Legal

Privacy Policy

Last updated: October 16, 2026

This policy describes how Orchestra handles information collected through this website and through text messages we send on behalf of participating healthcare providers.

Information we collect

When you submit our contact form, we receive the details you provide — your name, email address, and message — which are delivered to us by email using Amazon Web Services SES.

Reporting a concern

The reporting form does not require a name, email address, or sign-in. The text you submit is sent by AWS SES to Tuuli Hietamies for confidential assessment and follow-up. The website does not store a copy in its database or log the report text. Hosting and email providers process the submission and may retain technical metadata; system administrators may have access. Include only what is necessary and avoid identifying yourself if you wish to remain anonymous. Our Code of Conduct requires investigation and compliance records to be retained with restricted access for at least six years.

Cookies and visitor tracking

This website does not set cookies or use visitor analytics, advertising pixels, or session recording. Our hosting provider may process technical request information, such as IP addresses and requested URLs, to deliver and secure the site.

How we use your information

We use the information you share to respond to your inquiry, evaluate potential partnerships, and follow up on your request. We do not use it for any purpose unrelated to your request.

No sale of personal data

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

Text messaging (SMS)

When you consent to receive text messages through a participating healthcare provider, we receive your mobile phone number and your consent record so we can send care messages on that provider's behalf, such as appointment reminders, care team follow-up, and notices of new secure messages. Health information related to your care is also governed by your provider's Notice of Privacy Practices.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, except the messaging service providers and carriers needed to deliver the messages you requested. You can opt out at any time by replying STOP.

Changes to this policy

We may update this policy from time to time. The date above reflects the most recent revision, and material changes will be posted on this page.

Contact us

For privacy questions or requests — including access to or deletion of information you have shared with us — email hello@orchestraonco.com.