Privacy Policy

Effective: September 9, 2026  ·  Last reviewed: September 9, 2026  ·  Architecture: RTH Governance 2.0

1. Scope and purpose

This Privacy Policy explains how Restarting The Heart ("RTH") handles personal information collected through RestartingTheHeart.com and its public website functions. The public website supports education, publishing, community programs, speaking and partnership inquiries, resources, commerce preparation, and controlled interest pathways for products in development.

The public website is not intended to receive medical records, protected health information, treatment details, emergency information, or sensitive information about a child. SuperstarIQ and any future health-data product environment will require product-specific privacy, security, consent, retention, and breach-notification controls separate from this marketing and educational website.

2. Information we may collect

Depending on the feature you use, RTH may collect:

• Information you provide: name, email address, organization, professional role, topic of interest, message content, consent records, and other information you choose to submit through an adult-directed inquiry form.
• Commerce information: if public commerce is enabled, billing and shipping details, order contents, transaction status, tax/shipping information, customer-service correspondence, and account information. Payment-card data is expected to be processed by the applicable payment provider rather than stored directly in the RTH theme.
• Technical information: IP address, browser/device information, timestamps, referring pages, request logs, security events, cookie identifiers, and similar data generated by ordinary website hosting, security, fraud-prevention, and performance functions.
• Communication records: messages and correspondence needed to respond to an inquiry, administer a program, manage a transaction, or document consent.

3. Information we ask you not to submit

Do not submit medical records, diagnoses, prescriptions, laboratory results, ECG files, insurance information, Social Security numbers, government identification numbers, detailed health histories, information about another person without authority, or personal information about a child through general website forms. If a future RTH product needs sensitive information, it will use a separate controlled workflow and separate notice.

4. How information is used

RTH may use information to respond to inquiries; administer requested programs or transactions; provide customer support; maintain website security; prevent abuse and fraud; improve usability and accessibility; satisfy legal, accounting, tax, or recordkeeping obligations; manage consent; and communicate about a request or service the user initiated.

RTH does not use the public website to make automated medical decisions, diagnose a condition, determine clinical eligibility, or assign a child a wellness, resilience, character, or mental-health score.

5. Cookies, analytics, hosting, and service providers

The site may use cookies or similar technologies that are necessary for site operation, commerce, security, sessions, preferences, performance, or other enabled functions. Hosting, security, content-delivery, email, payment, fulfillment, analytics, and other vendors may process information only to the extent needed to provide their services or as otherwise described at the point of collection.

RTH does not sell personal information for money. RTH does not intentionally use child-facing RTH content for behaviorally targeted advertising to children.

6. Children and youth privacy

RTH publishes educational material for children, parents, and educators, but its general website forms are directed to adults. RTH does not knowingly request personal information directly from children under 13 through child-facing content. Parents, guardians, educators, and authorized adults should use adult-facing contact pathways when communicating with RTH about youth programs.

If RTH learns that personal information from a child under 13 was submitted in a manner inconsistent with this policy, RTH will take reasonable steps to delete or appropriately segregate it. Additional details appear in the Youth Privacy Policy.

7. Health information and future health technology

The marketing website is intentionally separated from health-data product environments. SuperstarIQ and other health-data workflows use separate product-specific governance. See the SuperstarIQ Privacy & Data Use Notice, Consumer Health Data Privacy Notice, and Connected Health Data & Permissions. Public website submissions should never be used as a substitute for a controlled health-data workflow.

8. AI, model development, and research separation

RTH plans to develop proprietary large-language-model capability, but ordinary public-site use and ordinary SuperstarIQ product use do not automatically authorize model training. RTH does not use general website inquiry content to train or fine-tune a general-purpose RTH model unless the person separately and expressly participates in an approved program that permits that use. Product processing, optional research, model evaluation, and model training are governed as separate purposes. See the AI & Model Governance Notice and Research & Pilot Governance.

9. Disclosure of information

RTH may disclose information to service providers performing functions on RTH's behalf; to professional advisers when reasonably necessary; to comply with law, court process, or lawful government requests; to investigate fraud, abuse, security incidents, or threats; to protect rights and safety; or in connection with an organizational transaction where legally permitted. RTH does not authorize service providers to use personal information for unrelated purposes merely because they provide infrastructure to RTH.

10. Data minimization, retention, and deletion

RTH seeks to collect only information reasonably needed for the stated purpose and to retain it only as long as reasonably necessary for that purpose, legal obligations, dispute resolution, security, accounting, tax, or legitimate operational needs. Different record classes have different retention triggers and deletion methods. Information that is no longer reasonably needed should be deleted, de-identified, or securely archived as appropriate. More detail appears in the Data Retention & Deletion Standard.

11. Security

RTH uses administrative, technical, and organizational safeguards appropriate to the nature of the public website. No Internet transmission or storage system can be guaranteed completely secure. Users should avoid sending sensitive information through ordinary website forms or email. Suspected vulnerabilities or security incidents should be reported to security@restartingtheheart.com. Do not send passwords, authentication codes, API keys, private keys, medical records, or other sensitive personal data unless RTH specifically provides a secure channel for that purpose.

12. Your choices and requests

You may request access, correction, deletion, a portable copy, consent withdrawal, or other rights that apply to the relevant data and jurisdiction by emailing privacy@restartingtheheart.com or using a future verified privacy interface. RTH uses proportionate identity verification and supports appeals or authorized agents where applicable law requires them. See Data Rights & Privacy Requests.

13. Third-party links

RTH may link to publishers, research sources, government agencies, payment services, social platforms, or other third parties. Their privacy practices are governed by their own notices, not this policy.

14. Changes to this policy

RTH may revise this policy as the website, products, vendors, or legal obligations evolve. A revised effective date will be posted when material changes are made.

Privacy and data requests: email privacy@restartingtheheart.com. Do not send medical records, government identifiers, passwords, authentication codes, or other unnecessary sensitive information by ordinary email.

Security and vulnerability reports: email security@restartingtheheart.com. This reporting channel does not grant authorization to test, access, disrupt, retain, or disclose RTH systems or data.

General questions about these terms or policies may be sent through the RTH contact page or to superstar@restartingtheheart.com.