Health Information Privacy Notice

How CSM Cancer Foundation Protects Sensitive Health-Related Information

Effective Date: August 30, 2026.

1. Purpose of This Notice

CSM Cancer Foundation, an initiative of Changing Seasons Ministry, Inc. (“CSM Cancer Foundation,” “we,” “our,” or “us”), provides programs, resources, financial assistance, prayer, encouragement, and other support to individuals and families affected by cancer.

In connection with certain programs or requests for assistance, individuals may voluntarily provide personal, financial, medical, health-related, or other sensitive information.

This Health Information Privacy Notice explains how CSM Cancer Foundation seeks to collect, use, disclose, store, and safeguard health-related information provided to us.

This notice should be read together with our Privacy Policy and Terms and Conditions.

2. Health-Related Information We May Receive

Depending upon the program or assistance requested, we may receive health-related information voluntarily provided by an applicant, patient, survivor, caregiver, parent or guardian, authorized representative, healthcare provider, or other person involved in an assistance request.

Such information may include:

Cancer diagnosis or type of cancer
Information concerning treatment or treatment status
Healthcare provider, treatment facility, or hospital information
Documentation verifying diagnosis, treatment, or eligibility
Information concerning cancer-related needs or circumstances
Information concerning medications, transportation, lodging, treatment-related expenses, or other needs
Information provided by a caregiver or authorized representative
Other health-related information voluntarily submitted in connection with a Foundation program or request

We seek to request and retain only information reasonably necessary to evaluate, administer, document, or support the applicable program or request.

3. How We May Use Health-Related Information

CSM Cancer Foundation may use health-related information for purposes reasonably related to our charitable programs and operations, including to:

Review applications and requests for assistance
Determine eligibility for applicable Foundation programs
Verify information submitted with an application
Communicate with applicants, patients, caregivers, or authorized representatives
Coordinate approved assistance, resources, or support
Administer Care Cards, the Beacon of HOPE Fund, or other applicable programs
Maintain appropriate program and organizational records
Prevent fraud, misuse, or duplicate assistance where appropriate
Meet applicable legal, reporting, accounting, or compliance requirements
Protect the safety, security, rights, or legitimate interests of individuals and the Foundation

Health-related information will not be sold, rented, or traded.

4. Confidentiality and Limited Access

CSM Cancer Foundation treats health-related information as sensitive and confidential.

We seek to limit access to individuals who reasonably need the information to perform Foundation-related responsibilities, including authorized staff members, officers, program personnel, or other authorized representatives involved in reviewing, administering, documenting, or supporting a request.

Individuals with access to sensitive information are expected to respect its confidentiality and use it only for appropriate Foundation purposes.

We seek to avoid unnecessary collection, access, use, or disclosure of health-related information.

5. When Information May Be Shared

CSM Cancer Foundation does not sell, rent, or trade health-related information.

Health-related or related personal information may be disclosed when reasonably necessary to:

Review or verify a request for assistance
Coordinate assistance requested or authorized by the individual
Work with an authorized service provider assisting the Foundation
Communicate with a healthcare provider or other organization when appropriate authorization has been provided or when otherwise permitted by applicable law
Protect against fraud, misuse, security threats, or unlawful activity
Protect the rights, safety, or property of an individual, the Foundation, or others
Respond to a lawful court order, subpoena, governmental request, or other legal obligation
Carry out another purpose authorized or requested by the individual

We seek to limit disclosures to information reasonably necessary for the applicable purpose.

6. Healthcare Providers and Other Third Parties

In some circumstances, an individual may ask CSM Cancer Foundation to communicate with or obtain information from a hospital, physician, treatment facility, social worker, patient navigator, caregiver, financial assistance office, transportation provider, lodging provider, or other third party.

When authorization or consent is required, we may request appropriate permission before seeking or sharing information.

Healthcare providers and other organizations may have their own privacy obligations, policies, procedures, or authorization requirements. CSM Cancer Foundation does not control the privacy or security practices of independent third parties.

7. Our Privacy Policies and Procedures

The Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and its implementing regulations apply to certain covered entities and business associates as defined by federal law.

CSM Cancer Foundation is a charitable organization and is not a healthcare provider. We do not provide medical diagnosis, medical treatment, or medical advice.

The fact that CSM Cancer Foundation may voluntarily receive health-related information from an individual does not, by itself, mean that all such information constitutes Protected Health Information (“PHI”) under HIPAA or that CSM Cancer Foundation is a HIPAA-covered entity.

Nothing in this notice is intended to represent that CSM Cancer Foundation is a HIPAA-covered entity or business associate unless applicable law and the particular circumstances establish otherwise.

Regardless of whether HIPAA applies to particular information or circumstances, CSM Cancer Foundation is committed to treating health-related information with appropriate confidentiality, care, and security.

8. Security Safeguards

CSM Cancer Foundation seeks to use reasonable administrative, technical, physical, and organizational safeguards designed to protect sensitive health-related information against unauthorized access, disclosure, loss, misuse, or alteration.

These safeguards may include limiting access to authorized individuals, using password-protected systems, utilizing appropriate third-party technology providers, and maintaining organizational procedures for handling sensitive information.

However, no electronic communication, website, database, storage system, or transmission method can be guaranteed to be completely secure. We therefore cannot guarantee absolute security.

9. Electronic Forms and Communications

Individuals may provide information to CSM Cancer Foundation through online applications, electronic forms, email, telephone communications, third-party platforms, or other electronic methods.

Electronic communications and internet-based services may involve security risks outside the Foundation's reasonable control.

Some forms, applications, communications, or other Foundation functions may be provided through third-party service providers. Information submitted through those services may also be subject to the provider's privacy policy, security practices, and terms.

We encourage individuals not to submit unnecessary medical or sensitive information through ordinary email, social media, text messages, or other communication channels unless specifically requested or appropriate for the purpose.

10. Records and Information Retention

CSM Cancer Foundation may retain health-related information and related records for as long as reasonably necessary to administer programs, document assistance, maintain organizational records, address disputes or questions, prevent fraud or misuse, satisfy legitimate operational needs, or comply with applicable legal, financial, charitable, reporting, or recordkeeping requirements.

When information is no longer reasonably necessary, we may delete, destroy, de-identify, or otherwise dispose of it consistent with applicable requirements and organizational practices.

Retention periods may vary depending upon the type of information, program, assistance provided, and applicable requirements.

11. Your Privacy Choices and Requests

Depending upon the circumstances and applicable law, individuals may contact CSM Cancer Foundation regarding health-related information they have provided to us.

Requests may include, as applicable:

Asking whether we maintain certain information about you
Requesting correction or updating of inaccurate information
Updating contact information
Withdrawing consent or authorization where applicable
Requesting limitations on certain uses or disclosures where applicable
Requesting deletion of certain information where legally and operationally permissible
Asking questions about how information has been handled

Certain records may need to be retained for legal, financial, charitable, fraud-prevention, safety, reporting, recordkeeping, or legitimate organizational purposes.

We will review privacy requests and respond as appropriate and as required by applicable law.

12. Information Concerning Minors

Certain CSM Cancer Foundation programs or services may benefit children or teenagers affected by cancer.

When health-related or other sensitive information concerning a minor is necessary for a Foundation program or request for assistance, appropriate involvement, permission, consent, or authorization from a parent, legal guardian, or other legally authorized representative may be required depending upon the circumstances and applicable law.

We seek to collect only information reasonably necessary for the applicable program or request.

Our general website is not intended to encourage children under age 13 to independently submit sensitive health information to CSM Cancer Foundation.

13. Security Incidents and Breach Notification

CSM Cancer Foundation takes the security of sensitive information seriously.

If we become aware of a security incident involving health-related or other personal information, we will seek to take reasonable steps to investigate, contain, mitigate, and respond to the incident.

Because CSM Cancer Foundation is based in Georgia and provides programs, resources, support, and services to individuals throughout the United States, applicable notification requirements may vary based upon federal law, state law, the type of information involved, and the residence of affected individuals.

When notification is legally required, CSM Cancer Foundation will seek to provide notification in accordance with applicable requirements, including applicable Georgia requirements, subject to lawful law-enforcement delays and other legally recognized exceptions.

14. Changes to This Notice

CSM Cancer Foundation may update this Health Information Privacy Notice periodically to reflect changes in our programs, services, technology, organizational practices, privacy practices, or applicable requirements.

When material updates are made, the revised notice will be posted on our website with an updated effective date.

We encourage individuals who provide sensitive information to review this notice periodically.

15. Contact Us

Questions, concerns, or requests regarding health-related information or this Health Information Privacy Notice may be directed to:

CSM Cancer Foundation
An initiative of Changing Seasons Ministry, Inc.
1305 Barnard Street #522
Savannah, GA 31401

Email: info@csmcancerfoundation.org
Phone: (218) 833-2021
Website: csmcancerfoundation.org