Privacy Policy

Last updated: February 2026

Introduction

The SozoRock Foundation, Inc. ("SozoRock," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information through the SozoRock Health Portal ("Portal").

Information We Collect

We practice data minimization and only collect:

• First name only — we never collect last names
• County (Schoharie or Delaware) — no street addresses
• Service preferences — what help you're interested in
• Phone number (optional) — only for SMS appointment reminders, with explicit consent
• Language preference (English or Spanish)

What We Never Collect

• Social Security Numbers
• Date of birth
• Medical records, diagnoses, or health conditions
• Insurance policy information
• Income or employment information
• Full legal names or street addresses
• Email addresses

Data Security

All data is encrypted at rest and in transit using industry-standard encryption. Access is restricted to authorized administrators with multi-factor authentication.

Data Sharing

We never sell, rent, or share your personal information with third parties. County-level reporting uses only de-identified, aggregated data.

Your Rights

You have the right to:

• Access your personal information
• Request correction of your information
• Request deletion of your information
• Withdraw consent at any time

To exercise these rights, contact us at contact@sozorockfoundation.org.

Cookies and Tracking

We use only essential cookies for language preference and session management. We do not use advertising cookies, analytics tracking, or third-party trackers.

Children's Privacy

Registration requires confirmation that the user is at least 13 years old, or that a parent/guardian is completing registration. We comply with COPPA requirements.

Contact

For privacy questions, email us at contact@sozorockfoundation.org.