CCT Facility Portal - Privacy Policy | Compassionate Care Transportation

Last Updated: November 1, 2025

1. Introduction

Compassionate Care Transportation (“we,” “our,” or “us”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the CCT Facility Portal mobile application (the “App”).

The CCT Facility Portal is designed for healthcare facilities to manage transportation services for their residents and patients. By using our App, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We collect the following types of personal information:

Contact Information: Name, email address, phone number, and facility address
Account Information: Login credentials and user ID
Client Information: Names, phone numbers, and addresses of facility residents/patients for whom transportation is being arranged
Location Data: Precise pickup and destination addresses for trip bookings
Payment Information: Payment method details processed through our secure payment provider (Stripe)
Health-Related Information: Trip details related to medical appointments, special requirements (such as wheelchair needs), and accessibility requirements
Communication Data: Messages exchanged with our dispatch team through the in-app messaging feature

2.2 Automatically Collected Information

Device Information: Device type, operating system, and app version
Usage Data: App interactions, features used, and timestamps
Push Notification Tokens: For sending trip updates and notifications

3. How We Use Your Information

We use the collected information solely for app functionality purposes:

Service Delivery: To book, schedule, and manage transportation trips for your facility’s residents/patients
Authentication: To verify your identity and provide secure access to your facility’s account
Communication: To enable messaging between facility staff and our dispatch team
Payment Processing: To process payments for transportation services through Stripe
Trip Coordination: To share necessary trip information with our dispatch team and assigned drivers
Notifications: To send push notifications about trip status updates, driver assignments, and messages
Customer Support: To respond to inquiries and provide technical assistance
Service Improvement: To improve our app functionality and user experience

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our app:

Supabase: Database and authentication services
Stripe: Payment processing
Google Maps: Address geocoding and distance calculations
Expo Push Notification Service: Delivery of push notifications

4.2 Internal Sharing

Trip information is shared internally with:

Our dispatch team to coordinate and approve trip requests
Assigned drivers to provide transportation services
Billing department for invoice processing

4.3 Legal Requirements

We may disclose your information when required by law, court order, or to protect our rights, property, or safety, or that of others.

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Retention

We retain your personal information for as long as necessary to:

Provide our transportation services to your facility
Comply with legal obligations (e.g., tax records, healthcare regulations)
Resolve disputes and enforce our agreements
Maintain billing and trip history records

When you close your facility account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it by law.

6. Data Security

We implement industry-standard security measures to protect your information:

Encryption of data in transit (HTTPS/TLS)
Encryption of sensitive data at rest
Secure authentication mechanisms
Regular security audits and updates
Access controls limiting who can view your information
Secure payment processing through PCI-DSS compliant providers

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information
Restriction: Request restriction of processing your information
Data Portability: Request transfer of your data to another service
Objection: Object to our processing of your information
Withdraw Consent: Withdraw consent where we rely on consent to process your information

To exercise these rights, please contact us using the information below.

8. HIPAA Compliance

While the CCT Facility Portal handles some health-related information (such as medical appointment details), we are committed to protecting this sensitive data. We implement appropriate safeguards consistent with healthcare privacy standards, including:

Limited collection of only necessary health information
Encryption and secure storage of health-related data
Access controls to prevent unauthorized access
Training staff on privacy and security best practices

9. Children’s Privacy

The CCT Facility Portal is not intended for use by children under 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information.

10. Tracking and Advertising

We do not use your data for tracking or advertising purposes.

We do not sell your personal information to third parties
We do not display advertisements in the app
We do not share your data with advertising networks or data brokers
All data collection is solely for app functionality and service delivery

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Posting the updated policy in the app
Updating the “Last Updated” date
Sending a notification through the app or email for significant changes

Your continued use of the app after changes indicates your acceptance of the updated Privacy Policy.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information we collect, use, disclose, and sell
Right to request deletion of your personal information
Right to opt-out of the sale of personal information (we do not sell your information)
Right to non-discrimination for exercising your privacy rights

14. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including those outlined in Section 7 above. Our legal basis for processing your information includes:

Contract Performance: To provide transportation services you’ve requested
Legitimate Interests: To improve our services and communicate with you
Legal Obligations: To comply with applicable laws and regulations
Consent: Where you have provided explicit consent

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Compassionate Care Transportation
Email: [email protected]
Support: https://facility.compassionatecaretransportation.com

We will respond to your inquiry within 30 days.