GDPR Compliant Privacy & Cookie Policy

Introduction

At GapCare, your privacy is not just a legal obligation—it is a cornerstone of our relationship with you. This Privacy and Cookie Policy reflects our dedication to safeguarding your personal data while providing you with transparency about how we collect, process, store, and use your information. In an era where data is central to personalized care and online engagement, we aim to maintain your trust by adhering to stringent data protection standards.

GapCare operates in full compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws. These regulations ensure that your data is handled responsibly, with your consent and understanding at the forefront. We continuously strive to meet and exceed these legal requirements, ensuring that your interactions with GapCare remain safe and secure.

The primary purposes of this policy are:

To inform you about the types of data we collect and how we use it. By being transparent, we empower you to make informed decisions about sharing your information and engaging with GapCare services.
To provide a clear explanation of your rights under GDPR and how you can exercise them. You have the right to access, modify, or withdraw your consent, and we want to make exercising those rights as seamless as possible.

Additionally, this policy explains the role of third-party tools—specifically HubSpot—in enhancing our website functionality, analytics, and marketing efforts. HubSpot’s compliance-ready features, such as consent banners, cookie management tools, and data encryption, enable us to provide a user-friendly experience without compromising your privacy. HubSpot plays an integral role in ensuring that GapCare’s digital platforms remain GDPR-compliant while offering personalized services and insights.

Why This Policy Matters

In today’s digital landscape, organizations often collect vast amounts of data to improve services, enhance user experience, and facilitate communication. At GapCare, we understand that with this capability comes the responsibility to act ethically and legally. This policy ensures that you:

Understand what data we collect: For example, basic identification data like your name, contact details, and browsing behavior.
Know why we collect data: Primarily to improve our services, communicate effectively, and provide you with personalized solutions.
Feel confident that your data is safe: Whether it’s protected health information (PHI) or browsing cookies, our systems are designed with security and privacy in mind.

As a healthcare-oriented platform, GapCare recognizes the sensitivity of certain types of data, including health metrics and behavioral insights. We implement extra layers of security for such information, ensuring compliance with GDPR’s stringent requirements around sensitive data processing.

GDPR Compliance at GapCare

The General Data Protection Regulation (GDPR) is a comprehensive legal framework designed to give individuals greater control over their personal data. At GapCare, GDPR compliance isn’t just a checklist—it’s an ongoing commitment to ethical and transparent practices. Key principles of GDPR compliance include:

Lawfulness, Fairness, and Transparency: We only collect data with your informed consent, and we explain why and how it will be used in clear, accessible language.
Purpose Limitation: Data collected is used solely for legitimate purposes outlined in this policy and is not repurposed without your explicit consent.
Data Minimization: We collect only the data necessary for the specified purposes. For instance, if you subscribe to our newsletter, we only collect your email address and consent preferences.
Accuracy: We ensure that your data remains accurate and up to date. You can contact us anytime to correct or update your information.
Storage Limitation: Your data is retained only as long as necessary for the purpose it was collected or as required by law.
Integrity and Confidentiality: Robust security measures, including encryption and regular audits, protect your data from unauthorized access or breaches.

Role of HubSpot

HubSpot is an essential tool in GapCare’s digital ecosystem, enabling us to deliver a seamless online experience while ensuring GDPR compliance. Here’s how HubSpot plays a role in our operations:

Website Functionality: HubSpot powers elements like forms, landing pages, and contact management, ensuring you have a user-friendly and interactive experience.
Analytics: HubSpot tracks anonymous data to help us understand website usage patterns, such as which pages are most visited or which content resonates with users. This data is aggregated and does not identify you personally unless you consent to advanced tracking.
Marketing Automation: With your consent, HubSpot helps us tailor communication based on your preferences, ensuring that you only receive relevant and helpful information.
Consent Management Tools: HubSpot provides built-in GDPR compliance features like cookie consent banners, opt-in forms, and customizable preferences panels. These tools enable you to control what data you share and how it is used.
Data Encryption: Any data processed through HubSpot is encrypted and stored securely, further enhancing our commitment to data protection.

We mention HubSpot specifically in this policy to ensure transparency about the tools we use. While HubSpot facilitates certain aspects of our website and data management, GapCare remains fully responsible for ensuring that your data is handled in accordance with GDPR.

How to Manage Cookies

Managing your cookie preferences is simple and straightforward at GapCare. We provide you with tools and options to ensure you have complete control over your data and browsing experience. Our commitment to transparency and GDPR compliance means that you can manage cookies with ease, whether through our website or your device.

Cookie Settings Panel

You can manage your cookie preferences using our Cookie Settings Panel, which is accessible:

Through the cookie consent banner displayed upon your first visit to our website.
At any time via the “Manage Cookies” link located at the bottom of our website.

This panel allows you to:

Accept All Cookies: Select this option to enable all cookies, including those used for analytics, functionality, performance, and targeted advertising.
Reject Non-Essential Cookies: This option disables cookies that are not essential for the basic operation of the website, such as those used for performance tracking and marketing.
Customize Preferences: Choose specific cookie categories to allow or block, such as:
- Essential Cookies: Required for website functionality.
- Performance Cookies: Help us improve user experience.
- Functional Cookies: Save your preferences and enhance your interaction with the site.
- Advertising Cookies: Used for personalized marketing and targeting.

Changes made through the Cookie Settings Panel take effect immediately, and your preferences are saved for future visits.

Browser and Device Settings

You can also manage and clear cookies directly through your browser or device. This gives you further control over how cookies are stored or used. The steps vary slightly depending on the browser you use, but generally include:

Accessing Browser Settings: Navigate to your browser’s settings or preferences menu and look for options labeled “Privacy” or “Cookies.”
Clearing Cookies: Select the option to clear cookies or site data. You can usually delete cookies for all websites or specific ones.
Blocking or Allowing Cookies: Many browsers allow you to block all cookies, block third-party cookies, or specify which sites are allowed to use cookies.
Customizing Retention Settings: Some browsers allow you to set preferences for how long cookies are stored on your device.

For guidance, visit your browser’s help documentation:

Why We Provide Cookie Management Options

We recognize that different users have different levels of comfort when it comes to sharing data. By providing robust cookie management tools:

We empower you to make informed decisions about your data.
We ensure compliance with GDPR Article 7, which requires that consent be freely given, specific, informed, and unambiguous.
We uphold your right to withdraw or modify consent at any time, as outlined in GDPR Article 13.

Your Rights Under GDPR

This policy empowers you with the following rights under GDPR:

Right to Be Informed: You have the right to know what data we collect, how we use it, and who we share it with.
Right of Access: You can request a copy of your personal data held by GapCare at any time.
Right to Rectification: If any data we hold about you is incorrect or incomplete, you have the right to have it corrected.
Right to Erasure (Right to Be Forgotten): You can request that we delete your data, provided it is no longer necessary for the purposes it was collected.
Right to Restrict Processing: You can limit how your data is used in certain circumstances, such as during a dispute about accuracy or processing legality.
Right to Data Portability: You can request that your data be transferred to another organization in a structured, machine-readable format.
Right to Object: You can object to the processing of your data for specific purposes, such as marketing.
Rights in Relation to Automated Decision-Making: You can request human intervention if decisions about you are made solely by automated processes.

Commitment to Continuous Improvement

GapCare continuously reviews and updates this policy to align with changes in GDPR, technological advancements, and best practices. We invite feedback from our users to further refine our approach and ensure that our policies remain relevant and effective.

At GapCare, we are committed to respecting your preferences while maintaining a user-friendly and fully functional website experience. If you have questions, concerns, or suggestions about this Privacy and Cookie Policy, please contact us at privacy@gapcare.com.

GapCare GDPR Compliant Privacy and Cookie Policy