Privacy Policy

Last Updated: May 13, 2026

Who We Are

SPH Ferndale is the public brand used on healthdatastrategy.com. The website is operated by SPH FERNDALE, LLC, located at 3500 Lenox Rd NE, Ste 625, Atlanta, GA 30326. Privacy questions and requests may be sent to [email protected].

This policy describes the website as it is currently implemented. The site presents educational, nonclinical care-transition organization content. It does not provide an account system, live care portal, clinical triage, or a place to submit medical records.

Information That Reaches Us

Information you submit

• Contact messages: full name, email address, and the message you choose to send.
• Care-transition notes request: first name, last name, email address, Date of Birth, and an optional phone number.
• Consent records: the state of each email, SMS, and policy-acknowledgment checkbox; the exact consent language shown; the consent-language version; submission date and time; page URL; and the hostname reported by the browser.
• Communications: information you include if you reply to an email, request help, opt out, or contact us about privacy or the messaging program.

Date of Birth is required on the health subscription form to verify that a requester is at least eighteen. Phone is optional unless the requester separately selects SMS permission. Please do not place diagnoses, symptoms, medication details, treatment information, medical records, or other sensitive health details in either form.

Infrastructure information

When a browser requests a page or sends a form, hosting, network, and webhook infrastructure may ordinarily receive technical information such as an IP address, request date and time, requested URL, referring page, browser or device characteristics, and request headers. The website’s client-side code does not look up an IP address and does not add analytics or advertising identifiers. Infrastructure providers may process technical information to deliver pages, maintain security, diagnose errors, or operate the form endpoint under their own contracts and technical settings.

Tools that stay in your browser

The first 72 hours guide, discharge-paperwork checklist, question builder, and resource-category filter operate in page memory. Selections are not sent to SPH Ferndale, are not written to local or session storage, and disappear when the page is reloaded or closed. Printing a question list uses the browser’s print function; the site does not receive the printed content.

How the Information Supports the Site

We use information for lawful operational purposes connected to the request a visitor makes, including to:

• respond to a general contact message;
• send the requested recurring educational email newsletter and honor unsubscribe requests;
• send optional marketing text messages only when the visitor has separately provided express written permission;
• record and demonstrate consent, opt-out, and suppression choices;
• maintain the security and integrity of the website and form endpoint, prevent misuse, and troubleshoot delivery;
• comply with applicable law, respond to valid legal process, protect safety and rights, and establish or defend legal claims; and
• review aggregate operational patterns that do not require adding analytics or advertising trackers to the site.

We do not use a contact or subscription form to provide personalized medical guidance, make clinical decisions, or build a medical record.

When Information May Leave Our Control

Information may be disclosed to vendors that perform a necessary function for the website or communications program, such as website hosting, network delivery, webhook processing, email delivery, text-message delivery, message aggregation, security, and technical support. Those providers receive information only for the function they are engaged to perform and are expected to handle it under applicable contractual and legal restrictions.

Information may also be disclosed when reasonably necessary to comply with law, a subpoena, court order, or other valid process; to investigate fraud, abuse, or security incidents; to protect the rights, safety, or property of visitors, SPH Ferndale, or others; or to obtain professional advice and establish, exercise, or defend legal claims. If control of the website or relevant business assets changes, information may be reviewed or transferred as part of that transaction subject to applicable law and the commitments in effect at the time.

Personal data is not sold and is not shared for cross-context behavioral advertising.

Mobile and SMS Information

Mobile information, SMS opt-in data, and consent will not be shared with third parties, except aggregators and providers operating the text-message service. Text messaging originator opt-in data and consent will not be sold.

This SMS rule does not prevent operational processing needed to deliver a requested message, record consent, honor STOP, provide HELP, prevent abuse, or comply with law. See the SMS Terms for program details.

Cookies, Tracking, and Browser Signals

Tracking is currently disabled. The site does not load analytics pixels, advertising trackers, cookie libraries, or client-side IP lookup services. It does not show a cookie-preference banner because the current code does not set a nonessential tracking preference. The in-page tools do not save selections, and there is no delayed subscription modal or account login.

If nonessential tracking is introduced later, this policy and the site interface must be updated before it loads. Where required, the site would request consent first, provide a clear decline or essential-only path, and recognize browser-based opt-out signals such as Global Privacy Control. A recognized Global Privacy Control signal will be treated as a request to opt out of sale or sharing where applicable law requires that treatment.

Retention by Record Type

Records are kept only as long as reasonably necessary for the purpose described, legal obligations, security, dispute resolution, and enforcement. General contact and newsletter records should be deleted or de-identified when no longer needed for those purposes. Infrastructure records may follow the applicable provider’s configured retention period.

SMS opt-in and opt-out evidence will be retained for at least four years from the relevant action. Suppression and STOP records will be retained for at least ten years, or longer when legally required, so that an opt-out remains effective. A minimal suppression record may be kept after other information is deleted. Retention may be extended for a legal hold, active dispute, security investigation, or other legal requirement.

Your Communication Choices

Every informational email should provide an unsubscribe method. An email recipient may use that method or contact [email protected]. To unsubscribe from SMS, reply STOP, END, CANCEL, UNSUBSCRIBE, QUIT, STOPALL, REVOKE, or OPTOUT. Reply HELP for help. You may revoke SMS consent by any reasonable method, including a reply requesting that messages stop, email to the support address, or mail to SPH FERNDALE, LLC, 3500 Lenox Rd NE, Ste 625, Atlanta, GA 30326. We will honor revocation promptly and no later than ten business days after receipt. Marketing text messages are sent only between 8 a.m. and 9 p.m. in the recipient’s local time. Opting out of SMS does not automatically unsubscribe an email address, and opting out of email does not automatically withdraw SMS permission; each channel can be managed separately.

U.S. Privacy Rights; Do Not Sell or Share

Depending on state of residence and applicable law, a visitor may have the right to request access to personal information, correction, deletion, or a portable copy; to learn the categories of information collected and disclosed; to opt out of sale, sharing, targeted advertising, or certain profiling; and to limit certain uses of sensitive personal information. California residents may have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the right to know, correct, delete, receive a copy, opt out of sale or sharing, limit certain uses of sensitive information, and receive equal service without discrimination for exercising a privacy right.

SPH Ferndale does not sell personal information or share it for cross-context behavioral advertising. A Do Not Sell or Share request may still be submitted by emailing [email protected] or writing to the address below. The separate Do Not Sell or Share Personal Information page explains the request process. Global Privacy Control is honored as described in the tracking section when applicable.

We may request information reasonably necessary to verify identity, residence, and the scope of a request. Verification information will be used for that process. An authorized agent may submit a request if the agent provides authorization and, where permitted, the consumer independently confirms the request. We will not discriminate against a person for exercising an applicable privacy right. Where applicable, we respond to a verifiable privacy request within 45 days of receipt. When permitted and reasonably necessary, we may extend the response period by an additional 45 days; we will explain the extension and its reason within the initial 45-day period.

If a request is denied, the response will explain the reason where required. A resident with an applicable appeal right may appeal by emailing the privacy address with the subject “Privacy Appeal” and enough information to identify the earlier decision. Rights vary by jurisdiction, and an exception may apply to a particular record.

Safeguards and Practical Limits

Reasonable administrative, technical, and organizational safeguards are used or expected for information handled through the site and its providers. No transmission, endpoint, or storage system can be guaranteed completely secure. Visitors should avoid sending sensitive health information through these forms and should use an appropriate clinical channel for medical information.

Age Boundary and Children

The website and communications programs are intended only for people eighteen or older. They are not directed to children, and SPH Ferndale does not knowingly seek personal information from a child through this site. If information from a child is believed to have been submitted, contact the privacy email so the situation can be reviewed and handled as required by law.

Policy Changes

This policy may be revised when the website, communications program, providers, or legal requirements change. The revised version will be posted on this page with a new Last Updated date. Material changes will be communicated through an appropriate channel when required.

Privacy Contact

SPH FERNDALE, LLC
3500 Lenox Rd NE, Ste 625
Atlanta, GA 30326
[email protected]