Good Hope Way Foundation, Inc. Privacy Policy
Good Hope Way Foundation, Inc. is a nonprofit organization dedicated to helping patients securely store and manage their personal health data. We do so through a software application known as “Huddle” (the “Application”) accessible through our website (the “Site”), collectively referred to as the “Platform”. As a nonprofit organization, Good Hope’s primary goal is to empower you to own and control your health data. We do not sell user data or engage in commercial monetization of personal information. We take the privacy and security of your information seriously. This Privacy Policy explains the types of information we collect, how we use it, how we protect it, and your rights regarding that information.
By using the Platform you agree to be bound by this Privacy Policy and our Terms of Use. If you do not agree, please discontinue use of the Platform.
NONPROFIT MISSION AND DATA COMMITMENT
Good Hope Way Foundation, Inc. (“Good Hope”, “We”, ‘Us”, “Our”) is a nonprofit organization. Unlike commercial entities, our primary goal is to provide the Platform users with secure, patient-owned health records rather than monetizing user data. We do not sell, rent, or trade your personal information to third parties.
INFORMATION WE COLLECT
We may collect Personal or Non-Personal Information about you, or about third parties for whom you provide information, through the Platform. “Personal Information” refers to any information that specifically identifies you (or a person upon whose behalf you are acting in accordance with our Terms of Use) as an individual. Personal Information may include but is not limited to your name, telephone number, email address, postal address, and location. Personal Information may also include prescription information or other medical information. “Non-Personal Information” is any information you provide to us that cannot be used to determine your identity (or the identity of a person upon whose behalf you are acting in accordance with our Terms of Use). The types and amount of information collected for the features listed above will vary depending on your use of the Platform . The requested Personal Information may include: first and last name, email address, and telephone number. For some activities, you may be asked to create a username and/or password and/or to provide additional, demographic information, including your age, date of birth and/or gender.
HOW WE COLLECT INFORMATION ABOUT YOU
We collect information about you when you create the Platform account, update your profile, or enter health records. If you elect to import records from other applications or providers, we collect that information on your behalf. We (or our service providers) may use cookies or similar technologies to gather Non-Personal Information about how you navigate the Site or the Platform. This data helps us improve functionality and user experience.
We also obtain Personal Information from you when you request information from Good Hope, or transfer information from other applications or stored on a device. By using the Platform and submitting Personal Information, you consent to the collection and use of your Personal Information by us as described in this Privacy Policy. In addition, when you access or visit the Platform, we and our service providers and others who host the Platform may use technology that can recognize, collect, and transmit information that is associated with you, but which does not personally identify you.
HOW WE USE INFORMATION COLLECTED
To the extent permitted by applicable law, we use the information we obtain, including Personal Information, to: maintain and administer the Platform; provide core features; store and manage your health data; develop new features, services, and products; maintain a secure user experience; address support inquiries; provide technical assistance; help you recover your account; and to comply with applicable laws, regulations, or legal processes. We may use de-identified aggregated or anonymized data for internal research or service improvement. If we ever wish to use identifiable data for broader research purposes, we will request your explicit consent. We may also use the information for responding to your feedback, questions, and communications concerning our products or services and informing you about our services. This may include contacting you by telephone (including by SMS text).
DATA OWNERSHIP
You maintain ownership of your personal health data. Good Hope acts solely as a steward and facilitator of that data.
DELETING YOUR DATA
You have the right to request that we delete Personal Information we collect or obtain about you, subject to certain restrictions. Should you choose to delete your account, please contact us at support@goodhopeway.org and we will contact you. Medication information you share with your provider is retained in accordance with the Health Insurance Portability and Accountability Act (HIPAA) requirements.
DATA RETENTION
We retain your Personal Information for as long as you have an open account with us or as otherwise necessary to improve the Platform for all users generally. If you have provided medical records or prescription data, certain healthcare regulations (e.g., HIPAA) may require us or your healthcare provider(s) to maintain records for a minimum period. We will inform you if these requirements affect your deletion request. In some cases, we retain Personal Information for longer, if necessary, to comply with our legal obligations, resolve disputes, or as otherwise permitted or required by applicable law or regulations.
SECURITY MEASURES
We use physical, technical, and administrative safeguards to protect the confidentiality and integrity of your data. These measures include encryption, secure hosting environments, and internal access controls. Although we take every precaution to safeguard your information, no security measure can guarantee absolute protection.
IP ADDRESSES
We may collect and monitor Internet Protocol (IP) addresses for various purposes, including: (i) diagnosing and resolving technical issues, (ii) ensuring the safety and security of our website, (iii) limiting access to the Platform for specific users, and (iv) gaining insights into how the Platform is used. An IP address is a number that is used by computers on the network to identify your computer every time you log on to the Internet.
LOG FILES
We, or a third-party vendor acting on our behalf, may gather data through logs-files that document user activity and compile statistics about behavior within the Platform. These logs enable us to collect information such as: (i) a user’s browser type and operating system, (ii) details about a user’s session (including the referring URL, the date and time of their visit, and the pages they viewed on our site along with the duration of their stay), and (iii) other comparable navigational or click-stream data. This information is also leveraged for our internal marketing and demographic analyses, allowing us to continuously enhance and tailor the online services we offer to better meet your needs.
BUSINESS INTERESTS
We may combine (aggregate) your Non-Personal information with other consumers’ information or other publicly available information to help us satisfy our legitimate business interests, such as performing trend analysis or market studies; identify consumer preferences or interests; set prices; perform billing functions; establish credit; or comply with government regulations. We may also share anonymized data, such as statistical or demographic information in aggregate form, with third parties for research or marketing purposes. However, this anonymized data will not contain your individually identifiable Personal Information.
DISCLOSURE OF INFORMATION TO THIRD PARTIES
We will disclose your Personal Information to third parties you designate in your use of the Platform. Any disclosures that we make will be in accordance with the Terms of Use. We disclose your Personal Information to our service providers that we engage to provide certain services, such as hosting and maintenance, data storage, customer management and disaster recovery. We expect our service providers to use reasonable measures in order to protect your privacy and Personal Information from unauthorized access, in accordance with our agreements with them and applicable law. To the extent permitted by our agreements and applicable law, we also reserve the right to make your Personal Information available: to comply with any applicable law, regulation, a court or other legal process, or enforceable government request; to take appropriate action regarding any use of our application that may violate any law or regulation; to protect the health, safety, security, property, and interests or rights of us or others; to investigate or respond to or resolve problems or inquiries or defend our interests; and as otherwise necessary or useful for us to conduct our business, so long as such use is permitted by law; and as directed by You.
CALIFORNIA PRIVACY RIGHT.
If you are a resident of the State of California, under the California Consumer Privacy Act of 2018 (CCPA), you have the following rights with respect to your information collected by companies conducting business in California:
● Right to Access Personal Information We Collect. You have the right to request a copy of Personal Information we collect about you, subject to certain restrictions.
● Right to Access Personal Information We Sell or Disclose to third parties. You have the right to request a copy of your Personal Information we sell or disclose to third parties, subject to certain restrictions.
● Right to Request Deletion of Personal Information We Collect. You have the right to request that we delete Personal Information we collect about you, subject to certain restrictions.
● Right to Be Free from Discrimination. You have the right to be free from discrimination for exercising your rights under the CCPA.
Personal Information We Collect About You. Under the CCPA, Personal Information refers to information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household. Below is a list of categories of Personal Information we collect about you:
Identity Information such as first name, last name, driver’s license or state identification, passport number, or similar identifier.
Contact Information such as physical addresses, e-mail addresses, and phone numbers.
Education and Employment Information such as schools and colleges/universities attended, degrees earned, certifications and licenses, and other professional-related data.
Technical and Usage Information such as login data, Internet Protocol (IP) address, geolocation data, access dates and times, cookie data, browser activity, and other user interactions with our websites, applications, and platforms.
Marketing Information such as your preferences in receiving marketing materials and communications from us.
Profile Information such as your usernames and passwords, feedback, and survey responses.
Transaction Information such as details regarding products and services purchased from us.
Financial Information such as payment details, either directly collected by us or indirectly collected through a third- party payment service provider.
Medical Information that is not governed under the Health Information Portability and Accountability Act (HIPAA) or the Confidentiality of Medication Information Act Part 2.6.
We also collect information that is not considered Personal Information under the CCPA. This includes publicly available information such as information lawfully made available from federal, state, or local government records. Protected or health information collected that is governed by HIPAA or the Confidentiality of Medical Information Act is not subject to the CCPA.
Personal Information We Share with Third Parties. We disclose your Personal Information to third parties for business purposes. We require all third parties to respect the security of your Personal Information and to treat it in accordance with applicable law. Below is a list of categories of Personal Information we may share with third parties:
Identity Information such as first name, last name, driver’s license or state identification, passport number, or similar identifier.
Contact Information such as physical addresses, e-mail addresses, and phone numbers.
Education and Employment Information such as schools and colleges/universities attended, degrees earned, certifications and licenses, and other professional-related data.
Marketing Information such as your preferences in receiving marketing materials and communications from us.
Profile Information such as your usernames and passwords, feedback, and survey responses.
Transaction Information such as details regarding products and services purchased from us.
Medical Information that is not governed under the Health Information Portability and Accountability Act (HIPAA) or Confidentiality of Medication Information Act Part 2.6.
Personal Information We Sell to Third Parties. We do not sell your Personal Information to third parties.
For more information, contact us via one of the following:
Email at support@goodhopeway.org
Postal mail at:
Good Hope Way Foundation, Inc.
6017 Pine Ridge Rd Num 449
Naples, FL 34119
All requests sent via email must have a Subject of “California Privacy Rights”. All requests sent via postal mail must be labeled “California Privacy Rights” on the envelope or postcard and clearly stated on the actual request. For all requests, please include your name, street address (if you would like a response via postal mail), city, state, and zip code. We are not responsible for notices that are not labeled or sent properly, or do not have complete information. We will respond to your request within forty-five (45) days, or within a timeframe otherwise permitted under the CCPA. You will not be required to pay a fee to access your Personal Information. However, we may charge a reasonable fee if your request is unfounded, excessive, or repetitive.
HOW WE RESPOND TO BROWSER “DO NOT TRACK” SIGNALS
Some web browsers incorporate a “Do Not Track” feature that signals to websites that you visit that you do not want to have your online activity tracked. How browsers communicate the Do Not Track signal is not uniform. For this reason, The Platform is not set up to interpret or respond to “Do Not Track” signals.
CHILDREN’S ONLINE PRIVACY PROTECTION ACT (COPPA)
The Platform is not directed to children under the age of 13. We do not knowingly collect Personal Information directly from children and will destroy such information if we become aware that a child has disclosed such information to us without proper parental consent. It is Good Hope’s policy not to knowingly solicit or permit children under the age of 13 to provide their Personal Information for any purpose.
ACCEPTANCE OF AND CHANGES TO PRIVACY POLICY
By using the Platform, you are accepting the practices described in this Privacy Policy. Although most changes are likely to be minor, we may modify this Privacy Policy from time to time. Any modified privacy policy will be posted on the Platform and be marked with an effective date. We will notify you of material changes to this Privacy Policy. Your consent and/or continued use of the Platform after the effective date of any modification means you accept and agree to be bound by the Privacy Policy as modified. Any material changes will generally apply only to activities and information collected after modification. We encourage you to review this Privacy Policy whenever you return to the Platform to make sure you are aware of the latest Privacy Policy.
THIRD-PARTY WEBSITES
The Platform may contain links to and from websites maintained by other companies or organizations (“Third-Party Websites”). We are not responsible for the privacy practices or the content of Third-Party Websites. The information practices of Third-Party Websites are not covered by this Privacy Policy.
NOTE TO NON-U.S. VISITORS
This Privacy Policy is intended to meet the laws and regulations of the United States, which may not necessarily be consistent with the laws and regulations of your home country. Any information that you provide to the Platform will be treated in accordance with this Privacy Policy, the Terms of Use, and U.S. laws. The Platform is not intended for use outside of the United States of America. The Platform is expressly not intended for use in the European Union or by any individual inside or resident of a European Union member state or any jurisdiction subject to the laws of the European Union.
Revised 03-18-25
