1. Privacy and Confidentiality

Cedar and Ruby Health Alliance (CRH Alliance) is committed to protecting the privacy and confidentiality of all individuals who participate in our programs, trainings, and outreaches.

We comply with:

• Nigeria Data Protection Regulation (NDPR, 2019)

• U.S. Health Insurance Portability and Accountability Act (HIPAA, 1996) (where applicable).

2. Scope

This policy applies to:

• All staff, volunteers, contractors, and partners of CRH Alliance.

• All personal or health-related data collected during outreach programs, trainings, community screenings, and digital activities.

3. Information We Collect

We may collect:

• Personal information: Name, contact details, gender, date of birth.

• Health-related information: Blood pressure, blood sugar levels, medical history (only if necessary).

• Training participation: Attendance records, certifications issued.

We only collect the minimum information necessary to carry out our mission.

4. How We Use Information

Information is used for:

• Delivering health education and training.

• Monitoring program impact (e.g., number of people screened).

• Issuing CPR/BLS training certificates.

• Referrals to healthcare providers when needed.

• Reporting aggregated (non-identifiable) data to donors and stakeholders.

5. Data Protection Principles

We are committed to:

• Confidentiality: Personal and health data will never be shared without consent, except where required by law.

• Security: Data will be stored securely (locked files, password-protected systems).

• Minimal Collection: Only essential data will be collected.

• Anonymization: Health data may be coded without direct identifiers.

• Access Control: Only authorized staff/volunteers may access sensitive data.

6. Data Sharing

• We do not sell or disclose personal data to third parties.

• With consent, we may share data with healthcare providers for referrals.

• Aggregated, anonymous data may be shared with donors, partners, or public reports.

7. Rights of Participants

You have the right to:

• Request a copy of your personal data.

• Request correction of inaccurate information.

• Withdraw consent for data use at any time (unless required by law).

• Request deletion of personal data, where applicable.

8. Data Retention

• Personal and health records will be retained only as long as necessary for program purposes.

• Afterward, records will be securely destroyed (shredded or permanently deleted).

9. Staff & Volunteer Responsibilities

• All staff and volunteers must sign a confidentiality agreement.

• Training is provided on handling personal and health data.

• Breaches of confidentiality will result in disciplinary action.

10. Contact Information

For data protection questions, contact:

Data Protection Officer
Cedar and Ruby Health Alliance
📧 dpo@crhalliance.org
📞 (501) 517-5628

For general privacy or terms questions:
📧 info@crhalliance.org

11. Updates to Policy

We may update this policy, with changes posted on our website.