Privacy policy

Last revised: July 2, 2024

INTRODUCTION

Purpose. The purpose of this Privacy Policy is to describe how Health Care Without Harm, Practice Greenhealth and Greenhealth Management (collectively, “HCWH,” “our,” or “we”) collect, use, and share information about you through our online interfaces (e.g., websites and mobile applications) owned and controlled by us (collectively referred to herein as the “Site”). Please read this notice carefully to understand what we do. If you do not understand any aspects of our Privacy Policy, please feel free to Contact Us or as described at the end of this Policy.

Scope; Third Party Sites. This Privacy Policy applies only to information we collect at and through the Site. Our Site also contains links to third-party sites that are not owned or controlled by HCWH. Please be aware that we are not responsible for the privacy practices of such other sites. We encourage you to be aware when you leave our Site and to read the privacy statements of each and every website that collects personal information.

Terms of Use. Please note that your use of our Site is also subject to our Terms of Use.

INFORMATION THAT WE COLLECT

HCWH may collect information from you by which you may be personally identified, including your name, postal address, e-mail address, telephone number, or employment (“Personal Data”).

Information You Provide to Us

We collect information you provide to us, for example, when you create or modify your account, register to use our Site, purchase products or services from us, request information from us, contact customer support, or otherwise communicate with us. This information may include, but is not limited to:

  • Name;
  • Address;
  • Gender;
  • Billing address;
  • Shipping address;
  • Email address;
  • Telephone number;
  • Job title and place of employment (including company address);
  • Newsletter opt-in preferences;
  • Social media account information (Twitter/Facebook name);
  • Financial information (donation amount and frequency, credit/debit card details, including number, security code, expiry date, type of credit card, etc. [if donating to HCWH]);
  • ID/Passport details (if registering for specific events in the EU);
  • Dietary preferences (if registering for certain events/conferences); or,
  • Mobility/accessibility information (if registering for certain events/conferences).

    Information We Collect Automatically Through Your Use of our Site

    We use Google Analytics, a web analytics service provided by Google, Inc. (“Google”) to collect certain information relating to your use of the Site. Google Analytics uses “cookies,” which are text files placed on your computer, to help the Site analyze how users use the site. You can find out more about how Google uses data when you visit our Site by visiting “How Google uses data when you use our partners' sites or apps”, (located at policies.google.com/technologies/partner-sites).

Information Collected Through Cookies and Similar Technologies

We and our service providers use cookies, web beacons, and other technologies to receive and store certain types of information whenever you interact with our Site through your computer or mobile device. A cookie is a small file containing a string of characters that is sent to your computer when you visit a website. When you visit the Site again, the cookie allows the Site to recognize your browser. Cookies may store unique identifiers, user preferences and other information. You can reset your browser to refuse all cookies or to indicate when a cookie is being sent. However, some Site features or services may not function properly without cookies. We may use cookies to improve the quality of our service, including for storing user preferences, tracking user trends, and providing you with information that may interest you. Currently, our Site does not recognize if your browser sends a “do not track” signal or similar mechanism to indicate you do not wish to be tracked or receive interest-based ads.

No Information from Children Under 13

If you are under the age of 13, please do not attempt to register with us at this Site or provide any personal information about yourself to us. If we learn that we have collected personal information from a child under the age of 13, we will promptly delete that information. If you believe we have collected personal information from a child under the age of 13, please Contact Us or call us at 1-(703)-860-9790.

HOW WE USE AND SHARE YOUR INFORMATION

To Provide Products, Services, and Information. We collect information from you to provide products and services (such as membership benefits) that you purchase using the Site; process donations you provide to HCWH and its affiliates; register and service your online account; register and service your online communities account; identify you and your organization to other users in community discussion groups; verify and grant access to member benefits and other non-member resources; register information for webinars, events, meetings and conferences; add your organization’s name to a pledge; provide information that you request from us; contact you in response to a request; ship and send information products, services, and other information to you; send you promotional materials or advertisements about our products, materials, and services, as well as new features and offerings; and, administer surveys, sweepstakes, and promotions and contests. We also may use your information to enforce or comply with our Terms of Use.

Sharing with Third Parties. We may provide information to third party service providers that help us operate and manage our Site, process orders, manage events, and fulfill and deliver products and services that you purchase from us. For example, we use a third party payment processor who must have access to the financial card information to validate payment for the products and services. Our Payment Processor’s privacy policy may be found at stripe.com/privacy. These service providers will have access to your personal information in order to provide these services, but when this occurs, we implement reasonable contractual and technical protections to limit their use of that information to helping us provide the service.

Email and Affiliate Advertising. You may opt in to receiving emailed information, advertisements, promotions, and sweepstakes from HCWH and its affiliates at the time you set up your account, . For example, HCWH may share your contact information with its affiliates and sister organizations to promote causes, products, and services that may interest you. Before providing your consent to allow HCWH to contact you through email, you should understand that you are also consenting to HCWH sharing your contact information with all of its affiliates and sister organizations, and consenting to them contacting you as well. If you have consented, you may subsequently opt out by contacting us, calling us at 1-(703)-860-9790, or logging on to your My Account page on the Site

Your Consent. In addition to the sharing described elsewhere in this Policy, we will share personal information with companies, organizations, or individuals outside of HCWH when we have your consent to do so.

Legal Proceedings. We will share personal information with third party companies, organizations, or individuals outside of HCWH if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:

  • Meet any applicable law, regulation, subpoena, legal process, or enforceable governmental request.
  • Enforce applicable Terms of Use, including investigation of potential violations.
  • Detect, prevent, or otherwise address fraud, security, or technical issues.
  • Protect against harm to the rights, property, or safety of HCWH, our users, customers or the public as required or permitted by law.

Transfer in the Event of Sale or Change of Control. If the ownership of all or substantially all of our business changes or we otherwise transfer assets relating to our business or the Site to a third party, including by merger, acquisition, bankruptcy proceeding, or otherwise, we may transfer your personal information to the new owner. In such a case, unless permitted otherwise by applicable law, your information would remain subject to the promises made in the applicable privacy policy unless you agree differently.

ACCESS TO YOUR INFORMATION AND CHOICES

Access and Update. You can access, review, and update certain information we have relating to your online account by contacting us. If you have questions about personal information we have about you or need to update your information, you can contact us or call us at 1-(703)-860-9790. You can opt-out of receiving marketing and promotional emails from HCWH by contacting us and/or by using the opt-out or unsubscribe feature contained in the emails. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. In all other cases, we will retain your Personal Data as set forth in this policy.

Closing your Account. You can close your online account by contacting us by email (privacy@hcwh.org) or by phone 1-(703)-860-9790. HCWH will retain your information, including your Personal Data, for as long as you continue to have an account with us. After you close your account, we may retain your Personal Data for the
longer of: (a) 5 years; (b) as long as necessary to comply with any other legal requirement; or, (c) for as long as necessary for us to protect our legal interests or otherwise pursue our legal rights and remedies.

Restrictions. You have the right to restrict our processing of your Personal Data under certain circumstances. In particular, you can request we restrict our use of it if you contest its accuracy, if the processing of your Personal Data is determined to be unlawful, or if we no longer need your Personal Data for processing, but we have retained it as permitted by law.

Complaints. You have the right to lodge a complaint with the applicable supervisory authority in your country where you believe your rights under applicable data protection laws have been violated. However, before doing so, we request that you contact us directly in order to give us an opportunity to work directly with you to resolve any concerns about your privacy.

Withdrawal of Consent. To the extent that our processing of your Personal Data is based on your consent, you may withdraw your consent at any time. Withdrawing your consent will not, however, affect the lawfulness of the processing based on your consent before its withdrawal, and will not affect the lawfulness of our continued processing that is based on any other lawful basis for processing your Personal Data.

Right to be Forgotten. You have the right to request that we delete all of your Personal Data. Where we cannot delete your Personal Data except by also deleting your user account, we will only delete your account when we no longer have a lawful basis for processing your Personal Data or after a final determination that your Personal Data was unlawfully processed.

How You May Exercise Your Rights. You may exercise any of the above rights by contacting us through any of the methods below in Section 11. If you contact us to exercise any of the foregoing rights, we may ask you for additional information to verify your identity. We reserve the right to limit or deny your request if you have failed to provide sufficient information to verify your identity or to satisfy our legal and business requirements.

SECURITY OF YOUR PERSONAL DATA

We use industry standard physical, technical, and administrative security measures and safeguards to protect the confidentiality and security of your personal information. All payment transactions are processed through our Payment Processor. Our current Payment Processor is Stripe, a payment platform used by some of the largest companies in the world. Communications between our Payment Processor and us are encrypted, and our Payment Processor stores information they receive in accordance with their security measures. You may access our Payment Processor’s security measures at docs.stripe.com/security. Our Payment Processor as of the effective date of this Privacy Policy has represented that it is PCI compliant. We do not store, process, or transmit any other cardholder data or financial data in electronic format and we only receive truncated credit card and financial account information. Our systems, policies, and procedures are designed to comply with the SAQ A data security standards issued by the Payment Card Industry Security Standards Council.

However, since the Internet is not a 100% secure environment, we cannot guarantee, ensure, or warrant the security of any information you transmit to us. There is no guarantee that information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. It is your responsibility to protect the security of your login information. Please note that emails and other communications you send to us through our Site are not encrypted, and we strongly advise you not to communicate any confidential information through these means.

CALIFORNIA PRIVACY RIGHTS

Under California’s "Shine the Light" law, California residents who provide personal information in obtaining products or services for personal, family, or household use are entitled to request and obtain from us once a calendar year information about the customer information we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information and the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year (e.g., requests made in 2018 will receive information regarding 2017 sharing activities).

To obtain this information, please send an email message to privacy@hcwh.org with "Request for California Privacy Information" on the subject line and in the body of your message. We will provide the requested information to you at your email address in response. Please be aware that not all information sharing is covered by the "Shine the Light" requirements and only information on covered sharing will be included in our response.

DATA CONTROLLER

HCWH is the data controller of your Personal Data. HCWH, its Data Protection Officer, or its representative may be contacted in any manner set forth in the Contact Us section at the end of this policy.

LAWFUL BASIS FOR PROCESSING OF PERSONAL DATA

If you are in the European Union, the processing of your Personal Data is lawful only if it is permitted under the applicable data protection laws. We have a lawful basis for each of our processing activities (except when an exception applies as described below):

  • Consent. By using our Site, you consent to our collection, use, and sharing of your personal data as described in this Privacy Policy. If you do not consent to this Privacy Policy, please do not use the Site;
  • Legitimate Interests. We will process your Personal Data as necessary to facilitate communication between HCWH and you, promote our business and causes, enforce our Terms of Use and other policies;
  • To Fulfill Our Obligations to You Under the Site’s Terms of Use. We process your Personal Data in order to fulfill our obligations to you as set forth in our Terms of Use as a user of our services and Site; and,
  • As Required by Law. We may also process your Personal Data to respond to legal process such as subpoenas, or as necessary for us to protect our interests or otherwise pursue our legal rights and remedies (for instance, when necessary to prevent or detect fraud, attacks against our network, or other criminal and tortious activities), defend litigation, and manage complaints or claims.

CONSENT TO PROCESSING OF PERSONAL DATA IN THE UNITED STATES

Our Site and its entire contents, features, and functionality are made available to you based on several locations around the world. If you are a resident of the European Economic Area (“EEA”) or other jurisdiction outside of the U.S., to provide our Site, products, and services to you, we may store your Personal Data outside of the EEA, including in the United States. This information may be collected directly from you on our Site outside the EEA. By using and accessing our Site, users who reside or are located in countries outside of the United States agree and explicitly consent to the collection to and processing of Personal Data on servers located outside of the country where they reside, and that the protection of such Personal Data may be different than required under the laws of their residence or location.

CHANGES TO OUR PRIVACY POLICY

Our Privacy Policy may change from time to time. We will not reduce your rights under this Privacy Policy without your consent in accordance with applicable law. We will post any privacy policy changes on this page and, if the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of privacy policy changes). We will also keep prior versions of this Privacy Policy in an archive for your review.

QUESTIONS AND HOW TO CONTACT US

If you have any questions, concerns, complaints or suggestions regarding our Privacy Policy or otherwise need to contact us, please Contact Us, call us at the numbers indicated below or contact us by postal mail at the appropriate address:

Health Care Without Harm - US/Canada
12110 Sunset Hills Road #600
Reston VA, 20190
+1-703-860-9790

Health Care Without Harm - Europe
Rue de l'Industrie 10,
1000 Brussels, Belgium

Health Care Without Harm Asia
Unit 203, Kalayaan Center Bldg.,
65 V. Luna Avenue, Brgy. Pinyahan
Quezon City, Philippines