Privacy Policy

1. Introduction

USEHRE ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website usehre.org and use our services.

As a non-profit standards and research organization focused on healthcare data interoperability, we understand the critical importance of data privacy and security. This policy outlines our practices in clear, transparent language.

2. Information We Collect

2.1 Information You Provide

We may collect the following information that you voluntarily provide:

• Contact Information: Name, email address, phone number, organization name
• Communication Data: Messages, inquiries, and feedback you submit through our contact forms or email
• Professional Information: Job title, organization type, areas of interest
• Partnership Information: Business details for partnership or certification inquiries

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• Usage Data: Pages visited, time spent on pages, links clicked
• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, referring website addresses
• Cookies and Similar Technologies: Information stored on your device to enhance your browsing experience

3. How We Use Your Information

We use the collected information for the following purposes:

• Communication: To respond to your inquiries, requests, and feedback
• Service Improvement: To understand how visitors use our website and improve user experience
• Partnership Development: To evaluate and facilitate partnership opportunities
• Updates and Newsletters: To send you information about USEHRE's progress, events, and opportunities (only with your consent)
• Research and Standards Development: To inform our work in developing healthcare interoperability standards
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Security: To protect against fraudulent, unauthorized, or illegal activity

4. How We Share Your Information

We do not sell, trade, or rent your personal information. We may share information only in the following circumstances:

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you, including:

• Email service providers (e.g., Resend)
• Website hosting and infrastructure providers (e.g., Cloudflare)
• Analytics providers

4.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service
• Protect the rights, property, or safety of USEHRE, our users, or others

4.3 Business Transfers

In the event of a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS 1.3
• Secure server infrastructure with Cloudflare protection
• Access controls and authentication measures
• Regular security assessments and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

6.1 Access and Portability

You have the right to request access to the personal information we hold about you and receive a copy in a structured, commonly used format.

6.2 Correction

You have the right to request correction of inaccurate or incomplete personal information.

6.3 Deletion

You have the right to request deletion of your personal information, subject to certain legal exceptions.

6.4 Opt-Out

You may opt out of receiving promotional emails by following the unsubscribe instructions in those emails or contacting us directly.

6.5 Do Not Track

Our website does not currently respond to "Do Not Track" signals from browsers.

To exercise any of these rights, please contact us using the information provided below.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us:

• Remember your preferences
• Understand how you use our website
• Improve website performance and functionality
• Provide relevant content

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our website.

8. Third-Party Links

Our website may contain links to third-party websites, services, or resources. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will take steps to delete such information.

10. International Data Transfers

USEHRE is based in the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

We take appropriate measures to ensure that your personal information receives adequate protection in accordance with this Privacy Policy and applicable data protection laws.

11. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Factors we consider in determining retention periods include:

• The nature and sensitivity of the information
• The purposes for which we collected the information
• Legal, regulatory, or contractual obligations
• Whether you have requested deletion

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification (for significant changes)
• Displaying a prominent notice on our website

Your continued use of our website after any changes indicates your acceptance of the updated Privacy Policy.

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

14. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:

• The right to access, rectify, or erase your personal data
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent at any time
• The right to lodge a complaint with a supervisory authority