Privacy Policy

Last Updated: June 17, 2026

The Hidradenitis Suppurativa Foundation (“HSF,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.hs-foundation.org) or interact with us online.

By using our website, you agree to the terms of this Privacy Policy.

Information We Collect

We collect limited personal information necessary to operate our nonprofit and communicate with you.

Information You Provide Voluntarily
We may collect:

• Name
• Email address
• Any information you provide through contact forms or email communications
• Email subscription preferences

Information Collected Automatically
When you visit our website, certain information may be collected automatically, including:

• IP address
• Browser type and version
• Device type
• Pages visited and time spent
• Referring URLs

This information is typically collected through standard server logs and basic website functionality.

Cookies and Similar Technologies
We may use essential cookies or similar technologies to:

• Ensure website functionality
• Prevent spam or abuse
• Improve site performance

We do not use cookies for advertising or behavioral tracking. If non-essential cookies (such as analytics tools) are used in the future, we will update this policy and provide appropriate notice or consent mechanisms.

How We Use Your Information

We use your information only for limited nonprofit purposes, including:

• Sending newsletters, updates, and educational content (if you opt in)
• Responding to your inquiries or requests
• Managing email subscriptions
• Maintaining website security and performance
• Complying with legal obligations

We do not sell or rent your personal information.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we rely on the following legal bases:

• Consent – for sending newsletters and communications you opted into
• Legitimate interest – for website security, administration, and responding to inquiries
• Legal obligation – when required to comply with applicable laws

You may withdraw your consent at any time.

How We Share Information

We do not sell your personal information.

We may share your information only in the following circumstances:

• With service providers (e.g., email platforms or website hosting providers) who help us operate our website and communications
• When required by law, legal process, or government request
• To protect the rights, safety, or integrity of HSF, our users, or others

All service providers are required to protect your information.

Data Retention

We retain personal information only as long as necessary to:

• Fulfill the purposes described in this policy
• Maintain communication records
• Comply with legal obligations

If you unsubscribe or request deletion, we will delete or anonymize your information within a reasonable timeframe, unless retention is required by law.

Your Privacy Rights

Depending on your location, you may have rights regarding your personal information.

For All Users

You may:

• Request access to the personal information we hold about you
• Request correction or deletion
• Withdraw consent for communications at any time

Contact us at: info@hs-foundation.org

For U.S. Residents (State Privacy Laws)

If applicable under state law, you may have the right to:

• Access personal data we collect about you
• Request deletion of your data
• Correct inaccurate data
• Opt out of certain types of data sharing (note: we do not sell or share data for advertising)

We will respond to verified requests in accordance with applicable law.

For EU/EEA Residents (GDPR)

You have the right to:

• Access your data
• Correct inaccurate information
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

You also have the right to lodge a complaint with a data protection authority.

International Data Transfers

Our website and systems are based in the United States. If you access our site from outside the U.S., your information may be transferred to and processed in the United States.

Where required, we use appropriate safeguards (such as standard contractual protections) to protect your information.

Data Security

We take reasonable administrative and technical measures to protect your personal information. However, no system can be guaranteed 100% secure.

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected individuals and relevant authorities as required by applicable law.

Children’s Privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information from children. If we become aware that such data has been collected, we will delete it promptly.

Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites.

Do Not Track & Privacy Signals

Our website does not currently respond to legacy “Do Not Track” browser signals. Where required by applicable law, we will honor recognized privacy preference signals.

Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last Updated” date.

If changes are significant, we may provide additional notice (such as email notification if you are subscribed).

Contact Us

If you have questions or requests regarding this Privacy Policy, please contact:

Email: info@hs-foundation.org

Mail:
Security and Privacy Requests
Brent Hazelett, Chief Executive Officer
Hidradenitis Suppurativa Foundation
964 High House Road, #3064
Cary, NC 27513