Privacy Policy

1. Who we are

SHOTUNE Medical Consulting Group, referred to in this policy as “SHOTUNE,” “we,” “us,” or “our,” provides MedTech regulatory, clinical, quality, leadership, and strategic advisory services.

This policy applies to information collected through shotunemedconsulting.com, including the Confidential Strategy Discussion form and the Portfolio Cliff™ Risk Exposure Scorecard.

Privacy questions and requests may be sent to info@shotunemedconsulting.com.

2. Information we collect

Information you provide through an inquiry

When you request a confidential strategy discussion, we may collect:

• Your name and business email address
• Your company and role or title
• The service area closest to your situation
• The decision, pressure point, timeline, or regulator-facing issue you describe
• Your consent to process and store the submitted information

Information you provide through the Scorecard

When you complete the Portfolio Cliff™ Risk Exposure Scorecard, we may collect:

• Your first name, work email, company, and job title
• The event driving the review and the timing of the next milestone
• Your answers to the Scorecard questions
• Your calculated overall and category scores
• Your result band, primary exposure category, and highest exposure signals
• Your email-consent selection
• Source, offer, form-version, landing-page, and campaign-tracking information when available

Technical information

Our website and hosting systems may automatically record technical information needed to deliver, secure, and troubleshoot the website. This may include an IP address, browser or device type, request time, referring page, pages requested, and security or error-log information.

Information provided during a professional engagement

If you become a client, additional business, technical, regulatory, clinical, quality, research, or project information may be handled under the applicable engagement agreement. That information may be subject to additional confidentiality, security, retention, or data-processing terms.

3. How we collect information

We collect information:

• Directly from you when you submit a form, send an email, reply to a result message, or communicate with SHOTUNE
• Automatically through normal website, hosting, security, and server operations
• From authorised team members or service providers supporting the website and customer-response process
• From referral or business contacts when they are permitted to provide the information

4. How and why we use information

We may use personal information to:

• Respond to inquiries and determine whether SHOTUNE may be a suitable fit
• Deliver a requested Scorecard result and related result summary
• Review the business context, milestone, exposure signals, and requested service area
• Send communications you requested or agreed to receive
• Maintain inquiry, consent, result, and relationship records
• Operate, secure, diagnose, and improve the website and forms
• Protect SHOTUNE, website visitors, clients, and service providers from misuse or security threats
• Comply with applicable contractual, legal, accounting, regulatory, or recordkeeping obligations

Legal grounds where applicable

Depending on your location and the reason for processing, we may rely on:

• Your consent
• Steps requested by you before entering a contract
• Performance of a contract
• SHOTUNE’s legitimate interests in responding to business inquiries, administering relationships, securing the website, and operating its services
• Compliance with a legal obligation

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that lawfully occurred before the withdrawal.

5. Scorecard calculations and provisional results

The Portfolio Cliff™ Risk Exposure Scorecard uses predefined rules and calculations to turn submitted answers into an overall score, category scores, a result band, a primary exposure category, and selected exposure signals.

The Scorecard is an executive self-assessment. It does not make a formal regulatory, clinical, quality, legal, audit, medical, compliance, investment, or diligence decision. The result does not replace review by qualified professionals or accountable company leadership.

SHOTUNE does not use the Scorecard to make a solely automated decision that produces a legal or similarly significant effect concerning the person completing it.

6. Email communications and consent

Scorecard participants are asked to consent to receiving their result and related SHOTUNE insights by email. You may unsubscribe from optional email communications using the unsubscribe method provided in the message.

People submitting a Confidential Strategy Discussion request consent to SHOTUNE processing and storing their information so the team can respond. Inquiry information may be stored in SHOTUNE’s contact-management system for response, relationship administration, and follow-up connected to the inquiry.

Submitting an inquiry does not by itself authorise unrelated promotional email where separate consent is required.

7. How information is stored and shared

SHOTUNE does not sell or rent personal information.

Information may be available to authorised SHOTUNE personnel and service providers that need it to operate the website, deliver results, manage communications, maintain records, or support the requested response.

Current website operations may involve:

• WordPress as the website platform
• Gravity Forms for website inquiries and Scorecard submissions
• Mailchimp for contact records, consent-based email delivery, result-related communications, and inquiry follow-up
• SiteGround for website hosting, caching, infrastructure, and related technical services
• Authorised website, technical, administrative, or professional advisers acting under appropriate confidentiality or service obligations

We may also disclose information when reasonably necessary to comply with law, respond to a valid legal request, protect rights or safety, investigate misuse, enforce an agreement, or support a business transaction subject to appropriate safeguards.

8. Sensitive information and protected health information

The public website forms are not designed to receive patient-identifiable information, medical records, or protected health information. Do not submit that information through the Contact form or Scorecard.

If a professional engagement requires SHOTUNE to receive or process sensitive health information, the parties must first establish the appropriate scope, security controls, confidentiality terms, and any legally required business associate agreement or data-processing agreement.

9. International data processing

SHOTUNE and its service providers may process or store information in the United States or other countries where they operate.

Where applicable law requires protections for an international transfer, we use or rely on appropriate contractual, organisational, or provider safeguards.

10. Data retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including responding to the request, delivering results, administering a business relationship, maintaining consent or suppression records, protecting the website, resolving disputes, and meeting contractual, legal, accounting, or regulatory obligations.

Retention periods may differ based on the type of record and the relationship involved. When information is no longer reasonably needed, we may delete, anonymise, or securely archive it, subject to applicable legal and operational requirements.

Unsubscribing from email communications may require us to retain a limited suppression record so we can respect the request.

11. Data security

SHOTUNE uses reasonable administrative, organisational, and technical measures intended to protect information from unauthorised access, loss, alteration, misuse, or disclosure.

No website, email system, storage platform, or internet transmission can be guaranteed completely secure. Please use care when deciding what information to submit through a public website.

12. Your privacy rights

Depending on your location and applicable law, you may have the right to:

• Request access to personal information held about you
• Request correction of inaccurate or incomplete information
• Request deletion of information in appropriate circumstances
• Request restriction of processing
• Object to certain processing
• Request a portable copy of information you provided where applicable
• Withdraw consent where processing is based on consent
• Unsubscribe from optional marketing or insight emails
• Complain to an applicable data-protection or supervisory authority

To make a request, email info@shotunemedconsulting.com. We may need to verify your identity before completing the request.

13. Cookies, external services, and third-party links

The website may use cookies or similar technical functions that are necessary for security, form operation, session handling, preferences, or site performance. Details are provided in the Cookie Policy.

The website may link to third-party websites, including social platforms. SHOTUNE does not control those websites and is not responsible for their privacy practices. Review the policy of the third party before providing information there.

14. Children’s privacy

SHOTUNE’s website and professional services are intended for business and professional audiences. They are not directed to children, and we do not knowingly collect personal information from children through the website.

15. Changes to this policy

We may update this Privacy Policy when the website, forms, service providers, business practices, or legal requirements change. The effective date at the top of the page identifies the current version.

16. Contact SHOTUNE

Questions, requests, or concerns about this policy may be sent to: