Effective date: August 19, 2026
Last updated: August 19, 2026
This policy is available in English only. If you have questions in another language, please contact us at [email protected].
Wondrlink Foundation Inc. is a 501(c)(3) tax-exempt nonprofit organization (EIN: 33-4493221) with its principal place of business in the State of Florida.
We provide plain-language education about clinical trials, expanded access, and compassionate use programs, and we run WondrVoices, a community card-writing program for patients. This policy explains what information we collect when you visit our website, contact us, volunteer, or donate, and what we do with it.
Wondrlink Foundation is a small nonprofit without the resources to build software. The technology behind our programs — including WondrPath, WondrVoices, and WondrSites — is built and maintained by Malar, LLC and provided to the Foundation under license.
While our programs are offered free of charge, Malar provides this technology at no cost to the Foundation. If a program becomes grant-funded in future, the Foundation and Malar will agree a fair market value for the technology supporting that program, documented as an addendum to the license.
Malar, LLC processes and stores data collected through these programs on the Foundation's behalf. It does not use that data for its own purposes and does not sell or trade it.
We do not collect, request, store, organize, or review medical records, test results, imaging, pathology reports, or any documents containing protected health information.
We have no medical records portal, no document upload facility, and no health information authorization program. Our contact form asks you not to send clinical documents, and we cannot accept them.
If you choose to describe your medical situation in the body of a message to us, that text is stored with your inquiry so we can respond. We ask that you share only what you are comfortable sharing.
When you visit our website, we use Google Analytics to understand how the site is used. This collects your IP address, browser type, device information, pages visited, and time spent on the site, and it uses cookies to do so. You can opt out using Google's browser add-on at tools.google.com/dlpage/gaoptout, or by blocking cookies in your browser.
We do not use advertising trackers and we do not build advertising profiles.
WondrPath is a Wondrlink Foundation program, operated under license from Malar, LLC, that helps community organizations understand the health needs of the people they serve.
What is collected. Participants answer questions about their health. Responses are collected without names. At the end of the survey, participants may optionally provide an email address or phone number if they would like a personal summary sent to them. Providing this is entirely optional and the survey can be completed without it.
Consent. Every participant reads and agrees to a consent form before beginning the survey. That form explains in full what is collected, how it is used, and who sees it.
Who processes it. Survey responses are collected and stored by Malar, LLC, the technology provider, acting on the Foundation's behalf.
What partner organizations see. Partner organizations receive charts and summary analytics describing their own community's results as a whole. They do not receive individual responses, and they do not see results from any other organization's survey. Results from different partners are kept separate.
Combined findings. The Foundation may combine results across partner organizations to understand broader patterns in community health, including for research and grant applications. Combined findings are aggregate only. No individual and no partner organization is identifiable in them.
How long it is kept. Survey responses are retained for five years, after which they are deleted. Contact details provided for a personal summary are used only to send that summary.
We do not sell or trade any information collected through WondrPath.
We do not sell, rent, or trade your personal information. We share it only in these circumstances:
Service providers who operate our systems on our behalf. These are:
Each of these has access only to what it needs to perform its function.
When required by law, or where disclosure is necessary to protect the rights, safety, or property of the Foundation or others.
In connection with a merger, acquisition, or transfer of assets, in which case we will give notice before your information is transferred and becomes subject to a different policy.
With your explicit consent, in any other case.
We use encrypted connections (HTTPS/TLS) for all data transmitted to and from our website. Our inquiry database uses row-level security, and access is restricted to authorized Foundation staff through role-based controls.
No method of transmission or storage is completely secure. We use reasonable technical and organizational measures appropriate to the information we hold, but we cannot guarantee absolute security.
We keep inquiry messages and volunteer applications for as long as needed to respond and to maintain reasonable records of our activities. We keep donation records for as long as required by tax and nonprofit reporting law.
You may ask us to delete your personal information at any time by emailing [email protected]. We will do so within a reasonable period, except where we are legally required to keep it.
You may ask us to:
To make any of these requests, email [email protected]. We will respond within a reasonable period.
Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or the EU General Data Protection Regulation, including the right to lodge a complaint with your local data protection authority.
Our services are not directed to children under 13, and we do not knowingly collect personal information from them.
Our WondrVoices program welcomes participants of all ages, including children participating through schools, families, or community groups. When children participate, we ask that a parent, guardian, or supervising adult submit any cards or artwork on their behalf, and we do not collect names, contact details, or other personal information from child participants.
If you believe we have collected information from a child under 13, contact us at [email protected] and we will delete it promptly.
We may update this policy. When we do, we will change the "Last updated" date at the top of this page. Material changes will be noted on the page.