Privacy Policy

• Content Delivery: Providing relevant diabetes and foot care information
• User Experience: Improving website navigation and functionality
• Technical Support: Troubleshooting issues and providing help
• Security: Protecting against fraud, abuse, and security threats
• Analytics: Understanding which content is most helpful to users

• Newsletter: Sending requested diabetes education content
• Updates: Notifying about important health information or site changes
• Response: Answering your questions and providing support
• Surveys: Gathering feedback to improve our content and services

• Compliance: Meeting legal obligations and regulatory requirements
• Safety: Protecting user safety and preventing harmful content
• Disputes: Resolving legal disputes or responding to legal requests
• Enforcement: Enforcing our terms of service and community guidelines

Special Protections for Health Data:

• Encryption: Health-related communications are encrypted in transit and at rest
• Access Controls: Limited employee access on a need-to-know basis
• Retention Limits: Health information is not retained longer than necessary
• Anonymization: Health data used for analytics is anonymized
• Breach Response: Enhanced breach notification procedures for health data

Third-Party Services We Use:

• Google Analytics: Website traffic analysis and user behavior insights
• Google AdSense: Contextual advertising (if applicable)
• Amazon Associates: Affiliate link tracking for product recommendations
• Email Service Provider: Newsletter delivery and email analytics
• Social Media Plugins: Social sharing and engagement tracking

Limited Sharing Scenarios:

• Service Providers: Companies that help us operate the website (hosting, email, analytics) under strict privacy agreements
• Legal Requirements: When required by law, court order, or to protect safety
• Business Transfers: In the unlikely event of a sale or merger (with privacy protection requirements)
• Consent: When you explicitly consent to sharing for specific purposes
• Public Posts: Information you choose to share publicly in comments or forums

🔐 Encryption & Protection:

• SSL/TLS Encryption: All data transmission is encrypted using industry-standard protocols
• Database Encryption: Stored data is encrypted at rest using AES-256 encryption
• Secure Hosting: Servers hosted with enterprise-grade security providers
• Regular Backups: Encrypted backups stored in secure, geographically distributed locations
• Access Controls: Multi-factor authentication and role-based access for all systems

🔍 Monitoring & Response:

• Security Monitoring: 24/7 monitoring for suspicious activity and potential threats
• Intrusion Detection: Automated systems to detect and respond to security incidents
• Regular Updates: All software and security systems kept current with latest patches
• Vulnerability Scanning: Regular security assessments and penetration testing

👥 Staff & Access Controls:

• Background Checks: All employees with data access undergo background verification
• Privacy Training: Regular training on data protection and privacy requirements
• Need-to-Know Basis: Access limited to information necessary for job functions
• Confidentiality Agreements: All staff bound by strict confidentiality agreements
• Access Logging: All data access logged and regularly audited

🏢 Physical Security:

• Secure Facilities: Data centers with biometric access controls and 24/7 security
• Equipment Security: Secure disposal of hardware containing sensitive data
• Environmental Controls: Climate and power monitoring to prevent data loss

🛡️ Legal Safeguards for International Transfers:

• Adequacy Decisions: Transfers to countries with adequate privacy protections
• Standard Contractual Clauses: EU-approved contract terms for data protection
• Binding Corporate Rules: Internal privacy rules for multinational service providers
• Certification Schemes: Privacy certification programs for international compliance
• Consent: Explicit consent for transfers when other safeguards are not available

🏛️ Jurisdiction-Specific Compliance:

• GDPR (EU/EEA): European data protection standards applied globally
• CCPA (California): California privacy rights extended to all US users
• PIPEDA (Canada): Canadian privacy principles for Canadian users
• UK GDPR: UK data protection standards for UK users
• Other Jurisdictions: Local privacy laws respected where applicable

👶 Children’s Online Privacy Protection:

• No Collection: We do not knowingly collect information from children under 13
• Parental Notice: Parents will be notified if we discover we have collected child information
• Immediate Deletion: Any child information discovered will be deleted immediately
• Parental Rights: Parents can request deletion of their child’s information
• Content Standards: All content is appropriate for general audiences