This Data Processing Addendum – DPA

Last Updated: Jan. 13, 2026

This Data Processing Addendum (“DPA”) forms part of the agreement between GuideWorks (“Processor”) and its healthcare client (“Controller”).

1. Scope

GuideWorks provides marketing, engagement, and reporting services to healthcare organizations. In doing so, GuideWorks may process certain personal data on behalf of the Controller.

GuideWorks does not provide medical services and does not independently determine the purposes or means of processing patient data.

2. Nature of Processing

Processing activities may include:

  • Campaign targeting and segmentation

  • Engagement tracking

  • Lead capture and routing

  • Communication workflow management

  • Performance reporting

GuideWorks processes data solely in accordance with client instructions.

3. Data Categories

Depending on client configuration, data may include:

  • Patient contact information

  • Appointment status indicators

  • Engagement metrics

  • Non-clinical outreach responses

GuideWorks does not require diagnosis data or full medical records to operate.

4. Security Measures

GuideWorks implements administrative, technical, and organizational safeguards including:

  • Access controls

  • Encrypted data transmission

  • Role-based permissions

  • Vendor confidentiality agreements

5. Subprocessors

GuideWorks may engage subprocessors (hosting providers, CRM platforms, analytics tools) to support services. Subprocessors are contractually required to maintain confidentiality and security.

6. Data Retention & Deletion

Data is retained only as necessary to fulfill service obligations or as required by law. Upon termination of services, data will be returned or securely deleted per agreement terms.

7. Compliance Cooperation

GuideWorks will reasonably assist clients in responding to data subject requests, regulatory inquiries, or compliance reviews.

Privacy Policy

Effective Date: January 2026

GuideWorks (“GuideWorks,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, and protect information when you interact with our website, services, and communications.

Information We Collect

We may collect the following categories of information:

a. Information You Provide Directly

  • Name
  • Email address
  • Phone number
  • Company name
  • Job title
  • Information submitted through forms, demos, or communications

b. Automatically Collected Information

  • IP address
  • Browser type
  • Device type
  • Pages visited
  • Referral sources
  • Usage and interaction data

This data is collected through cookies, analytics tools, and similar technologies.

How We Use Information

We use collected information to:

  • Provide and operate GuideWorks services
  • Communicate with you regarding inquiries, demos, and services
  • Improve platform performance and user experience
  • Analyze engagement and usage trends
  • Comply with legal and regulatory obligations
  • We do not sell personal data.
  • 3. Cookies & Tracking Technologies
  • GuideWorks uses cookies and similar technologies to:
  • Understand site usage
  • Improve performance
  • Support analytics and marketing efforts

You may disable cookies through your browser settings, though some features may not function properly.

Information Sharing

We may share information with:

  • Trusted service providers (hosting, analytics, communications)
  • Legal or regulatory authorities when required by law
  • Business partners strictly as needed to deliver services

All third parties are required to maintain confidentiality and data protection standards.

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information. However, no system is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain information only as long as necessary to:

  • Fulfill the purposes outlined in this policy
  • Meet legal, contractual, or operational requirements

Your Rights

Depending on your location, you may have the right to:

  • Access your personal data
  • Request correction or deletion
  • Opt out of communications

Requests can be made by contacting us.

Third-Party Links

Our website may link to third-party sites. We are not responsible for their privacy practices or content.

Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with a revised effective date.

Contact Us

If you have questions about this Privacy Policy, contact us.