Privacy Policy

1. Information We Collect

Because this site assists with federal nuclear worker claims, the information we may collect includes sensitive categories. The categories of information we may collect include:

• Identifiers & contact information: Name, phone number, email address, and mailing address
• Employment information: Employment history, job titles, work locations, dates of employment, employer or contractor information, union records, security badges
• Facility information: Facility or worksite names, exposure location information, covered period details
• Health & diagnosis information: General condition category, diagnosis records, medical documentation related to claim review (submitted only through the secure Claimant Portal after authentication)
• DOL/EEOICPA claim information: Claim documents, federal decision letters, recommended decisions, final decisions, denial letters, development letters, White Card documentation
• Survivor & family information: Relationship documentation, marriage records, birth records, death certificates, estate documents
• Uploaded documents: Employment records, medical records, and claim correspondence uploaded through the secure Claimant Portal
• Portal activity: Login timestamps, case status views, document uploads, messages sent, task completions, and other portal interactions
• Billing records: Invoice information, payment history, payment plan details (card numbers are never stored by Nuclear Advocates — all payment processing is handled by our PCI-compliant payment processor, Stripe)
• Communications: Email correspondence, phone call notes, secure portal messages, and meeting records
• Technical information: IP address, browser type, device information, and usage data collected through analytics
• Cookies & analytics: Session cookies and analytics data used to understand site usage and improve user experience

2. How We Use Your Information

We use this information to:

• Review your inquiry and assess potential EEOICPA, survivor, denied claim, or White Card claim paths
• Provide claim-support and authorized-representation services you request
• Communicate with you about your inquiry or claim
• Organize documentation and assist with the services you request
• Process payments for services rendered under a written agreement
• Maintain secure portal accounts and audit trails
• Comply with applicable legal and regulatory requirements

We do not sell claimant information or consumer health data.

3. Sensitive Claim Information

Because claim-related documents may contain sensitive personal, medical, employment, or survivor information, users should only submit documents through the secure Claimant Portal after authentication. The public inquiry form is designed to collect only the minimum information reasonably necessary to identify the appropriate next step. We do not request Social Security numbers, government ID images, full medical charts, insurance cards, banking details, or complete DOL case files through the public contact form. If detailed documentation is required, you will be directed to upload it through the secure Claimant Portal.

4. Information Sharing & Service Providers

We do not sell, trade, or rent your personal information. We may share your information only with:

• The U.S. Department of Labor or applicable federal program, as necessary for claim processing when you authorize us to do so
• Medical providers and facilities for treatment documentation, when applicable and authorized
• Service providers who assist in our operations under confidentiality obligations, including:
  • Cloud hosting and database infrastructure (Base44 / Amazon Web Services)
  • Email delivery services (Resend)
  • Payment processing (Stripe — a PCI-DSS compliant processor)
• Legal authorities when required by law, court order, or subpoena

We do not share consumer health data with advertising networks, data brokers, or third-party analytics providers for targeted advertising purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/HTTPS) encryption for all data transmitted between your browser and our servers
• Server-side authorization checks on every data request — claimants can only access their own records
• Row-Level Security (RLS) policies enforced at the database level on all portal entities
• Role-based access control for staff and administrators
• Audit logging of significant portal actions
• Secure, authenticated document upload through the Claimant Portal
• Card data is never stored by Nuclear Advocates — all payment information is tokenized and processed by Stripe

No system can guarantee absolute security. If a security breach occurs that may compromise your personal information, we will take reasonable steps to notify affected individuals as required by applicable law.

6. Data Retention

We retain information only as long as reasonably necessary to provide services and comply with legal obligations:

• Unsuccessful inquiries: Information from inquiries that do not result in engagement may be retained for a reasonable period for record-keeping, then deleted or anonymized
• Active claimant files: Retained for the duration of the representation relationship and applicable claim proceedings
• Closed claimant files: Retained for a period consistent with applicable legal and professional record-keeping requirements
• Uploaded documents: Retained while the claim is active and for a reasonable period after closure, consistent with legal requirements
• Portal messages: Retained for the duration of the claim relationship
• Payment & invoice records: Retained consistent with financial record-keeping requirements
• System logs & audit trails: Retained for security and compliance purposes
• Expired invitation tokens: Automatically invalidated and no longer functional after expiration

Specific retention periods may vary based on legal requirements, the nature of the claim, and applicable professional standards. Final retention periods should be confirmed with legal counsel.

7. Nevada Consumer Health Data Privacy (NRS 603A)

Nuclear Advocates LLC is a Nevada-based business that collects health-related information from consumers, including information about medical diagnoses, occupational illnesses, and exposure history. We provide this disclosure in accordance with Nevada Revised Statutes Chapter 603A (Security and Privacy of Consumer Health Data), sections 603A.400 through 603A.550.

Categories of consumer health data collected: We may collect health and diagnosis information, condition categories, medical documentation, and exposure-related information provided voluntarily through our inquiry process or secure Claimant Portal.

Sources: Consumer health data is collected directly from the consumer (the worker, survivor, or authorized representative) through the public inquiry form and the authenticated Claimant Portal.

Purposes for collection, use, and sharing: We collect consumer health data solely for the purpose of reviewing EEOICPA eligibility, providing claim-support services, communicating with the consumer about their claim, and submitting claim-related information to the U.S. Department of Labor when authorized. We do not sell consumer health data. We do not use consumer health data for targeted advertising.

Categories of third parties receiving health data: Consumer health data may be shared with the U.S. Department of Labor for claim processing, with medical providers for treatment documentation when authorized, and with our service providers (cloud infrastructure, email delivery) under confidentiality obligations. We do not share consumer health data with data brokers or advertising networks.

Consumer rights under NRS 603A: Consumers have the right to:

• Access and obtain a copy of their consumer health data
• Request correction of inaccurate consumer health data
• Request deletion of their consumer health data (subject to legal retention requirements)
• Withdraw consent for the processing of consumer health data (subject to ongoing claim obligations)
• Appeal a refusal to act on a consumer rights request

How to exercise your rights: To submit a request to access, correct, delete, or withdraw consent for your consumer health data, contact us using the information in Section 11 below, or submit a privacy request through the secure portal privacy page. We will respond to verifiable requests within the timeframe required by applicable law.

Material policy changes: If we make material changes to this consumer health data privacy policy, we will update the "Last Updated" date at the top of this page and provide notice through the Claimant Portal or by other reasonable means.

Cross-site collection: We do not engage in cross-site collection of consumer health data for purposes of targeted advertising.

8. Cookies & Analytics

We use session cookies to maintain portal authentication and basic analytics to understand site usage. We do not use advertising pixels, third-party tracking pixels, or session recording tools on the Claimant Portal. We do not send diagnosis, medical condition, claimant name combined with health information, DOL claim numbers, Social Security information, uploaded-document names, case notes, or protected portal messages to any advertising or analytics system.

9. Your Rights

You have the right to:

• Access your personal information
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention requirements)
• Withdraw consent for processing of consumer health data (NRS 603A)
• Opt-out of marketing communications
• Appeal a refusal to act on a consumer rights request

To exercise any of these rights, contact us using the information in Section 11 below. We will verify your identity before processing requests involving personal information.

10. Security Incident Notification

In the event of a security breach that may compromise your personal or health information, we will take reasonable steps to notify affected individuals and relevant authorities as required by applicable law, including any obligations under the FTC Health Breach Notification Rule or Nevada law that may apply. The determination of whether specific regulations apply requires legal review and depends on the nature of the information involved and the circumstances of the incident.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or wish to submit a privacy request, please contact us at:

Nuclear Advocates LLC
Email: info@nuclearadvocatesllc.com
Phone: 702-903-5493
Address: 8635 West Sahara Ave #4222, Las Vegas, NV 89117

12. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last Updated" date at the top of this page. We encourage you to review this page periodically.