01 Plain-language summary
- FixCancers.com runs no third-party trackers, no advertising pixels, and no behavioral analytics.
- The site sets no cookies of its own.
- The only personal information collected is what patients voluntarily submit through the intake form or by email.
- Submitted information is used to determine clinical eligibility and to communicate with the prospective patient.
- FixCancers.com is not a HIPAA-covered entity. Patients should not send full medical records, pathology, or imaging through the public intake form. The clinical team requests those materials through a secure channel after eligibility review.
- Patients have the right to request access, correction, or deletion of their information at any time.
02 Information collected through the intake form
The intake form at fixcancers.com/#consult collects the following.
- Patient or contact name
- Email address
- Phone number (optional)
- Country of residence
- Primary tumor type
- Current stage
- Treatment history (free-text narrative)
- Acknowledgment of the consent checkbox
Form submissions are processed by FormSubmit.co, a static-site form processor, and routed to the intake address. The FormSubmit privacy policy applies to that processor's handling of the data in transit. The contents of the submission are stored in the intake mailbox and accessible only to the intake team.
03 Information collected through email
Email sent to intake@fixcancers.com routes through Cloudflare Email Routing to the FixCancers.com clinical review mailbox. Attachments and message content are stored in that mailbox until the engagement closes or the patient requests deletion.
04 Information collected automatically
The site is served from Cloudflare's edge network. Cloudflare records standard request metadata such as IP address, user-agent, request timestamp, and routing decisions for the purpose of operating the network and mitigating abuse. This information is held by Cloudflare under its operational policies and is not used by FixCancers.com for any analytics, profiling, or commercial purpose.
FixCancers.com runs no first-party analytics, no Google Analytics, no Meta Pixel, no LinkedIn Insight Tag, and no advertising trackers.
05 Cookies
FixCancers.com sets no first-party cookies. Browser session storage is not used. The site renders identically whether or not the browser permits cookies. Because no cookies are set, no cookie banner is required under EU ePrivacy Directive guidance or California CPRA.
06 Third-party services loaded on the site
Sienna accessibility widget
A small accessibility-helper script is loaded from jsDelivr (cdn.jsdelivr.net). The widget runs entirely client-side, sets no cookies, sends no analytics, and tracks no user behavior. The script is open source and auditable at the Sienna project repository.
Google Translate
A language selector loaded from translate.google.com offers on-demand translation. The translation widget runs when the visitor selects a language. Google's privacy policy governs use of that service. Visitors who do not select a language do not trigger any data transfer to Google beyond the initial script load.
FormSubmit
The intake form submits to FormSubmit.co. FormSubmit's privacy policy governs the routing of form data to the intake address.
Google Fonts
The Inter typeface is loaded from fonts.googleapis.com. Font requests are subject to Google's Fonts privacy notice. No personal data is sent to Google through the font request beyond IP address and user-agent.
07 How information is used
- Routing intake submissions to the clinical review team
- Determining clinical eligibility for partner clinic referral
- Communicating with the prospective patient about the intake
- Coordinating travel, scheduling, and partner clinic handoff after eligibility is confirmed
- Meeting legal and regulatory recordkeeping obligations
Information is not used for marketing, advertising, profiling, sale to third parties, or any commercial purpose unrelated to clinical eligibility review.
08 How information is shared
Patient information is shared only with the following.
- The clinical review team performing eligibility assessment
- The partner clinic the patient selects, after eligibility is confirmed
- Service providers necessary to operate the site (Cloudflare hosting, FormSubmit form routing)
- Government authorities when required by valid legal process
Patient information is not sold, rented, or shared for marketing, advertising, lead generation, data brokerage, or any commercial use.
09 HIPAA stance
FixCancers.com is not a covered entity under the HIPAA Privacy Rule (45 CFR Parts 160 and 164). The intake mailbox and the intake team are not subject to HIPAA's covered-entity obligations. Once a patient enters a clinical relationship with a partner clinic, the privacy framework of the responsible jurisdiction applies to that relationship.
10 European Union and United Kingdom
Visitors from the European Union and the United Kingdom have rights under the General Data Protection Regulation (Regulation 2016/679) and the UK Data Protection Act 2018. These rights include the following.
- The right to access personal data held by FixCancers.com
- The right to rectification of inaccurate personal data
- The right to erasure ("right to be forgotten")
- The right to restriction of processing
- The right to data portability
- The right to object to processing
- The right to lodge a complaint with a supervisory authority
The lawful basis for processing intake data is legitimate interest in evaluating clinical eligibility, performed at the data subject's request. Visitors not submitting an intake provide no personal data and no processing occurs.
To exercise EU or UK rights, email intake@fixcancers.com with subject line "GDPR rights request."
11 California (CCPA and CPRA)
California residents have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. These rights include the right to know what personal information is collected, the right to request deletion, the right to correct inaccurate information, and the right to limit the use of sensitive personal information.
FixCancers.com does not sell or share personal information, does not engage in cross-context behavioral advertising, and does not process sensitive personal information for any purpose other than clinical eligibility review at the data subject's request.
To exercise California rights, email intake@fixcancers.com with subject line "CCPA rights request."
12 Australia
Visitors from Australia have rights under the Australian Privacy Act 1988 and the Australian Privacy Principles. These rights include the right to access personal information held by FixCancers.com, the right to correct that information, and the right to lodge a complaint with the Office of the Australian Information Commissioner.
13 Data retention
Intake submissions are retained for the duration of the clinical engagement and for the period required by the responsible jurisdiction's recordkeeping rules. After the retention period, the records are deleted. Patients can request deletion at any time by emailing intake@fixcancers.com.
14 Children's privacy
The intake process for patients under 18 requires parental or legal-guardian consent. FixCancers.com does not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act (COPPA). Pediatric cases are routed to clinical teams qualified to evaluate pediatric eligibility under 21 CFR 50 Subpart D.
15 Security
Site traffic is encrypted with TLS 1.3. The intake mailbox is hosted on Google Workspace with two-factor authentication enforced. Access to intake records is limited to the clinical review team. Standard security controls cannot eliminate all risk. No method of transmission or storage is perfectly secure.
16 Changes to this policy
This policy is reviewed quarterly and updated when site operations change. The "Last updated" date at the top of this page reflects the most recent revision.
17 Contact
Privacy questions should be directed to intake@fixcancers.com with subject line "Privacy inquiry."