hirc-logo-r HIRC_Logo-mark---blue Diagonal background separation icon-grid list-ul-regular Engaged Badge icon-plus-blue icon-plus-minus circle-question-regular

Privacy Policy

Last Updated and Effective: September 4, 2026

1. Welcome!

This Privacy Policy is here to help You understand how We collect, use, and disclose Your Personal Information (as defined below) through Our Service. We also describe Your choices and rights with respect to how We process Your Personal Information. ATTENTION: PLEASE READ THIS HEALTHCARE INDUSTRY RESILIENCE COLLABORATIVE (“HIRC,” “US,” “OUR,” OR “WE”) PRIVACY POLICY (“PRIVACY POLICY”) CAREFULLY. THIS PRIVACY POLICY PERTAINS TO YOUR (“YOU”) VISITS TO THE HTTPS://HIRC.ORG/ WEBSITE, OUR MEMBERS ONLY FORUM LOCATED AT HTTPS://COMMUNITY.HIRC.ORG/, AND YOUR ACCESS TO ANY ASSOCIATED CONTENT INCLUDING EMAIL FEEDS, FEEDS THROUGH APPS, COMMUNICATIONS SYSTEMS, OR CONTENT PROVIDED BY HIRC (COLLECTIVELY THE “SERVICE”). ANY TERMS DEFINED IN THE TERMS OF USE SHALL HAVE THE SAME MEANING IN THIS PRIVACY POLICY.

PLEASE READ THIS PRIVACY POLICY CAREFULLY BEFORE ACCESSING OR USING THE SERVICE. This Privacy Policy describes how HIRC collects, uses, and discloses Personal Information and the rights and choices that may be available to You. By accessing or using the Service, You acknowledge that You have received this Privacy Policy. HIRC will obtain consent when required by applicable law but does not rely on Your use of the Service as consent where affirmative consent is legally required. HIRC will provide notifications regarding security incidents as required by applicable law, using the contact information available to HIRC when appropriate. Your use of the Service is also subject to Our Terms of Use and, if applicable, the HIRC Membership Agreement.

Unless explicitly stated otherwise, any new features that augment or enhance the current Service shall be subject to this Privacy Policy.

Please review this Privacy Policy periodically. If We materially change this Privacy Policy, We will provide notice as required by applicable law, which may include posting the updated Privacy Policy on the Service or sending notice by email using the address We have on file. For HIRC members, notice of a material change will be provided in accordance with the HIRC Membership Agreement, including any termination right provided by that agreement. Where applicable law requires consent to a change, HIRC will obtain that consent before applying the change..

2. Who We Are

The Service is operated by HIRC, a trade association as described in Section 501(c)(6) of the Internal Revenue Code of 1986 with offices at 331 2nd Ave S, Ste 400 #3120, Minneapolis, MN 55401.

3. Collection of Personal Information

Personal Information We Collect

To provide Our Service, We may collect and process information that is defined as personal information under applicable privacy laws (“Personal Information”). We collect and process the following categories of Personal Information (note, specific Personal Information elements are examples and may change):

Audio/Visual Data – Audio/video files and records, such as webinar recordings and voicemails.

Contact Data – Personal Information about You that is used to contact or identify You, such as Your name, email address, physical address, or phone number.

Device/Network Data – Personal Information relating to Your device, browser, or application, such as device identifiers, IP addresses, cookie identifiers, session history, Service-navigation metadata, and other data generated through applications and browsers, including through cookies and similar technologies.

Financial Data – Information such as bank account details or payment card information and relevant information in connection with a financial transaction.

General Location Data – Non-precise location data, e.g. location information derived from IP addresses.

Inference Data – Personal Information We create or use as part of a profile reflecting Your preferences, characteristics, aptitudes, market segments, likes, favorites or interests.

Usage Data – Data about Your activity on and use of Service, such as site performance data, browsing metadata; device and software interactions; user navigation flows; clickstream data; software and device crash data, performance and other diagnostic data; and other device connectivity data.

User Content – Personal Information included in content provided by users of the Service in any free-form or unstructured format, such as in a “contact us” box, free text field, file, document, or message to Us.

How We Collect Personal Information

We collect Personal Information from various sources based on the context in which the Personal Information will be processed:

Data We collect from You – We collect Personal Information from You directly, for example, when You input information into an online form, or contact Us directly.

Data collected automatically – We may collect certain Personal Information automatically. For example, We collect Device/Network Data automatically using cookies and similar technologies when You use Our Service, access Our Service, or when You open Our communications.

Data We receive from service providers – We receive Personal Information from service providers performing services on Our behalf.

Data We receive from members, collaborators, partners, and sponsors – We receive Personal Information from HIRC members, collaborators, partners, or sponsors who seek to collaborate on and/or support HIRC initiatives.

Data We create and infer – We and certain partners and third parties operating on Our behalf create and infer Personal Information such as Inference Data based on Our observations or analysis of other Personal Information processed under this Privacy Policy, and We may correlate this Personal Information with other information We process about You. 

4. Use of Personal Information

Service Use

When You use Our Service, We may automatically collect and process Usage Data and Device/Network Data. We may also process Contact Data that You provide through the Service or that is associated with Your account. We use this Personal Information as necessary to provide requested features and functions, deliver content, maintain security logs, and operate the Service. We may also process this Personal Information for Our Business Purposes described below.

Posts and Forums

We process Inference Data, Usage Data, Contact Data, and the User Content You post (e.g. comments, forum posts, etc.) on Our Service. We process this Personal Information for Our Business Purposes (described below).

Content You submit to a public area of the Service may be publicly available. Content submitted to a members-only area may be viewed by other authorized participants and may be included in informational notifications sent to those participants. HIRC will not make members-only content publicly available unless authorized by the person or organization that provided it, required by law, or otherwise permitted under applicable HIRC agreements and policies. You should not submit Personal Information or information protected as confidential under applicable HIRC agreements or policies to a forum unless You are authorized to disclose it to the forum’s intended participants.

Account and Membership

When You create an account with Us or sign up for a HIRC membership, We may collect Contact Data, Device/Network Data, Usage Data, and User Content. If You become a paid member, We process Financial Data. We process this Personal Information to open and maintain Your account, provide You with information relevant to Your account, and otherwise provide the features and services You request. We may use Your Personal Information to respond to emails or other communications You send to Us, advise You of changes to or problems with the Service, and send informational or promotional communications, subject to applicable law. You may opt out of marketing communications by using the unsubscribe link included in the communication or contacting Us at partners@hirc.org. We may also use Contact Data and Device/Network Data collected in this context for Our Business Purposes and Promotional Purposes. For more information, please review the HIRC Membership Agreement.

Informational or Promotional Emails

We may process Device/Network Data, Usage Data, and Contact Data in connection with email communications relating to the Service. You may receive such communications if You contact Us, choose to receive them, or interact with Us in a way that permits Us to send them. We may also automatically collect Device/Network Data when You open or interact with those communications so that We can better understand engagement with Our communications. We may process this Personal Information for Our Business Purposes and Promotional Purposes as described below.

Webinars

We may process Audio/Visual Data, Contact Data, and General Location Data when You attend an information event, such as a workshop or webinar. We may also process Audio/Visual Data if an informational event is recorded.

We use this Personal Information as necessary to provide educational resources and services to Our members and to support Our mission of solving for a more transparent and resilient supply chain. We may also process this Personal Information for Our Business Purposes and Promotional Purposes.

Contact Us

When You contact Us through the Service using a contact-us box or by email, We process Personal Information such as Contact Data, Device/Network Data, and any Personal Information contained within User Content. We use Contact Data and User Content as necessary to communicate with You about the subject matter of Your request and related matters. We may also process this Personal Information for Our Business Purposes described below.

Cookies and Similar Tracking Technologies

We process Device/Network Data, Contact Data, Inference Data, Usage Data, and General Location Data in connection with Our use of cookies and similar technologies on Our Service. We may collect this data automatically. 

We and authorized third parties may use cookies and similar technologies for the following purposes:

  1. Essential purposes, such as maintaining user sessions, delivering content, and enabling the Service to operate;
  2. Functional purposes, such as enabling features that allow a user to maintain a logged-in session; and
  3. Analytics purposes, such as measuring traffic, counting visits to particular pages, understanding how users navigate the Service, identifying referring websites, and improving the design and functionality of the Service.

We may also process Personal Information collected through cookies and similar technologies for the Business Purposes described in this Privacy Policy. 

We use Google Analytics to help Us understand how users interact with the Service. Google Analytics may use cookies and similar technologies to collect information such as pages visited, interactions with the Service, time spent on particular pages, Internet Protocol address, device and browser information, general location information, and referring websites. We use this information to measure use of the Service, evaluate performance, and improve its design and functionality. Google may process information collected through Google Analytics in accordance with its own privacy policies. Information about Google Analytics and available opt-out options is provided through the links below.

We use Google Tag Manager to manage measurement codes and related code fragments, commonly called “tags,” on the Service. Google Tag Manager facilitates the operation of tags but does not determine how information collected through those tags is used. Any collection and processing performed through a tag is governed by the disclosures applicable to the service associated with that tag.

For more information, please review Google Tag Manager privacy and security, Google Analytics data practices, and the Google Analytics Opt-out Browser Add-on.

We may work with service providers that assist Us in delivering and measuring informational or promotional communications. For information about available choices concerning marketing communications, cookies, and similar technologies, please see Section 7, Your Rights & Choices.

5. Purposes of Processing

Business Purposes

In addition to the uses described above, We generally process Personal Information for several common purposes in connection with Our business (“Business Purposes”). Please see below for more information regarding the purposes for which We process Your Personal Information.

Operate Our Service and Fulfill Obligations  – We process any Personal Information as is necessary to provide the Service, and as otherwise necessary to fulfill Our obligations to You, e.g. to provide You with the information, features, and services You request.

Internal Processes and Service Improvement – We may use Personal Information processed through the Service as necessary to improve the design and operation of the Service, understand how the Service is used and functions, provide customer service, create and analyze logs and metadata relating to use of the Service, and maintain its security and stability. We may also use Personal Information to understand which parts of the Service are most relevant to users, how users interact with the Service, how the Service performs or fails to perform, and whether particular activities may indicate an information security risk to the Service or Our users. 

Analytics – We process Personal Information as necessary in connection with Our creation of analytics relating to how Our Service is used, the pages and content users view, and the creation of other reports regarding the use and performance of Our Service and other similar information and metrics. 

Compliance, Safety & Public Interest – We may, without Your consent or further notice to You and to the extent required or permitted by law, process Personal Information as necessary to fulfill Our legal obligations, protect the vital interests of individuals, act in the public interest, or respond to a public authority. Please see Section 6, Data Sharing, for more information about circumstances in which We may disclose Personal Information.

Corporate Events – Your Personal Information may be processed as part of routine corporate operations, as part of corporate reorganizations, or any business transition, such as a merger, acquisition, liquidation, or sale of assets.

Other Processing of Personal Information – If We process Personal Information for a purpose materially different from those described in this Privacy Policy, We will provide additional notice and obtain consent when required by applicable law. This Privacy Policy will continue to apply unless a supplemental notice expressly states otherwise.

Promotional Purposes

In addition to the Business Purposes described above, We may process Personal Information to communicate with users about HIRC membership, programs, events, resources, and other services that may be of interest to them (“Promotional Purposes”), subject to applicable law and the rights and choices described in Section 7.

Marketing Communications – We may send You marketing or promotional communications when You request them, consent to receive them, or when otherwise permitted by applicable law. These communications may be tailored based on Your relationship and interactions with HIRC. You may opt out of marketing communications at any time by using the unsubscribe link included in the communication or by contacting Us at partners@hirc.org. Opting out of marketing communications will not prevent HIRC from sending administrative, membership-related, security, or other nonmarketing communications.

6. Data Sharing

Information We collect may be shared with a variety of parties, depending upon the purpose for and context in which that information was provided. We generally transfer data to the categories of recipients or in connection with specific Business Purposes, as described below.

Service Providers and Volunteers – We may disclose Personal Information to service providers, contractors, and authorized volunteers that perform services on HIRC’s behalf, such as hosting, communications, payment processing, technical support, analytics, security, and program administration. We limit these disclosures to Personal Information reasonably necessary to perform the assigned functions and require recipients to handle the information in accordance with applicable law and applicable confidentiality obligations. HIRC will make these disclosures consistently with the Membership Agreement, the Confidentiality Policy, and other applicable HIRC policies.

Corporate Events – Your Personal Information may be disclosed to a third party in the event that We consider or go through a business transition, such as a merger, acquisition, liquidation, or sale of all or a portion of Our assets. For example, Personal Information may be part of the assets transferred, or may be disclosed (subject to confidentiality restrictions) during the due diligence process for a potential transaction.

Partners and Collaborators – We may disclose Personal Information to an organization collaborating with HIRC when reasonably necessary to administer a jointly offered program, event, or service. HIRC will describe the disclosure when appropriate and will remain subject to applicable confidentiality obligations. We will not disclose Personal Information to a partner or collaborator for its independent marketing purposes unless the individual directs or consents to the disclosure.

Sponsors – We may identify sponsors through the Service and may provide sponsors with aggregated or deidentified information about participation in HIRC programs or events. We will not disclose Personal Information to a sponsor for the sponsor’s independent marketing purposes unless the individual directs or consents to the disclosure or the disclosure is otherwise permitted by applicable law and clearly described at the time the information is collected.

Legal, Safety, and Enforcement Disclosures – We may access, preserve, or disclose Personal Information when We reasonably believe the disclosure is required by applicable law, legal process, or a valid governmental request; is necessary to prevent or respond to fraud, crime, security incidents, or threats to safety; is necessary to investigate or enforce Our Terms of Use or other applicable agreements; or is necessary to protect the legal rights or property of HIRC or another person. HIRC will limit any disclosure to information reasonably related to the applicable purpose. When legally permitted and reasonably practicable, HIRC may notify an affected member of the disclosure.

7. Your Rights & Choices

Your Rights

Depending on where You reside and subject to applicable law, You may have the right to confirm whether HIRC processes Your Personal Information; access, correct, or delete Personal Information; obtain a portable copy of certain Personal Information; obtain information about certain disclosures; or opt out of certain processing, including the sale of Personal Information, targeted advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects.

You may submit a request by contacting Us at partners@hirc.org. HIRC may take reasonable steps to verify Your identity and authority to make the request. If an authorized agent submits a request on Your behalf, HIRC may require evidence of the agent’s authority and may verify Your identity directly when permitted by applicable law. HIRC will respond within the period required by applicable law.

If HIRC denies a request and applicable law provides a right to appeal, You may appeal by replying to HIRC’s decision or emailing partners@hirc.org with the subject line “Privacy Appeal.” HIRC will review and respond to the appeal as required by applicable law.

HIRC can fulfill requests only with respect to Personal Information that HIRC controls or is legally responsible for processing. Information controlled independently by another organization remains subject to that organization’s privacy practices and request procedures.

Your Choices

You may have the following choices regarding the Personal Information We process, to the extent required under applicable law:

Changing Your Information – To change Your information, please contact Us at partners@hirc.org.

Closing Your Account – You may request closure of Your account by emailing Us at partners@hirc.org. HIRC may also suspend or close an account that is inactive, inaccessible, or no longer associated with an authorized user, subject to applicable HIRC agreements and policies. Closing an account does not necessarily require deletion of Personal Information that HIRC must or is permitted to retain under Section 9.

Consent – When HIRC relies on Your consent to process Personal Information, You may withdraw that consent at any time by contacting Us at partners@hirc.org. Withdrawal does not affect processing lawfully completed before the withdrawal. If the information is necessary to provide a particular optional feature or service, withdrawing consent may prevent HIRC from continuing to provide that feature or service.

Email Marketing – You may opt out of marketing communications at any time by using the unsubscribe link included in Our communications or by contacting Us at partners@hirc.org. Opting out of marketing communications will not prevent HIRC from sending administrative, membership-related, security, or other nonmarketing communications.

Cookies & Similar Technologies – If You do not want information collected through cookies and similar technologies, You may manage or block certain technologies through Your browser settings. Some third-party services require You to exercise choices directly through the third party. For more information about Google’s practices and available choices, review the Google Privacy Policy or use the Google Analytics Opt-out Browser Add-on.

Do-Not-Track – Some browsers and devices offer a “Do Not Track” setting that communicates a user’s preference concerning certain online tracking. Because there is no uniform standard governing how websites should interpret these signals, the Service does not currently respond to Do Not Track signals. You may manage cookies and similar technologies as described above.

8. Security

We implement a variety of security measures to protect the safety of Your Personal Information when You enter, submit, or access Your Personal Information. Please keep Your account password secure to help ensure the safety of Your Personal Information. 

While We take reasonable measures designed to protect Personal Information against loss, theft, and unauthorized access, use, disclosure, or modification, no Internet, email, mobile application, or other electronic transmission is completely secure or error-free. You should use appropriate caution when submitting information through the Service and carefully consider the nature and sensitivity of the information You provide.

No method of transmission or information-storage system can be guaranteed to be completely secure, and HIRC cannot guarantee that unauthorized persons will never defeat applicable security measures. If HIRC becomes aware of a security incident involving Personal Information, HIRC will investigate and respond to the incident and provide notifications as required by applicable law.

Information about the processing of Personal Information outside the country in which it was collected is provided in Section 12, International Transfers.

9. Data Retention

We retain Personal Information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, provide the Service, administer HIRC’s operations and membership relationships, comply with legal and contractual obligations, resolve disputes, enforce applicable agreements, and maintain appropriate business records. Retention periods may vary based on the nature and sensitivity of the information and applicable legal, contractual, operational, and risk-management requirements. HIRC retains and destroys Personal Information in accordance with its Document Retention Policy and any applicable legal hold or other preservation obligation. HIRC may retain aggregated or deidentified information that cannot reasonably be linked to an individual.

10. Links to Other Websites or Applications

This Privacy Policy applies only to the Service. The Service may contain links to other websites or apps or may forward users to other websites or apps that We may not own or operate and to which this Privacy Policy does not apply. The links from the Service do not imply that We endorse or have reviewed these websites or apps. The policies and procedures We describe here do not apply to these websites or apps. We neither can control nor are responsible for the privacy practices or content of these websites or apps. We suggest contacting these websites or app providers directly for information on their privacy policies. Nonetheless, We seek to protect the integrity of the Service and welcome any feedback about these linked websites and mobile applications.

11. Minors

Our Service is neither directed at nor intended for use by people under 18 years of age or minors under the age of majority in a relevant jurisdiction. Further, We do not knowingly collect Personal Information from such individuals. If We learn that We have inadvertently done so, We will promptly delete it. 

12. International Transfers

HIRC operates in the United States and uses service providers that may process Personal Information in the United States. If You access the Service from outside the United States, Your Personal Information may be transferred to and processed in the United States, where privacy laws may differ from those in Your jurisdiction. HIRC will handle Personal Information in accordance with this Privacy Policy and applicable law regardless of where the processing occurs.

13. Changes to Our Policy

We may update this Privacy Policy from time to time to reflect changes in Our practices, the Service, or applicable legal requirements. We will identify the date of the latest update and provide notice of material changes as described in Section 1. Any rights available to HIRC members under the HIRC Membership Agreement remain unaffected.

14. Contact Us

Feel free to contact Us with questions or concerns at partners@hirc.org.

15. Your Nevada Privacy Rights

Nevada law may permit a Nevada consumer to request that an operator of an Internet website or online service refrain from selling certain covered information collected about that consumer. If You are a Nevada consumer, You may submit such a request by emailing Us at partners@hirc.org. We may take reasonable steps to verify the authenticity of the request and Your identity before responding.

16. Your California Privacy Rights

California Civil Code Section 1798.83 may permit California residents who have an established business relationship with HIRC primarily for personal, family, or household purposes to request certain information regarding Personal Information disclosed to third parties for those third parties’ direct marketing purposes during the immediately preceding calendar year. To the extent this law applies to HIRC and Your relationship with HIRC, You may submit one request per calendar year by emailing Us at partners@hirc.org or by writing to Healthcare Industry Resilience Collaborative, 331 2nd Ave S, Ste 400 #3120, Minneapolis, MN 55401.