Privacy Policy

This Policy applies to RTM Services, LLC d/b/a Tandem and covers information we collect from or about you when you use the Site, interact with our communications, attend our events, or otherwise engage with us. It does not govern our handling of protected health information ("PHI") received and processed as a business associate under the Health Insurance Portability and Accountability Act (HIPAA) on behalf of our healthcare practice clients. PHI we handle under a Business Associate Agreement (BAA) is governed by that BAA and applicable law, not by this Policy. Please do not submit patient PHI through the Site.

Table of contents

Information We Collect

We collect the following categories of information:

  1. Identifiers and contact information. Name, business email, phone number, postal address, employer/practice, role/title, and account credentials.
  2. Commercial and professional information. Service inquiries, proposals, contracts, transaction history, and preferences.
  3. Communications and user content. Messages you send us (including by email, web forms, and text/SMS/MMS), call recordings (where permitted by law), event registrations, survey responses, and support requests.
  4. Internet or device activity. IP address, device identifiers, browser type, pages viewed, links clicked, referring/exit pages, and timestamps. We use cookies and similar technologies for analytics, performance, and security. See Cookies & Similar Technologies below.
  5. Geolocation data. Approximate location derived from your IP address.
  6. Inferences. Inferences drawn from the above to improve and tailor our services and communications.

We do not intentionally collect sensitive personal information via the Site and we do not want PHI submitted through the Site.

How We Use Information

We use information to:

  • Provide, operate, and improve the Site and our services;
  • Respond to inquiries and provide customer support;
  • Send transactional, operational, and marketing communications (including email and SMS/MMS) consistent with your choices;
  • Administer events, surveys, promotions, and programs;
  • Perform analytics, research, and product/service development;
  • Detect, prevent, and protect against security incidents, fraud, and misuse;
  • Comply with law, enforce our Terms of Service, and protect our rights and the rights of others.

Where required, we rely on your consent (e.g., for marketing texts/emails or certain cookies). Otherwise, we process information as necessary for our legitimate interests in operating and improving our business, to perform a contract with you, and/or to comply with legal obligations.

SMS/MMS Text Messaging Program

We may offer one or more SMS/MMS text messaging programs (e.g., “Tandem Alerts”) using registered 10DLC numbers for U.S. recipients. The following disclosures apply whenever you provide your mobile number and opt in to receive texts from us:

Opt‑In Methods. You may opt in by (i) checking a consent box on a form that clearly states you agree to receive text messages from Tandem; (ii) texting a keyword we provide; or (iii) otherwise affirmatively consenting in writing. By opting in, you authorize Tandem (RTM Services, LLC) to send you recurring text messages at the mobile number you provide, using automated technology where applicable.

Message Types & Frequency. Messages may include account, service, event, or marketing updates. Message frequency varies.

Cost. We do not charge for the service, but message and data rates may apply from your carrier.

How to Opt Out. You can opt out at any time by replying STOP to any message. You may receive one final message confirming your opt-out. You can also opt out by contacting us (see Contact Us below).

Help. For help, reply HELP or contact us (see Contact Us below).

Consent Not a Condition. Your consent to receive marketing texts is not a condition of purchase or of receiving our services.

Privacy. We value your privacy. We do not sell or share your mobile information with third parties for their own marketing purposes. We disclose mobile numbers and related data only as described in this Policy (e.g., to service providers who support our messaging program under contract). Text messaging originator opt‑in data and consent will not be shared with any third parties other than message service providers to enable delivery of our messages.

Carriers. Wireless carriers are not liable for delayed or undelivered messages.

Eligibility. U.S. residents, 18 years or older (or the age of majority in your state) may enroll. By opting in, you confirm you are the subscriber or usual user of the mobile number provided and you agree to notify us if you change or deactivate your number.

Program Changes/Termination. We may modify or terminate the messaging program at any time. We will provide notice as required by law.

For complete terms governing your use of the Site, see our Terms of Service.

Cookies & Similar Technologies

We and our service providers use cookies, log files, pixels, device identifiers, and related technologies to operate the Site, remember your preferences, analyze usage, and improve performance. You can manage cookies through your browser settings; however, disabling some cookies may limit certain features. We currently do not respond to Do Not Track signals.

How We Disclose Information

We may disclose information as follows:

  • Service Providers. With vendors who perform services for us (e.g., hosting, analytics, communications, messaging, security, and customer support) under written contracts that restrict use of information to providing services to us.
  • Business Partners. With referral or integration partners in connection with joint marketing or service offerings, when you choose to engage with them.
  • Legal, Safety, and Rights. To comply with law, legal process, or lawful requests; to enforce our agreements; or to protect the rights, property, or safety of Tandem, our users, clients, or the public.
  • Business Transfers. In connection with an actual or potential merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality safeguards.
  • With Your Consent. As disclosed at the time of collection or with your direction.

We do not sell your personal information and we do not share it for cross‑context behavioral advertising as those terms are defined by U.S. state privacy laws. If this changes, we will update this Policy and provide required notices and choices.

Mobile Data Disclosure Reminder. We do not sell, rent, or share your mobile number or text‑messaging consent with third parties for their marketing or promotional purposes. Text messaging originator opt‑in data and consent will not be shared with any third parties except to enable message delivery and compliance.

Data Retention

We retain information for as long as needed for the purposes described in this Policy, to comply with our legal obligations, resolve disputes, and enforce agreements. We generally retain mobile numbers for our messaging program until you opt out or your account is inactive for an extended period, subject to legal requirements.

Data Security

We use administrative, technical, and physical safeguards designed to protect information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Children’s Privacy

The Site and our messaging programs are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Your Privacy Choices & Rights

Marketing choices. You may unsubscribe from marketing emails using the link in the message. For texts, reply STOP as described above.

California, Colorado, Connecticut, Utah, Virginia (and similar state laws). Depending on your state of residence, you may have the right to request access to, correction of, or deletion of your personal information, and to opt out of certain processing. You may exercise these rights by contacting us using the methods below. We will verify your request as required by law and will not discriminate against you for exercising your rights.

EEA/UK residents. If you are located in the EEA or UK, you may have additional rights under the GDPR, including the right to object to processing or request portability. Our legal bases for processing are listed above. You may contact us or your local data protection authority.

International Users

We are based in the United States and process information in the U.S. If you access the Site from outside the U.S., you understand your information may be transferred to, stored in, and processed in the U.S., which may have different data protection laws than your country.

Changes to This Policy

We may update this Policy from time to time. The "Effective Date" above indicates when this Policy was last revised. Material changes will be posted on the Site, and where required by law, we will notify you and/or obtain your consent.