Privacy Policy
Effective Date: June 26, 2025
Last Updated: June 26, 2025
1. Introduction
Healthcare Access Project ("we," "our," or "us"), a company located at 1111 Eucalyptus St, Oceanside, CA 92054, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or participate in our Healthcare Nonprofit Accelerator program.
2. Information We Collect
Personal Information
We collect information you provide directly to us, including:
- Contact Information: Name, email address, phone number, mailing address
- Professional Information: Healthcare profession, practice status, years in practice, educational background
- Financial Information: Educational investment capacity, student loan details (for program qualification)
- Program Information: Course progress, implementation status, support requests
Automatically Collected Information
When you visit our website, we automatically collect certain information, including:
- Usage Data: Pages visited, time spent on pages, click patterns, scroll depth
- Device Information: Browser type, operating system, device type, screen resolution
- Location Data: General geographic location (country/region level)
- Referral Information: Source of website traffic, search terms used
Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Analyze website usage and improve user experience
- Track conversions and measure marketing effectiveness
- Provide personalized content and recommendations
- Maintain your login session and preferences
3. How We Use Your Information
We use the information we collect to:
- Provide Services: Deliver the Healthcare Nonprofit Accelerator program and related support
- Communication: Send program updates, educational content, and respond to inquiries
- Program Qualification: Assess eligibility for PSLF qualification and program suitability
- Improvement: Analyze usage patterns to improve our website and programs
- Marketing: Send relevant educational content and program information (with consent)
- Legal Compliance: Meet legal obligations and protect our rights
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share your information in the following circumstances:
Service Providers
We work with trusted third-party service providers who assist us in:
- Analytics: PostHog for website analytics and user behavior analysis
- Email Marketing: ConvertKit for email communications and nurture campaigns
- Payment Processing: Secure payment processors for program enrollment
- Scheduling: Calendly for discovery call scheduling
- Content Delivery: Sanity for content management and delivery
Legal Requirements
We may disclose your information when required by law, regulation, or legal process, or to protect our rights, property, or safety.
Business Transfers
In the event of a merger, acquisition, or sale of assets, customer information may be transferred as part of the transaction.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.
Security Measures Include:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Limited access to personal information on a need-to-know basis
- Secure hosting and data processing infrastructure
6. Data Retention
We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:
- Program Participants: 7 years after program completion (for PSLF documentation support)
- Marketing Communications: Until you unsubscribe or request deletion
- Website Analytics: 26 months (PostHog standard retention)
- Payment Information: As required by payment processor and tax regulations
7. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
Access and Portability
You can request a copy of the personal information we hold about you.
Correction
You can request that we correct inaccurate or incomplete information.
Deletion
You can request deletion of your personal information, subject to legal retention requirements.
Marketing Opt-Out
You can unsubscribe from marketing communications at any time using the unsubscribe link in emails or by contacting us.
Cookie Preferences
You can control cookie settings through your browser preferences. Note that disabling cookies may affect website functionality.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers, including:
- Standard contractual clauses approved by relevant authorities
- Privacy Shield certification (where applicable)
- Adequacy decisions by relevant data protection authorities
9. Regional Privacy Rights
California Residents (CCPA)
California residents have additional rights including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information.
European Union Residents (GDPR)
EU residents have rights under the General Data Protection Regulation, including the right to access, rectify, erase, restrict processing, and data portability. Our lawful basis for processing is typically consent or legitimate interests.
Geographic Restrictions
Our services are primarily intended for residents of the United States. We implement geo-blocking for EU visitors to ensure GDPR compliance.
10. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will delete such information promptly.
11. Third-Party Links
Our website may contain links to third-party websites, including Calendly for scheduling and external educational resources. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may provide additional notice via email.
13. Refund Policy
Healthcare Access Project offers a 30-day full refund policy for our Healthcare Nonprofit Accelerator program. If you are not satisfied with your purchase within 30 days, you may request a complete refund, no questions asked.
To request a refund, please contact us using the information provided below. Refunds will be processed within 14 business days of approval.
14. Contact Us
If you have questions about this Privacy Policy, our privacy practices, or wish to request a refund, please contact us:
1111 Eucalyptus St
Oceanside, CA 92054
Email: ian@healthcareaccessproject.com
You may also contact us through:
- Our website contact form
- Customer support channels
- Email requests for data subject rights
By using Healthcare Access Project services, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and disclosure of your information as described herein.