Privacy Policy
This Privacy Notice for NoHo Protocol, Inc. ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
- Visit our website at https://www.protocolcares.com/ or any website of ours that links to this Privacy Notice
- Submit an inquiry through our website contact form
- Engage with us in other related ways
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@protocolcares.com.
Summary of Key Points
This summary provides key points from our Privacy Notice. You can find more details about any of these topics by using our table of contents below.
What personal information do we process? We collect personal information that you voluntarily provide when you submit an inquiry through our website form, including your name, phone number, email address, city and state, the name of your practice or institution, and your role (patient, caregiver, oncology provider, team member, or practice administrator).
Do we process any sensitive personal information? No. We do not process sensitive personal information.
Do we collect any information from third parties? No. We collect information only directly from you.
How do we process your information? We process your information to respond to your inquiry and, where you have agreed, to send relevant follow-up communications about our services. Information you submit is stored in our HIPAA-compliant Google Workspace environment and, where applicable, our customer relationship management (CRM) system.
Do we share personal information? We do not sell or share your personal information with third parties for advertising or commercial purposes. We may share information in limited circumstances, such as in connection with a business transfer.
How do we keep your information safe? We use organizational and technical security measures, including access controls and encryption, to protect your personal information. No transmission over the internet can be guaranteed 100% secure.
What are your rights? Depending on where you are located, you may have certain rights regarding your personal information. See Section 10 for details.
Table of Contents
- What information do we collect?
- How do we process your information?
- When and with whom do we share your personal information?
- Do we use cookies and other tracking technologies?
- How long do we keep your information?
- How do we keep your information safe?
- Do we collect information from minors?
- What are your privacy rights?
- Managing cookies & tracking technologies
- Do United States residents have specific privacy rights?
- Do we make updates to this notice?
- How can you contact us about this notice?
- How can you review, update, or delete the data we collect from you?
1. What information do we collect?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide when you submit an inquiry form on our website or otherwise contact us. The personal information we collect may include the following:
- Name
- Phone number
- Email address
- City and state of residence
- Your role (e.g., patient, caregiver, healthcare provider, or administrator)
Sensitive Information. We do not process sensitive personal information.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information. If you choose to contact us via the email listed on our website, please do not disclose sensitive information or information you regard as confidential.
2. How do we process your information?
In Short: We process your information primarily to respond to your inquiry and, where applicable, to follow up about our services.
We process your personal information for the following reasons:
- To respond to inquiries and provide support. We use your information to respond to your inquiry and assist you with any questions about our services.
- To deliver and facilitate services. We may process your information to provide or facilitate the services you have requested.
- To send follow-up communications. If you have expressed interest in our services, we may send you relevant follow-up communications. You can opt out at any time by using the unsubscribe link in our emails or by contacting us directly.
3. When and with whom do we share your personal information?
In Short: We do not sell or share your personal information for advertising or commercial purposes. We may share information in limited situations described below.
We may need to share your personal information in the following situations:
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- Service Providers. We may share your information with third-party service providers who assist us in operating our business such as our cloud storage provider (Google Workspace) and, where used, our customer relationship management (CRM) provider — pursuant to written contracts that require them to protect your information and, where applicable, to comply with applicable health-privacy obligations.
- Legal Compliance. We may disclose your information where required to do so by law or in response to valid legal process.
We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.
4. Do we use cookies and other tracking technologies?
In Short: We may use basic analytics tools to understand how visitors use our website. We do not use cookies for advertising.
Our website may use cookies or similar technologies (such as analytics tools) to help us understand how visitors interact with our site, maintain security, and improve site functionality. Any analytics tools we use are limited to understanding aggregate site usage — we do not use tracking technologies for advertising or to track your browsing across other websites.
What type of information do tracking technologies collect? The tracking technologies on our website may collect information such as:
- the IP addresses assigned to the computers and other devices you use;
- your internet service provider;
- the device ID number;
- approximate geographic location;
- the website pages visited or clicked on;
- the date and time you visited the website, and the amount of time spent on the website;
- your operating system, browser type, search requests, and other similar information;
- the websites you access before and after visiting the website, and
- data related to how and when you use the website.
We may combine information from tracking technologies with Personal Information, including data obtained from other sources.
How long do Cookies last? A cookie can either be a “session” cookie or a “persistent” cookie. Session cookies exist only for so long as you are visiting the applicable Site and are typically deleted when you exit your web browser. Persistent cookies exist for a set period of time, for example, up to several months or years. Each time you visit a website that has implemented a persistent cookie, the persistent cookie is renewed, and that cookie will remain active until its predetermined expiration date. You can manually delete persistent cookies through your browser settings.
First-party versus third-party Cookies. Cookies may either be “first-party” or “third-party” cookies. A first-party cookie allows your web browser to talk to the actual website that you are visiting (i.e. this website). A third-party cookie allows your web browser to talk to a third-party website, such as the source of an ad that appears on the website you are visiting or a third-party analytics provider. We do not have control over how information gathered by third-party cookies is used by third parties.
Vercel Web Analytics. We use Vercel Web Analytics to collect and process information about your use of the website. Vercel Web Analytics does not use cookies; instead, visitors are identified by a hash generated from the incoming request, and this hash is not used to track or cross-check your data across other websites or applications. Vercel Web Analytics only stores anonymized data, such as page views and aggregate usage patterns, and this data is not tied to or associated with any individual, customer, or IP address. We use this information to better understand and measure how visitors interact with our website.
Because Vercel Web Analytics does not use cookies or collect personal identifiers, no cookie-based opt-out is applicable or necessary. To learn more about how Vercel Web Analytics processes data, visit Vercel’s Web Analytics Privacy and Compliance page.
5. How long do we keep your information?
In Short: We keep your information for as long as necessary to fulfill the purposes described in this Privacy Notice, unless a longer retention period is required by law.
We will only retain your personal information for as long as necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).
When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it, or — if this is not immediately possible (for example, because information is stored in backup archives) — securely store and isolate it from further processing until deletion is possible.
6. How do we keep your information safe?
In Short: We protect your personal information through organizational and technical security measures, including a HIPAA-compliant, secure, access-controlled cloud environment.
All personal information submitted through our website is received and stored within our HIPAA-compliant, secure, access-controlled Google Workspace environment, which includes enterprise-grade access controls, encryption, and audit logging. We have implemented appropriate technical and organizational measures designed to protect the security of the personal information we process.
Despite our safeguards, no electronic transmission over the internet can be guaranteed to be 100% secure. While we will do our best to protect your personal information, transmission of information to and from our website is at your own risk. You should only access our Services within a secure environment.
7. Do we collect information from minors?
In Short: We do not knowingly collect data from or market to children under 18 years of age.
We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years old, or that you are the parent or guardian of a minor and consent to that minor's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under age 18, please contact us at privacy@protocolcares.com.
8. What are your privacy rights?
In Short: You may review, update, or request deletion of your personal information at any time by contacting us.
Withdrawing your consent. If we are relying on your consent to process your personal information, you have the right to withdraw consent at any time by contacting us using the details in Section 12. This will not affect the lawfulness of processing conducted before your withdrawal.
Opting out of marketing communications. You can unsubscribe from our marketing or promotional communications at any time by clicking the unsubscribe link in our emails or by contacting us directly. You may still receive service-related messages necessary to respond to your inquiry.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
If you have questions or comments about your privacy rights, you may email us at privacy@protocolcares.com.
9. Managing Cookies & Tracking Technologies
Most browsers automatically accept cookies. You can disable this function by changing your browser settings, but disabling cookies may impact your use and enjoyment of the Services. Not all features or functions of the Site may work properly if you disable cookies. You cannot disable all cookies, such as cookies that are essential to the functioning of the website.
Do Not Track. We do not currently employ a process for automatically responding to “Do Not Track” (DNT) signals sent by web browsers, mobile devices, or other mechanisms. Per industry standards, third parties may be able to collect information, including personal information, about your online activities over time and across different websites or online services when you use the Services.
Global Privacy Control. You can use the Global Privacy Control (“GPC”) through a supported browser to signal certain of your opt-out preferences. You may opt-out of the processing of your Personal Information for purposes of targeted advertising or certain sales of your personal information by broadcasting the Global Privacy Control Signal through a supported browser. If you use the GPC, we will process your request for your browser, but it will not apply outside of that browser to your device. You will need to use the GPC for each browser you use to access the website. If you clear your cookies in your browser after using the GPC, you will need to use the GPC again for us to process your opt out for that browser.
10. Do United States residents have specific privacy rights?
In Short: Residents of certain states may have rights to access, correct, or delete the personal information we hold about them.
Depending on where you live and the laws that apply, you may have certain statutory data protection rights regarding your personal information. These rights may be subject to exceptions and limitations under applicable law.
You may have the right to:
- be informed of what personal data we hold about you and request access to and/or a copy of it;
- request that we correct personal information that is inaccurate or incomplete;
- request that personal information be removed from our systems (deleted), subject to certain exceptions;
- request a portable copy of certain personal information;
- opt out of certain processing of your personal information, including (where applicable) targeted advertising, and the sale or sharing of personal information (as those terms may be defined by applicable law);
- withdraw your consent at any time where we process personal information based on your consent (this will not affect the lawfulness of processing before you withdrew consent);
- not be discriminated against for exercising your rights (where applicable); and
- appeal a decision we make about your request (where applicable under U.S. state law).
Sale/Sharing for targeted advertising: NoHo Protocol, Inc., does not sell personal information. NoHo Protocol, Inc., does not share personal information for cross-context behavioral advertising (also called targeted advertising) as those terms may be defined under certain U.S. state privacy laws.
Sensitive personal information: NoHo Protocol, Inc., uses sensitive personal information only for purposes such as providing services, credentialing, security, fraud prevention, and compliance with law, as described above, and not to infer characteristics about you for targeted advertising.
Non-discrimination: NoHo Protocol, Inc., will not discriminate against you for exercising your privacy rights.
If you wish to exercise any of these rights, please contact us by writing to or emailing us at privacy@protocolcares.com.
You may also mail your request to:
NoHo Protocol, Inc.
30 Cooper Square, Floor 10
New York, NY 10003
United States
We may need to verify your identity before processing certain requests. We will respond within the time required by applicable law.
Authorized agents (where applicable): In some U.S. states, you may designate an authorized agent to submit a request on your behalf. If you use an authorized agent, we may ask for proof that the agent is authorized, and we may also require you to verify your identity directly with us.
Appeals (where applicable): If we deny your request, you may have the right to appeal our decision. To appeal, please email privacy@protocolcares.com with the subject line “Privacy Request Appeal” and include your original request and our response. We will review and respond within the time required by applicable law.
Shine the Light. Pursuant to California Civil Code Section 1798.83, if you are a California resident, you have the right to obtain: (a) a list of all third parties to whom we may have disclosed your Personal Information within the past year for direct marketing purposes, and (b) a description of the categories of Personal Information disclosed, by contacting us per the “Contact Us” Section below.
Categories of Personal Information We Collect
The table below shows the categories of personal information we have collected in the past twelve (12) months.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, email address, telephone number, city and state | YES |
| B. Personal information (CA Customer Records statute) | Name, contact information | YES |
| C. Protected classification characteristics | Gender, age, race, national origin, marital status, etc. | NO |
| D. Commercial information | Transaction information, purchase history, financial details | NO |
| E. Biometric information | Fingerprints and voiceprints | NO |
| F. Internet or network activity | Browsing history, search history, online behavior | NO |
| G. Geolocation data | Precise device location | NO |
| H. Audio, electronic, or sensory information | Images, audio, or video recordings | NO |
| I. Professional or employment-related information | Job title, work history, professional qualifications | NO |
| J. Education information | Student records and directory information | NO |
| K. Inferences from collected information | Profiles about individual preferences or characteristics | NO |
| L. Sensitive personal information | NO |
11. Do we make updates to this notice?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated “Last updated” date at the top of this Privacy Notice. If we make material changes, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice periodically.
12. How can you contact us about this notice?
If you have questions or comments about this notice, you may email us at privacy@protocolcares.com or contact us by post at:
NoHo Protocol, Inc.
30 Cooper Square, Floor 10
New York, NY 10003
United States
13. How can you review, update, or delete the data we collect from you?
Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please contact us at privacy@protocolcares.com.