Last updated: November 4, 2026

At Hope & Heroes, every story we share is about a real child and family. We work hard to protect their privacy and yours. This page explains how HIPAA (Health Insurance Portability and Accountability Act of 1996), the federal health privacy law, applies to our work and how to contact us securely about sensitive health information. It applies to the children and families we serve, our donors, and anyone else who shares information with us.

Our Role
Hope & Heroes Children’s Cancer Fund supports research, clinical care, and programs for children with cancer and blood disorders. The hospitals, physicians, and other health care providers we support keep their own privacy policies and, where required, their own HIPAA Notices of Privacy Practices. This page does not replace those notices.

What HIPAA Covers
HIPAA protects individually identifiable health information held by health plans, health care clearinghouses, certain health care providers, and their business associates.

HIPAA does not automatically apply to every nonprofit or to every piece of health information shared online. Whether it applies depends on an organization’s role, the information involved, and how that information is received or used.

When Hope & Heroes receives, uses, or discloses protected health information in circumstances where HIPAA applies, we comply with HIPAA requirements, applicable state privacy laws, and related contractual obligations.

Using Our Website
Our website shares information about our mission, programs, events, fundraising efforts, and resources for families affected by childhood cancer. It is not a patient portal, and we do not collect protected health information unless we have arranged a secure method with you in advance. For medical questions, treatment decisions, or urgent health concerns, contact your child’s health care provider directly.

Contacting Us via Forms and Email
Please don’t share medical records, test results, insurance details, Social Security numbers, or other sensitive health information through our website or donation forms, unsecured email, public comments, or on social media. If you need to discuss a patient or family member, contact us first and avoid sharing medical details. We’ll provide a secure way to send any information we need.

How We Protect Information
We use reasonable safeguards, including secure systems and access limited to authorized staff, to protect the information we receive from unauthorized access, use, disclosure, alteration, or destruction.

Third-Party Services
Our website uses third-party providers to process donations, manage event registrations, support site features, and measure traffic. We expect these providers to maintain appropriate privacy and security safeguards.

Patient Stories, Photos, and Testimonials
When families share their stories, they help others understand what childhood cancer and blood disorders mean for a child and a family. Sharing a story is always a personal choice. Before publishing an identifiable patient story, photo, video, or testimonial, we obtain any consent, permission, or authorization required by law. For children, this includes permission from a parent or legally authorized representative where required.

If you would like to discuss how we use your story or image or ask us to stop using it in the future, please email contact@hopeandheroes.org. If a HIPAA authorization applies, you must withdraw it in writing, and the withdrawal generally does not affect actions already taken in reliance on it. We may not be able to retrieve materials already distributed or copies shared by others.

Medical Records and Your Privacy Rights
To request medical records, request corrections, or learn how your health information is used or disclosed, contact the hospital or health care provider that maintains the records. If your concern involves information shared directly with Hope & Heroes, contact us at contact@hopeandheroes.org. We’ll review your request and explain your options.

Donor and Website Information
Our Privacy Policy explains how we handle donor information and mailing lists. Donor and website information is not automatically protected health information under HIPAA.

Questions and Privacy Concerns
If you have a privacy question or concern, or believe information shared with Hope & Heroes has been improperly used, disclosed, or accessed, please contact us promptly. Include your contact information and a brief description of your concern, but do not share sensitive medical details.

Hope & Heroes Children’s Cancer Fund
518 West 181st Street, Box #780
New York, NY 10033
Phone: 332-330-1025
Email: contact@hopeandheroes.org

If you believe a HIPAA-regulated organization violated your privacy rights, you may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. 

Updates to This Page
We may update this page as our practices or legal requirements change. Updates will be posted here with a revised “Last updated” date.