NATIONAL HYPERBARIC SAFETY ASSOCIATION

Privacy Policy

Effective October 20, 2026 • Version 1.0

Your information and choices. This policy describes how NHSA handles application, membership, education, and communication information, including special protections for SMS consent.

1. Scope

This Privacy Policy explains how the National Hyperbaric Safety Association (NHSA, we, us) handles personal information for its websites, membership and board applications, educational programs, association communications, and safety reviews. It applies to services identifying NHSA as the responsible organization and linking to this Policy. Independent clinics, trainers, vendors, and linked sites have their own practices.

2. Information collected

We collect information you provide, including name, email, telephone number, mailing address, organization, professional role, qualifications, credentials, experience, application responses, signatures, and communications. Board applications may include affiliations and financial-conflict disclosures. Training records may include attendance, assessments, certificates, and continuing education. Safety reviews may involve incident and compliance information supplied lawfully.

Our application and communication systems maintain submission details, consent choices, opt-outs, and communication records. NHSA and its service providers may receive technical information such as IP address, browser and device details, access times, and interactions needed to operate and secure services. When payments or donations are processed, payment providers may supply transaction status and limited identifiers. Do not send card details through ordinary forms or email.

3. How information is used

Information is used to process applications, administer membership and education, respond to inquiries, communicate about services, document qualifications and consent, manage payments and donations, maintain records, protect systems, investigate safety concerns, enforce standards, and comply with legal duties. Marketing communications require applicable permission. A membership application is not blanket authorization for unrelated marketing.

4. Disclosure and service providers

Information may be disclosed as reasonably necessary to providers supporting hosting, CRM, communications, payments, records, security, and program administration; to authorized personnel or reviewers with a relevant need; or where lawfully required or appropriate to protect rights and safety. NHSA limits disclosures to the relevant purpose and requires appropriate restrictions on service-provider use and access.

NHSA does not sell or rent personal information. Public member listings are limited to professional or organizational details authorized for publication. Private phone numbers, application disclosures, and safety reports are not public merely because someone applies or joins. Membership or credential status may be verified where permitted and appropriately requested.

5. Mobile information and SMS consent

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with third parties for their own purposes. Providers may process only the information necessary to deliver and administer NHSA messages on NHSA’s behalf, subject to restrictions on independent use. Legally required disclosures remain possible.

Consent and suppression records are retained to honor preferences and demonstrate compliance. Reply STOP to opt out or HELP for help, or email [email protected]. Promotional-text opt-out does not terminate membership. Message frequency varies. Message and data rates may apply. SMS consent is not a condition of purchase or membership. See the Terms and Conditions for additional SMS terms.

6. Sensitive information

Do not submit identifiable patient medical information, Social Security numbers, passwords, card details, or unnecessary sensitive data through ordinary NHSA forms or email. Contact NHSA before providing protected records so an appropriate lawful and secure process can be arranged. Educational services and ordinary forms do not create a treatment relationship or automatically establish a HIPAA business-associate relationship.

Access to sensitive application and safety-review information is restricted to people with an appropriate need, subject to legal disclosure duties. Absolute confidentiality cannot be promised where disclosure is legally required. If you provide another person’s information, you must have a lawful basis and provide any required notice or consent.

7. Cookies and similar technologies

Our websites and embedded service providers may use cookies and similar technologies for security, sessions, form operation, and service functionality. Browser settings can restrict cookies, but some features may not function properly. Optional analytics or advertising technologies, where used, are subject to applicable notice and choice requirements. NHSA will honor legally recognized opt-out signals where required. Contact us with questions about technologies used on a particular NHSA page.

8. Retention and security

Information is retained as reasonably needed for its stated purposes, membership and credential administration, communication preferences, disputes, safety records, and applicable legal obligations. Retention varies by record type and legal requirements. Information no longer needed is subject to deletion or de-identification, with exceptions for backups and lawful preservation.

NHSA seeks to maintain reasonable administrative, technical, and physical safeguards appropriate to the information and operations. No system or transmission is completely secure. Security incidents and required notices will be addressed under applicable law.

9. Choices and privacy rights

Email [email protected] to request access, correction, deletion where applicable, or changes to communication preferences. Depending on residence and applicable law, rights may also include portability, restriction, objection, appeal, or opting out of certain processing. Requests may require proportionate identity verification. Authorized agents may act where permitted with appropriate verification. NHSA will respond within applicable deadlines and explain lawful limitations.

Deletion may be limited by credential records, legal obligations, safety reviews, disputes, or suppression records. Withdrawing consent does not undo prior lawful processing. NHSA does not discriminate for exercising applicable privacy rights, although information necessary for a requested service may still be required.

10. Children and international access

Membership applications and SMS programs are intended for adults at least 18. NHSA does not knowingly collect information online from children under 13. Contact us if you believe such information has been submitted. Separately authorized youth education requires appropriate safeguards and consent.

NHSA operates in the United States. Information may be processed where NHSA and its providers operate. Appropriate transfer safeguards will be used where applicable law requires them. Visiting a website does not waive mandatory privacy rights.

11. Updates and contact

Updates will be posted with a revised effective date. Additional notice or new consent will be provided when required. Material new uses will not be applied retroactively in violation of law.

National Hyperbaric Safety Association. Contact coordinator: Hannah Stephens. Email: [email protected]. Mailing address: 3550 N Goldwater Blvd #1079, Scottsdale, AZ 85251. Do not include sensitive patient information in an ordinary email.