Privacy Policy

Effective Date: June 26, 2025
Last Updated: June 26, 2025

1. Introduction

Healthcare Access Project ("we," "our," or "us"), a company located at 1111 Eucalyptus St, Oceanside, CA 92054, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or participate in our Healthcare Nonprofit Accelerator program.

2. Information We Collect

Personal Information

We collect information you provide directly to us, including:

  • Contact Information: Name, email address, phone number, mailing address
  • Professional Information: Healthcare profession, practice status, years in practice, educational background
  • Financial Information: Educational investment capacity, student loan details (for program qualification)
  • Program Information: Course progress, implementation status, support requests

Automatically Collected Information

When you visit our website, we automatically collect certain information, including:

  • Usage Data: Pages visited, time spent on pages, click patterns, scroll depth
  • Device Information: Browser type, operating system, device type, screen resolution
  • Location Data: General geographic location (country/region level)
  • Referral Information: Source of website traffic, search terms used

Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Analyze website usage and improve user experience
  • Track conversions and measure marketing effectiveness
  • Provide personalized content and recommendations
  • Maintain your login session and preferences

3. How We Use Your Information

We use the information we collect to:

  • Provide Services: Deliver the Healthcare Nonprofit Accelerator program and related support
  • Communication: Send program updates, educational content, and respond to inquiries
  • Program Qualification: Assess eligibility for PSLF qualification and program suitability
  • Improvement: Analyze usage patterns to improve our website and programs
  • Marketing: Send relevant educational content and program information (with consent)
  • Legal Compliance: Meet legal obligations and protect our rights

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information in the following circumstances:

Service Providers

We work with trusted third-party service providers who assist us in:

  • Analytics: PostHog for website analytics and user behavior analysis
  • Email Marketing: ConvertKit for email communications and nurture campaigns
  • Payment Processing: Secure payment processors for program enrollment
  • Scheduling: Calendly for discovery call scheduling
  • Content Delivery: Sanity for content management and delivery

Legal Requirements

We may disclose your information when required by law, regulation, or legal process, or to protect our rights, property, or safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, customer information may be transferred as part of the transaction.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

Security Measures Include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Limited access to personal information on a need-to-know basis
  • Secure hosting and data processing infrastructure

6. Data Retention

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

  • Program Participants: 7 years after program completion (for PSLF documentation support)
  • Marketing Communications: Until you unsubscribe or request deletion
  • Website Analytics: 26 months (PostHog standard retention)
  • Payment Information: As required by payment processor and tax regulations

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

Access and Portability

You can request a copy of the personal information we hold about you.

Correction

You can request that we correct inaccurate or incomplete information.

Deletion

You can request deletion of your personal information, subject to legal retention requirements.

Marketing Opt-Out

You can unsubscribe from marketing communications at any time using the unsubscribe link in emails or by contacting us.

Cookie Preferences

You can control cookie settings through your browser preferences. Note that disabling cookies may affect website functionality.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers, including:

  • Standard contractual clauses approved by relevant authorities
  • Privacy Shield certification (where applicable)
  • Adequacy decisions by relevant data protection authorities

9. Regional Privacy Rights

California Residents (CCPA)

California residents have additional rights including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information.

European Union Residents (GDPR)

EU residents have rights under the General Data Protection Regulation, including the right to access, rectify, erase, restrict processing, and data portability. Our lawful basis for processing is typically consent or legitimate interests.

Geographic Restrictions

Our services are primarily intended for residents of the United States. We implement geo-blocking for EU visitors to ensure GDPR compliance.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will delete such information promptly.

11. Third-Party Links

Our website may contain links to third-party websites, including Calendly for scheduling and external educational resources. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may provide additional notice via email.

13. Refund Policy

Healthcare Access Project offers a 30-day full refund policy for our Healthcare Nonprofit Accelerator program. If you are not satisfied with your purchase within 30 days, you may request a complete refund, no questions asked.

To request a refund, please contact us using the information provided below. Refunds will be processed within 14 business days of approval.

14. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or wish to request a refund, please contact us:

Healthcare Access Project
1111 Eucalyptus St
Oceanside, CA 92054
Email: ian@healthcareaccessproject.com

You may also contact us through:

  • Our website contact form
  • Customer support channels
  • Email requests for data subject rights

By using Healthcare Access Project services, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and disclosure of your information as described herein.