chmconnect-inner-png

Privacy policy

Updated: 4/20/2026

CHMConnect.org (“we”, “us” and “our”) operates this and related websites and any content made available from or through the websites, including any subdomains thereof, or any related smartphone or mobile applications (the “Site(s)”), and the services offered on or in relation to the Sites, including news, providing information, sponsored programs, advertising, email communications, medical education and discussion boards and forums (the “Services”). Our Services also include patient and caregiver education, community outreach, health awareness programming, patient advocacy support, access-to-care resources, information about treatment options, information about clinical research and clinical trial opportunities, surveys, patient insight initiatives, and programs intended to improve awareness, access, and health outcomes, including in underserved or higher-risk populations.

This Privacy Policy (“Policy”) describes what information we collect from individuals, how we use the information, with whom we share it, and how you can control your information. By visiting or using the Site or Services, you are accepting the practices described in this Policy. We may amend this Policy at any time; if we make changes to this Policy, we will post those changes on this page so that you are always aware. Your continued use of the Site following any changes to this Policy will constitute your acceptance of such changes. If you disagree with how we may use your information under this Policy, you should not use the Site or Services.

Depending on your state of residence and subject to applicable law, you may have certain rights regarding your Personal Information. These rights may include the right to know or confirm whether we process your Personal Information, the right to access Personal Information, the right to correct inaccurate Personal Information, the right to delete Personal Information, the right to obtain a portable copy of certain Personal Information, the right to opt out of certain targeted advertising, sale, or sharing activities, the right to limit certain uses or disclosures of sensitive Personal Information where applicable, and the right to appeal a denial of a privacy request where provided by law.

We may collect, use, disclose, and retain Personal Information as described in this Privacy Policy, including identifiers, contact information, registration information, professional information, device and browsing information, cookie and tracking data, communications data, health-related interests, condition-area interests, treatment interests, support requests, patient or caregiver experience information, research or clinical trial interest information, and other information you choose to provide through the Site or Services. Depending on your state of residence and applicable law, some of this information may be considered sensitive Personal Information or sensitive data.

To exercise any privacy rights available to you under applicable law, please contact us using the contact information provided in this Privacy Policy or any request method we make available on the Site. We may take reasonable steps to verify your identity before responding to your request. We will respond in accordance with applicable law and may deny a request to the extent permitted by law. If you are entitled to appeal a denial, we will provide information about how to submit an appeal where required.

If our use of cookies, pixels, analytics tools, advertising technologies, or similar tracking technologies constitutes a sale, sharing, or targeted advertising activity under applicable law, residents of applicable states may have the right to opt out through the methods we make available.

We will not discriminate against you for exercising any privacy rights available to you under applicable law.

    1. Collecting Information

We collect information that users provide through registration on our Sites for some services and through our users’ use of the Site or Services. This collection of data may include “Personal Information” such as name, address, email address, phone or fax number, age, social media information, job title, affiliation, or organization. This can also include inquiries made to the Site and/or content you share on the Site. Depending on how you interact with us, this may also include information relating to health education interests, condition-area interests, patient or caregiver experiences, barriers to care, language preferences, community needs, treatment interests, support requests, and interest in clinical research or clinical trial opportunities.

It can also include the collection of “Non-Personally Identifiable Information” through tracking systems. This includes information about your devices, including your IP address, location of the device, browser information, operating system, usage data, pages you visited on the Site, tally page views throughout our Sites, or other technical identifiers. In market research studies, we may track what computers respond to a survey. This information enables us to provide Services and content better and to respond to our users’ needs. It also is used to help our advertisers and sponsors understand the demographics of our audience better. We may also collect information about your interactions with emails, educational content, forms, event registration pages, and other Site features in order to improve our Services and communications.

The following is a general summary of the categories of information we may collect, the types of information in each category, and the primary purposes for which we collect them:

Contact and Identity Information. Types of Information: Name, email address, postal address, phone number, and unique identifiers. Primary Purposes: Registration, communications, account management, and legal compliance.

Professional and Organizational Information. Types of Information: Job title, employer, specialty, practice area, educational background, and professional credentials. Primary Purposes: Service delivery, medical education programs, and audience understanding.

Health and Wellness Interest Information. Types of Information: Health education interests, condition-area interests, treatment interests, patient or caregiver experiences, barriers to care, support requests, and interest in clinical research or clinical trial opportunities. Primary Purposes: Patient and caregiver education, outreach, program delivery, and research opportunity facilitation.

Survey and Market Research Responses. Types of Information: Responses to surveys, market research studies, feedback forms, and educational outcomes assessments. Primary Purposes: Program evaluation, audience insights, sponsored research, and educational improvement.

Device and Usage Information. Types of Information: IP address, device type, browser information, operating system, pages visited, interaction data, and geolocation data at the city or state level. Primary Purposes: Site operation, analytics, security, advertising, and service improvement.

Communications and Engagement Data. Types of Information: Email interaction data, form submissions, event registrations, and program participation records. Primary Purposes: Communications, program administration, outcomes measurement, and legal compliance.

Sponsored Program and Partner Information. Types of Information: Information provided in connection with sponsored programs, partner-supported initiatives, or third-party program opportunities. Primary Purposes: Program administration, partner reporting, advocacy support, and research support.

    • Registration: Some services require user registration. For the registration process, we may require information such as name, address, e-mail address, zip code, and other professional information such as educational background, field of study, current position, and practice area. Registration will provide you with choices regarding the types of newsletters and other information we send. By registering and consenting, you agree that we may send you emails and other communications regarding information specific to our Service(s) or other opportunities we may provide. For patient-facing, caregiver-facing, or community-facing Services, we may also request information relevant to your interests in health education, support resources, advocacy opportunities, treatment information, or research participation opportunities.
    • Market Research: When you participate in market research studies and surveys for us or on behalf of third-party sponsors, in addition to the responses you choose to provide, you may be asked to provide Personal Information. We may also collect responses regarding patient experience, caregiver perspectives, educational needs, barriers to care, resource needs, and community outreach effectiveness.
    • Medical Education: By participating in Medical Education activity through the Site, you may be asked to provide Personal Information. Additionally, there may be data collected and stored regarding online participation and activity. We may also collect registration data, attendance information, participation metrics, survey responses, and feedback regarding educational, awareness, or outreach activities offered through the Site.
    • Sponsored Services: You may utilize Services that feature third-party offers. You may encounter such Services through the Site or in e-mail communications. You may be asked to provide Personal Information, which may be provided directly to the third-party sponsor and/or used by us as described in this Privacy Policy. We may track your use of Sponsored Services through cookies and web beacons. Some Services may be sponsored, supported, or funded by third parties, including advocacy organizations, life sciences companies, healthcare organizations, research organizations, or other program partners. Where a program is sponsored or operated in collaboration with a third party, we may describe that relationship in the applicable registration materials, event materials, consent flow, or program description. If you choose to participate in such a program, we may use your information to administer the program and, where disclosed to you and permitted by law, share your information with the applicable sponsor or partner for the purposes described at the point of collection or in this Policy.
    • Cookies, Web Beacons, and Other Tracking Technologies: Whether or not you register to use the Site, cookies, web beacons, and other tracking technologies may be stored on your computer and used to track activity. This enables us to understand how visitors use our Sites, helps us improve the site for both users and advertisers, and customize the content, offerings, services, and advertisements. Sponsors may include their cookies, web beacons, or other tracking technologies within their advertisements on the Site. Additionally, third-party vendors, including Google, use cookies to serve third-party ads based on your prior visits to the Site. You can choose to disable or turn off cookies or third-party cookies in your web browser at any time. However, please be aware that some of our Services will not function fully if your browser does not accept cookies. We and our service providers may also use pixels, tags, SDKs, log files, and similar technologies for security, fraud prevention, analytics, communications, campaign measurement, and, where permitted by law, marketing and advertising functions. Depending on your location and applicable law, we may provide a cookie banner, preference center, or similar tool allowing you to accept, reject, or manage non-essential cookies and similar technologies. Because our Services may relate to health education, caregiver support, and research opportunities, we seek to handle online tracking technologies in a manner appropriate to the sensitivity of the information involved. We do not intentionally disclose information that directly identifies an individual in connection with specific health conditions, treatment interests, or research inquiries to advertising platforms for those platforms’ own independent advertising purposes unless clearly disclosed and, where required by law, only with the individual’s consent.
    • Health-Related Information: Because our Services may relate to serious health conditions, patient education, caregiver support, treatment access, and research opportunities, some information you choose to provide may relate to your health or the health of a person you care for. This may include information about health interests, condition areas, treatment experiences, care-navigation issues, insurance or cost concerns, barriers to care, participation in educational programs, and interest in clinical research or clinical trials. We collect this information only as permitted by applicable law and use it only for the purposes described in this Policy. Please do not submit medical records, diagnosis reports, test results, or other highly sensitive medical documentation through the Site unless we specifically request it and provide an appropriate method for doing so.
    • Clinical Research and Trial Opportunities: As part of our Services, we may provide information about clinical research, clinical trials, treatment access programs, patient support resources, advocacy opportunities, or related services. If you ask to learn more about or be considered for such opportunities, we may collect information from you to evaluate your interest, determine whether a program may be relevant to you, respond to your request, or connect you with a research sponsor, study site, contract research organization, healthcare provider, advocacy group, or other partner. Where required by law or appropriate based on the nature of the program, we will obtain your consent before sharing information that identifies you for purposes of follow-up regarding a clinical trial, research study, treatment resource, patient support service, or related opportunity. Submitting information through CHMConnect does not guarantee eligibility for any clinical trial, study, treatment, support program, or other opportunity, and CHMConnect does not make medical decisions on behalf of healthcare providers, researchers, or program administrators.
    • Sensitive Personal Information. Some of the information described in this Privacy Policy may constitute sensitive personal information or sensitive data under applicable state privacy law. This may include, depending on how you interact with our Services and the law of your state of residence: information relating to physical or mental health conditions or diagnoses, health interests, condition-area interests, treatment interests, barriers to care, and interest in clinical research or clinical trial opportunities. We collect, use, and disclose such information only for the purposes described in this Privacy Policy, as otherwise disclosed at the point of collection, or as permitted by applicable law. Where applicable law requires consent before we collect or process certain sensitive Personal Information, we will obtain that consent. Where applicable law permits withdrawal of consent, you may withdraw consent by contacting us using the information provided in this Privacy Policy. Please note that withdrawal of consent is subject to legal or operational limitations, including that we may be required to retain certain information to comply with applicable law, fulfill outstanding legal obligations, or complete transactions you have requested, and that information previously de-identified or aggregated in a manner that no longer permits identification of you as an individual cannot be reversed.
  1. Use of the Information

We may use your information for any lawful business purpose, including, but not limited to, corresponding with you, providing announcements, offering, or furnishing products and services, personalizing the types of information you receive from us, assessing trends in your use of the Sites, developing content and functionality that helps us better serve your needs, improving the services we provide and engaging in advertising and marketing activities. In addition, here are some examples of the ways in which we may use information:

  • To respond to your questions;
  • To confirm or fulfill registration requests;
  • To provide to you with the services, subscriptions, or information you requested;
  • To send you information about third-party services through pop-ups, banners, and emails.
  • To target marketing communication to your interests and geographic location;
  • To conduct and administer tests, surveys, sweepstakes, competitions, and/or similar promotions;
  • To contact you regarding medical education activities, news, or other resources and to advise you of products or services that may be available;
  • To display content we think may be of interest to you and customize your visit to the Site and with communications;
  • To notify you about website maintenance, updates, and new features;
  • To contact you as needed to inform you of updates to or to address a suspected violation of the Terms of Use, this Privacy Policy, or any other rules or policies applicable to the Site;
  • To send and manage educational outcomes measurement surveys;
  • To get your feedback to assess user satisfaction or other needs and interests;
  • To perform information analysis, compliance audits, and data metrics;
  • To evaluate the use and the effectiveness of the Services that we offer, which can include the effectiveness of content, advertising or programs; and to help us create new tools, features, and services and improve our Site, content, and Services;
  • To provide required reporting on medical education activity to the appropriate monitoring bodies and involved medical education providers;
  • To study our medical education activities for effectiveness and understand educational needs;
  • To maintain archival records of your participation for historical and research purposes, subject to retention limits imposed by applicable laws;
  • To comply with applicable laws, rules, or regulations; and
  • Otherwise, in rendering, administering, and improving the Site, our Services, and our business. We may also use your information to provide patient and caregiver education, support resources, navigation assistance, and community outreach; to communicate with you about disease awareness initiatives, advocacy opportunities, treatment information, and community-based events; to evaluate interest in and facilitate connections to clinical research, clinical trial, treatment access, or related support opportunities, where permitted by law; to collect and analyze patient, caregiver, and community insights to improve educational content, outreach strategies, and engagement effectiveness; to administer sponsored or partner-supported programs and measure participation, outcomes, and engagement; to create aggregated, de-identified, or anonymized reports, analyses, and program insights for internal use and, where permitted by law, for partners, sponsors, or program supporters; and to protect users and the integrity of the Services when collecting or handling potentially sensitive health-related information.
  • We use Personal Information, including any sensitive Personal Information we collect, only for the purposes described in this Privacy Policy, as otherwise disclosed at the time of collection, or as permitted by applicable law. Without limiting the foregoing, we do not use health interest data, condition-area interest data, treatment interest data, barriers-to-care information, or clinical research or trial inquiry information for employment screening, credit decisions, insurance underwriting, or any purpose unrelated to the health education, outreach, research support, and program administration functions described in this Policy.
  1. Sharing of the Information

We may share your information.

  • Business Administration: We use third-party service providers that help facilitate, manage, and/or analyze our Services (including web servers, cloud storage systems and service providers, support teams, web analysis, and others). These companies are authorized to use your Personal Information only as necessary to provide these Services. They are subject to contractual obligations to maintain such information confidential, subject to certain exceptions. However, these third parties operate under their own privacy policies, and we are not responsible for those policies. We may also share information with vendors and service providers that help us host the Site, manage registrations, provide communications, conduct analytics, administer surveys, support outreach, facilitate events, provide security tools, and otherwise operate the Services.
  • Legal Requirements: We may share your information as necessary to comply with applicable legal requirements such as a law, regulation, search warrant, subpoena, or court order legal requirements, as is necessary and permitted by applicable laws to protect and defend our rights or the rights of our users or third parties; or as is permitted under applicable laws to meet national security and similar requirements;
  • Affiliates: We may share any information that is collected with our subsidiaries and affiliates subject to the terms of this Policy. We reserve the right to disclose, share or otherwise transfer any information to our affiliates or to a third party in an acquisition, consolidation, the sale of substantially all of our assets, or other fundamental corporate change, whatever form it may take;
  • Voluntary Consent: We may share your information to the extent you have voluntarily agreed or are clearly notified of and consent to by using the Services or as otherwise set forth in this Policy.
  • Market Research: If you consent to participate in a market study or survey, the information you provide is intended to give specific anonymous feedback to third parties. When you take part in such market research studies, your identity as a participant may be shared; but your contact information will not be disclosed, and your answers will remain anonymous. Collected information will not be shared in a manner that is correlated to your Personal Information. However, if you receive payment for your participation, we may be required to share your Personal Information with the Sponsor of the study for their bookkeeping records and reporting requirements.
  • Sponsors, Advertising Partners, and Program Partners: We may work with sponsors, advocacy partners, healthcare organizations, research organizations, analytics providers, advertising partners, and other business partners in connection with our Site and Services. We may share information with such parties only as described in this Policy, as disclosed at the point of collection, or with your consent where required by law. We may share aggregated, de-identified, or anonymized information with partners for reporting, audience measurement, educational effectiveness, campaign performance, outreach planning, research support, and similar lawful purposes. We do not share information that directly identifies a patient or caregiver with sponsors, advertisers, research partners, or other third parties for those parties’ own independent marketing or cross-context behavioral advertising purposes unless clearly disclosed and, where required by law, only with the individual’s consent.
  • Medical Education: We may share your Personal Information with the accreditors of our continuing education programs. Our Sponsors of continuing medical education activities may receive aggregated data about the activities they support to evaluate participation and outcomes measurement.
  • Research, Clinical Trial, and Treatment Access Referrals: If you request information about a research study, clinical trial, treatment option, support program, or related opportunity, we may share the information reasonably necessary to process your request with the applicable sponsor, study site, contract research organization, healthcare provider, advocacy organization, or program administrator. Where required by law, we will first obtain your consent before sharing information that identifies you.
  1. Retaining the Information
We retain Personal Information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide our services, comply with legal obligations, resolve disputes, enforce our agreements, and maintain security and prevent fraud. We may retain certain information for longer periods where required or permitted by law or where necessary to establish, exercise, or defend legal claims. Where feasible, we will delete or de-identify Personal Information when it is no longer needed for these purposes. Deletion from backup systems may occur on a delayed basis consistent with our backup retention and disaster recovery practices.
  1. Users Outside of the United States

This Site is operated in the United States for residents of the United States. By using our Site or providing us with your Personal Information, you are transferring your information to us in the United States, where we collect, store and process that information. We may provide information to the United States government or its agencies under applicable law. We may process your information and transfer it to other countries where our staff or third-party service providers are located. By using this Site and Services, and/or submitting your Personal Information, you agree to this collecting, processing, and storing of your data to and in the United States. If you access the Site from outside the United States, please be aware that your information may be transferred to, stored in, and processed in countries that may not provide the same level of data protection as your home jurisdiction. Where required by applicable law, we will implement appropriate safeguards for cross-border transfers. 

  1. Third-Party Sites

Our Sites may provide links to third-party websites and resources. Such links are provided as a convenience to you and for informational purposes only. We do not endorse them and are not responsible for and cannot control these third-party websites and resources. We are not responsible for their availability, content, or delivery of services. Additionally, our Sites may contain social media widgets, including Twitter, Facebook, LinkedIn, and other features that may collect data and/or utilize cookies. Third party sites and resources are not bound by this Policy; they may have their own policies or none at all. We encourage you to read other third-party websites’ privacy policies. We may also use third-party tools and services for security, hosting, analytics, communications, and advertising-related functions, and those providers may collect information in accordance with their own privacy notices and applicable law. 

  1. Opt-in

When you register with us, you may be prompted to opt-in for additional Service(s). Opting-in means you agree and consent to receive information relevant to the Service you selected, whether it is sent directly by us or sent by us on behalf of our advertisers. You may unsubscribe from the opt-in lists at any time by following the unsubscribe instructions contained at the end of the e-mail you receive. Where required by law, we will obtain consent before using certain non-essential cookies or similar technologies or before sharing information in connection with certain sponsored, advertising, or research-related programs.

  1. Managing Your Information

We are dedicated to providing privacy on the Internet. If you wish to opt out of our sharing your Personal Information as described herein for marketing purposes, please contact us to opt out at  hello@chmconnect.org or at the address below. In addition, we have provided you the opportunity to opt out of future ad serving cookies. To identify you as someone who has elected to opt out of receiving future cookies from ad serving companies, we will place an opt-out cookie on your machine. If you would like to opt out of ad serving cookies or read additional information about these cookies, go to http://www.aboutads.info/choices/.

You may unsubscribe to any of our email communications at any time by following the instructions contained at the end of every email we send. If you no longer wish to use any services or receive any information from us, you may request to have your personal information removed from our databases. You may also request changes or corrections to your information that may be submitted. Depending on your state of residence and applicable law, you may also have the right to request access to, correction of, deletion of, or information about our use of your Personal Information, or to opt out of certain processing activities. If we sell or share Personal Information as those terms are defined by applicable law, including through certain advertising or tracking technologies, residents of applicable jurisdictions may have the right to direct us to stop doing so. Where required, we will provide an appropriate mechanism to exercise those rights. We may take reasonable steps to verify your identity before responding to certain requests, and we may retain certain information as required or permitted by law. If you previously consented to our sharing of your information in connection with a specific program, research opportunity, or sponsored initiative, you may contact us to withdraw consent going forward, subject to legal or operational limitations. 

  1. Children’s Privacy

We are committed to protecting the privacy of children. The Website and Services are designed and intended for use by adults. We do not knowingly collect personally identifiable information from any person under the age of 13 in violation of the Children’s Online Privacy Protection Act (“COPPA”), and we do not knowingly collect personally identifiable information from any person under the age of 18 except as permitted by applicable law. Our Services are not directed to children under the age of 13. If you believe a child has provided Personal Information to us in a manner not permitted by applicable law, please contact us and we will take appropriate steps to review and promptly delete that information. 

    1. Security

We take commercially reasonable administrative, technical, and physical measures designed to protect Personal Information against unauthorized access, use, disclosure, alteration, and destruction. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting Personal Information, we will investigate, take appropriate responsive measures, and provide any notices required by applicable law.

CHMConnect operates the Site and Services primarily as a health education, outreach, and information platform. In this capacity, CHMConnect is generally not a HIPAA covered entity with respect to information collected directly from users through the Site or Services. However, certain programs conducted in collaboration with healthcare providers, health plans, research institutions, or other regulated entities may be subject to separate privacy terms, notices, or authorizations that govern information handled in connection with those programs. Where a separate notice or authorization applies to a program or Service, those materials will govern to the extent they address the handling of health information in that context. The Site and Services are intended for educational, outreach, engagement, and informational purposes. Content and communications made available through the Site or Services do not constitute medical advice, diagnosis, or treatment. Users should consult qualified healthcare professionals regarding medical decisions. 

Information collected by CHMConnect through the Site or Services is governed by this Privacy Policy and applicable federal and state law. Where CHMConnect collects health-related information from users, it does so as a non-clinical platform and not in the capacity of a healthcare provider or health insurer. CHMConnect is committed to handling health-related information in a manner that is transparent, consistent with its stated purposes, and appropriate to the sensitivity of the information involved. If CHMConnect becomes aware of a security incident affecting personal information collected through the Site or Services, it will investigate, take appropriate responsive measures, and provide notification to affected individuals and relevant authorities as required by applicable law. If you have questions about the legal framework governing CHMConnect’s data practices, please contact us at hello@chmconnect.org.

FTC Health Breach Notification Rule.  

Certain of our Services may involve the collection of personal health records or health-related information through a platform that functions in a manner covered by the Federal Trade Commission’s Health Breach Notification Rule, 16 C.F.R. Part 318, as amended. If we experience a breach of security involving unsecured personally identifiable health information collected or maintained by or on behalf of CHMConnect in connection with a personal health record or a related application or service, we will provide notification to affected individuals, the FTC, and, where applicable, the media, in the manner and within the time periods required by the Health Breach Notification Rule and any other applicable breach notification law. If you have questions about our breach notification practices, please contact us using the information provided in this Privacy Policy.

  1. Contact Information
Please contact us with any questions regarding this Privacy Policy or the processing of your Personal Information by emailing us at hello@chmconnect.org or calling us at 1 (813) 519-1888.

PRIVACY NOTICE FOR CALIFORNIA RESIDENTS

This California Privacy Notice supplements the rest of this Privacy Policy and applies solely to natural persons who are California residents, as defined under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the “CPRA”). Any terms defined in the CPRA have the same meaning when used in this section. This section describes additional California-specific disclosures regarding the categories of Personal Information we collect, the categories of sources, the business or commercial purposes for collection, use, disclosure, sale, or sharing, the categories of third parties to whom Personal Information is disclosed, and the rights California residents have and how to exercise them.

Pursuant to the CPRA, California residents have the right to be informed about the Personal Information we collect about them. Subject to applicable exceptions, California residents may have the right to: know what Personal Information we have collected, including the categories of Personal Information, the categories of sources, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom Personal Information is disclosed, and the specific pieces of Personal Information collected about them; request deletion of Personal Information; request correction of inaccurate Personal Information; obtain a portable copy of certain Personal Information; opt out of the sale or sharing of Personal Information where applicable; limit certain uses or disclosures of sensitive Personal Information where applicable; and not receive discriminatory treatment for exercising privacy rights.

How California Residents May Exercise Their Rights. 

California residents may submit requests to know, delete, or correct Personal Information, and may exercise opt-out and limit rights where applicable, by emailing us at hello@chmconnect.org, calling us at 1 (813) 519-1888, or through any other request method we make available on the Site. For details regarding identity verification, response timelines, agent authorization, and appeals, see the How to Submit a Request, Verification of Identity and Processing of Requests, and Agent Authorization sections below.

Sale or Sharing of Personal Information. 

Subject to certain limited exceptions, the CPRA defines selling and sharing Personal Information to include communicating a consumer’s personal information to a third party for monetary or other valuable consideration, or for cross-context behavioral advertising. In the preceding twelve (12) months, we have sold and shared Personal Information within the meaning of the CPRA as set forth in the tables below. You have the right to opt out of the sale or sharing of your Personal Information. You may exercise this right by submitting a request here.

Sensitive Personal Information (California). 

CHMConnect may collect categories of information that constitute sensitive personal information under the CPRA, including information relating to health interests, condition-area interests, treatment interests, barriers to care, support requests, and interest in clinical research or clinical trial opportunities, to the extent you provide such information through the Site or Services. CHMConnect does not collect Social Security numbers, financial account numbers, precise geolocation, biometric identifiers, contents of private communications, genetic data, or racial or ethnic origin except as expressly disclosed in connection with a specific program or Service.

CHMConnect uses and discloses sensitive personal information only for the purposes permitted under California Code of Regulations, Title 11, section 7027(m), which include uses that are reasonably necessary and proportionate to provide the services requested by the consumer, to prevent security incidents, to resist malicious or deceptive actions, to ensure the physical safety of individuals, for short-term transient uses, to perform services on behalf of the business, to verify or maintain the quality of services, and other permitted purposes. CHMConnect does not use or disclose sensitive personal information for purposes beyond those listed in section 7027(m) that would require CHMConnect to provide a Notice of Right to Limit under California law. Accordingly, no “Limit the Use of My Sensitive Personal Information” link is required at this time. If CHMConnect changes its practices in a manner that would require such a notice, CHMConnect will update this Privacy Policy and provide the required notice and link.

If you have questions about how CHMConnect handles your sensitive personal information, please contact us using the contact information provided in this Privacy Policy.

The following sections describe the specific rights available to California residents under the CPRA and the procedures for exercising them.

 

Categories of Personal Information We Collect 

The CPRA defines “Personal information” as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.” Below are the categories of Personal Information that we may have collected, used, and disclosed for a business purpose, as permitted by law, in the last twelve (12) months, depending on the Services you receive:

CategoryExamples May IncludeCollected
A. Identifiersyour name, postal address, unique personal identifier, online identifier, email address, and telephone numberYes
B. Customer Records Personal Information CategoriesName, signature, address, telephone number, education, employmentYes
C. Protected Classification Characteristicsgender, ageYes
D. Commercial Informationproducts or services purchased, obtained, or considered, or other purchasing or consuming histories or tendenciesYes
E. Biometric informationbiological measurements — or physical characteristics — that can be used to identify individuals (e.g., fingerprint or retina scan)No
F. Internet or other electronic network activity informationBrowsing history, search history, and information regarding your interaction with an Internet website, application, or advertisementYes
G. Geolocation dataCity and state location of your deviceYes
H. Sensory DataAudio, electronic, visual, thermal, olfactory, or similar informationNo
I. Professional or Employment-related Informationemployer, job title, occupation, practice type/specialty, year of school graduation, professional provider numberYes
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g, 34 C.F.R. Part 99)).Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades or transcripts.Yes
K. Inferences drawn from other personal information collectedInferences drawn from the information we collect when you visit our Sites, reflecting your preferences, predispositions, etc.Yes
L. Sensitive Personal InformationFor the purpose of inferring characteristics about consumers, Social Security, driver’s license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; your precise geolocation; racial or ethnic origin, religious or philosophical beliefs, or union membership; the contents of mail, email, or text messages; genetic data; health informationYes – limited to health interests, condition-area interests, treatment interests, barriers to care, support requests, and interest in clinical research or clinical trial opportunities, to the extent provided by the user through the Site or Services. See Sensitive Personal Information sections above.

Sources from which We Collect Personal Information

The following are categories of sources from which we may receive your Personal Information:

  • directly from you when you inquire about our services via our Site, by telephone, or in person;
  • directly from you when you complete the registration process required by certain services that we offer;
  • from public online forums where you share information with other users;
  • from market research studies and surveys sponsored by us or other third parties;
  • directly from you when you participate in Continuing Medical Education (CME) or a Continuing Education (CE) activity through the Site;
  • from information collected through third party advertisements;
  • from information collected through the use of cookies, web beacons, and other tracking technologies within our Site and third party advertisements on our Site; and
  • from third parties that assist us in providing relevant services.

A more detailed description of these categories of sources from which Personal Information is collected is available in our Privacy Policy, available here. 

Notice at Collection. 

Under the CPRA, we are required to provide a Notice at Collection at or before the point at which we collect Personal Information from California residents. This Notice at Collection is provided at or linked directly from each point of data collection on the Site — including registration forms, survey entry pages, program enrollment pages, email sign-up forms, and cookie consent tools — and directs consumers to the specific sections of this Privacy Policy describing the categories of Personal Information collected and the purposes for collection. If you believe a data collection point on the Site does not include or link to an appropriate Notice at Collection, please contact us at at hello@chmconnect.org.

Business or Commercial Purposes for which We Collect Personal Information

We may collect the Personal Information listed above for the following business or commercial purposes:

  • To respond to your questions;
  • To confirm or fulfill registration requests;
  • To provide to you the services, subscriptions, or information you requested;
  • To send you information about third party services through pop-ups, banners and emails;
  • To target advertising and marketing communication to your interests and geographic location;
  • To conduct and administer tests, surveys, sweepstakes, competitions and/or similar promotions;
  • To contact you regarding CME/CE activities, news, or other resources and to advise you of products or services that may be available;
  • To display content we think may be of interest to you and customize your visit to the Site and with communications;
  • To notify you about website maintenance, updates, and new features;
  • To contact you as needed to inform you of updates to or to address a suspected violation of our Terms of Use, Privacy Policy, or any other rules or policies applicable to the Site;
  • To send and manage educational outcomes measurement surveys;
  • To get your feedback to assess user-satisfaction or other needs and interests;
  • To perform information analysis, compliance audits, and data metrics;
  • To evaluate the use and the effectiveness of the Services that we offer which can include the effectiveness of content, advertising or programs;
  • To help us create new tools, features, and services and improve our Sites, content, and Services;
  • To perform security and integrity tasks, including detecting security incidents and protecting against malicious or illegal activity;
  • To provide required reporting on CME/CE activity to the appropriate monitoring bodies and involved CME/CE providers;
  • To study our CME/CE activities for effectiveness and understand educational needs;
  • To maintain archival records of your participation for historical and research purposes, subject to retention limits imposed by applicable laws;
  • To comply with applicable laws, rules, or regulations in operating our business; and
  • Otherwise in rendering, administering, and improving the Site, our Services, and our business.

Disclosure of Personal Information for Our Business or Commercial Purposes

We have disclosed the following categories of Personal Information for business or commercial purposes in the preceding twelve (12) months to the following categories of third parties:

Categories of Third Parties to Whom Personal Information Was Disclosed for a Business or Commercial Purpose

Categories of Personal Information Disclosed for a Commercial Purpose

Business or Commercial Purpose for Disclosing Personal Information

Service providers or contractors

Identifiers, Professional or Employment-related Information, Geolocation data

To help facilitate, manage, and/or analyze our Services (including web servers, cloud storage systems and service providers, support teams, web analysis, and others)

Subsidiaries and affiliates

Identifiers, Professional or Employment-related Information, Geolocation data

To operate our business and provide Services

Third parties authorized by law to receive Personal Information

Identifiers, Professional or Employment-related Information, Sensory Data, Protected Classification Characteristics, Sensitive Personal Information

To comply with applicable legal requirements

Third parties involved in business transfers

Identifiers, Professional or Employment-related Information, Geolocation data

For example, for a corporate merger, acquisition, consolidation, the sale of substantially all of our assets, or other fundamental corporate change, whatever form it may take

Market research sponsors

Identifiers, Professional or Employment-related Information, Geolocation data, Non-public education information

When you consent to participate in a market study or survey

Current or prospective advertisers, sponsors, and other business partners

Identifiers, Professional or Employment-related Information, Geolocation data, Non-public education information

For marketing purposes

Accreditors of our continuing education programs

Identifiers, Professional or Employment-related Information, Geolocation data, Non-public education information

To maintain our continuing education programs

Third parties to whom you or your agents request or authorize us to disclose your Personal Information in connection with products or services we provide to you.

All categories of Personal Data listed above, depending upon the request and/or authorization

To operate our business and provide Services

Sale/Sharing of Personal Information

Subject to certain limited exceptions, the CPRA defines “sell,” “selling,” “sale,” or “sold,” as “selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for monetary or other valuable consideration.” Subject to certain limited exceptions, the CPRA defines “share,” “shared,” or “sharing” as “sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration, including transactions between a business and a third party for cross-context behavioral advertising for the benefit of a business in which no money is exchanged.”

In the preceding twelve (12) months, we have “sold” and “shared” Personal Information, within the meaning of the CPRA, as set forth below.

With respect to the sensitive Personal Information categories disclosed in this Notice — specifically, health interests, condition-area interests, treatment interests, barriers to care, support requests, and interest in clinical research or clinical trial opportunities — CHMConnect does not sell or share such sensitive Personal Information within the meaning of the CPRA for monetary or other valuable consideration or for cross-context behavioral advertising purposes. Such sensitive Personal Information is disclosed only to service providers and contractors acting on our behalf, to third parties as required by applicable law, and, where you have requested or authorized such disclosure, to research sponsors, study sites, advocacy organizations, healthcare providers, and similar program partners as described in the Research, Clinical Trial, and Treatment Access Referrals section of this Policy. The categories of sensitive Personal Information described in this section are not included in the sale or sharing tables below. Note: The sale and sharing tables below reflect only non-sensitive Personal Information categories. Sensitive Personal Information, as defined and described in the Sensitive Personal Information sections of this Privacy Policy, is excluded from each table.

You have the right to opt out of the sale or sharing of your Personal Information. You may exercise this right by submitting your request here.

Categories of Personal Information “Sold” or “Shared”Business or Commercial Purpose for Selling or Sharing Personal InformationCategories of Third Parties to Whom Personal Information Was Sold or Shared
IdentifiersList matching, contract fulfillment, system requirementsData brokers, clients, business communication tools, hosting service providers, data storage service providers, sales and marketing tools, finance/HR tools, CRM providers, government entities
Internet or other electronic network activity informationList matching, contract fulfillment, system requirementsData brokers, clients, business communication tools, hosting service providers, data storage service providers, sales and marketing tools, finance/HR tools, CRM providers, government entities
Geolocation dataList matching, contract fulfillment, system requirementsData brokers, clients, business communication tools, hosting service providers, data storage service providers, sales and marketing tools
Professional or Employment-related InformationList matching, contract fulfillment, system requirementsData brokers, clients, business communication tools, hosting service providers, data storage service providers, sales and marketing tools, finance/HR tools, CRM providers, government entities
Inferences drawn from other personal information collectedContract fulfillment, system requirementsData brokers, clients, business communication tools, hosting service providers, data storage service providers, sales and marketing tools, finance/HR tools, CRM providers, government entities
Non-public education informationContract fulfillmentClients, hosting service providers, CME platform

Consumers under 16 Years of Age

CHMConnect does not intentionally collect, sell, or share the Personal Information of consumers under 16 years of age.

Data Retention

We retain Personal Information about you necessary to fulfill the purpose for which that information was collected, consistent with applicable laws, including the CPRA. As a general matter, we retain different categories of Personal Information for different periods depending on the purpose for collection, as described in the Data Retention section of this Privacy Policy above. When we no longer need Personal Information, we destroy it in a secure manner in compliance with applicable law such that the Personal Information may not be reconstructed or re-identified. You may request information about our retention practices or request deletion of your Personal Information as described in the rights sections of this Notice.

My Rights under the CPRA

If you are a California resident, you may exercise certain privacy rights related to the Personal Information we collect about you under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CPRA”). You may exercise these rights free of charge, except as otherwise permitted under applicable law.

Right to Know/Access Personal Information 

You have the right to request that we disclose to you what Personal Information we collect, use, disclose, and sell. This information includes (a) the categories of your Personal Information that we have collected and sold or shared for a business purpose; (b) the categories of sources from which we have collected your Personal Information; (c) the categories of third parties with whom we shared or sold your Personal Information; (d) the business or commercial purpose for collecting, selling, or sharing your Personal Information; and (e) the specific pieces of Personal Information we have collected about you.

Right to Deletion of Personal Information

You have the right to request that we delete your Personal Information, subject to certain limited exceptions. For example, we may deny your request to delete Personal Information that we are required to maintain to fulfill a legal obligation.

Right to Correct Inaccurate Personal Information

You have the right to request that we correct inaccurate Personal Information that we maintain about you.

Right to Opt-out of the Sale or Sharing of Personal Information

You have the right to opt-out of the “sale” or “sharing” of your Personal Information. You may submit such a request by emailing us at hello@chmconnect.org.

Right to Non-Discrimination

We will not discriminate or retaliate against you for exercising your consumer rights under the CPRA, including by (a) denying you goods or services; (b) charging (or suggesting that we will charge) different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; or (c) providing you a different level or quality of goods or services (or suggesting that we will do so). We may, however, offer a different price, rate, level, or quality of goods or services if that price or difference is reasonably related to the value provided to us by your data.

How to Submit a Request

You may submit your request to access, delete, or correct Personal Information collected about you, or to appeal a denial of your request, by emailing us at hello@chmconnect.org or calling us at 1 (813) 519-1888.

Verification of Identity and Processing of Requests

As required or permitted under applicable law, we may take steps to verify your identity before processing your request to access, delete, or correct Personal Information collected about you as set forth above. In order for your request to be processed, you must provide us with enough information to reasonably verify you are the person about whom we collected Personal Information or an authorized representative of that person. We will confirm receipt of your request within 10 business days and provide information about how we will process your request. We will review each request for access, deletion, or correction carefully and respond to most requests within 45 calendar days if we are able to verify your identify based on the information you have provided; however, we may extend this time period once by an additional 45 calendar days when reasonably necessary, provided that we provide you with notice of this extension.

Agent Authorization

You may designate an authorized agent to request any of the above rights on your behalf. You may make such a designation by providing the agent with written permission, signed by you, to act on your behalf. Your agent may contact us as set forth in this Notice. Even if you choose to use an agent, as permitted by law, we may require you to confirm you have authorized the agent to act on your behalf or require you to verify your own identity.

Questions or Concerns?

Please contact us with any questions regarding this Privacy Policy or the processing of your Personal Information by emailing us at hello@chmconnect.org or calling us at 1 (813) 519-1888.

 

The information on this site is for educational purposes only and does not constitute medical advice. It is not intended to replace professional medical advice, diagnosis, or treatment. Always consult your physician or qualified healthcare provider with questions about your medical condition. In a medical emergency, call your doctor or emergency services immediately. CHMConnect does not endorse any specific tests, physicians, products, procedures, or opinions on this site.

Notice at Collection: CHMConnect collects identifiers, contact information, registration information, professional information, device and browsing information, cookie and tracking data, health-related interests, support requests, survey responses, and research or clinical trial interest information for the purposes described in our Privacy Policy, including to provide services, administer programs, improve communications, support outreach, and comply with legal obligations. We retain information as reasonably necessary for these purposes and as permitted by law. For more information, please review our Privacy Policy and, if applicable, our California Privacy Notice. Use of this information is at your own risk. - © 2026 CHMConnect™. All rights reserved.

Instagram Facebook