Last modified: August, 2024

INTRODUCTION 

American Patient Access Foundation, a 501(c)(3) foundation (“Foundation” or “we”), respects your privacy and are committed to protecting it through our compliance with this policy (“Privacy Policy”).  This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit our website at https://americanpatientaccess.org/ (“Website”), or any subdomain thereof, and our practices for collecting, using, maintaining, protecting, and disclosing that information. 

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use this Website, our social media accounts, our offline sources, or our Web Portals.  By accessing our Website, you agree to this privacy policy. This policy may change from time to time. Your continued use of this Website after we make changes is deemed acceptance of the changes, so please check the policy periodically for updates. 

The foundation is not a medical provider nor is it a “covered entity” subject to state or federal laws governing the privacy of medical records or information, including the health insurance portability and accountability act of 1996, commonly referred to as “HIPAA”. Even so, we take data protection very seriously and have engaged service providers to protect your data.

INFORMATION WE COLLECT ABOUT YOU AND HOW WE COLLECT IT 

We collect information directly from you when you enter it in forms or surveys on our Website, apply for assistance, donate, launch a campaign, or use other features and resources on the Website and in our other social media presences. This may include personally identifiable information such as: first and last name, account password, postal address, email address, social media addresses, telephone number, social security number, insurance policy numbers, medical conditions, medications, and other health information. 

INFORMATION WE COLLECT THROUGH AUTOMATIC DATA COLLECTION TECHNOLOGIES 

As you navigate through and interact with our Website and our Web Portals, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including: 

• Visit Data. Details of your visits to our Website and our Web Portals, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website. 
• Device Data. Information about your computer and internet connection, including your IP address, operating system, and browser type. 

We may also use a variety of tools to collect data about your visit to our Website and our Web Portals or social media presences, often referred to as “Cookies.” Please see our Cookie Policy and opt-out/do not sell page for more information and how you may exercise your rights in relation to data requests.  

HOW WE USE YOUR INFORMATION 

We use information that we collect about you or that you provide to us, for the following purposes: 

• Provide you with the ability to fundraise. 
• Provide you with assistance applying for assistance programs.
• Contact you as needed to provide requested services including notices about your account. 
• Allow you to share stories and comments on social media.
• Carry out our legal and regulatory obligations. 
• Accept and process donations. 
• Communicate with donors and supporters. 
• Send newsletters to subscribers. 
• Disclose aggregated information for reporting. 
• Fulfill any other purpose in support of our mission. 
• Comply with any court order, law, or legal process, including responding to any government or regulatory request. 
• Disclose, if necessary or appropriate to protect the rights, property, or safety of the Foundation, our patients, donors, or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction. 

If you do not want us to use your information in this way, please see our Cookie Policy and opt-out/do not sell page for more information and how you may exercise your rights in relation to data requests. 

DATA SECURITY AND DONATION PROCESSING 

We use technical and administrative safeguards to protect your personal information from unauthorized access, use, loss, or destruction. We employ internet security protocols that provide privacy protection and authentication. We restrict access to your personal information to people who need to know your information to perform their job duties. 

While we have made every effort to provide a secure, private, and reliable Website, we urge you to always exercise caution when providing your personal information. Your efforts to sign off when finished using a shared computer and constantly logging out of websites when using personal information are examples of protective measures you can apply. 

Donations are processed through service providers that are Payment Card Industry Data Security Standard (PCI-DSS) compliant and PCI-1-Level-1-certified. This is the highest level of compliance that ensures the top security level to protect your information.