Data from which health status may be inferred
Anything above, in combination. This includes information about your use of our websites, because a person browsing a site about peripheral artery disease may be seeking health care services
Efforts to obtain health services
Whether you have seen a specialist, how far away one is, whether you have sought a second opinion, whether amputation has been recommended, and barriers you have encountered
Attitudes and beliefs about health
What you think about the link between smoking and PAD, what goes through your mind when you smoke, how you weigh the risk to your legs, how you think about your pain, and what you want to be able to do
Health-related behavior
Smoking history, triggers, and quit attempts. Diet, eating habits, and what you are willing to change. Physical activity
Mental health
Questions about mood, which you may skip
Health conditions and status
Your PAD diagnosis, disease stage, and other medical conditions
Health conditions and status
Your PAD diagnosis, disease stage, and other medical conditions
Bodily functions and measurements
Walking distance and duration, steps, walking and resting time within a session, time to onset of claudication, time to recovery at rest, pain level during and after walking, height, weight
Medications
Which medicines you take, whether you take them as prescribed, and why not if you do not
Medical interventions and procedures
Angioplasty, stents, atherectomy, bypass, amputation, and other treatments, including where and by whom they were performed, any complications, and how long ago
Symptoms
Pain when walking, pain at rest, wounds, ulcers, gangrene, numbness, cramping
Category
What it includes
Postal address
Only what the law requires
Telephone
1-833-PAD-LEGS (1-833-723-5347)
Service providers who operate our programs on our instructions
Your information as needed to run the service
Research organizations and research partners generally
Information with your identity removed
Research organizations for a study you specifically agreed to: universities, hospitals, clinical research sites, contract research organizations, study sponsors
Your name and contact details, and health information relevant to that study
Category
What they receive
Twilio Inc.
Sends text messages for the My Steps walking program
The content of messages sent to you about the walking program
Wix.com Ltd. and Strikingly, Inc.
Host thewaytomyheart.org, padhelp.org, padtrials.org, and padregistry.org, and the forms submitted through them
Information you enter into a website form, and information about your use of the site as described at section 2
Apple Inc. and Google LLC
Distribute the walking program application through the App Store and Google Play
No consumer health data. Distribution only. The application does not write to Apple Health or Google Fit and does not share health information with either company
RingCentral, Inc.
Carries telephone calls to and from the Leg Saver Hotline, and records and transcribes them
The content of your call, including anything you tell us about your health, and the transcript and summary produced from it
Amazon Web Services, Inc.
Hosts the walking program application and the padwalk.org website
Walking program application data: steps, walking and resting time, time to onset of claudication, pain level, and symptoms recorded in the application. Information you enter into a form on padwalk.org
Immuto, Inc. dba Tellescope
Hosts participant records, intake forms, consent records, and communications
All categories at section 2 other than walking program application data
Service provider
What it does
What it holds or transmits
4. Why we collect it
•  To deliver the program you have joined, and to support you while you take part
•  To identify research opportunities that may match your health profile or location, and tell you about them
•  To contact you with follow-up questions so your record stays current
•  To contact you if your answers suggest an urgent concern about your limb or your health
•  To understand, in aggregate, where PAD care is failing patients
•  To support research, publication, education, and advocacy, using information that does not identify you
•  To operate and secure our programs
​
Consent
We collect consumer health data only with your consent, and we share it only with a separate consent.
Consent to collection is given when you sign the Participant Agreement for the program you are joining. Consent to sharing for research is given separately, in the Research Consent for that program, which is optional.
Neither consent is a condition of the other, and neither is a condition of taking part in any program. You may withdraw either at any time.
3. Where it comes from
Only from you. We collect consumer health data directly from you when you complete a registry or program form or survey, when you use the walking program application, when you contact the Leg Saver Hotline, when you submit an inquiry through our websites, or when you speak with a PAD Navigator or coach who records what you tell them.
​
We also receive limited information about your use of our websites, described in section 2, through the platforms on which those websites are hosted. Those platforms are named at section 5.
We do not receive consumer health data from your doctors, hospitals, insurers, data brokers, advertising partners, or any other third party.
We collect only what you tell us directly, through registry forms, program forms, follow-up surveys, the walking program application, conversations with a PAD Navigator or coach, or an inquiry submitted through our websites.
2. What consumer health data we collect
•  We do not sell consumer health data. Not now, and not under any current plan.
•  We do not collect consumer health data unless you give it to us directly.
•  We share information for research only after removing your identity.
•  We never give a research organization your name, email, or phone number unless you agree to that specific study.
•  You can withdraw consent, find out who has received your data, and require deletion, including deletion by anyone we shared it with.
1. Summary
11. Contact and complaints
Global PAD Association, San Rafael, California, United States.
Privacy contact: Kym McNicholas, Chief Executive Officer, Kym@padhelp.org
General: info@padhelp.org · 1-833-PAD-LEGS (1-833-723-5347)
A postal address for formal correspondence is available on request.
Please contact us first. You may also complain to the Washington State Attorney General at atg.wa.gov, or to the Attorney General of your own state.
Washington residents may also have a private right of action under the Washington Consumer Protection Act.
Related documents: Privacy Policy, and the Participant Agreement and Research Consent for the program you have joined.
We may update this policy. The version and date at the top show the current version, and we keep previous versions available on request.
​
If we change how we collect, share, or sell consumer health data in a way that materially affects you, we will notify you and obtain your consent again before the change applies to information already collected.
10. Changes to this policy
For as long as you take part in a program, and for ten years afterwards so that research findings can be verified, unless you ask us to delete it sooner, in which case we do.
8. How long we keep it
If you are a Washington resident, you have the right to:
​
Confirm and access
Ask whether we collect, share, or sell your consumer health data, and get a copy of it.
​
Know who received it
Ask for a list of all third parties and affiliates with whom we have shared your consumer health data, including how to contact them.
​
Withdraw consent
Withdraw your consent to our collection and sharing at any time.
​
Delete
Require us to delete your consumer health data. We delete it within thirty days of verifying your identity, from all of our records, and we notify every service provider and third party who received it that they must delete it too.
​
Where your information is held on an archived or backup system, deletion from that system is completed within six months, and the information is not used or accessed in the meantime.
​
Appeal
If we refuse a request, we will explain why and how to appeal. We decide appeals within forty-five days. If we deny your appeal we will give you a written explanation and a link for submitting a complaint to the Washington State Attorney General.
Residents of Nevada, Connecticut, and other states with consumer health data laws have equivalent rights, and we honor them the same way.
​
One limit on deletion
Where your information has already been included in a completed research analysis or publication, we cannot remove it from work that is already published, and we retain the underlying dataset so findings can be verified. Everything else is deleted. We will tell you specifically if this applies to you.
​
How to make a request
Use our Data Rights Request form at [URL], email Kym@padhelp.org, or call 1-833-PAD-LEGS. If you prefer to write by hand, request a postal address from our privacy contact by email or telephone.
​
We verify your identity using the contact details already in your record. If we cannot verify you, we will tell you and explain what else we need.
We respond within forty-five days. Where a request is complex we may extend once by a further forty-five days, and we will tell you before we do. Where you have asked for deletion, the deletion itself is completed within thirty days of verifying your identity, as set out above.
​
There is no charge for the first two requests in any twelve-month period.
7. Your rights
The Global PAD Association does not sell consumer health data, as sale is defined by the My Health My Data Act, meaning we do not exchange consumer health data for money or other valuable consideration.
Because we do not sell it, we do not use the separate written authorization the Act requires for sales. If that ever changes, we will obtain a valid authorization from you first, in the form the law requires, and you would be free to refuse.
​
What we do accept payment for, and want to be clear about:
•  Research organizations and sponsors may pay us for recruitment support and for assistance identifying potential participants
•  They may pay for access to information from which your identity has been removed, which is not consumer health data under the Act
•  These payments fund the registry, the Leg Saver Hotline, our lifestyle programs, and our wider work
​
We never sell your name, email address, or telephone number. We never share consumer health data with advertisers or data brokers, and we do not use it for advertising of any kind.
6. We do not sell consumer health data
The rule on your identity
We never give a research organization your name, email address, telephone number, or address unless you have agreed to that specific study. When a study appears to match you, we tell you which study it is, where, who runs it, and what taking part involves. Only then do we ask. You may agree to one study and decline another, and declining changes nothing else about your place in any program.
​
How we remove your identity
Before sharing for research or publication we remove your name, email, telephone number, full address, and full date of birth, and we reduce or remove detail that could identify you in combination, including exact procedure dates, city, and small-population locations. Where a figure would represent fewer than five people, we do not share or publish it.
​
This work is governed by our written De-Identification Standard, which requires every release to be checked by a second person before it leaves us. A copy is available on request. Recipients must agree in writing not to attempt re-identification and not to permit others to do so.
Properly de-identified data is not consumer health data under the My Health My Data Act.
​
The Global PAD Association publicly commits to maintain and use information from which your identity has been removed only in de-identified form, and not to attempt to reidentify you or any other person. Every recipient is required by written agreement to do the same, and to impose the same obligation on anyone to whom it grants access.
Consumer health data that identifies you is held by the Global PAD Association and by the service providers named at section 5. It is not held by anyone else.
​
Each of those providers operates under a written agreement requiring appropriate safeguards and permitting them to process your information only on our instructions. Tellescope is a HIPAA-compliant healthcare platform.
​
Inside the Global PAD Association, access is restricted to trained staff, Navigators, and coaches who need it, and everyone with access signs a confidentiality agreement first. Access is removed on the day a person’s engagement with us ends.
​
If a breach affects your consumer health data, we will notify you and the relevant authorities as required by law.
Information we share with research partners has your identity removed before it leaves us, and is therefore not consumer health data under the My Health My Data Act. Even so, every recipient is required by written agreement to protect that information and not to attempt to identify you.
9. How we protect it
Postal address
Available on request for formal correspondence
Telephone
1-833-PAD-LEGS (1-833-723-5347)
General contact
info@padhelp.org
Privacy contact
Kym McNicholas, Chief Executive Officer, Kym@padhelp.org
Location
San Rafael, California, United States
GLOBAL PAD ASSOCIATION
Consumer Health Data Privacy Policy
Washington, Nevada, Connecticut, and other states with consumer health data laws
Version 2.1 · Effective 1 August 2026 · Last updated [date]
This policy is required by the Washington My Health My Data Act and by similar laws in Nevada, Connecticut, and other states. It explains how the Global PAD Association handles consumer health data across all of our programs, including the Global PAD Patient Registry, the Leg Saver Hotline, the structured walking, smoking cessation, and dietary programs, and the walking program application.
It applies to all of our websites: thewaytomyheart.org, padhelp.org, padtrials.org, padregistry.org, and padwalk.org.
It sits alongside our Privacy Policy at [URL], which covers everything else. If the two ever conflict on a point covered here, this policy governs.
Who this is for: residents of Washington State, Nevada, Connecticut, and any other state with a consumer health data law. Residents of other places are welcome to read it, and we apply the same standards to everyone.
Who we are
The Global PAD Association is the registered trade name of Way To My Heart Inc., a nonprofit corporation registered in California and recognized as tax exempt under Section 501(c)(3) of the Internal Revenue Code. References in this policy to the Global PAD Association mean Way To My Heart Inc.
What we do not collect: genetic data, biometric data, precise location, or information about reproductive or sexual health. We do not obtain your medical records. We do not buy consumer health data from anyone.
The walking program application records the information listed above under bodily functions and measurements. It does not collect location, route, or GPS data, and it does not use mapping to track where you walk. It does not write to Apple Health or Google Fit, and it does not share health information with Apple or Google. Our walking, smoking cessation, and dietary programs do not ask for your city or street address.
5. Who we share it with
Affiliates and named service providers
We have no corporate affiliates. The service providers that hold or transmit consumer health data on our instructions are named below. A current list is maintained and is available on request.
Our domain names are registered through GoDaddy.com, LLC. Domain registration involves no consumer health data, and GoDaddy does not host our websites or receive information you provide to us.
Categories of third parties