Web User Privacy Rights

SHRINERS CHILDREN'S is committed to protecting the privacy of its online users: patients, families, donors, the media, and others. We do not collect personally identifiable information or personally identifiable health information except when it is knowingly provided by such individuals (e.g. via web forms, and chat tools). We do not share voluntarily provided, personally identifiable information or personally identifiable health information for any purpose other than its intended use. The only exception is described under "Donations and Fundraising Events" (below). SHRINERS CHILDREN'S believes that privacy on the web is important and we encourage you to read our privacy policy carefully, so that you will clearly understand our commitment and our method of collecting and using information. A link to our privacy policy can be found at the bottom of each page of our website. We continuously try to improve the security of our information systems. While we have many security measures to protect electronically transmitted information and frequently review and try to improve the security of our website, we can't guarantee that a third party won't gain access to information provided to this website. This website user privacy rights document, August 29, 2021  describes the information we collect and how we use it.

Information Collection and Use

Web Log File Data

We collect some basic web log file data about website visitors. This information includes domain names, website traffic patterns and server usage statistics. This information is used for website management and administration and to improve the content and overall performance and user-experience on our website.

Data Security

SHRINERS CHILDREN'S makes every reasonable effort to ensure that all of the transactions that occur on our website are secure. This includes data provided by the user via Online Forms, Newsletter Subscriptions, Cookies, Donation Transactions, Email Communications, SMS Text Messaging, and Chat Messaging, We collect and transmit personally identifiable data with Secure Socket Layer (SSL) 256-bit encryption to protect information you may submit on our website. SSL is the industry standard protocol for encrypted data transfer. All off-line information is securely stored and encrypted at rest to adhere to HIPAA technical safeguards.  Data accessibility is only authorized for SHRINERS CHILDREN'S staff that meet HIPAA’s administrative and physical safeguards. 

Online Forms

SHRINERS CHILDREN'S provides forms on our website which may request confidential health information. These online forms are located on a secure website. We adhere to the requirements outlined by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) legislation as amended, which ensures security and privacy of an individual's medical records. 

Subscription to Newsletter, Press Releases or Email Communications

If you subscribe to a newsletter, publication or press release published by SHRINERS CHILDREN'S and distributed via email, we will keep your email address in a private and secure list. Messages sent electronically do not reveal recipients' email addresses or any other personal information. SHRINERS CHILDREN'S will only send messages to individuals who have opted-in to subscribe and who have provided their email address to us directly. We do not use this email address list for any other purpose, and we only add individuals at their request. At any time, you may opt-out by using the unsubscribe link provided on our website and in the publication email, which will remove your information from the distribution list for that publication. To unsubscribe please email the marketing department.

"Cookies" and How We Use Them

Cookies are packets of information that a website transfers to a user's computer for record-keeping purposes. They are a means of keeping track of users' preferences for content and alerting them to new content areas. The data collected may be used to show relevant SHRINERS CHILDREN'S content on other websites and social media platforms. Additionally, the cookies may be used to share other non-identifiable demographic information as statistics. Most browsers allow you to turn off cookies if you do not want them tracking your preferences. The SHRINERS CHILDREN'S website/s set and access cookies. They are used only to enhance the usability of the website, improve the user’s access to care, measure marketing performance, and improve the user’s experience. You can still use this website if you turn the cookies off.

Donations and Fundraising Events

When you donate to SHRINERS CHILDREN'S or register for a fundraising event, we ask you to voluntarily provide your name, address, telephone number, email address and credit card number so we can process your donation or event registration, send you a receipt or confirmation and communicate with you if necessary. If you'd like, you can provide that information another way (by phone or regular mail). When you make a gift on our website, your information goes into a database maintained by SHRINERS CHILDREN'S. SHRINERS CHILDREN'S may then send you email or mailings about other opportunities to support the hospital system or one or more of our locations. You may opt out using any of the opt-out methods, such as check-box opt-outs, included in any fundraising solicitation via email or mail. 

Third-Party Service Providers

SHRINERS CHILDREN'S may engage reputable third-party vendors to help us manage our websites and allow us to better service our patients and visitors. SHRINERS CHILDREN'S never shares with third parties any personally identifiable information you provide when making a donation online, except as required by law.

Links To Other Websites:

This website has links to other websites we think may be of interest to our visitors. Their purpose is to provide visitors with convenient access to other websites that might interest them. A link to another website does not imply an endorsement of the website's content or services. We are not responsible for the privacy practices of websites not owned by SHRINERS CHILDREN'S. We encourage you to be aware of that when you leave our website and to read privacy statements at any websites that collect personally identifiable data.

Email Communication:

SHRINERS CHILDREN'S does not collect your email address unless you voluntarily submit it to us or choose to communicate with us via email. We try to respond to email messages requiring a response within five business days. If you email SHRINERS CHILDREN'S, we will make every effort to see that your message and email address are forwarded to the appropriate department or program. Please do not email patient health information, as that information is confidential and should only be discussed with your physician or transferred through our encrypted appointment request forms, patient portal and other secure communication tools. 

SMS/Text Messaging:

SHRINERS CHILDREN'S does not collect your phone number unless you voluntarily submit it to us or choose to communicate with SMS messaging. We do not sell or rent phone numbers or contact information. We try to respond to SMS messages requiring a response within 24 hours. If you SMS/Text message SHRINERS CHILDREN'S, we will make every effort to forward your message and phone number to the appropriate department or program. Please do not message patient health information, as that information is confidential and should only be discussed with your physician or transferred through our encrypted appointment request forms, patient portal and other secure communication tools. 

Chat and Chat-bot Messaging:

SHRINERS CHILDREN'S may provide live chat communication tools or automated chat bots across our web properties to help field immediate questions or request of our visitors.  These communication tools may require you to provide your name, email, phone number and location to help us provide you with answers and access to care.  We advise that you do not share personal health information via chat messaging tools.  All health information data submitted will be transmitted and stored to meet HIPAA physical and technical safeguards.

How We Use the Information

SHRINERS CHILDREN'S uses the information you provide to fulfill your online request, facilitate customer service and inform you of our programs and events. SHRINERS CHILDREN'S may share personal identifiable information with authorized third party service providers to support hospital and business operations.  

It is possible that we could be compelled to disclose personally identifiable user information in response to a search warrant, subpoena, or court order; that can happen to any organization keeping records. Disclosures may also be appropriate to protect our legal rights and the security or integrity of our website, or to avoid liability. 

Security

SHRINERS CHILDREN'S stores personally identifiable data with Secure Socket Layer (SSL) encryption to protect credit card and other information you may submit from this website. SSL is the industry standard security protocol. All off-line information is securely stored and is accessible only by authorized SHRINERS CHILDREN'S staff.

Policy Changes

SHRINERS CHILDREN'S necessarily reserves the right to change this policy from time to time, without advance notice. We will promptly post any changes to our privacy policy on all websites owned by SHRINERS CHILDREN'S.

Deletion and Removal of Information

User’s may request that their personal identifiable information be removed by contacting us as follows:

• For donation and fundraising requests, email donorrelations@shrinenet.org
• For all other requests, email the Corporate Privacy and Information Security Officer at dpo@shrinenet.org

Non-identifiable information in our aggregate database including but not limited to website visit logs, previously published reports and back up files will not be deleted. Like all responsible website publishers, we maintain backup files as a protection against natural disasters, equipment failures, or other disruptions. Backup files protect you and us because they lower the risk of losing valuable data. Removing a record from our main files does not remove that record from any backup systems. It may take up to six months before all information in a backup record is completely erased through the normal recycling of backup files. In the meantime, as long as backup records exist, they receive the same privacy and security protections as our other records.

Questions or comments?

If you have questions about SHRINERS CHILDREN'S Web User Privacy Policy or would like to request information about information collection and use policies and procedures please contact the Corporate Privacy and Information Security Officer via email at dpo@shrinenet.org

Or, by mail to:

SHRINERS CHILDREN'S
c/o: Corporate Privacy and Information Security Officer
2900 North Rocky Point Drive
Tampa, FL 33607 
813-281-0300