Privacy Statement

Last Updated: August 27, 2026

1. Collection of Your Personal Information

Genesee Health System collects personally identifiable information, such as your email address, name, home or work address, or telephone number when voluntarily submitted through our website. Genesee Health System also collects anonymous demographic information, which is not unique to you, such as your ZIP code, age, gender, preferences, interests, and favorites.

There is also information about your computer hardware and software that is automatically collected by Genesee Health System. This information can include: your IP address, browser type, domain names, access times, and referring website addresses. This information is used by Genesee Health System for the operation of the service, to maintain quality of the service, and to provide general statistics regarding use of the Genesee Health System website.

Please keep in mind that if you directly disclose personally identifiable information or personally sensitive data through Genesee Health System public message boards, this information may be collected and used by others.

Genesee Health System encourages you to review the privacy statements of websites you choose to link to from Genesee Health System so that you can understand how those websites collect, use, and share your information. Genesee Health System is not responsible for the privacy statements or other content on websites outside of the Genesee Health System family of websites.

2. Data Collection Policy — How We Use Your Data

Genesee Health System collects and uses your personal information to operate the Genesee Health System website and deliver the services you have requested. Specifically, we may use your information to:

• Respond to inquiries or requests submitted through the website
• Send service-related communications or updates
• Conduct surveys or research about your opinion of current or potential services
• Deliver customized content within our website based on usage patterns
• Analyze website usage to improve our services

Genesee Health System does not use or disclose sensitive personal information, such as race, religion, or political affiliations, without your explicit consent. We do not use your data for automated decision-making or profiling for commercial purposes.

3. Data Collection Policy — How We Store Your Data

Personal information collected through this website is stored on secured computer servers maintained by Genesee Health System in a controlled environment, protected from unauthorized access, use, or disclosure. When sensitive personal information is transmitted, it is protected using industry-standard encryption (Transport Layer Security, or TLS).

We retain personal information only as long as necessary to fulfill the purposes described in this statement or as required by applicable law or regulation. When personal information is no longer needed, it is securely deleted or anonymized in accordance with our data retention policies.

4. Share and Disclosure of Information to Third Parties

Genesee Health System does not sell, rent, or lease personal data to third parties.

Genesee Health System may, from time to time, share data with trusted service partners who assist us in operating the website and delivering our services. Examples include email delivery providers and website hosting or support services. All such third parties are:

• Prohibited from using your personal information except to provide services to Genesee Health System
• Required to maintain the confidentiality of your information
• Not provided your unique personally identifiable information (email, name, address, telephone number) for their own marketing use

Genesee Health System websites will disclose your personal information without prior notice only if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the requirements of applicable law or comply with legal process served on Genesee Health System or this site; (b) protect and defend the rights or property of Genesee Health System; or (c) act under exigent circumstances to protect the personal safety of users of Genesee Health System or the public.

5. Data Rights

You have the following rights with respect to your personal information collected through this website:

To exercise any of these rights, please contact Genesee Health System using the contact information provided at the end of this statement.

6. Cookies Policy

This website uses cookies and similar technologies. A cookie is a small text file placed on your device by a web server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie.

How We Use Cookies

• Strictly Necessary Cookies: Required for the website to function properly. These cannot be disabled.
• Preference Cookies: Remember your settings and personalization choices across visits, including accessibility display options.
• Analytics Cookies: Help us understand how visitors use our website so we can improve it. These are loaded only with your consent.
• Embedded Content Cookies: Placed by third-party services embedded in our site, such as social media feeds, maps, or video players. These are loaded only with your consent, and these third parties may track your interaction with that content.

How to Manage Cookies

• Cookie Consent Tool: When you first visit our website, a cookie consent banner allows you to accept or decline non-essential cookies. Non-essential cookies and scripts are not loaded unless you consent to them. You may change your preferences at any time using the consent tool available on our site.
• Global Privacy Control: If your browser sends a Global Privacy Control signal, we treat it as an opt-out automatically. See Section 8 below.
• Browser Settings: Most web browsers allow you to control cookies through their settings. You can configure your browser to block all cookies, accept only certain types, or prompt you before accepting. Please refer to your browser’s help documentation for instructions.

Please note that declining non-essential cookies may affect the functionality of certain features on our website, such as embedded videos or maps.

7. Children’s Online Privacy Protection

This website is intended for use by adults, including parents, guardians, and caregivers seeking information about our services. Genesee Health System does not knowingly collect personally identifiable information from children under 13 years of age through this website.

If we become aware that a child under the age of 13 has submitted personal information through this website without verifiable parental consent, we will take steps to delete that information promptly. Parents or guardians who believe their child has provided personal information to us through this website are encouraged to contact us immediately using the information at the end of this statement so that we may take appropriate action.

8. Global Privacy Control and Do Not Track

What is Global Privacy Control?

Global Privacy Control is a privacy preference that your web browser can send automatically to every website you visit. It communicates that you do not want your personal information sold or shared, and that you do not wish to be tracked across websites. Rather than adjusting settings separately on each website you visit, you set the preference once in your browser and it applies everywhere.

Technically, the signal is transmitted as part of the request your browser makes to our web server. Our consent management system reads that signal before any non-essential scripts are permitted to load.

How to Enable Global Privacy Control

Several browsers support GPC directly in their privacy settings:

• Mozilla Firefox: Open Settings, go to Privacy & Security, and enable the option telling websites not to sell or share your data.
• Brave: Open Settings, go to the privacy or shields section, and enable the option telling sites not to sell or share your data.
• DuckDuckGo Browser: GPC is enabled by default.

For browsers that do not yet support GPC natively, including Google Chrome, Microsoft Edge, and Safari, you can add a browser extension that sends the signal on your behalf. Options include the DuckDuckGo Privacy Essentials extension, Privacy Badger from the Electronic Frontier Foundation, and the OptMeowt extension. Extensions should be installed only from your browser’s official extension store.

You can confirm whether your browser is sending the signal by visiting globalprivacycontrol.org, which will report whether GPC is detected.

How We Respond to Global Privacy Control

When we receive a GPC signal, we treat it exactly as though you had declined non-essential cookies using our consent banner. Specifically:

• Analytics, marketing, and embedded content scripts are prevented from loading
• Non-essential cookies are not set
• The preference is applied automatically on your first visit, before any non-essential technology loads
• Strictly necessary cookies required for the site to function continue to operate

If you enable GPC and later wish to allow analytics or embedded content on our site, you may adjust your browser setting or use our consent tool to record a different preference.

Do Not Track

Some browsers also transmit an older signal known as Do Not Track (DNT). No consistent industry standard was ever established for how websites should interpret DNT, and it has been largely superseded by Global Privacy Control. Our website does not rely on DNT signals. We recommend using Global Privacy Control, which we do honor as described above.

9. Security of Your Personal Information

Genesee Health System secures your personal information from unauthorized access, use, or disclosure. We maintain your personally identifiable information on computer servers in a controlled, secure environment. Information transmitted between your browser and our website is protected using industry-standard encryption (TLS).

While we take reasonable precautions to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your data.

10. Changes to This Statement

Genesee Health System will occasionally update this Statement of Privacy to reflect our practices, regulatory requirements, or feedback we receive. When we update this statement, we will revise the effective date shown at the top of this page. Genesee Health System encourages you to periodically review this Statement to stay informed about how we are protecting your information.

11. Contact Information

Genesee Health System welcomes your comments and questions regarding this Statement of Privacy. If you believe that Genesee Health System has not adhered to this Statement, or if you wish to exercise any of your data rights, please contact us:

We will use commercially reasonable efforts to promptly determine and remedy the problem.