Privacy policy

Introduction. DepressionResource.org, a publication of shrinkMD Publishing Inc., respects the privacy of the people who visit this site. This policy explains what information we collect, how it is used, how it is shared, how it is protected, and the choices available to readers. This policy is written in plain language. Where the law requires technical language, we add it.

Scope. This policy applies to information collected through depressionresource.org and any subdomain we operate. It does not apply to third-party sites linked from depressionresource.org. Those sites have their own policies.

Information we collect automatically

When you visit the site, we and our service providers may automatically collect technical information, including:

• IP address (often truncated for analytics)
• Browser type and version
• Operating system and device type
• Referring website
• Pages viewed and time spent on each
• Date and time of visit
• General geographic region (country or state)

We use this information to operate, secure, and improve the site. We do not use it to identify individual readers.

Information you provide

If you contact us by email, the email address and any information sent in the message are used only to respond to the inquiry. We do not request medical history, symptoms, or personal health information through the site, and we ask that you not send such information by email.

Cookies and similar technologies

This site does not set any cookies. We do not use local storage or similar technologies to track readers. There is no cookie banner because there is nothing to consent to. If that ever changes, this section and the Cookie Policy will be updated before the change takes effect, and a banner will appear where the law requires consent.

Analytics

We do not currently run any analytics on this site. If we add analytics in the future, we will use a privacy-focused, cookieless provider that does not track readers across sites. We do not run advertising tracking. We do not sell information to data brokers.

Children

This site is intended for general audiences. It is not directed to children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with information, contact support@depressionresource.org and we will delete it.

How we share information

We do not sell personal information. We share information only:

• With service providers (analytics, hosting, security) who process information on our behalf under contractual obligations.
• When required by law, valid legal process, or to protect rights and safety.
• With a successor entity in the event of a merger, acquisition, or sale of assets.

International readers

This site is operated from the United States. If you are reading from outside the United States, information you provide may be processed in the United States. By using the site, you understand and agree to this transfer.

California rights: sale, sharing, and SPI

We do not sell or share personal information as defined under the CCPA/CPRA, including for cross-context behavioral advertising. We do not knowingly collect or use "sensitive personal information" as defined by the CPRA, including health information. Inferences drawn from your visit are limited to aggregate usage analytics.

In the last 12 months we have collected the following CCPA categories: Identifiers (truncated IP), Internet or network activity (pages viewed, referring URL, browser, device), Geolocation (general region only), and Inferences drawn from usage. Sources: directly from your device. Business purposes: site operation, security, analytics, and legal compliance. Disclosed to: analytics and hosting providers acting as service providers under contract.

We honor the Global Privacy Control browser signal as an opt-out of any sale or share. We do not offer any financial incentives in exchange for personal information.

State law list

Depending on where you live, you may have rights under the GDPR, the UK GDPR, the CCPA/CPRA (California), the VCDPA (Virginia), the CPA (Colorado), the CTDPA (Connecticut), the UCPA (Utah), the TDPSA (Texas), the MCDPA (Montana), the OCPA (Oregon), the DPDPA (Delaware), the TIPA (Tennessee), the NHPA (New Hampshire), the NJDPA (New Jersey), the IPA (Iowa), the INCDPA (Indiana), the MOPA (Minnesota), the Washington My Health My Data Act (MHMDA), the Nevada Consumer Health Data Privacy Law, and the Maryland Online Data Privacy Act, among others. Rights vary by state. Contact us to exercise rights in your jurisdiction.

Your rights

These rights may include:

• The right to access information we hold about you.
• The right to correct inaccurate information.
• The right to delete information.
• The right to restrict or object to processing.
• The right to data portability.
• The right to withdraw consent where processing is based on consent.
• The right not to be discriminated against for exercising your rights.

To exercise any of these rights, contact support@depressionresource.org. We respond within the time required by law in your jurisdiction.

Right to appeal

If we deny your request, you may appeal by replying to our response within 60 days. We will respond to appeals within 60 days. If you are not satisfied with the appeal outcome, you may contact your state attorney general.

Authorized agent

You may designate an authorized agent to submit a request on your behalf. We may verify the agent's authority and your identity before responding.

GDPR lawful basis

For readers in the EU and UK, our lawful basis under GDPR Article 6 is legitimate interests in operating, securing, and improving the site, plus compliance with legal obligations. Because we do not currently set cookies or run analytics, we do not rely on consent. We do not rely on any special-category lawful basis because we do not knowingly process health data through this site.

International transfers

Where personal data is transferred from the EEA or UK to the United States, the transfer is supported by the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. The transfer is limited to the technical information needed to deliver pages from our hosting provider.

Do Not Track

We do not respond to browser Do Not Track signals at this time. We do not use the kind of cross-site tracking those signals are designed to limit.

Security

We use reasonable administrative, technical, and physical safeguards to protect the information we collect. No method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Retention

We keep information only for as long as needed for the purposes described in this policy. Server logs are retained for 14 months. Email correspondence is retained for 36 months unless retained longer for legal reasons. We do not currently set cookies, so there are no cookie identifiers to retain.

Changes to this policy

We update this policy when our practices change. The current version is dated at the bottom of the page. Material changes will be flagged on the site.

Contact

Questions about this policy can be sent to support@depressionresource.org, or by mail to:

Please do not include medical history, symptoms, or other protected health information in email. Email is not a secure channel and is not monitored for clinical purposes.