GoForward Inc. (“GoForward,” “we,” or “us”) owns and operates the GoForward website located at www.goforward.com and the GoForward mobile application (collectively, the “Platform”). Your access and use of the Platform, any part thereof, or anything associated therewith, including its content (“Content”), any products or services provided through the Platform, and any affiliated website, software or application owned or operated by GoForward (collectively, including the Platform and the Content, the “Service”) are governed by this Privacy Statement (“Privacy Statement”).
We are committed to respecting the privacy of users of the Service. We created this Privacy Statement to tell you how GoForward collects, uses and discloses information in order to provide you with the Service, and to explain certain rights you have in connection with and over your personal information. As with our Terms of Use for the Service (the “Terms of Use”), if we make any changes to our Privacy Statement, we will post the revised Privacy Statement and update the “Last Revised” date of the Privacy Statement.
By accessing or using the Service, you acknowledge the practices and policies outlined in this Privacy Statement. If you are using the Service on behalf of an individual other than yourself, you represent that you are authorized by such individual to act on such individual’s behalf and that such individual acknowledges the practices and policies outlined in this Privacy Statement.
You may use GoForward’s services and visit the site without being a patient of the Medical Group (as defined in our Terms of Use). In the event you are not a patient of the Medical Group, the information below regarding the Medical Group does not apply to you.
GoForward is not a “covered entity” under the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191, and its related regulations and amendments from time to time (collectively, “HIPAA”), however, the Medical Group (as defined in our Terms of Use) may be a “covered entity” and, solely in its role providing administrative services to the Medical Group, GoForward may be a “business associate” of the Medical Group. Therefore, the Medical Group and, solely in its role as a business associate, GoForward, may be subject to certain provisions of HIPAA with respect to “protected health information,” as defined under HIPAA, that you provide to the Medical Group. PHI does not include information that has been de-identified in accordance with HIPAA (“De-Identified Health Information”), and does not include information that you submit to GoForward for purposes other than supporting and facilitating your relationship with the Medical Group or Providers.
Under HIPAA, a “covered entity” is required to provide their patients a Notice of Privacy Practices that describes how the covered entity uses and discloses “protected health information” (“PHI”). As a result, the Medical Group has adopted and, if you become a patient of the Medical Group, has separately provided or will provide to you a HIPAA Notice of Privacy Practices that describes how the Medical Group may use or disclose your PHI (the “Medical Group Notice of Privacy Practices”).
HIPAA also requires a covered entity to obtain a patient authorization that satisfies certain requirements in order for the covered entity or its business associates to use or disclose PHI in certain ways. In order to ensure that the Medical Group and GoForward are able to effectively provide their respective services to you and that you are able to utilize the full functionality of the Service, the Medical Group and/or GoForward may need to use or disclose your PHI in ways that would require the Medical Group to obtain an authorization under HIPAA. As a result, the Medical Group, if you become a patient of the Medical Group, has obtained or will obtain from you a patient authorization (a “Patient Authorization”) that authorizes the Medical Group and GoForward to use and disclose your PHI in certain ways that may not be described in this Privacy Statement or the Medical Group Notice of Privacy Practices.
To the extent that GoForward is in fact a “business associate” of the Medical Group and is collecting, sharing, or using your information as a business associate of the Medical Group, GoForward’s use and disclosure of your PHI will comply with HIPAA and any Patient Authorization. Any information that does not constitute PHI may be used or disclosed in any manner permitted under this Privacy Statement.
We collect any information you provide when you use the Service, including, but not limited to personally identifying information (“PII”). Such collected data may include the following categories of data:
In public areas of our Service, we and our third-party vendors may use device identifiers and other automated technologies (including cookie identifiers on our website), along with other collected information, to deliver content or tailor ads when you are on other devices, apps or websites. These ads may be based, for instance, on the types of websites that you visit over time, the types of apps you have on your device, or de-identified information about you and your likely interests, based on your activities off of our Service. Sometimes, we (or our service providers) may use the information we collect—for instance, IP addresses and unique mobile device identifiers—to locate or try to locate the same unique users across multiple browsers or devices (such as smartphones, tablets, or computers), or work with providers that do this, to help identify visitors to the publicly-accessible areas of our Service and serve advertising. If you wish to opt out of cross device tracking for purposes of interest-based advertising, you may do so through your device settings. Partners that we or others work with to do the above may track your activities over time (including across different apps or websites) by collecting information through automated means, and they may use this information, and other information they receive from us or other sources, to deliver advertisements to you.
You can learn more about interest-based advertising on the web, or opt out of receiving those ads, by visiting (i) the Network Advertising Initiative’s Consumer Opt-Out here http://www.networkadvertising.org/choices or (ii) the Digital Advertising Alliance’s Consumer Opt-Out here http://www.aboutads.info/choices/ to opt-out of receiving tailored advertising from companies that participate in those programs. To opt out of Google Analytics for display advertising or customize Google display network ads, you can visit the Google Ads Settings page here https://www.google.com/settings/ads. As to cross-app advertising, each operating system (e.g., iOS for Apple phones, Android for Android devices, and Windows for Microsoft devices) provides its own instructions on how to prevent the delivery of tailored in-application advertisements. You should view your device or system “Settings” to determine how you can opt out of use of your device identifier for “cross-app” personalized advertising.
Please note that to the extent advertising technology is integrated into our Service, you may still receive advertisements even if you opt-out. In that case, the advertising will not be tailored to your interests. Also, we do not control any of the above opt-out links or whether any particular company chooses to participate in these opt-out programs.
In connection with providing the Service, we and our affiliates and service providers may use your information, subject to the limitations addressed in the Protected Health Information Section above, for a number of purposes, including, but not limited to: (a) verifying your identity and administering your user account (“Account”), including processing your payments and fulfilling your orders; (b) communicating with you about the Service or your use of the Service, and sending you communications on behalf of the Medical Group or its Providers; (c) providing you customer support and responding to your requests or concerns; (d) facilitating the provision of services to you by the Medical Group or its Providers; (e) making certain information in your medical records accessible and available to you; (f) sending you push notifications (notifications may be enabled or disabled through your device or app settings depending on your device type); (g) processing payments; (h) detecting, preventing, investigating and responding to fraud, intellectual property infringement, violations of our Terms of Use, or other misuse of our Service or the Medical Group’s services; (i) reviewing, monitoring, expanding or improving the Service; (j) reviewing and analyzing the efficacy of some or all of the Service; (k) identifying and creating new Content, software or tools offered through the Service; (l) developing, testing and offering other products and services, whether or not through the Service; (m) providing certain marketing communications or promotional materials relating to the Service that may be of interest to you; and (n) any other use permitted by applicable law.
GoForward is not in the business of selling your information. We consider this information to be a vital part of our relationship with you. We will use your PII solely to provide the Service and otherwise as described in this Privacy Statement, and we will protect such information and against disclosures that may be made of such information without your authorization. There are, however, certain circumstances in which we may share your PII with certain third parties without further notice to you, as set forth below.
Our Service is intended for use by individuals who are at least 18 years of age or such older age as may be required by applicable state laws in the jurisdiction in which an individual utilizes the Service. However, if you are a parent or legal guardian of a minor child, you may, in compliance with the Terms of Use, consent to use of our Service by such minor child provided that such minor child is at least 13 years old, or, if such minor child is under the age of 13, you may, in compliance with the Terms of Use, use our Service on behalf of such minor child. Any information you provide us on behalf of your minor child will be treated in accordance with this Privacy Statement. We do not knowingly collect information from individuals under the age of 13. If we learn that we have received any information from an individual under the age of 13 instead of from such individual’s parent or legal guardian, we will only use that information to respond directly to that child (or a parent a parent or legal guardian) to inform him or her that he or she cannot use the Service directly and must have a parent or legal guardian use the Service on his or her behalf, and subsequently we will delete such information from our own servers.
The Service may only be used as set forth in the Terms of Use. This Privacy Statement, and our collection, use, and disclosure of your information, is governed by U.S. and California law.
This Privacy Statement does not address or apply to, and we are not responsible for, the privacy, information or other practices of any third parties, including, without limitation, the Medical Group or its Providers, the manufacturer of your mobile device, and any other third party mobile application or website to which our Service may contain a link. These third parties may at times gather information from or about you. We do not control and are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of each website and application you visit and use. To the extent you are or wish to become a patient of the Medical Group, we also encourage you to review its Notice of Privacy Practices.
You can visit the Site without providing any PII. If you choose not to provide any PII (or only provide certain requested PII), you may not be able to use certain services.
Users of the Service are required to inform us about any change concerning their data, in particular about changes of place of residence, changes of surname, and changes of email address. We are not liable for the consequences resulting from providing mistaken data.
California residents have the following additional choices:
We strive to use reasonable physical, technical and administrative measures to protect information under our control. However, you must keep your Account password secure and your Account confidential, and you are responsible for any and all use of your Account. If you have reason to believe that the security of your Account has been compromised, please notify us immediately in accordance with the “Contacting Us” section below.
To help protect the privacy of data you transmit through the Service, where personally identifiable information is requested, we also use technology designed to encrypt the information that you input before it is sent to us using Secure Sockets Layer (SSL) technology or similar encryption technology. In addition, GoForward takes steps to protect the User data we collect against unauthorized access. However, you should keep in mind that the Service and our services are run on software, hardware, and networks, any component of which may, from time to time, require maintenance or experience problems or breaches of security beyond our control. We do not accept liability for unintentional disclosure. In addition, persons with access to your computer, phone, or other mobile or other devices may be able to access the Service and information about you contained in the Service.
By using the Site or providing Personal Information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Site. If we learn of a security system’s breach, we may attempt to notify you electronically by posting a notice on the Site or sending an e-mail to you. You may have a legal right to receive this notice in writing.
When using the Service, you may choose not to provide us with certain information, but this may limit the features you are able to use or may prevent you from using the Service all together. You may also choose to opt out of receiving certain communications (e.g., newsletters, promotions) by emailing us your preference. Please note that even if you opt out, we may still send you Service-related communications. We do not currently respond to web browser “do not track” signals or other mechanisms that provide a method to opt out of the collection of information across the networks of websites and online services in which we participate. If we do so in the future, we will describe how we do so in this Privacy Statement.
Effective Date: 1/1/23
Last Reviewed on: 12/31/22
This section applies solely to all visitors, users, and others who reside in the State of California ("consumers" or "you"). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and any terms defined in the CCPA have the same meaning when used in this Policy.
Information We Collect
We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device ("personal information"). Personal information does not include:
GoForward collects some data that falls within the exceptions to the definition of “personal information” and is therefore not disclosed below.
In particular, we have collected the following categories of personal information from consumers within the last twelve (12) months:
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, Internet Protocol address, email address, device identifiers. | YES |
| B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). | Name, physical characteristics or description, telephone number. | YES |
| C. Protected classification characteristics under California or federal law. | All purposes listed above in the “Use of Personal Information” section. | YES |
| D. Commercial information. | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | YES |
| E. Biometric information. | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | NO |
| F. Internet or other similar network activity. | Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. | NO |
| G. Geolocation data. | Physical location. | YES |
| H. Sensory data. | Audio data from phone calls with Forward. | YES |
| I. Professional or employment-related information. | Current or past job history or performance evaluations. | NO |
| J. Non-public education information (per the Family Educational | Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. | NO |
We obtain the categories of personal information listed above from the following categories of sources:
Use of Personal Information
We may use or share the personal information we collect for one or more of the following purposes:
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
Sharing Personal Information
We do not sell personal information. We may share your personal information by disclosing it to a third party for a business purpose. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract. In the preceding twelve (12) months, GoForward has disclosed personal information for a business purpose to the categories of third parties indicated in the chart below. We may also share your personal information with third party advertisers for cross-context behavioral advertising, subject to your right to opt-out of personal information sharing. California law defines cross-context behavioral advertising as the targeting of advertising to a consumer based on the consumer’s personal information obtained from the consumer’s activity across businesses, distinctly-branded websites, applications, or services, other than the business, distinctly-branded website, application, or service with which the consumer intentionally interacts.
GoForward, Inc. does not knowingly collect or share personal information about individuals we know are under the age of 18. In the preceding twelve (12) months, GoForward has shared the following categories of personal information to the categories of third parties indicated in the chart below. For more on your personal information sharing rights, see Personal Information Sales and Sharing Opt-Out.
| Personal Information Category | Business Purpose | Categories of Third Parties | Sold or Shared? |
|---|---|---|---|
| Identifiers | All purposes listed above in the “Use of Personal Information” section. | Third-party advertisers | Shared |
| California Customer Records personal information | All purposes listed above in the “Use of Personal Information” section. | Third-party advertisers | Shared |
| Protected classification characteristics under California or federal law | All purposes listed above in the “Use of Personal Information” section. | Third-party advertisers | Shared |
Your Rights and Choices
The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.
Right to Know and Data Portability
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months (the "right to know"). Once we receive your request and confirm your identity (see Exercising Your Rights to Know or Delete), we will disclose to you:
We provide a right to know or data portability disclosure for B2B personal information.
Right to Delete
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions (the "right to delete"). Once we receive your request and confirm your identity (see Exercising Your Rights to Know or Delete), we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
We will delete or deidentify personal information not subject to one of these exceptions from our records and will direct our service providers to take similar action.
We provide these deletion rights for B2B personal information.
Exercising Your Rights to Know or Delete
To exercise your rights to know or delete described above, please submit a request by either:
Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information.
You may only submit a request to know twice within a 12-month period. Your request to know or delete must:
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.
You do not need to create an account with us to submit a request to know or delete.
We will only use personal information provided in the request to verify the requestor's identity or authority to make it.
For instructions on exercising your sale opt-out or opt-in rights, see Personal Information Sales and Sharing Opt-Out Rights.
Response Timing and Format
We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact info@goforward.com.
We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.
If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response electronically via email.
Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
You have the right to direct us to not sell or share your personal information at any time (the "right to opt-out"). As mentioned above, Forward does not sell your personal information. Forward does not offer or provide services to minors, and does not knowingly collect, sell, or share the information of individuals under the age of 18. To exercise the right to opt-out, you (or your authorized representative) may submit a request to us by visiting the following Internet Web page link: www.goforward.com/privacy-request
Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize personal information sales or sharing.
You do not need to create an account with us to exercise your opt-out rights. We will only use personal information provided in an opt-out request to review and comply with the request.
Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
Forward does not offer financial incentives to you for your personal information.
Other California Privacy Rights
California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our Website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us via the email or phone number provided below.
Changes to Our Privacy Policy
We reserve the right to amend this privacy policy at our discretion and at any time. When we make changes to this privacy policy, we will post the updated notice on the Website and update the notice's effective date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.
If you have any questions or comments about this notice, the ways in which GoForward, Inc. collects and uses your information described here, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
(Toll-Free) Phone: 1-833-334-6393
Email: info@goforward.com
If you need to access this Policy in an alternative format due to having a disability, please contact the phone number or email listed above.