Legal · Privacy

Privacy choices & data requests

Exercise your rights under HIPAA, GDPR, or CCPA / CPRA.

Submit a request

Do not include PHI in the “Details” field. If your request involves PHI, we will contact you over a secure channel to verify your identity before disclosing anything.

Do Not Sell or Share My Personal Information

Under the California Consumer Privacy Act (CCPA / CPRA), California residents have the right to direct businesses not to sell or share their personal information for cross-context behavioral advertising.

NobleMind does not sell or share personal information for cross-context behavioral advertising, and we do not run third-party advertising or remarketing on this site. You may still record this preference for our records:

Record my Do Not Sell or Share preference

This link preselects “Do not sell or share (CCPA)” in the form above. We will email a confirmation to the address you submit.

Process timeline

When you submit a request, we record it immediately and reply with a request id. The deadline shown on your confirmation screen is the strictest applicable statutory deadline:

  • HIPAA access (PHI): 30 days from receipt (45 USC §164.524).
  • HIPAA amendment (PHI): 60 days from receipt (45 USC §164.526).
  • GDPR (any right): 30 days from receipt (extendable by 60 days for complex requests, with notice).
  • CCPA / CPRA (any right): 45 days from receipt (extendable by 45 days, with notice).

Identity verification: for any request that touches PHI or account data, we'll contact you on a secure channel before releasing or modifying anything. The verification clock is part of — not in addition to — the SLA above.

See the Data Retention Schedule for how long each data category is kept.