Privacy Policy
Date Last Updated: October 22, 2026
Who Is theNNT?
theNNT (“theNNT,” “we,” and “us”) publishes evidence-based reviews of therapies, diagnostic tests and risk assessments at www.thennt.com (the “Website”). Our reviews are based on published clinical research.
Scope of Privacy Policy
theNNT takes the private nature of the personal information we collect seriously, and we are committed to protecting it. Therefore, we have in place controls and procedures designed to manage such information responsibly and in accordance with applicable data protection and privacy laws (collectively, “Privacy Laws”).
This Privacy Policy applies to theNNT’s practices where we function as a data controller (or an equivalent role as described under the various Privacy Laws in our regions of operation) and describes our processing practices as it relates to Personal Information collected via: (a) our Website, whether from visitors browsing the site or from those who log in to save favorite reviews; and (b) other direct interactions with individuals, such as messages sent through our Contact Us form.
The information that theNNT receives through the interactions described above does not include Protected Health Information, as that term is defined by the Health Insurance Portability and Accountability Act (“HIPAA”).
This Privacy Policy describes the categories of Personal Information that we collect and the sources of such information, how we use that Personal Information, to whom Personal Information is disclosed and for what purposes, and the rights you have with respect to your Personal Information.
By visiting our Website or otherwise providing Personal Information to us, you consent to our collection, use, disclosure and retention of your Personal Information as described herein.
Logging In
The Website can be read without an account. Visitors who want to keep a list of favorite reviews across devices can log in with an MDCalc account. MDCalc Ltd., Inc. operates that account service, and the MDCalc Privacy Policy governs the account and the information you provide to create it. When you log in, the account service shares with theNNT your account identifier, email address, name and profile picture. We use them only to show who is logged in and to keep your favorites.
Personal Information
“Personal Information” means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal Information includes information referred to as “personal data,” “personally identifiable information” and such similar references as codified in applicable Privacy Laws. Note that your legal rights with respect to Personal Information are determined by the Privacy Law of the jurisdiction in which you reside.
Our Collection and Use of Personal Information
theNNT collects Personal Information in two ways: (1) from visitors to our Website (“Website Visitors”), including those who log in (“Users”); and (2) through other ordinary business interactions with individuals, such as messages sent through our Contact Us form or by email (collectively, “Direct Interaction”). The table below sets forth the categories of Personal Information theNNT has collected in the preceding twelve (12) months, the categories of the sources of such information and the purpose or use for which we collect Personal Information. theNNT does not collect Sensitive Personal Information.
| Category of Personal Information Collected | Examples of Data Elements Collected | Categories of Sources of Personal Information | Purpose for Collection |
|---|---|---|---|
| Personal Identifiers | Name Email address MDCalc account identifier IP address | Users and Website Visitors The MDCalc account service, when you log in Direct Interaction Cookies |
|
| Electronic Network Activity | IP address, city Device type, browser information, operating system, screen resolution and preferred language Interactions with the Website (e.g., pages viewed, time spent per visit, links clicked) The reviews a User saves as favorites | Users and Website Visitors Cookies Browsers and operating systems |
|
| Information You Send Us | The contents of messages, and any files attached to them, sent through our Contact Us form or by email | Direct Interaction |
|
Data Collected Through Cookies
When you visit our Website, our goal is to make the experience simple and effective. To that end, we use text files, known as cookies, to track information about your use of the Website. A cookie is a text file that a website stores on a website visitor’s computer to enable recognition of that visitor’s computer each time they return. Some cookies are strictly necessary: they keep you logged in and remember your choices, including your cookie preferences. Others are analytics cookies, which collect information about your equipment, browsing actions and patterns. This may include information about your connectivity, IP address and browser information, general location data (country location), and the pages you view on the Website. This information helps us improve the Website, estimate our audience size and usage patterns, and recognize when you return to our Website. Where the law allows, we set analytics cookies by default; where the law requires your consent, we set them only if you accept them. You can turn analytics cookies off at any time through the Cookie Preferences link at the bottom of every page.
theNNT uses Google Analytics 4 (“GA4”) to understand how Website Visitors use the Website. GA4 runs by default where the law allows and only with your consent where it does not, and you can turn it off at any time through Cookie Preferences. If you want to learn more about how Google uses the information transmitted from theNNT’s Website, please review Google’s Privacy Terms. If you want to prevent your Personal Information from being used by Google Analytics, visit the Google Analytics Opt-out Browser Add-on Download page.
Our Website honors Global Privacy Control (“GPC”). If your browser sends a GPC signal, we treat it as a request to opt out of the sale or sharing of your Personal Information.
theNNT’s Disclosure of Personal Information
theNNT does not sell Personal Information, and we do not display advertising. There are certain circumstances in which we may disclose Personal Information to trusted entities in order to improve, protect and support our business. For instance, theNNT may disclose Personal Information to: (i) service providers (e.g., hosting providers, customer support providers, website analytics providers, business advisors, auditors, etc.); and (ii) any potential purchasers or investors in the business. theNNT requires the service providers to whom we disclose Personal Information to process Personal Information in accordance with our contracts with such service providers. We impose on our service providers with whom we share Personal Information privacy and security obligations consistent with this Privacy Policy and applicable laws. In addition, theNNT may disclose Personal Information if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; or (c) protect the rights, property, or safety of our Users, Website Visitors, or the public.
How We Protect Personal Information
The security of your Personal Information is important to us. We maintain industry standard physical, technical and administrative safeguards designed to protect your Personal Information from unauthorized access, use, disclosure, and destruction. We update and assess our security controls on a regular basis. We train our personnel about the importance of confidentiality, security and consumer privacy and limit our personnel’s access to Personal Information to those who need such in order to perform their job. Electronic Personal Information, including the Personal Information of Website Visitors and Users, is stored on restricted database servers housed with a third party cloud provider in the United States.
How Long Do We Retain Personal Information?
theNNT retains a User’s favorites for as long as the User keeps them, and deletes them on request through our Data Rights Request Form. theNNT retains messages sent through our Contact Us form, and Personal Information about Website Visitors, as long as necessary to fulfill the purpose(s) for which it was collected, including legal, accounting, and reporting requirements or as otherwise set forth under applicable law. theNNT retains the information collected through GA4 for a period of fourteen (14) months.
A Note About Children’s Personal Information
The Website is not marketed to, and is not intended for use by, children. Therefore, theNNT does not knowingly collect any Personal Information from children under the age of 17. If we become aware that we have collected Personal Information about a child under the age of 17, we will delete it.
Your Rights to Access
We will comply with all reasonable requests from you to correct, amend, or delete the Personal Information we have about you, and will provide you access to your Personal Information. There may be limits to the amount of information we can practically provide. For example, we may limit an individual’s access to Personal Information where the burden or expense of providing access would be disproportionate to the risks to your privacy or where doing so would violate others’ rights. You may submit your request through our Data Rights Request Form.
If You Are a California Resident
theNNT’s Collection and Use of Personal Information
If you are a California resident and you are interested in the Personal Information that theNNT collects, the sources of that information and the purposes for which we use such Personal Information, please review the section above entitled: Our Collection and Use of Personal Information.
theNNT’s Sale and Sharing of Personal Information
theNNT does not sell Personal Information. theNNT uses GA4 as described above, and certain privacy laws may consider this activity “sharing.” You can opt out of GA4 at any time through Cookie Preferences or by turning on Global Privacy Control in your browser. theNNT has no actual knowledge of sharing the Personal Information of consumers under 16 years of age.
Personal Information Disclosed to Service Providers, Contractors and Third Parties for a Business Purpose
The CCPA defines a “third party” as a person other than the business with whom the California Consumer interacts. The CCPA defines a “service provider” as a person that receives from or on behalf of a business consumers’ Personal Information for a business purpose and processes the Personal Information for such business purpose. The CCPA defines a “contractor” as a person to whom a business makes available a consumer’s Personal Information for a business purpose. A contractor differs from a service provider in that a contractor does not “process” the Personal Information.
theNNT requires the service providers to whom we disclose Personal Information to process Personal Information strictly in accordance with our contracts with such service providers. We ensure that any service provider and contractor with whom we share Personal Information is subject to privacy and security obligations consistent with this Privacy Policy and applicable laws. In addition, theNNT may disclose Personal Information if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; or (c) protect the rights, property, or safety of our Users, Website Visitors, or the public.
The table below reflects: (i) the categories of Personal Information collected that theNNT has disclosed to a service provider, contractor or third party for a business purpose in the preceding twelve (12) months, and (ii) the specific business or commercial purpose for which the Personal Information was disclosed.
| Category of Personal Information Collected | Was the Personal Information Disclosed to a Service Provider, Contractor or Third Party | Categories of Third Parties to Whom Disclosed | Purpose for Which Disclosed |
|---|---|---|---|
| Personal Identifiers | Y | Service Providers |
|
| Electronic Network Activity Information | Y | Service Providers |
|
| Information You Send Us | Y | Service Providers |
|
The California Consumer Privacy Act of 2018 and its implementing regulations, each as amended (collectively, the “CCPA”), is a California law that gives California residents certain rights as it relates to the Personal Information that a business (including theNNT) collects about them. Those rights include the following:
Right to Know Before Collection of Personal Information: At or before the point your Personal Information is collected, theNNT must inform you of the following:
- The categories of Personal Information to be collected and the purposes for which they are collected or used;
- The categories of Sensitive Personal Information to be collected and the purposes for which the information is collected and used;
- Whether Personal Information and/or Sensitive Personal Information is sold or shared;
- The length of time theNNT intends to retain each category of Personal Information (including Sensitive Personal Information) collected or, if that is not possible, the criteria used to determine that period.
Note that theNNT does not knowingly collect, sell or share the Personal Information of individuals under the age of 17.
Right to Know What Personal Information Is Collected and Right to Access: As a California resident, you have the right to request from theNNT disclosure of the following information, up to twice in a twelve-month period:
- the categories and specific pieces of Personal Information that theNNT has collected about you;
- the categories of sources from which that Personal Information is collected;
- the business or commercial purpose for collecting or sharing that Personal Information; and
- the categories of third parties to whom theNNT discloses Personal Information.
Before providing such information to you, theNNT must verify your identity. We will utilize the information that you submit with your request in order to do so and to locate any information that we maintain about you and for no other purpose.
Right to Know About Personal Information Disclosed: As a California resident, you have the right to know the categories of Personal Information disclosed about you for a business purpose and the categories of persons to whom each category of Personal Information was disclosed. Before providing such information to you, theNNT must verify your identity.
Right to Request Deletion: As a California resident, you have the right at any time to request that theNNT delete any Personal Information that we collected directly from you. theNNT collects Personal Information directly from consumers as described in the section titled “Our Collection and Use of Personal Information” above. The obligation to delete Personal Information upon request is not absolute. The CCPA allows businesses to retain Personal Information for certain purposes even when a deletion request is received. In addition, before deleting Personal Information in response to your request, theNNT must verify your identity.
Right to Correct Inaccurate Personal Information: As a California resident, you have the right to request at any time the correction of inaccurate Personal Information that theNNT maintains about you. Before correcting Personal Information in response to your request, theNNT must verify your identity.
Right to Opt Out of Sale or Sharing of Personal Information: As a California resident, you have the right to opt out of theNNT’s sharing of your Personal Information with third parties at any time. Please review the Right to Opt Out of Sale or Sharing below to learn more.
Right to Limit Use and Disclosure of Sensitive Personal Information: California residents have the right at any time to direct businesses to limit their use of the resident’s Sensitive Personal Information to that necessary to provide the services requested and to those purposes otherwise allowed by California law. theNNT does not collect Sensitive Personal Information.
Right Not to be Retaliated Against: California law prohibits theNNT from retaliating against you based on your exercise of the privacy rights described above. For example, theNNT cannot deny you services or provide a different level or quality of services to you as a result of your exercise of such rights.
Method to Submit Requests
Requests to Delete, Correct and to Know
If you wish to exercise your right to delete, correct and/or know (as described above), you may do so by calling us at the following toll-free telephone number (866) 715-1606 or alternatively, via our Website at https://my.datasubject.com/169pv2TNruD8x190V/23896.
We will confirm receipt of your request within 10 business days. If you make a request to know, a request to delete, or a request to correct, theNNT will then take steps to verify your identity. theNNT may occasionally request additional information to assist in facilitating verification. Any Personal Information received by theNNT with respect to a request to delete, to correct and/or to know will be held strictly in confidence, used only for the purposes of processing your request and in accordance with applicable data privacy laws and regulations. Within 45 calendar days of receiving your request, we will comply with your request unless there is a legal basis for denying your request. In the event we need additional time to respond, we will inform you of that within the initial 45-day period.
Right to Opt Out of Sale or Sharing of Your Personal Information
If you wish to opt out of the sharing of your Personal Information, use the Cookie Preferences link at the bottom of any page and turn off analytics cookies, or turn on Global Privacy Control in your browser.
How an Authorized Agent Can Make a Request for You:
California law allows you to designate an agent to submit a request to delete, correct or to know. The agent may call us at the following toll-free telephone number: (866) 715-1606. We will require that agent to provide proof that you gave the agent signed permission to submit the request on your behalf. We may also require the agent to verify their own identity and confirm that you provided the agent permission to submit the request. If you have provided the agent with power of attorney pursuant to Probate Code section 4121 to 4130, evidence of that power of attorney is sufficient.
If You Live in the European Economic Area, the United Kingdom or Switzerland (Collectively, “Europe”)
theNNT complies with the EU General Data Protection Regulation 2016/679, the UK Data Protection Act of 2018 and the Swiss Data Protection Act of 2020 (collectively, “GDPR”) with respect to the protection of individuals with regard to the processing of Personal Information and the free movement of such Personal Information.
Under the GDPR, you have the following rights:
- Right of Access: You have the right to ask us for copies of your Personal Information. The law provides for some exemptions, which means you may not always receive all the Personal Information we process.
- Right to Rectification: You have the right to ask us to rectify Personal Information you think is inaccurate. You also have the right to ask us to complete Personal Information you think is incomplete.
- Right to Restrict Processing: You have the right to ask us to restrict the processing of your Personal Information in certain circumstances.
- Right to Withdraw Consent: You have the right to revoke your consent to our processing of your Personal Information at any time, through the Cookie Preferences link at the bottom of any page or by contacting us via the Data Rights Request Form. Withdrawing consent will not affect the lawfulness of the processing performed based on your consent before its withdrawal.
- Right to Erasure: You have the right to ask us to erase your Personal Information in certain circumstances.
- Right to Data Portability: This only applies to Personal Information you have given to us and that is held electronically. You have the right to ask that we transfer this information from theNNT to another organization or give it to you.
If you wish to exercise your rights above, you may contact us by completing this form: Data Rights Request Form. You are not required to pay any charge for exercising your rights. We have one month to respond to you. You may also contact the relevant supervisory authority to lodge a complaint related to our handling of your Personal Information. However, we invite you to give us a chance to resolve the situation directly with you. Your privacy is important to us, and we will do our best to address any concerns.
Though we make our Website available globally, our computer systems are based in the United States, which means Personal Information we collect will be processed by us in the U.S. where data protection and privacy regulations may not offer the same level of protection as in other parts of the world, such as in Europe. For transfers to the United States, we will either rely on a derogation applicable to the specific situation (e.g., consent or if the transfer is necessary to perform our contract with you) or implement the Standard Contractual Clauses adopted by the European Commission and/or an International Data Transfer Addendum with respect to transfers outside of the United Kingdom.
The legal bases for processing your Personal Information include one or more of the following depending on the circumstances:
- To comply with contractual obligations or to take steps at your request before entering into a contract. When you log in to keep a list of favorites, we process your Personal Information in order to provide that feature to you.
- As a result of your consent. In certain cases, you consent to the processing of your Personal Information by us (e.g., when you accept analytics cookies or submit the Contact Us form). When consent is the basis on which we process your Personal Information, we will inform you if we need to carry out further processing for purposes other than those for which you provided us with your consent and obtain your further consent. You may withdraw your consent at any time. For further information on the right of withdrawal, please contact us via the Data Rights Request Form.
- Within the scope of a legitimate interest. On occasion, when we have a legitimate interest to process your Personal Information, we may not need your consent to do so; however, we must inform you that we do this. Examples of a legitimate interest include ensuring IT security and the operation of theNNT’s technology, and the prevention and investigation of criminal acts.
- On the basis of theNNT’s legal obligations or in the public interest. In some cases the processing of your Personal Information will be necessary for us to fulfill legal or public interest obligations.
Links to Third Party Websites
theNNT’s Website contains links to third party websites (e.g., MDCalc, YouTube, and the published studies our reviews cite). These third-party websites publish their own privacy statements, which disclose the manner in which those third parties process Personal Information. theNNT recommends that you review those third party privacy statements when visiting any linked websites. theNNT is not responsible for the content of linked websites or the processing of Personal Information by the companies that own and manage such websites.
Changes to This Privacy Policy
As we evolve, we may update this Privacy Policy to align with changes in the Website, our business and/or Privacy Laws. The Date Last Updated at the beginning of this Privacy Policy will reflect the last date on which the Privacy Policy was updated. We recommend that you periodically review the Privacy Policy to stay informed of changes. We will ask for your consent to such changes if required by Privacy Law. In other cases, please note that your continued use of the Website after any change means that you agree to the terms of the updated Privacy Policy. The same is true with respect to Personal Information that we collect via email, mail and other communication methods. If you disagree with the Privacy Policy, please reach out to us via the Data Rights Request Form and stop using the Website.
How to Contact Us
If you have any questions about this Privacy Policy, please reach out to us via the Data Rights Request Form.