Your Privacy Matters

Protecting Your Information

We are committed to protecting your personal information with transparency, care, and secure systems designed to support providers, partners, and clients alike.

Privacy Policy

Last updated: March 30, 2026

1. Introduction

Care Alliance Collective™ ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. We comply with applicable federal and state privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA) where applicable.

2. Information We Collect

We collect information in the following categories:

Account Information: Name, email address, phone number, and professional credentials when you create an account
Profile Information: Practice details, specialty, insurance accepted, location, bio, and profile photos for providers
Usage Data: Pages visited, features used, timestamps, device type, browser type, and IP address
Referral Data: De-identified client information shared through the referral board (age range, service type, barriers to care)
Transport Data: Pickup and dropoff addresses, ride schedules, and related notes for client transport requests
Communication Data: Messages and notifications sent through the platform

3. How We Use Your Information

We use collected information to:

Operate, maintain, and improve the platform
Facilitate care coordination and referral matching between providers and partners
Display provider profiles in the public directory
Process subscriptions and manage billing
Send transactional emails, notifications, and service updates
Monitor platform security and prevent fraud or abuse
Comply with legal obligations and enforce our Terms of Service

4. HIPAA Compliance

Where applicable, we operate as a Business Associate under HIPAA. We implement administrative, physical, and technical safeguards to protect Protected Health Information (PHI). All employees with access to PHI are required to complete HIPAA training and sign confidentiality agreements. PHI is never used for marketing purposes. We will notify affected individuals and the Department of Health and Human Services in the event of a data breach involving PHI, as required by the Breach Notification Rule.

5. Data Sharing & Disclosure

We do not sell your personal information. We may share information with:

Service Providers: Third-party vendors who help us operate the platform (e.g., hosting, email, payment processing)
Network Participants: Provider directory listings are publicly visible; referral data is shared only with authorized network members
Legal Requirements: When required by law, subpoena, or government request
Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, role-based access controls, audit logging, and regular security assessments. While we strive to protect your information, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Upon account deletion, we will remove your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., audit trails, billing records). Referral data may be retained in de-identified form for analytics purposes.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access, correct, or delete your personal information
Request a copy of the data we hold about you
Opt out of marketing communications
Restrict or object to certain data processing activities
Lodge a complaint with a supervisory authority

To exercise these rights, contact us at [email protected].

9. Cookies & Tracking

We use essential cookies required for authentication and platform functionality. We do not use third-party advertising cookies. Analytics data is collected in aggregate and does not identify individual users. You can control cookie preferences through your browser settings.

10. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the platform. Your continued use of the Service after changes constitutes acceptance of the updated policy.