Privacy Policy

Scope and Applicability

This Privacy Policy describes how Comprehensive Health Solutions NY ("CHSNY," "we," "us," or "our") collects, uses, discloses, and safeguards personal information when you access or use chsny.org and any related pages, content, communications, features, or services we control (collectively, the "Services"). This Policy applies to information collected from individuals located in the United States and is intended to comply with applicable U.S. federal and state privacy laws.

By using the Services, you acknowledge that your personal information will be processed in the United States. This Policy does not apply to third-party websites, services, or applications that we do not control.

Controller and Contact Information

The controller and owner responsible for personal information processed under this Policy is:

Gabrielle Strzalkowski
H Mart Carrollton
2625 Old Denton Rd
Carrollton, TX 75007
Email: [email protected]

Information We Collect

Information You Provide to Us

• Identifiers and Contact Information: Name, email address, postal address, phone number.
• Account and Preferences: Passwords or credentials (if accounts are offered), communication preferences, saved settings.
• Communications and Submissions: Messages via forms or email, survey responses, feedback, support inquiries, content you choose to submit (including questions about pharmaceuticals, medications, diseases, or supplements).
• Transactional Information: If you make a purchase or donation (if available), limited transaction details. Payment card data is processed by third-party processors; we do not store full payment card numbers.
• Professional Information: If you contact us in a professional capacity or submit a resume or proposal.

Information Collected Automatically

• Device and Usage Data: IP address, device identifiers, browser type, operating system, language settings, referring/exit pages, timestamps, pages viewed, links clicked, time on site, and other usage analytics.
• Cookies and Similar Technologies: Cookies, pixels, web beacons, local storage, and scripts used to operate the Services, remember preferences, analyze usage, and, where applicable, support advertising or social features.
• Approximate Location: Derived from your IP address or device settings (precise geolocation is collected only with your permission).

Information from Third Parties

• Service Providers and Partners: Analytics providers, hosting, security, email delivery, and customer support partners may provide aggregated or de-identified insights and limited information necessary to perform services on our behalf.
• Publicly Available Sources and Social Media: Information you make public or provide when you interact with our pages or content on third-party platforms.

Sensitive Personal Information

We generally do not require sensitive personal information. If you choose to share health-related information (e.g., symptoms, medication history) within inquiries or submissions, we treat it as sensitive and use it only to respond to your requests or provide the Services. We do not use sensitive personal information to infer characteristics about you or for targeted advertising.

How We Use Personal Information

• Provide, operate, and maintain the Services.
• Respond to inquiries, provide support, and communicate about updates or changes.
• Personalize content and user experience.
• Conduct analytics, research, and improve the quality, safety, and performance of the Services.
• Send administrative messages and, where permitted, marketing communications (you can opt out at any time).
• Detect, prevent, and address security incidents, fraud, and abuse.
• Comply with legal obligations and enforce terms, policies, and rights.

Cookies and Similar Technologies

We use the following categories of cookies and similar technologies:

• Essential: Required for core site functions, security, and network management.
• Functional: Remember preferences and enhance features.
• Analytics: Help us understand how visitors use the Services.
• Advertising/Marketing: If enabled, support delivery and measurement of ads and cross-context behavioral advertising.

You can manage cookies through your browser settings and, where available, our on-site controls. Blocking some cookies may impact functionality. We honor recognized browser-based opt-out signals, such as Global Privacy Control (GPC), for applicable opt-out rights where required by law.

Disclosure of Personal Information

We disclose personal information to the following categories of recipients for the purposes described above:

• Service Providers/Processors: Hosting, cloud storage, security, analytics, email and communication providers, customer support, and payment processors that process information on our behalf under contractual restrictions.
• Professional Advisors: Attorneys, auditors, insurers, and consultants under confidentiality obligations.
• Legal and Safety: Government authorities or other third parties when required by law or to protect rights, safety, and security.
• Corporate Transactions: In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate safeguards.

We do not sell personal information for money. We may "share" identifiers and internet activity data with analytics and, if used, advertising partners for cross-context behavioral advertising as defined by certain U.S. state laws; you can opt out of such sharing as described in the Your Privacy Rights section. We do not knowingly sell or share personal information of consumers under 16 years of age.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to meet legal, accounting, or reporting requirements. Retention periods are determined by factors such as the nature of the information, the purpose of processing, legal obligations, and operational needs. For example, support communications are typically retained for as long as needed to address your request and for a reasonable period thereafter; analytics data may be retained for approximately 12–24 months; and account information (if applicable) is retained until the account is deleted, subject to backup and legal retention requirements.

Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Your Privacy Rights

United States State Privacy Rights (e.g., CA, CO, CT, UT, VA)

Depending on your state of residence, you may have the right to:

• Know/Access: Request confirmation of whether we process your personal information and access such information.
• Portability: Obtain a copy of your personal information in a portable and, to the extent technically feasible, readily usable format.
• Correction: Request that we correct inaccuracies in your personal information.
• Deletion: Request deletion of personal information, subject to lawful exceptions.
• Opt Out: Opt out of the sale of personal information, the sharing of personal information for cross-context behavioral advertising, and targeted advertising.
• Limit Use of Sensitive Personal Information: Where applicable, limit certain uses or disclosures of sensitive personal information (we do not use sensitive personal information for purposes that require a right to limit under California law).
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

How to Exercise Your Rights

• Submit a request by emailing [email protected] with your name, state of residence, the right(s) you wish to exercise, and sufficient details to verify your identity.
• Verification: We may request additional information to verify your identity and residency. If you are an authorized agent, we may require proof of authorization and verification of your identity.
• Response Time: We will acknowledge and respond to your request within the timeframes required by applicable law (generally within 45 days, with a possible 45-day extension).
• Opt-Out of Sale/Sharing/Targeted Advertising: You may email us, adjust cookie preferences where available, or use a recognized browser-based opt-out signal, such as Global Privacy Control (GPC). We will honor such signals to the extent required by law.
• Appeals: If we deny your request, you may appeal by replying to our denial or emailing [email protected] with "Privacy Request Appeal" in the subject line. We will respond within the time required by applicable law.

California-Specific Disclosures

Categories of personal information we may collect include: identifiers (e.g., name, email, IP address), internet or network activity (e.g., browsing history on our Services), geolocation data (approximate), inferences drawn from usage, and sensitive personal information you volunteer in communications. We collect these categories from you, your devices, service providers, and public sources. We use them for the business purposes described in this Policy. We disclose them to service providers, professional advisors, legal authorities (when required), and, where applicable, to analytics/advertising partners. We do not sell personal information for money. We may share personal information (such as identifiers and internet activity) for cross-context behavioral advertising unless you opt out. We do not knowingly sell or share personal information of consumers under 16. This Policy is intended to serve as our notice at collection. California "Shine the Light" inquiries regarding direct marketing disclosures may be submitted to [email protected].

Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will delete it. Parents or guardians who believe a child has provided personal information may contact us at [email protected].

Do Not Track and Global Privacy Control

Some browsers offer a Do Not Track (DNT) setting; because there is no common industry standard for DNT, our Services do not respond to DNT signals. We do, however, recognize and honor browser-based opt-out signals, such as Global Privacy Control (GPC), as an opt-out of sale/sharing or targeted advertising where required by applicable law.

HIPAA and Medical Information

CHSNY is not a healthcare provider, health plan, or healthcare clearinghouse and is not a covered entity or business associate subject to the Health Insurance Portability and Accountability Act (HIPAA). Information provided through the Services is for informational purposes only and is not a substitute for professional medical advice, diagnosis, or treatment. Do not submit protected health information to us. If you choose to share health-related information, we will use it only to provide the Services and respond to your inquiries.

International Users

We are based in the United States and process personal information in the United States. If you access the Services from outside the United States, you understand that your information may be transferred to and processed in the United States, where data protection laws may differ from those of your jurisdiction.

Third-Party Content and Links

The Services may reference or enable access to third-party content, tools, or websites. We are not responsible for the privacy practices of such third parties. We encourage you to review their privacy policies before providing personal information.

Accessibility

We are committed to making our Privacy Policy accessible. If you need this Policy in an alternative format, please contact us at [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The "Effective Date" below indicates when this Policy was last revised. Material changes will be communicated as required by law. Your continued use of the Services after an update constitutes acceptance of the revised Policy.

Effective Date: September 12, 2025

How to Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact:

Gabrielle Strzalkowski (Owner)
Comprehensive Health Solutions NY (CHSNY)
H Mart Carrollton
2625 Old Denton Rd
Carrollton, TX 75007
Email: [email protected]