MyDirectives® Privacy Policy

The information you provide to MyDirectives, Inc. (MyDirectives) is protected by several data privacy frameworks described in more detail below. MyDirectives is committed to protecting the privacy and security of the information entrusted to us.

This Privacy Policy describes how we collect, use, disclose, store, transfer, and protect personal information when you use MyDirectives websites, applications, products, and services covered by this Privacy Policy (collectively, the MyDirectives Services).

This includes MyDirectives.care and the other MyDirectives Services that allow you to create, upload, securely store, manage, and share advance directives and other advance care planning (ACP) documents.

What This Privacy Policy Means for You

To provide the MyDirectives Services, we collect information you choose to provide, including information about you, your healthcare decisions, and people you identify as part of your ACP process.

We use your information to provide and improve the MyDirectives Services, help you manage and share your ACP documents and information, communicate with you, and help make your ACP information available to authorized healthcare professionals when it's needed for your care.

We do not sell your personal health information.

We use administrative, physical, and technical safeguards designed to protect your information and maintain the security and reliability of the systems that store it and make it available.

You can review and update certain information, as well as manage your ACP documents, in your MyDirectives.care account. You may also request to close your account and delete your information, subject to applicable legal, regulatory, contractual, security, and record-retention requirements.

The sections below explain in more detail what information we collect, where we collect it, how we use and disclose it, how we protect it, and the choices and rights you may have regarding your information.

Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through the MyDirectives Services covered by this Policy.

Depending on how you access MyDirectives.care, additional privacy notices or terms may apply. For example, if MyDirectives.care is made available to you through a healthcare provider, health plan, health information exchange, employer, government program, or other organization, that organization may have its own privacy practices and policies.

MyDirective Services may also provide access to products or services offered by third-party partners. Those products and services may be subject to the partner's own privacy policy and terms, as described below.

Your Privacy Rights

Where you live and access the MyDirectives Services determines the applicable law and your rights regarding your personal information.

These rights may include the right to request:

  • -Access to certain personal information we maintain about you and third parties.
  • -Correction of inaccurate personal information.
  • -Deletion of certain personal information.
  • -Restriction of certain processing.
  • -A copy or transfer of certain personal information.
  • -Withdrawal of consent where processing is based on consent.
  • -An objection to certain uses of your information.
  • -An opt-out of certain communications or data practices.

To exercise an applicable privacy right, contact us using the information provided in the Contact Us section below. We may need to verify your identity before completing your request. We will not discriminate against you for exercising privacy rights provided by applicable law.

HIPAA and Health Information

MyDirectives provides technology and services within the healthcare environment. Depending on the circumstances in which information is collected or maintained, certain information processed by MyDirectives may be subject to the United States Federal Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations.

When MyDirectives processes protected health information on behalf of a healthcare organization or other HIPAA-regulated entity, we handle that information in accordance with applicable HIPAA requirements and our contractual obligations.

In some circumstances, health-related information you provide directly to MyDirectives may not be subject to HIPAA but may be protected by other federal or state privacy laws. We apply privacy and security safeguards to sensitive health information as appropriate to the information and MyDirectives Services involved.

U.S. State Privacy Rights

Residents of certain U.S. states may have additional rights regarding their personal information or consumer health information under applicable state privacy laws.

Depending on the law that applies, these rights may include access, correction, deletion, portability, or the ability to opt out of certain uses or disclosures of personal information.

Where required, additional state-specific privacy notices or information about exercising these rights may be provided through MyDirectives.

International Users

If you access MyDirectives from outside the United States, your information may be transferred to, processed, or stored in the United States or other jurisdictions where MyDirectives or our service providers operate.

Depending on where you live, applicable data protection laws may provide additional rights regarding your personal information.

Individuals whose personal information is subject to the European Union or United Kingdom General Data Protection Regulation (GDPR) may have rights including access, correction, deletion, restriction, portability, objection to certain processing, and withdrawal of consent where applicable.

You may also have the right to lodge a complaint with an applicable data protection authority. In compliance with our obligations under the GDPR, we identify the “lawful bases” on which we rely to process your personal information. These lawful bases are set out in the GDPR, which allows companies to process personal data only when the processing is permitted by the specific lawful bases established by law, the full description of which can be found here.

Information We Collect and Where We Collect It

The information we collect depends on how you use MyDirectives.care and the MyDirectives Services you choose to use.

Information You Provide to Us

When you create or manage a MyDirectives.care account and set up your profile, we may collect information such as your:

  • -Full name
  • -Email address
  • -Telephone number
  • -Mailing address
  • -Date of birth
  • -Social security or other identification number
  • -Account credentials
  • -Other information necessary to identify you, maintain your account, communicate with you, or provide the MyDirectives Services

Advance Care Planning Information

When you create a MyDirectives Advance Directive, you may provide information about your:

  • -Healthcare goals and priorities
  • -Healthcare decisions and treatment preferences
  • -Healthcare agent and alternate healthcare agents
  • -Choices regarding future care and treatment
  • -Other information you choose to include in your advance directive such as your allergies and medications, or your wishes regarding organ donation, autopsies, and other post-death services

You may also upload existing advance directives, psychiatric or mental health advance directives, portable medical orders (POLST) and do-not-resuscitate orders, or other ACP documents for secure storage, management, and sharing through MyDirectives.care.

Because these documents may contain sensitive health and personal information, we treat their privacy and security as an important responsibility.

Information About Other People

When you identify a healthcare agent, alternate healthcare agent, loved one, caregiver, or other contact, you may provide personal information about that person, such as their name and contact information.

Please provide information about another person only when you have the right to do so.

Information You Provide When Contacting Us

If you contact MyDirectives for support, submit a form, participate in a survey, or otherwise communicate with us, we may collect your contact information and the information you choose to provide in your communication. We typically keep a record of that correspondence.

Please do not include sensitive medical or health information in a general support or contact form unless it is necessary for us to respond to your request.

Information Collected Automatically

When you use MyDirectives Services, we may automatically collect certain technical information, including:

  • -Internet Protocol (IP) address
  • -Browser type and Internet service provider (ISP)
  • -Device manufacturer, model, and identifier
  • -Operating system name and version
  • -Pages or features you access
  • -Referring and exit pages
  • -Dates and times of access
  • -Physical location of your device
  • -Information about how you interact with the MyDirectives Services
  • -Other technical information necessary to operate, secure, and improve the MyDirectives Services

We may collect this information through server log files, cookies, beacons, tags, and similar technologies.

Cookies and Similar Technologies

MyDirectives may use cookies and similar technologies to operate our websites and the MyDirectives Services, remember user preferences, understand how the MyDirectives Services are used, maintain security, and improve the user experience.

Some cookies and technologies are necessary for the MyDirectives Services to function. Others may be used for analytics or other purposes consistent with applicable law and your choices.

You may be able to manage certain cookies through your browser settings or other privacy controls we provide. Disabling certain cookies may affect the functionality of the MyDirectives Services.

How We Protect Your Information

MyDirectives was built specifically for healthcare and the privacy and security responsibilities that come with managing sensitive health information.

We use administrative, physical, and technical safeguards designed to protect personal and health information against unauthorized access, use, disclosure, alteration, or destruction. Because we hold Special Categories of Personal Data under the GDPR, we may implement additional measures such as data segregation, pseudonymization, or data access restrictions.

Our security program includes recognized healthcare security standards and independent third-party assessments, including HITRUST R2 Certification and SOC 2 Type II. We also maintain technology and practices designed to support applicable HIPAA privacy and security requirements.

We use encryption and other security technologies designed to protect sensitive information during transmission and storage, as appropriate.

No method of transmitting or storing information is completely secure, and we cannot guarantee absolute security. If you believe your account or information may have been compromised, please contact MyDirectives Support promptly.

How We Use Your Information

We may use the information we collect to:

  • -Create and maintain your MyDirectives.care account, including verifying that you are at least 18 years old.
  • -Verify your identity and protect your account through multi-factor user authentication and other security features.
  • -Provide the MyDirectives Services you request.
  • -Help you create your MyDirectives Advance Directive or upload, securely store, and manage your ACP documents.
  • -Help authorized healthcare professionals and healthcare organizations find and access your ACP information when needed for your care and as permitted by applicable law.
  • -Enable you to share ACP information and documents with your healthcare agent, loved ones, caregivers, healthcare providers, and others you choose.
  • -Provide optional services that you request.
  • -Respond to questions and provide customer support.
  • -Communicate with you about your MyDirectives.care account and the MyDirectives Services, including sending important account, security, service, and administrative communications.
  • -Send educational, product, or marketing communications where permitted by law and consistent with your communication preferences. You may unsubscribe from marketing communications using the instructions included in those communications. You may continue to receive important transactional, administrative, security, or service-related communications even if you opt out of marketing communications.
  • -Operate, maintain, analyze, and improve MyDirectives.care and the MyDirectives Services.
  • -Develop new products, services, and features.
  • -Detect, investigate, and prevent fraud, misuse, security incidents, or other potentially harmful or unlawful activity.
  • -Comply with applicable laws and regulations.
  • -Establish, exercise, or defend legal rights.

We may use information for other purposes with your direction or consent or as otherwise permitted by applicable law.

De-Identified and Aggregated Information

We may create de-identified or aggregated information from information collected through the MyDirectives Services. Aggregated personal information, aggregated protected health information and/or aggregated additional information does not personally identify you or any other user of the MyDirectives Services

We may use de-identified or aggregated information to operate and improve the MyDirectives Services, understand ACP trends and use, conduct research and analysis, develop products and services, and for other lawful purposes.

How We Share Information

MyDirectives does not sell your personally identifiable information or your personal health information. MyDirectives may disclose personal information in the circumstances described below.

At Your Direction

We may share information when you ask or direct us to do so, such as when you share your advance directive or other ACP documents with your healthcare agent, loved ones, caregivers, healthcare providers, or others.

For Your Healthcare

MyDirectives is designed to help make ACP information available when and where it's needed.

We may make advance directives and other ACP information available to authorized healthcare professionals, healthcare organizations, and other authorized participants in healthcare information networks as permitted by applicable law. We may make your information available directly to healthcare professionals by connecting their electronic health record platform or their electronic patient care record platform to our document registry. We may also make your information available indirectly through state, regional, or national health data exchanges.

This helps healthcare professionals find and access ACP information when care decisions are being made, including when you may be unable to communicate your healthcare decisions yourself.

Not every healthcare organization or system is connected to MyDirectives’ national ACP document registry in the same way, and MyDirectives does not guarantee that your information will be available to every healthcare professional or organization.

Service Providers

We work with service providers that help us operate, secure, maintain, and support MyDirectives. These providers may perform services such as hosting, data storage and exchange, security, communications, customer support, analytics, identity verification, or other technology and operational services.

We conduct a thorough information security assessment before we engage any service provider that may have access to personal information. Service providers may access or process personal information only as necessary to perform authorized services and subject to applicable contractual and legal requirements.

Optional Partner Services

MyDirectives may offer access to optional products or services provided by third-party partners. These may include services that complement advance care planning, document completion, document management, or other MyDirectives Services.

If you choose to use an optional partner service, we may provide the partner with information necessary to fulfill your request, or you may provide information directly to the partner.

MyDirectives does not provide your personal health information to a partner merely because that organization has a business relationship with MyDirectives.

We will provide information about the applicable partner or service when appropriate. A partner's collection, use, storage, or disclosure of information may also be governed by its own privacy policy and terms. We encourage you to review those policies before using a partner service.

Legal, Safety, and Security Purposes

We may disclose information when we believe disclosure is required or permitted by applicable law or is reasonably necessary to:

  • -Comply with a legal process or governmental request.
  • -Protect the rights, property, or safety of MyDirectives, our users, or others.
  • -Detect, investigate, or prevent fraud, security incidents, or other unlawful activity.
  • -Enforce our agreements and policies.
  • -Respond to an emergency when disclosure is permitted by applicable law.

If we are compelled to disclose information to a third party under such circumstances, we will notify you unless doing so would violate the law or court order. We also reserve the right to cooperate with law enforcement authorities in investigating and prosecuting MyDirectives.care users that violate our rules or engage in behavior that is harmful to other users or illegal.

Business Transactions

If MyDirectives is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, information may be transferred as part of that transaction, subject to applicable legal requirements and protections.

With Your Consent

We may disclose information for other purposes when you authorize or consent to the disclosure. For example, with your consent, we may post your testimonial along with your name. If you want your testimonial removed, please contact us.

Remote Online Notarization

MyDirectives provides access to Remote Online Notarization (RON) through a third-party partner for individuals who need or choose to have their advance directive notarized.

If you choose to use RON, information may be provided to or collected by the RON partner as necessary to provide the notarization service, verify your identity, conduct the notarization, maintain legally required records, and comply with applicable laws and regulations.

Depending on the requirements of the notarization service and applicable law, this information may include identity information, government-issued identification, information used for identity verification, and records associated with the notarization session.

The RON partner's collection, use, storage, and disclosure of information may also be governed by its own privacy policy and applicable notarization laws.

MyDirectives will provide information about the RON service and any applicable fees before you choose to use the service.

How Long We Retain Information

We retain personal information for as long as reasonably necessary to provide the MyDirectives Services and fulfill the purposes described in this Privacy Policy, including while your MyDirectives.care account remains active.

We may retain certain information for longer periods when necessary to comply with legal, regulatory, contractual, security, operational, or record-retention requirements; resolve disputes; prevent fraud or abuse; protect our legal rights; or enforce our agreements.

Retention periods may vary depending on the type of information and the purpose for which it is maintained.

Managing Your Information and Documents

You can review and update certain personal information associated with your MyDirectives.care account and manage your ACP documents through MyDirectives.

Your healthcare decisions can change. You may update your MyDirectives Advance Directive or other information as permitted by the MyDirectives Services and may upload newer versions of existing documents.

You may also request to close your MyDirectives.care account. Certain information may continue to be retained as required or permitted by applicable law, regulation, contractual obligations, security requirements, or legitimate operational purposes.

External Links and Third-Party Services

MyDirectives.care may contain links to websites, applications, products, or services operated by third parties.

MyDirectives is not responsible for the privacy, security, or other practices of third parties that operate independently from us. We encourage you to review their privacy policies and terms before providing personal information or using their services.

Children's Privacy

MyDirectives.care is intended for individuals who meet the applicable age requirements for creating and managing an advance directive and using the MyDirectives Services.

We do not knowingly collect personal information from children or minors in violation of applicable law. If we learn that personal information has been collected from a child in circumstances where collection is not permitted, we will take appropriate steps consistent with applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in MyDirectives.care or the MyDirectives Services, privacy practices, technology, legal requirements, or other factors.

When we make changes, we will update the Version Date at the bottom of this Privacy Policy.

If we make material changes, we may provide additional notice, such as through MyDirectives.care or by email, as appropriate or required by applicable law.

We encourage you to review this Privacy Policy periodically to stay informed about our privacy practices.

Jurisdictional Issues

MyDirectives.care and the MyDirectives Services are controlled by us from the United States. Accordingly, except as explained elsewhere with respect to European Union and Great Britain citizens and residents, this Privacy Policy, and our collection, use and disclosure of your personal information, protected health information, and additional information, is governed by U.S. law, and not by the laws of any country, territory, or jurisdiction other than the United States. We do not represent or warrant that MyDirectives.care, or any functionality or feature of the MyDirectives Services, are appropriate or available for use in any particular jurisdiction. Those who choose to access or use MyDirectives.care do so on their own initiative and at their own risk, and are responsible for complying with all local laws, rules, and regulations. By using MyDirectives.care and the MyDirectives Services, and by submitting any personal information, protected health information, or additional information, users from outside the United States acknowledge that MyDirectives.care and the MyDirectives Services are subject to U.S. law and consent to the transfer of personal information, protected health information, and additional information to the United States, which may provide a different level of data security than in their country of residence.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, or would like to exercise an applicable privacy right, please contact us:

MyDirectives, Inc.
740 E. Campbell Rd., Suite 825
Richardson, Texas 75081
United States

Email: info@mydirectives.com
Phone: 888-884-3324

For general questions or assistance using MyDirectives.care, you may also contact our Support Team at support@mydirectives.com.

Version 2026.08.25.01