CHSA Privacy Statement

Privacy Statement

see also: Cookie Statement and Website Terms of Use

Notice at Collection

The Communication Health Support Association ("CHSA," "we," "us," or "our") provides this Notice at Collection to inform you about the categories of personal information we collect from you and the purposes for which we use such information.

Categories of Personal Information We Collect

• Identifiers (name, address, email, phone number)
• Professional/employment information
• Internet activity information
• Geolocation data
• Audio, electronic, or visual information
• Education information
• Inferences drawn from other personal information

Business Purposes for Collection

• Providing our services
• Communications
• Marketing and advertising
• Research and analytics
• Security and fraud prevention
• Legal compliance

For complete details about our privacy practices, please review our full Privacy Statement below.

Introduction

CHSA respects your privacy. This Privacy Statement explains how we collect, use, disclose, and safeguard your information when you visit our website at helpingyoucommunicate.org use our mobile applications, or interact with any of our digital properties, services, or features (collectively, the "Services").

PLEASE READ THIS PRIVACY STATEMENT CAREFULLY. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Statement.

Key Information

• Data Controller: Communication Health Support Association (CHSA)
• Contact Information: 2200 Research Boulevard, Rockville, MD 20850-3289, USA
• Data Protection Contact: dataprotection@asha.org or 800-498-2071

Information We Collect

We collect information in the following ways:

Information You Provide to Us

• Communications: Your communications with us, including emails, support requests, and survey responses.
• User-Generated Content: Information you submit to forums, message boards, or other interactive features.

Information Collected Automatically

• Device Information: IP address, browser type, software, operating system, device identifiers, and mobile network information.
• Usage Information: How you interact with our Services, including pages visited, features used, and time spent.
• Location Information: General location inferred from IP address.
• Cookies and Similar Technologies: See our Cookie Statement for detailed information.

Information from Third Parties

• Service Providers: Information from vendors who help us provide services.
• Professional Partners: Information from affiliated organizations or business partners.
• Public Sources: Information from publicly available databases or directories.

How We Use Your Information

We use your information for the following purposes:

• Provide, maintain, and improve our Services
• Communicate with you about services and events
• Provide personalized content and professional resources
• Conduct research and analyze usage patterns
• Develop new products, services, and features
• Protect against fraudulent, unauthorized, or illegal activity
• Enforce our terms, conditions, and policies
• Fulfill legal obligations and respond to legal requests

Legal Basis for Processing (for EEA, UK, and Applicable Jurisdictions)

We process your personal data on the following legal bases:

• Legitimate Interests: To further our legitimate interests, such as improving our Services, marketing, preventing fraud, and ensuring network security.
• Compliance with Legal Obligations: To comply with applicable laws and regulations.
• Consent: We rely on your consent for certain processing activities, such as sending marketing communications or setting optional cookies.

You can withdraw consent at any time by contacting dataprotection@asha.org or using the opt-out mechanisms provided.

How We Share Your Information

We may share your information with:

• Service Providers: Third parties that provide services on our behalf, data analysis, email delivery, hosting, and customer service.
• Professional Partners: Organizations with whom we collaborate to provide professional services or research opportunities.
• Marketing Partners: We may share your information with marketing partners to provide relevant content and services or to target advertisements.
• Legal Requirements: When required by law, legal process, or to protect our rights.
• Business Transfers: In connection with a corporate transaction, such as a merger, acquisition, sale of assets, or dissolution of the organization.

We maintain contracts with third parties requiring them to protect your information and prohibiting them from using it for their own purposes.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Statement, unless a longer retention period is required or permitted by law. When determining retention periods, we consider:

• The amount, nature, and sensitivity of the information
• The potential risk of harm from unauthorized use or disclosure
• The purposes for which we process the information
• Whether we can achieve those purposes through other means
• Legal, regulatory, and compliance requirements

International Data Transfers

CHSA is based in the United States. If you access our Services from outside the United States, your information will be transferred to, stored in, and processed in the United States and other countries where our partners and service providers are located. These locations may have different data protection laws than your country.

When transferring data from the EEA, UK, or other jurisdictions with data protection laws, we use approved transfer mechanisms, such as Standard Contractual Clauses, adequacy decisions where available, or other lawful bases for transfer.

Data Security

We implement appropriate technical and organizational measures to protect your personal information. However, no security system is impenetrable, and we cannot guarantee the absolute security of your information.

In the event of a data breach or security incident involving your personal information, we will notify affected individuals and relevant authorities as required by applicable federal and state law.

Children's Privacy

Our Services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us at dataprotection@asha.org.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. Below we describe your rights and how to exercise them. We will not discriminate against you for exercising any of these rights.

For All Users

• Access: Request information about the personal data we hold about you.
• Correction: Request correction of inaccurate, incomplete, or outdated information.
• Deletion: Request deletion of personal data we hold about you, subject to certain exceptions.

For European Economic Area (EEA) and United Kingdom (UK) Residents

• Access: Confirm whether we process your personal data and receive a copy of that data.
• Rectification: Correct inaccurate personal data.
• Erasure: Request deletion of your personal data in certain circumstances.
• Restriction: Request restriction of processing in certain circumstances.
• Portability: Receive your personal data in a structured, commonly used format.
• Objection: Object to processing based on legitimate interests, including profiling.
• Automated Decision-Making: Request human intervention for decisions based solely on automated processing.
• Withdrawal of Consent: Withdraw consent where processing is based on consent.

How to Exercise Your Privacy Rights

To exercise any of these rights, please submit a request by:

• Email: dataprotection@asha.org
• Phone: 800-498-2071
• Mail: Communication Health Support Association, 2200 Research Boulevard, Rockville, MD 20850-3289, USA

Verification Process: To protect your privacy, we will verify your identity before fulfilling your request. We may request additional information from you, such as account information, for verification purposes.

Response Timeline: We will acknowledge receipt of your request within 10 business days and respond to your request within 45 days. If we require more time, we will inform you of the reason and extension period in writing.

Authorized Agents: You may designate an authorized agent to make a request on your behalf. Authorized agents must submit proof of your written permission and verify their own identity with us.

Categories of Sources

• Direct interactions with you (forms)
• Automated technologies or interactions (cookies, usage data)
• Third parties (service providers, business partners, public databases)

Business and Commercial Purposes for Collection

• Providing and managing our services
• Communicating with you
• Advertising and marketing
• Research and analytics
• Improving our services
• Security and fraud prevention
• Legal compliance

Categories of Third Parties with Whom We Share Personal Information

• Service providers and vendors
• Professional partners and affiliated organizations
• Advertisers and advertising networks
• Data analytics providers
• Social media platforms
• Government entities (when required by law)

Website Videos

Our Services may include video content and features. We may collect information about your viewing habits, including which videos you watch and how you interact with them. Third-party tracking technologies may also collect information about your video viewing activities.

Notice to European Economic Area, United Kingdom, and Similar Jurisdictions

If you are in the EEA, UK, or another jurisdiction with similar data protection laws, you have rights as outlined above in the "Your Privacy Rights" section.

You also have the right to lodge a complaint with a supervisory authority in your country or region.

Offline Collection Notice

CHSA collects personal information through offline means, such as interacting with us by telephone or postal mail. This Privacy Statement applies to all personal information we collect, regardless of the collection method.

Changes to Our Privacy Statement

We may update this Privacy Statement from time to time. The most current version will be posted on our website with the effective date. We encourage you to review the Privacy Statement periodically.

Contact Us

If you have questions or concerns about this Privacy Statement or our privacy practices, please contact us:

• Email: dataprotection@asha.org
• Phone: 800-498-2071
• Mail: Executive Director, Communication Health Support Association, 2200 Research Boulevard, Rockville, MD 20850-3289, USA

This Privacy Statement was last updated on May 1, 2026.