Our commitment to you.

S.C.A.R. Group (“we,” “us,” “our”) helps veterans organize and prepare VA disability claims through a self-service educational platform. In the course of that work, you may share sensitive information with us — service records, medical documentation, VA decision letters, and personal identifying information. We take that responsibility seriously.

This notice explains what information we collect, how we protect it, who can access it, and the choices you have. It applies to scargroupllc.com and the S.C.A.R. Group client portal.

A note on our standards: S.C.A.R. Group is not a healthcare provider, health plan, or healthcare clearinghouse. That doesn’t lower the bar we hold ourselves to — the security practices described below apply to everything you share with us, regardless of which specific regulation does or doesn’t apply to our organization.

Information you provide directly:

• Name, email address, phone number, and mailing address
• Military service records and DD-214
• VA decision letters and claim history
• Medical documentation and records you choose to upload
• Payment information (processed by our payment provider — see “Third Parties We Work With” below)
• Any information you share with your advisor during appointments

Information collected automatically:

• Basic technical information (browser type, device type, IP address) when you use our website or portal
• Portal activity, such as login times and document upload history

We use your information only to:

• Prepare and organize your claim materials
• Communicate with you about your account, appointments, and claim progress
• Provide customer support
• Improve our platform and services
• Meet legal and accounting obligations

We do not sell your information. We do not use your medical or service records for advertising, and we do not share them with third parties for marketing purposes.

• You always have access to your own records and documents.
• Your assigned advisor can access the information relevant to preparing your claim.
• Authorized S.C.A.R. Group staff may access information as needed to operate the platform, troubleshoot issues, or provide support — access is limited to what’s needed to do the job.
• We do not grant access to your records to any outside party without your knowledge, except as described below.

Like most software platforms, we rely on trusted vendors to operate our service, including:

• Cloud hosting and storage — AWS, to securely store your data
• Payment processing — Stripe, LLC, to handle transactions; we do not store your full payment card details ourselves
• Email and communications — HighLevel, LLC, to send account and appointment communications

These vendors only receive the information necessary to perform their specific function and are contractually restricted from using your data for any other purpose.

We do not control, and are not responsible for, the privacy practices of external government systems you may use as part of your claim (such as VA.gov, ID.me, or Login.gov). Please review their respective privacy policies directly.

• Encryption in transit and at rest — your data is encrypted both while it’s being transmitted and while it’s stored.
• Access controls — only authorized individuals with a specific reason to access your information can do so.
• Secure infrastructure — our platform is built on cloud infrastructure designed to support high security and compliance standards.
• Ongoing monitoring — we monitor our systems for unauthorized access and unusual activity.

No system is 100% immune to risk, and we can’t guarantee absolute security — but we design our systems and practices around minimizing that risk at every level, not just at the infrastructure layer.

We retain your information for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, or recordkeeping obligations. You may request deletion of your account and associated data at any time (see “Your Choices” below), subject to any records we’re required to retain by law.

• Access and correction — you can review and update your information at any time through your portal.
• Deletion — you may request that we delete your account and data by contacting us at intake@scargroupllc.com. Some information may be retained where required by law.
• Communication preferences — you can opt out of non-essential email communications at any time; account and service-related communications may still be sent as needed to operate your account.

We may update this notice from time to time as our practices or applicable laws change. We’ll update the “Last updated” date above when we do, and material changes will be communicated to active clients.

If you have questions about this notice or how your information is handled, contact us at intake@scargroupllc.com.