GDPR & CCPA Data Governance
HCD Health Privacy Policy
Effective version: 2026.1 • Last updated: October 2026
Commitment: We practice strict data minimization. We do not sell your personal data, we never collect private clinical medical records, and all referral analytics are anonymized using one-way cryptographic hashing.
1. Information We Collect
- Newsletter Subscriptions: Your voluntary email address and cryptographic timestamp upon opting in.
- Editorial Inquiries: Your name and email address when contacting our clinical desk.
- Anonymized Telemetry: When you navigate outbound referral links (
/go/[slug]), we generate a non-reversible daily-salted SHA-256 hash of your network signature to prevent permanent consumer profiling.
2. What We Explicitly Do NOT Collect
We never collect protected health information (PHI), clinical diagnosis records, laboratory bloodwork, or credit card billing credentials. All commercial transactions occur on external merchant checkouts governed by their independent security certifications.
3. Your Data Subject Rights (GDPR & CCPA)
You maintain the absolute right to request data access, rectification, or complete deletion of your email address from our newsletter dispatch systems at any time by contacting privacy@hcdhealth.com.