Privacy Policy

Introduction

The Heart of a Giant Foundation (“we,” “our,” or “us”) is committed to protecting your privacy and maintaining the confidentiality of your personal health information. This Privacy Policy describes how we collect, use, protect, and disclose your information in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable privacy laws.

Information We Collect

Personal Information

• Name, email address, phone number
• Demographic information (age, gender, location)
• Emergency contact information
• Event registration details

Health Information

• Health screening requests and results
• Medical history relevant to our programs
• Dietary restrictions and accessibility needs
• Health education participation records

How We Use Your Information

• To provide health education and cardiometabolic screening services
• To register you for events and programs
• To communicate with you about our services, including by SMS where you have consented
• To improve our programs and services
• To comply with legal and regulatory requirements
• To send newsletters and updates (with your consent)

Text Message (SMS) Communications

When you provide your phone number and consent to SMS communications, you may receive text messages from Heart of a Giant Foundation regarding health education, appointment reminders, screening follow-up, and care coordination. By opting in, you agree to receive these messages.

• Message and data rates may apply.
• Reply STOP at any time to unsubscribe. You will receive one confirmation message, then no further texts.
• Reply HELP for assistance.
• We do not share your phone number with third parties for marketing purposes.
• Consent to receive SMS messages is not a condition of receiving our services.

Opt-in paths include: completing a paper intake form at a community screening event (opt-in checkbox, unchecked by default), submitting an online intake form at heartofagiant.org (opt-in checkbox, unchecked by default), or texting START to our number. All opt-in points include disclosure of message frequency, the ability to opt out, and applicable rates.

Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

• With health care providers as necessary for your care
• With your explicit written authorization
• As required by law or legal process
• To prevent serious harm to you or others
• For public health activities
• With business associates who assist in our operations (under signed agreements)

Your Rights

• Right to access your personal health information
• Right to request amendments to your information
• Right to request restrictions on use and disclosure
• Right to receive an accounting of disclosures
• Right to request confidential communications
• Right to file a complaint
• Right to withdraw consent (where applicable)

Data Security

We implement appropriate technical and administrative safeguards to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission and storage
• Regular security assessments
• Staff training on privacy and security
• Access controls and audit logs
• Secure disposal of information

Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the “Last updated” date. Your continued use of our services after such changes constitutes acceptance of the updated policy.