Skip to content

Privacy Policy

Effective date: September 28, 2026

The Echo Company (“The Echo Company,” “we,” “us,” or “our”) is a veteran-owned business. We know the information you share with us is personal, and some of it is about your health and your service. This Privacy Policy explains what we collect, how we use it, who we share it with, and the choices you have.

This policy applies to our website, our forms, and our phone, email, and text communications (together, the “Services”). It does not apply to the U.S. Department of Veterans Affairs (VA) or any other government website. The VA has its own privacy policy at va.gov.

1. Information we collect

Information you give us directly

  • Contact details, such as your name, email, phone number, and mailing address.
  • Military service details, such as branch, dates of service, discharge status, and deployment history.
  • Claim-related details, such as your current VA rating, conditions you are claiming, and prior decisions.
  • Health information, such as medical records, diagnoses, treatment history, and symptoms you choose to share.
  • Documents you upload or send us, such as a DD-214, VA decision letters, or private medical records.
  • Payment information, which is handled by our payment processor. We do not store full card numbers.
  • Anything else you include in messages, forms, calls, or scheduling requests.

Information from other sources

  • Records you authorize a medical provider, agency, or other third party to send to us.
  • Information from our service providers, such as scheduling, email, and CRM tools.
  • Information from social media platforms when you interact with our pages or ads.

Information collected automatically

  • Device and usage data, such as IP address, browser type, pages viewed, and time on site.
  • Cookies, pixels, and similar tools that help us run the site, understand traffic, and measure ads. See Section 5.

We will never ask for your VA.gov, ID.me, or Login.gov password. Please do not send it to us.

2. How we use your information

  • To respond to your questions and schedule consultations.
  • To provide the services you request under your agreement with us.
  • To send you updates, reminders, and information you ask for.
  • To process payments and keep business records.
  • To improve our website and services.
  • To send marketing messages, where you have agreed or where the law allows. You can opt out anytime.
  • To protect our business, prevent fraud, and meet legal obligations.

3. How we handle health and other sensitive information

Health information, service records, and government ID numbers are sensitive. We use them only to provide the services you ask for, or as required by law.

  • We do not sell sensitive information.
  • We do not use health or claim details to target or personalize advertising.
  • We limit access to team members and service providers who need it to do their job.
  • We ask for your consent before collecting or sharing health information where state law requires it, including under the Washington My Health My Data Act and Nevada’s consumer health data law.

The Echo Company is not a health care provider or health plan, so HIPAA may not apply to us. We still protect your health information with care and handle it as described in this policy.

4. How we share your information

We do not sell your personal information. We share it only as follows:

  • Service providers who help us run our business, such as website hosting, secure file storage, email, scheduling, CRM, and payment processing. They may use your information only to provide services to us.
  • People you direct us to share with, such as a medical provider, an accredited representative, or a family member you authorize in writing.
  • Legal and safety reasons, such as responding to a subpoena, court order, or lawful government request, or protecting the rights and safety of others.
  • Business transfers, such as a merger, sale, or reorganization. The new owner must honor this policy for information we already hold.

5. Cookies, analytics, and advertising

We use cookies and similar tools to keep the site working, understand how visitors use it, and measure our ads on platforms like Google and Meta.

We do not place advertising pixels on pages where you upload records or enter health information. You can control cookies through your browser settings. We honor Global Privacy Control (GPC) signals as an opt-out of targeted advertising where required by law.

6. Calls, texts, and emails

If you give us your phone number, you agree that we may call or text you about your inquiry and our services. Message and data rates may apply. Message frequency varies.

Marketing texts are sent only with your consent. Consent is never a condition of buying our services. Reply STOP to opt out or HELP for help. You can unsubscribe from marketing emails using the link in any email.

Calls may be recorded for quality and training. We will tell you at the start of a recorded call.

7. How long we keep your information

We keep personal information only as long as needed for the purposes in this policy, including legal, tax, and recordkeeping requirements. When we no longer need it, we securely delete it. You may ask us to delete your records sooner, subject to legal limits.

8. How we protect your information

We use administrative, technical, and physical safeguards. These include encrypted file storage, access controls, and secure document upload. No system is 100% secure, so please use our secure upload link instead of regular email for medical records or ID documents.

9. Your privacy rights

Depending on where you live, you may have the right to:

  • Know what personal information we have about you and how we use it.
  • Get a copy of your information.
  • Correct information that is wrong.
  • Delete your information.
  • Opt out of targeted advertising and the sale or sharing of personal information.
  • Limit how we use sensitive personal information.
  • Withdraw consent you gave us.

California residents: Under the California Consumer Privacy Act (CCPA), you have the rights listed above. We do not sell or share personal information for cross-context behavioral advertising without the notice and choices the law requires. We will not treat you differently for using your rights.

To use any of these rights, call us at (858) 886-8669. We will verify your identity before responding. You may use an authorized agent. If we deny your request, you may appeal by replying to our decision.

10. Children

Our Services are for adults. We do not knowingly collect information from anyone under 18. If you think a minor sent us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new effective date. If the changes are significant, we will let you know by email or a notice on our site.

12. Contact us

The Echo Company

Phone: (858) 886-8669