Privacy Policy
Last updated: June 1, 2026
On this page
1. Introduction
Healthcare Leadership Foundation, a Delaware nonprofit corporation with offices in Durham, North Carolina (“HLF,” “we,” “our”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at platform.healthcareleadershipfoundation.org.
2. Information We Collect
We may collect the following types of information:
- Account information: Name, email address, professional title, and organization when you create an account.
- Profile and program information: Information you choose to provide during onboarding or in your profile, including your healthcare role, career stage, areas of clinical focus, and program interests.
- Sensitive or health-adjacent information: If you identify as a patient, caregiver, or patient advocate, we collect that self-identification so we can route you to relevant programs and content. We treat this information as sensitive (see Section 7).
- Usage data: Pages visited, features used, time spent on the platform, and learning progress.
- Device information: Browser type, operating system, and IP address.
- Communications: Messages you send through our contact form, email, or other free-form fields. Please do not include patient names, medical record numbers, or other personally identifying health information.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the platform
- Track learning progress and issue credentials
- Communicate with you about your account, programs, and updates
- Analyze usage patterns to improve our offerings
- Comply with legal obligations
5. Children’s Privacy
The HLF platform is directed to adult healthcare professionals, patients, caregivers, and patient advocates. We do not knowingly collect personal information from children under 13 (or the equivalent minimum age in the relevant jurisdiction). If we learn that we have inadvertently collected personal information from a child, we will delete that information promptly. A parent or guardian who believes their child has provided personal information to us may contact us at connect@healthcareleadershipfoundation.org to request deletion.
6. Information Sharing and Third-Party Services
We do not sell your personal information. We share information only as necessary to operate the platform and as described below:
| Third-Party Service | Categories of Personal Data Shared | Purpose |
|---|---|---|
| Clerk | Account information (name, email, credentials) | Authentication and session management |
| Vercel / Vercel Analytics | Usage data, device information, IP address | Hosting, infrastructure, and performance analytics |
| Google Analytics | Usage data, device information, IP address, approximate location | Web analytics and aggregated reporting |
| Givebutter | Donation-related information you submit directly to Givebutter (name, email, payment information) | Donation processing |
Legal requirements: We may disclose information when required to comply with applicable law, legal process, or enforceable government request, or to protect the rights, property, or safety of HLF, our users, or others.
Information you submit directly to a third-party service—for example, payment information you enter into the Givebutter donation form—is collected by that third party and governed by its privacy policy and terms. When you interact with third-party services integrated into the platform, those third parties may independently collect personal information subject to their own privacy policies, which HLF does not control.
7. Sensitive Information Handling
Some information you provide—such as your patient/caregiver/advocate status, healthcare role, and career stage—may be treated as sensitive or health-adjacent under applicable law. We handle this information as follows:
- Purpose: Used only to personalize learning paths, recommend cohorts and programs, and inform program eligibility.
- Visibility: Available to HLF staff and program operators with a legitimate need; not displayed publicly to other users without your consent.
- Sharing limits: Not shared with advertisers, not sold, and not used for advertising or any purpose unrelated to operating HLF programs.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.
9. Data Breach Notification
If a security incident materially affects your personal information, we will notify you, and applicable regulators, as required by applicable law. This notification is separate from the routine policy-update notification described in Section 13.
10. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements.
11. Your Rights
Depending on your state of residence, applicable law may grant you some or all of the following rights with respect to your personal information:
- Access. Request confirmation of whether we process your personal data and obtain a copy of the specific personal data we hold about you.
- Correction. Request that we correct inaccurate personal data we maintain about you.
- Deletion. Request that we delete personal data we have collected from or about you, subject to certain exceptions permitted by law.
- Data portability. Receive a copy of your personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity.
- Opt out of targeted advertising. Direct us not to process your personal data for the purpose of targeted advertising.
- Opt out of sale of personal data.Although we do not sell your personal data, you may direct us not to sell your personal data as “sale” is defined under applicable state law.
- Opt out of profiling. Object to our use of your personal data for profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
- Limit use of sensitive data. Where applicable, restrict our use or disclosure of your sensitive personal information to purposes permitted by law.
- Nondiscrimination. We will not discriminate against you for exercising any of these rights, including by denying you services, charging different prices, or providing a different level or quality of service.
- Appeal. If we decline to act on your request, you may appeal our decision by contacting us at connect@healthcareleadershipfoundation.org. If your appeal is denied, we will provide you with information on how to contact your state attorney general to submit a complaint.
To exercise any of these rights, contact us at connect@healthcareleadershipfoundation.org. We will respond to verifiable consumer requests within 45 days of receipt. If we need additional time (up to an additional 45 days), we will notify you of the extension and the reason for it. You may also designate an authorized agent to make a request on your behalf.
12. State-Specific Disclosures
Residents of certain U.S. states—including California, Colorado, Delaware, Minnesota, Montana, New Jersey, and Oregon, among others—may have additional rights under applicable state privacy laws.
Categories of personal information collected and purposes:
| Category of Personal Information | Purpose(s) |
|---|---|
| Identifiers (name, email address, IP address) | Account creation, communications, analytics |
| Professional information (title, organization, healthcare role, career stage) | Program personalization, cohort matching, credential issuance |
| Internet or network activity (pages visited, features used, time on platform) | Platform improvement, analytics, learning-progress tracking |
| Sensitive personal information (patient/caregiver/advocate status) | Program routing, eligibility, content personalization |
| Geolocation data (approximate location from IP address) | Analytics, compliance with jurisdiction-specific requirements |
Categories of third parties receiving personal information: Service providers (authentication, hosting, analytics, donation processing) as described in Section 6.
Sale and sharing: We do not sell personal information for monetary or other valuable consideration. We do not share personal information for cross-context behavioral advertising.
California residents: In addition to the rights listed in Section 11, California residents may request that we disclose the specific pieces of personal information we have collected about them. California residents also have the right to limit the use and disclosure of sensitive personal information to purposes permitted under the California Consumer Privacy Act, as amended.
Oregon residents: In addition to the rights listed in Section 11, Oregon residents have the right to obtain a list of the specific third parties to which we have disclosed personal data.
To make a state-specific request or to ask about whether a particular law applies to you, contact us at connect@healthcareleadershipfoundation.org.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the platform with a revised “Last updated” date. This notification mechanism applies only to changes to this policy; security incidents are handled under Section 9.
14. Contact
If you have questions about this Privacy Policy, please contact us at connect@healthcareleadershipfoundation.org, or by mail at:
Healthcare Leadership Foundation
Box #1035, 3600 North Duke St, Suite 1
Durham, NC 27704