sharing through cookies and targeted advertising, please visit Your Privacy Choices.

YOUR INFORMATION CHOICES

You have the following choices with respect to your personal information:

  • Correct or View Your Information. You may access your account to correct or view certain personal information you have provided to us, and which is associated with your account.

  • Opt Out of Google Analytics. To prevent your personal information from being used by Google Analytics, you can download the Google Analytics opt-out browser, which can be accessed here.

  • Opt Out of DoubleClick. To opt out of targeted advertising by Google and this sharing, you can go to Google’s Ad Settings, or you can install the DoubleClick opt-out browser plugin.

  • Opt Out of Meta Pixel. You can opt out of displaying Facebook ads and sharing by visiting your Facebook Ad Settings.

  • Opt Out of X Pixel. To prevent your data from being used by X, please visit X’s Help Center.

  • Opt Out of Microsoft Clarity. You can opt out of Microsoft Clarity telemetry by selecting Microsoft here.

  • Opt Out of TikTok Pixel. To opt out of targeted advertising by TikTok, please visit their Ads and your data page, which provides information on how you can adjust your personalization and data settings within your TikTok account.

  • Opt Out of Advertising Cookies. All session cookies are temporary and expire after you close your web browser. In addition to opting out of certain trackers in Your Privacy Choices, persistent cookies can be removed by following your web browser’s directions. To find out how to see what cookies have been set on your computer or device, and how to reject and delete the cookies, please visit: https://www.aboutcookies.org/. Please note that each web browser is different. To find information relating to your browser, visit the browser developer’s website and mobile application. If you reset your web browser to refuse all cookies or to indicate when a cookie is being sent, some features of our website may not function properly. If you choose to opt out, we will place an “opt-out cookie” on your device. The “opt-out cookie” is browser specific and device specific and only lasts until cookies are cleared from your browser or device. The opt-out cookie will not work for essential cookies. If the cookie is removed or deleted, if you upgrade your browser or if you visit us from a different computer, you will need to return and update your preferences. By clicking on the “Opt-Out” links below, you will be directed to the respective third-party website where your computer will be scanned to determine who maintains cookies on you. At that time, you can either choose to opt out of all targeted advertising or you can choose to opt out of targeted advertising by selecting individual companies who maintain a cookie on your machine. Our use of third-party marketing and analytics cookies is considered a sale/sharing under certain state privacy laws and is also considered to be what is known as interest-based advertising (IBA). To opt out of the sale/sharing through cookies and IBA across various platforms, please visit the Digital Advertising Alliance’s YourAdChoices program tools (Your Ad Choices) or visit one of the links below.

  • Network Advertising Initiative (NAI) Opt-Out: https://www.networkadvertising.org/managing/opt_out.asp

  • Opt Out of Email Tracking. You can disable this tracking by blocking automatic loading of images in your email.

  • Opt Out of Marketing Communications. You may opt out of receiving marketing emails from us by clicking the “unsubscribe” link provided at the bottom of each email we send. Please note that we will continue to send you notifications necessary to the services.

STATE PRIVACY RIGHTS

Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia are entitled to certain rights under their respective state’s comprehensive data privacy law. If you are a resident of one of these states, you are entitled to the following rights:

  • Right to Access/Know. Unless an exception applies, you have the right to (i) receive confirmation of whether we process your personal information, (ii) receive a list of categories of personal information we have collected, used, disclosed, and sold about you, (iii) receive a list of the categories of third parties to which we have disclosed your personal information, and (iv) access your personal information. If you are a resident of Connecticut, Delaware, Minnesota, or Oregon, you also have the right to receive a list of specific third parties to which Doctor Note has sold your personal information. If you are a resident of Connecticut, you also have the right to know whether we derived any inferences about you using your personal information or whether we process your personal information for purposes of profiling to make a decision that produces any legal or similarly significant effect on you.

  • Right to Deletion. You have the right to request the deletion of your personal information that we collect or maintain, subject to certain exceptions. For example, if we are required by law to retain the information that you are asking to be deleted, we would not be able to delete the information until we are legally permitted to delete it.

  • Right to Correct. You have the right to correct inaccurate personal information that we collect or maintain.

  • Right to Opt Out. You have the right to opt out of the processing of your personal information for the purposes of: (i) targeted advertising; (ii) profiling in furtherance of automated decisions that produce legal or similarly significant effects; and (iii) the sale or sharing of your personal information to third parties. We do not have actual knowledge that we sell, share, profile, or process for purposes of targeted advertising the personal information of individuals under the age of 18.

  • Right to Data Portability. You have the right to request that we transfer your personal information to another organization or give it to you. If you exercise this right, we will provide a copy of your personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another organization.

  • Right to Non-Discrimination / Non-Retaliation. You have the right not to receive discriminatory treatment (or in California: not to be retaliated against) in the processing of your information if you choose to exercise your privacy rights. Such discriminatory treatment may include but is not limited to (i) the denial of goods or services, (ii) being charged a different price or rate, or (iii) receiving a different level of quality in goods or services.

  • Right to Limit Use of Sensitive Personal Information (California residents only). If you are a California resident, you also have the right to limit the use of your sensitive personal information when such use goes beyond that which is necessary for providing the Websites or certain other permissible purposes like fraud, customer service or quality control. Sensitive information includes Social Security number, driver’s license number, biometric information, precise geolocation, and racial and ethnic origin. However, Doctor Note does not process personal information in a manner that gives rise to this right.

  • Right to Appeal. You have the right to appeal our refusal to take action on your request to exercise your other rights. In order to request an appeal to our refusal please email us at [email protected], subject line: “Appeal My Consumer Request.” We will review the appeal and notify you of our response. If we still refuse to take action on your request, you have the right to file a complaint with the applicable state regulator, as follows:

    • For Colorado residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Colorado Attorney General here.

    • For Connecticut residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Connecticut Attorney General here.

    • For Delaware residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Delaware Attorney General here.

    • For Indiana residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Indiana Attorney General here.

    • For Iowa residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Iowa Attorney General here.

    • For Kentucky residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Kentucky Attorney General here.

    • For Maryland residents: If you are concerned with our response as a result of your appeal, you may submit a complaint to the Maryland Attorney General here.

    • For Minnesota residents: If you are concerned with our response as a result of your appeal, you may submit a complaint to the Minnesota Attorney General here.

    • For Montana residents: If you are concerned with our response as a result of your appeal, you may submit a complaint to the Montana Attorney General here.

    • For Nebraska Residents: If you are concerned with our response as a result of your appeal, you may submit a complaint to the Nebraska Attorney General here.

    • For New Hampshire Residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the New Hampshire Attorney General here.

    • For New Jersey residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the New Jersey Attorney General here.

    • For Oregon residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Oregon Attorney General here.

    • For Rhode Island Residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Rhode Island Attorney General here.

    • For Tennessee residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Tennessee Attorney General here.

    • For Texas residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Texas Attorney General here.

    • For Virginia Residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Virginia Attorney General here.

Exercising Your Privacy Rights

If you are a resident of one of the states identified above and wish to exercise your privacy rights, you may submit a request by emailing us at [email protected], by contacting us at (415) 727-9221, or by completing our webform. To opt out of the sale or sharing of your data through cookies or the processing of your personal information for purposes of targeted advertising, please visit Your Privacy Choices. If we detect an opt-out preference signal (such as the Global Privacy Control signal) communicated from your (or your authorized agent’s) browser or device, we will treat the opt-out preference signal as a valid request to opt out of the sale/sharing of your personal information as it pertains to that browser or device (including any associated profile information). If known, we will also apply the opt-out request to any offline sale or sharing of personal information.

When submitting a request to know/access, correct, or delete your personal information, you must provide us with sufficient information that allows us to reasonably verify you are the person about whom we collected the personal information and describe your request with sufficient detail to allow us to properly evaluate and respond to it. In doing so, we will take steps to verify your request by matching information provided by you with the information we have in our records. If we are not able to verify your identity for know/access, correction, or deletion requests with the information provided, we may ask you to provide additional information.

Only you, or a person that you authorize to act on your behalf may make a request related to your personal information. If you are an authorized agent making a request on behalf of another individual, you must provide us with signed documentation that you are authorized to act on behalf of that individual.

NEVADA RESIDENTS

If you are a consumer in the State of Nevada, you may request to opt-out of the current or future sale of your personal information. We do not currently sell any of your personal information under Nevada law, nor do we plan to do so in the future. However, you can submit a request to opt-out of future sales by contacting us at [email protected] regarding the sale of such information. Please include “Opt-Out Request Under Nevada Law” in the subject line of your message.

DO NOT TRACK

We do not respond to Do Not Track requests. Do Not Track is a preference you can set in your web browser to inform websites and mobile applications that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.

INFORMATION SECURITY

We implement appropriate technical and organizational security measures, such as access controls and encryption, to protect the personal information that we collect and maintain from unauthorized access, destruction, use, modification, or disclosure. However, no security measure or modality of data transmission is 100% secure, and we are unable to guarantee the absolute security of the personal information we have collected from you.

CHILDREN’S PRIVACY

The Services are not intended for anyone under the age of eighteen (18). We do not knowingly collect the personal information of anyone under the age of eighteen (18). If we learn that we have collected or received personal information from individuals under the age of eighteen (18), we will delete the personal information. If you believe we have personal information on individuals under the age of eighteen (18), please contact us at the contact information provided below.

CHANGES TO THIS PRIVACY NOTICE

We may change this Privacy Notice from time to time. We will post the changes to this page and will indicate the date the changes go into effect. We encourage you to review our Privacy Notice to stay informed. If we make changes that materially affect your privacy rights, we will notify you by prominent posting on the Website and/or via email, and either obtain your opt-in consent (if required) or provide an opportunity to withdraw your consent.

CONTACT US

If you have any questions about this Privacy Notice or need to access this Privacy Notice in an alternative format due to having a disability, please contact us by email at [email protected] (and use “Privacy Inquiry” in the subject line).