Last Updated: Jan. 13, 2026
This Data Processing Addendum (“DPA”) forms part of the agreement between GuideWorks (“Processor”) and its healthcare client (“Controller”).
GuideWorks provides marketing, engagement, and reporting services to healthcare organizations. In doing so, GuideWorks may process certain personal data on behalf of the Controller.
GuideWorks does not provide medical services and does not independently determine the purposes or means of processing patient data.
Processing activities may include:
Campaign targeting and segmentation
Engagement tracking
Lead capture and routing
Communication workflow management
Performance reporting
GuideWorks processes data solely in accordance with client instructions.
Depending on client configuration, data may include:
Patient contact information
Appointment status indicators
Engagement metrics
Non-clinical outreach responses
GuideWorks does not require diagnosis data or full medical records to operate.
GuideWorks implements administrative, technical, and organizational safeguards including:
Access controls
Encrypted data transmission
Role-based permissions
Vendor confidentiality agreements
GuideWorks may engage subprocessors (hosting providers, CRM platforms, analytics tools) to support services. Subprocessors are contractually required to maintain confidentiality and security.
Data is retained only as necessary to fulfill service obligations or as required by law. Upon termination of services, data will be returned or securely deleted per agreement terms.
GuideWorks will reasonably assist clients in responding to data subject requests, regulatory inquiries, or compliance reviews.
Effective Date: January 2026
GuideWorks (“GuideWorks,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, and protect information when you interact with our website, services, and communications.
We may collect the following categories of information:
This data is collected through cookies, analytics tools, and similar technologies.
We use collected information to:
You may disable cookies through your browser settings, though some features may not function properly.
We may share information with:
All third parties are required to maintain confidentiality and data protection standards.
We implement reasonable administrative, technical, and physical safeguards to protect your information. However, no system is 100% secure, and we cannot guarantee absolute security.
We retain information only as long as necessary to:
Depending on your location, you may have the right to:
Requests can be made by contacting us.
Our website may link to third-party sites. We are not responsible for their privacy practices or content.
We may update this Privacy Policy periodically. Changes will be posted on this page with a revised effective date.
If you have questions about this Privacy Policy, contact us.