Privacy Policy | Appalachian Medical Professionals

Effective Date: April 10, 2026 Last Updated: April 10, 2026

Appalachian Medical Professionals (AMP) is a West Virginia-based 501(c)3 nonprofit organization dedicated to Improving Breast Cancer Outcomes in Rural Appalachia (IBCORA). We respect your privacy and are committed to protecting your personal and protected health information (PHI) in compliance with applicable laws, including the Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website (www.wvva-amp.org), use our online tools (including risk-assessment questionnaires, SMS videos, forms, or contact features), or interact with our programs. By using our website or services, you consent to the practices described here. If you do not agree, please do not use the site.

1. Information We Collect

We collect only the information necessary to deliver our free, personalized “Goldilocks Screening Plan” and related services:

Personal Information: Name, email, phone number, mailing address, date of birth, and demographic details (e.g., gender, race/ethnicity for grant reporting).
Protected Health Information (PHI): Family cancer history, risk-assessment responses, genetic counseling referrals, and any health-related questionnaire answers submitted through HIPAA-compliant forms.
Technical/Automatic Data: IP address, browser type, device information, pages visited, and interaction data (collected via cookies or similar technologies).
Other: Information you voluntarily provide when contacting us or subscribing to updates.

We do not collect or store credit card information or sell any personal data.

2. How We Use Your Information

We use your information solely to advance our charitable mission:

Provide personalized breast cancer risk assessment and the free “Goldilocks Screening Plan.”
Facilitate referrals for genetic counseling/testing (you control consent with the testing company).
Send educational SMS text videos and follow-up communications.
Improve our programs through anonymous/de-identified data analysis.
Comply with legal obligations, grant reporting, and quality improvement.
Respond to your inquiries and support navigation services.

All uses are limited to what is necessary and permitted under HIPAA and nonprofit rules.

3. How We Share Your Information

We share information only as needed and with strong safeguards:

Service Providers: With HIPAA-compliant vendors (e.g., Wix for website hosting, Jotform for secure forms, or SMS platforms) under Business Associate Agreements (BAAs).
Referral Partners: With genetic testing companies or local providers only if you explicitly consent.
Legal Requirements: When required by law, subpoena, or to protect safety.
De-identified Data: Aggregated, non-identifiable data may be used for research, grant reports, or program improvement (never linked to you).

We never sell, rent, or share your information for marketing by third parties.

4. Security and HIPAA Compliance

We take reasonable administrative, technical, and physical safeguards to protect your data:

The website is built on Wix with PHI Protection enabled and a signed BAA.
All forms and data transmissions use encryption (TLS/SSL).
Access is limited to authorized personnel bound by confidentiality agreements.
Regular security reviews and updates are performed.

While we strive for the highest security, no system is 100% guaranteed. We encourage you to use strong passwords and avoid emailing PHI.

5. Cookies and Tracking Technologies

We use essential cookies to make the site function (e.g., remembering form progress) and analytics tools (e.g., Google Analytics, anonymized) to understand site usage. You can manage cookie preferences through your browser settings. We do not use tracking for behavioral advertising.

6. Your Rights

You have the right to:

Access, correct, or request a copy of your information.
Request restrictions on certain uses/disclosures of PHI.
Revoke consent for non-treatment communications.
Request deletion of your data (subject to legal or operational needs).

To exercise these rights, contact us at the details below. We will respond within 30 days (or as required by HIPAA).

7. Children’s Privacy

Our site is not directed to children under 18. We do not knowingly collect data from minors. If we learn we have collected such data, we will delete it promptly.

8. Changes to This Policy

We may update this policy occasionally. The “Last Updated” date will be revised. Continued use of the site after changes constitutes acceptance. Significant updates will be posted prominently.

9. Contact Us

For questions, requests, or complaints about this Privacy Policy or our privacy practices:

Email: wvva-amp.org@gmail.com or fbarker@wvva-amp.org
Phone: (276) 206-9772
Mail: 101 Westwood Commons Bluefield, VA 24605

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights if you believe your HIPAA rights have been violated.

Thank you for trusting AMP with your information as we work together to improve breast cancer outcomes in rural Appalachia.