IME Privacy
We are a nonprofit organization committed to mobilizing resources and executing programs to aid underserved communities in both the U.S. and African nations.
Privacy Policy
Last updated: January 2025
International Medical Exchange, Inc. ("IME," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.
Information We Collect
Personal Information
We may collect the following types of personal information:
- Contact Information: Name, email address, phone number, mailing address
- Professional Information: Organization, job title, professional credentials
- Donation Information: Payment details, donation history, preferences
- Communication Data: Messages, inquiries, feedback, and correspondence
- Event Information: Registration details, attendance records, dietary preferences
Automatically Collected Information
- Usage Data: Pages visited, time spent, click patterns, referral sources
- Device Information: Browser type, operating system, device identifiers
- Location Data: General geographic location based on IP address
- Cookies and Tracking: Session data, preferences, authentication tokens
How We Use Your Information
We use collected information for the following purposes:
Program Administration
- Manage program enrollment and participation
- Provide healthcare training and educational services
- Coordinate medical missions and outreach activities
- Facilitate partnerships and collaborations
Communications
- Send newsletters, program updates, and announcements
- Respond to inquiries and provide customer support
- Share research findings and publications
- Notify about events, webinars, and opportunities
Fundraising and Donations
- Process donations and provide tax receipts
- Manage donor relationships and stewardship
- Send fundraising communications (with opt-out options)
- Analyze donation patterns for organizational planning
Legal and Operational
- Comply with legal obligations and regulatory requirements
- Protect against fraud, abuse, and security threats
- Maintain records for audit and accountability purposes
- Improve our services and website functionality
Legal Basis for Processing (EU Residents)
Under the General Data Protection Regulation (GDPR), we process personal data based on:
- Consent: When you provide explicit consent for specific purposes
- Legitimate Interest: For fundraising, program improvement, and organizational communications
- Contractual Necessity: To fulfill obligations related to donations, memberships, or services
- Legal Obligation: To comply with applicable laws and regulations
- Vital Interests: To protect health and safety in emergency medical situations
How We Share Your Information
We may share your personal information in the following circumstances:
International Data Transfers
As an international organization, we may transfer personal data across borders. We ensure adequate protection through:
- Adequacy Decisions: Transfers to countries with EU adequacy determinations
- Standard Contractual Clauses: EU-approved contractual protections
- Binding Corporate Rules: Internal privacy frameworks for data transfers
- Consent: Explicit consent for specific international transfers
Your Privacy Rights
Depending on your location, you may have the following rights:
Access
Request copies of your personal data we hold
Rectification
Correct inaccurate or incomplete personal data
Erasure
Request deletion of your personal data (with exceptions)
Restriction
Limit how we process your personal data
Portability
Receive your data in a structured, machine-readable format
Objection
Object to processing based on legitimate interests
To exercise these rights, contact us at info@ime-inc.org or use our contact form.
Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption: Data encrypted in transit and at rest
- Access Controls: Role-based access with multi-factor authentication
- Regular Audits: Security assessments and vulnerability testing
- Staff Training: Privacy and security awareness programs
- Incident Response: Procedures for detecting and responding to breaches
- Data Minimization: Collection limited to necessary purposes
Data Retention
We retain personal data only as long as necessary for the purposes outlined in this policy:
- Donor Records: 7 years for tax and accounting purposes
- Program Participants: Duration of participation plus 3 years
- Marketing Lists: Until you unsubscribe or request removal
- Legal Requirements: As mandated by applicable laws
- Website Analytics: 26 months maximum
Children's Privacy
Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected such information, we will promptly delete it and notify parents/guardians as required by law.
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience:
You can manage cookie preferences through your browser settings or our cookie consent banner.
Third-Party Links
Our website may contain links to external sites operated by third parties. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing personal information.
Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated through:
- Prominent notice on our website
- Email notification to subscribers
- Updated "Last Modified" date
Continued use of our services after changes constitutes acceptance of the updated policy.
Contact Us
For questions about this Privacy Policy or our data practices, contact:
International Medical Exchange, Inc.
Privacy Officer
P.O. Box 4313
Silver Spring, MD 20914
USA
Phone
We will respond to privacy inquiries within 30 days (or as required by applicable law).