Privacy Policy
Last updated: August 26, 2026
This Privacy Policy describes how DocLien collects, uses, discloses, and protects information in connection with its medical coordination services. This document is provided for general informational purposes and is subject to review and finalization by qualified counsel.
Overview
DocLien ("DocLien," "we," "us," or "our") provides medical coordination services to personal injury law firms and their clients. In connection with those services, DocLien may receive, maintain, use, and transmit protected health information ("PHI") as defined under the Health Insurance Portability and Accountability Act and its implementing regulations (collectively, "HIPAA"). This Privacy Policy describes our information practices with respect to the DocLien website (the "Site") and our coordination services (the "Services"). This policy is provided for general informational purposes and is subject to review and finalization by qualified counsel.
HIPAA-aware notice
DocLien handles PHI in accordance with HIPAA. Before requesting or obtaining any medical records, DocLien obtains a signed authorization directly from the patient that meets the requirements of 45 C.F.R. § 164.508. PHI is transmitted and stored using secure, access-controlled systems. Authorization records, coordination logs, and disclosure records are maintained in an audit-ready manner. Where DocLien acts as a business associate to a covered entity, DocLien will enter into a business associate agreement consistent with 45 C.F.R. Part 164, Subpart E.
Information we collect
We collect several categories of information: (1) Referral information submitted by referring law firms, including attorney and firm contact details, client identifying and contact information, incident details, and care needs; (2) Information provided directly by patients, including signed authorizations, intake responses, and availability for scheduling; (3) Medical records, billing records, and related documentation disclosed by treating providers pursuant to a patient's signed authorization; and (4) Limited technical information collected automatically when you visit the Site, such as IP address, browser type, and usage data. We do not collect sensitive information beyond what is necessary to provide the Services.
How we use information
We use the information we collect to: coordinate medical care and schedule treatment with appropriate providers; communicate with patients, treating providers, and referring law firms; retrieve, organize, and deliver authorized medical records and billing documentation; prepare and administer Letters of Protection and related lien documentation; provide case updates to referring counsel; verify identity and prevent fraud; maintain records required for compliance; and respond to inquiries. We do not use PHI for marketing purposes, and we do not sell personal or health information.
How we share information
We share information only as necessary to provide the Services and as authorized by the patient. This includes disclosure to treating providers, referring law firms, and other parties involved in coordinating care and administering Letters of Protection. We may also disclose information to our service providers and business associates who perform functions on our behalf under appropriate agreements, and when required by law, court order, or to protect the rights, property, or safety of DocLien, our clients, or others. We do not sell personal or health information to any third party.
Business associates and subcontractors
Where applicable, DocLien enters into business associate agreements with vendors and subcontractors that create, receive, maintain, or transmit PHI on our behalf. These agreements obligate such parties to safeguard PHI in accordance with HIPAA and to use it only as necessary to perform the services for which they were engaged.
Data security
We maintain administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of personal and health information. These safeguards include access controls, authentication, encryption in transit and at rest where appropriate, audit logging, and workforce training. Access to PHI is restricted to authorized personnel who require it to perform coordination activities. No system can be guaranteed perfectly secure, but we take reasonable measures designed to protect information consistent with applicable law.
Data retention
We retain information for as long as necessary to provide the Services, comply with legal and contractual obligations, resolve disputes, and enforce our agreements. Authorization and coordination records are retained in accordance with applicable legal requirements. When information is no longer needed, it is destroyed or de-identified in accordance with our retention policies and applicable law.
Your rights
Patients may have rights with respect to their PHI under HIPAA and applicable state law, which may include the right to access, inspect, and copy their records; request amendments or corrections; receive an accounting of certain disclosures; request restrictions on uses and disclosures; request confidential communications; and withdraw authorization. Referring firms and providers may contact us to update or correct contact information. To exercise any of these rights, please contact us as described below. We will respond in accordance with applicable law.
Children's privacy
The Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. Where a referral involves a minor, information is collected through the referring law firm and the patient's authorized representative in accordance with applicable law.
External links
The Site may contain links to third-party websites that are not operated by DocLien. We are not responsible for the privacy practices or content of those websites. We encourage users to review the privacy policies of any third-party sites they visit.
Cookies and analytics
We may use cookies and similar technologies to operate the Site, analyze usage, and improve our services. You may control cookies through your browser settings, but disabling cookies may affect Site functionality. We do not use cookies to collect PHI.
Changes to this policy
We may update this Privacy Policy from time to time. We will indicate the date of the most recent revision at the top of this page. Material changes will be noted on the Site. Continued use of the Site or Services after changes become effective constitutes acceptance of the updated policy.
Contact us
Questions about this Privacy Policy or our information practices may be directed to DocLien at hello@doclien.com, or through the Contact page on this Site. We will make every reasonable effort to respond to inquiries in accordance with applicable law.