Privacy policy.

CHIME Privacy Policy

Effective Date June 25, 2025.

Our Commitment to Privacy

Your privacy is important to us. College of Healthcare Information Management Executives (“CHIME“) has developed this Privacy Policy to provide you information about how the CHIME Organizations collect and process the information (including Personal Information) you provide us by personal interaction, post, email or through a CHIME Organization website (including www.chimecentral.org, www.aehit.org, www.aehis.org, and www.aehia.org) (collectively referred to herein as the “CHIME Website“), through our mobile application (“Mobile App”) or otherwise (together, the “Services”).

If you are a resident or citizen of the UK, European Economic Area (“EEA”), or Switzerland, please see the “Your Rights – EU AND UK” for more information.

Who We Are

This Privacy Policy is issued on behalf of CHIME and its affiliates, so the terms “CHIME Organization“, “we“, “us” and “our” mean, collectively, CHIME, College of Healthcare Information Management Executives Foundation (“CHIME Foundation“), CHIME Technologies, Inc., CHIME Education Foundation, CHIME Healthcare Innovation Trust, membership groups of the CHIME Organizations and any other future organizations formed by CHIME.

Children’s Privacy

We do not knowingly collect, solicit or maintain Personal Information from anyone under the age of 18 or knowingly allow such persons to register for or use the Services. If you are under 18, please do not send any Personal Information about yourself (such as your name, address, telephone number, or email address) to us. In the event that we learn that we have collected Personal Information from a child under age 18 without verification of parental consent, we will use commercially reasonable efforts to delete that information from our database. For the avoidance of doubt, we do not “sell” the Personal Information of children under the age of 16.

Information We Collect

We may collect Personal Information directly from you. For example, Personal Information may be collected when you apply to become a member of (or renew a membership in) CHIME or CHIME Foundation, register for programs or events hosted by a CHIME Organization itself or with others, participate in an online survey or competition, subscribe for a service or publication we provide, provide online feedback, post comments on our blogs, sign up for our newsletter, make a donation, contact us, use our chatbot, download whitepapers or other content, create an account on the CHIME Website or otherwise provide us information when interacting with our Services. Generally, the information we collect includes your:

  • Identifiers

    • First and last name

    • Username (upon enrollment)

    • Email address

    • Postal address

    • Phone number

  • Demographic Information

    • Birthdate

    • National origin or country of residence

  • Internet or Other Electronic Network Activity

    • IP Address

    • Authentication information

    • Search topics and filters

    • Operating system and platform

    • Cookies

    • Pixel tags

    • Browser type

    • Domain name

    • Page views

    • A date/time stamp

    • Clickstream data

    • Posts visited, liked, and commented on

    • App usage information

      • When the app is opened and closed

  • Usage information

Automatically-collected information

We use cookies and other similar technologies to automatically collect information when you access or use an online benefit or service or visit the CHIME Website.

We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services, or associate Personal Information with other information collected in this manner.

Cookie Notice

The technologies we use for automatic data collection may include cookies, local storage cookies, web beacons, pixel tracking, GIF, IP address, and other technologies. Each of these are discussed below.

Browser Cookies

Browser cookies are small files placed on the hard drive of your computer or mobile device. They may contain certain data, including, but not limited to, the name of the server that has placed it there, an identifier in the form of a unique number, and an expiration date (some cookies only). Browser cookies are managed by the web browser (Chrome, Microsoft Edge, Safari, etc.) on your computer or mobile device. Different types of cookies which have different purposes are used on the CHIME Website.

Essential Cookies

Essential cookies are essential to allow you to browse the CHIME Website and use its functions. Without them, services such as shopping baskets and electronic invoicing would not be able to work.

Performance Cookies

Performance cookies collect information on the use of the CHIME Website, such as which pages are consulted most often. This information enables us to optimize the CHIME Website and simplify browsing. Performance cookies also enable our affiliates and partners to find out whether you have accessed one of the CHIME Website pages from their site and whether your visit has led to the use or purchase of a Product or Service from the CHIME Website, including the references for the Product or Service purchased or used. These cookies do not collect any information which could be used to identify you. All the information collected is aggregated, and therefore anonymous.

Functionality Cookies

Functionality cookies enable the CHIME Website to remember the choices you have made when browsing. For example, we can store your general geographic area (but not precise geolocation) in a cookie so that the CHIME Website corresponding to your geographic area is shown. We can also remember your preferences, such as the text size, font, and other customizable aspects of the CHIME Website. Functional cookies also may be able to keep track of the products, pages, or videos consulted to avoid repetition. The information collected by these cookies cannot be used to identify you and cannot monitor your browsing activity on sites which do not belong to us.

It is possible that you will come across third-party cookies on some pages of sites that are not under our control.

We also use cookies such as functionality cookies to implement tracking technology on the CHIME Website. This allows us to display advertising that is tailored to you on the CHIME Website, to understand which parts of our content interest you the most, and which product or service categories you request. This tracking uses De-Identified Personal Information data. Some of our service providers are allowed to place cookies on the CHIME Website. Those companies also may provide you with the option of preventing the use of cookies in the future. For more information, contact the relevant third-party provider.

At any time, you can prevent the use of cookies in the future. You may activate the appropriate setting in your browser to refuse to accept browser cookies. However, if you do, your experience on the CHIME Website may be affected. For example, you may be unable to access certain parts of the CHIME Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to the CHIME Website.

Local Storage Cookies

Certain features of the CHIME Website may use local stored objects to collect and store information about your preferences and navigation to, from and on the CHIME Website. Local

storage cookies are not managed by the same browser settings as are used for browser cookies.

Web Beacons

Pages of the CHIME Website and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs) that permit us, for example, to count visitors who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

Pixel Tracking

In addition to using cookies, the CHIME Website may employ “pixel tracking,” a common process which may be used in connection with advertisements on other sites. Pixel tracking involves the use of pixel tags that are not visible to the user and consist of a few lines of computer code. Pixel tracking measures the effectiveness of advertisements and compiles aggregate and specific usage statistics. A “pixel tag” is an invisible tag placed on certain pages of websites that is used to track an individual user’s activity. We may access these pixel tags to identify activity and interests that may allow us to better match our Products, Services, and offers with your interests and needs. For example, if you visit the CHIME Website from an advertisement on another website, the pixel tag will allow the advertiser to track that its advertisement brought you to the CHIME Website. If you visit the CHIME Website, and we link you to another website, we also may be able to determine that you were sent to and/or transacted with a third-party website. This data is collected for use in our marketing, research, and other activities.

IP Address

Our servers (or those of our service providers) automatically record certain log file information reported from your browser when you access the CHIME Website. These server logs may include information such as which pages of the CHIME Website you visited, your internet protocol (“IP”) address, browser type, and other information on how you interact with the CHIME Website. These log files are generally deleted periodically.

Google Tools

We use, and/or some of our third-party service providers may use, Google Analytics or other analytics services to help us understand the use of the CHIME Website and Services. Google Analytics is a web analysis service provided by Google. Google utilizes data it collects to track and examine the use of the CHIME Website to prepare reports on its activities and share them with other Google services. Google may use the data collected to contextualize and personalize the ads of its own advertising network. The Personal Information collected and processed may include cookies, usage data, and other internet information.

Third Parties or Publicly Available Source

We may receive Personal Information about you from collaboration or affiliation partners of a CHIME Organization, CHIME Chapters outside of the United States, and other third parties, such as analytics providers, advertising networks, social media platform providers and search information providers. We also may receive Personal Information about you from public sources.

Other Sources

To the extent permitted by applicable law, we may receive additional information about you, such as demographic data or fraud detection information, from third-party service providers and/or partners, and combine it with information we have about you. For example, we may receive background check results or fraud warnings from service providers like identity verification services for our fraud prevention and risk assessment efforts. We may receive information about you and your activities on and off the Services through partnerships, or about your experiences and interactions from our partner ad networks.

Our Use of Your Personal Information

Personal Information means information about an individual from which that person can be identified or as otherwise defined by applicable privacy laws. It does not include information where the identity (or identifiers) has been removed (anonymous information). We may use Personal Information for the following purposes:

To Process Transactions

We use Personal Information to process transactions in the ordinary course of our business, such as membership applications, account sign-ups, and registrations for events, programs and services.

To Provide Membership Benefits, Events, Programs and Services

Personal Information (e.g. members’ names and contact information, “Membership Information”) is used by CHIME Organizations to support and provide, and enable you to participate in, membership benefits, events, programs (e.g., educational programs, survey programs, testing and certification programs, etc.) and our Services.

To Manage Our Relationship with You

CHIME Organizations may use your Personal Information to provide you with support related to our Services; respond to your requests; solicit your feedback (e.g., through a review or survey); notify you about changes to our website terms of use or privacy or cookie policy; verify your identity; store preferences; and otherwise manage our relationship with you.

To Enable Member-to-Member Communication, Networking and Analytics

CHIME Organizations may use your Personal Information to enable members to communicate, network and share information with each other on social media platforms, through online benefits and services (including online surveys and analytics tools) and otherwise. For example, CHIME makes available an online analytics tool to allow members to view and compare other member organizations’ data in categories such as organization type and location; budgetary spending and financials; and technology vendors and products used by the organizations. CHIME Foundation members also have access to the Membership Information of other CHIME Foundation members and

CHIME members through the membership directories maintained by CHIME.

To Invoice and Enable Payment

CHIME Organizations use Personal Information to invoice and process payments for benefits, events, programs and services and to collect and recover money owed to us.

For Marketing and Promotions

We may use Personal Information for marketing and promotional purposes, such as to send you news and newsletters, or to otherwise contact you about memberships, benefits, events, programs or services we think may interest you. You may specify, as part of your online member profile, the type of emails you want to receive from us. You may also unsubscribe from all communications from us. However, electing not to receive any of these communications may mean that you will not receive important notices about your membership or benefits, events, programs or services that may be useful to you.

For Analytics and Improvement

CHIME Organizations may use your Personal Information and data analytics to better understand your preferences and how you access and use our Services and our online content, benefits, events, programs and services, to assess and improve our Services and our online content, benefits, events, programs and services, and to assess and improve member programs, events, relationships and experiences. We may use Personal Information and the insights we have derived to develop new content, benefits, events, programs or services, or news or information that may be of interest to members, prospective members, site users and others.

For General Business Administration, Legal Compliance and IT Support

We may use your Personal Information for general business administration (including accounting and recordkeeping) and legal compliance purposes (including to enforce, establish or defend our legal rights, or to protect the rights of third parties) and to support the Services and other CHIME Organization computing systems (including troubleshooting, testing, system maintenance, support, reporting and hosting of data).

For De-Identification, Aggregation and Analysis

We may de-identify your Personal Information (“De-Identified Information”) and aggregate it with information provided by others to conduct analyses (such as to understand how an industry or a segment is growing, changing and adapting), to analyze information about CHIME Organization benefits, events, programs and services, and for other purposes. De-identified Information may be derived from your Personal Information but is not considered Personal Information under law as this data does not directly or indirectly reveal your identity.

If you Fail to Provide Personal Information

If you fail to provide Personal Information we need to perform a legal or contractual obligation, we may have to restrict or cancel your participation in the applicable benefit, event, program or service to be provided pursuant to a membership agreement with you or your organization or other agreement.

Third-Party Websites

The Services and many print and electronic communications and publications delivered by CHIME Organization contain links to other websites. These other websites may send their own cookies to users, collect data or solicit Personal Information. CHIME Organization is not responsible for the privacy practices or the content of these other websites. Please check with the other sites to determine their privacy policies and how they may collect or use information.

Sharing Your Personal Information

We may share your Personal Information with the following categories of third parties:

  • Our professional advisors, such as lawyers, accountants and auditors;

  • Government and/or regulatory authorities;

  • Our service providers to whom we outsource certain services, such as our Mobile App platform provider, IT services (to compute power, for database storage, applications, and other IT resources);

  • Third parties with whom we have a collaboration, affiliation or other contractual arrangement and who use your information to provide (or assist CHIME Organization in providing) benefits, events, programs and services to CHIME Organization members or use your information for their own purposes;

  • CHIME Chapters outside of the United States;

  • Accreditation or certification bodies;

  • Other members (and representatives of such members) and sponsors of the CHIME Organizations;

  • Data aggregation and analytics companies;

  • Third party processors (such as payment service providers, and shipping companies);

  • Debt collection agencies and tracing agencies;

  • Third party processors (such as payment service providers, and shipping companies);

  • Debt collection agencies and tracing agencies;

  • Any relevant party, claimant, complainant, government agency or court, to the extent necessary for the establishment, exercise or defense of legal rights in accordance with applicable law;

  • Any relevant party for the purposes of prevention, investigation, detection or prosecution of criminal offenses or the execution of criminal penalties, including safeguarding against and the prevention of threats to public security in accordance with applicable law; and

  • Any other party as allowable by law.

Event-Related Disclosure

From time to time, we may conduct events, run contests, make special offers, or other activities (“Events”), possibly together with an exhibitor, sponsor or other service provider. If you provide information to such third parties, you give them permission to use it for the purpose of that Event and any other use to which you consent. We cannot control such third parties’ use of your information that you provide directly to them. If you do not want your information to be collected by or disclosed to such third parties, you can choose not to participate in these Events.

Your Consent to Disclosure/Transfer/Assignment of Your Personal Information

You consent to (and shall not object to) our disclosure, transfer, assignment, and/or sale of your Personal Information, De-Identified Personal Information, and other information you provide to us, as well as the rights you have granted or consented to in this Privacy Policy (collectively, “Transferred Information”) to a potential or actual buyer or acquirer of assets or equity of our company or other successor for the purpose of considering or undergoing a merger, divestiture, restructuring, reorganization, dissolution, change in control, or sale or transfer of some or all of our assets (each of the foregoing referred to as a “Transfer”), whether as a going concern or as part of bankruptcy, liquidation or other court proceeding, in which Personal Information held by us is among the assets transferred. We cannot make any representations regarding the use or transfer of Transferred Information that we may have in the event of our bankruptcy, reorganization, insolvency, receivership, or an assignment for the benefit of creditors. Furthermore, except for as required by law, we are not and will not be responsible for any breach of security by any third parties or for any actions of any third parties that receive any of the Transferred Information that is disclosed to us.

Text Messaging

Our services may include sending you Short Message Service (“SMS”) messages as described in this section, to which you hereby consent.

Mobile information collected under this Privacy Policy will not be shared with third parties/affiliates for marketing/promotional purposes.

We may deliver frequent service-related SMS messages per day to your cellphone or other wireless device (unless you communicate further with us and we need to or can respond). These messages will include information about cybersecurity and privacy issues and incidents impacting the industry, and include important updates for security and awareness purposes. You may request us to stop sending text messages by replying “STOP” to the SMS text message you received. After you send the SMS message “STOP” to us, we will send you a SMS message to confirm that you have been unsubscribed. Alternatively, you may submit your request by email to us, including the email address and phone number you registered with us, or by any other reasonable means. After this, you will no longer receive SMS messages from us. If you want to join again, just sign up as you did the first time and we will start sending SMS messages to you again. For help, please reply to a text with HELP. Message and data rates may apply, depending on your cell phone plan. Carriers are not liable for delayed or undelivered messages.

Security

CHIME has implemented safeguards designed to protect the integrity, security and confidentiality of your Personal Information from unauthorized use or disclosure. Access to Personal Information is limited to select personnel and the information is stored in an encrypted format. Each CHIME Organization is required to follow the same rules when processing your Personal Information. Please note, however, that no transmission over the Internet is completely secure or error-free and that the safeguards and controls utilized and maintained by us may be subject to compromise.

Any payment transactions involving credit or debit cards will be performed using our third-party payment processors or gateways, who will use appropriate security procedures designed to protect your information. We do not collect or store full credit card numbers.

Data Retention Period

In general, we will retain relevant Personal Information of you for at least two (2) years from the date of our last interaction with you or for longer where required by our regulatory obligations or where we believe necessary to establish, defend or protect our legal rights and interests or those of others. We may then destroy such files without further notice or liability.

Your Privacy Choices

CalOPPA requires us to let you know how we respond to web browser Do Not Track (“DNT”) signals. DNT is a privacy preference you can set in your web browser to indicate that you do not want certain information about your webpage visits collected across websites when you have not interacted with that service on the page. For details, including how to turn on DNT, see here. Because there currently isn’t an industry or legal standard recognizing or honoring DNT signals, we don’t respond to them at this time. We await the result of work by the privacy community and industry to determine when such a response is appropriate and what form it should take.

By providing us with your email address (including by “following,” “liking,” linking your account to the Services on a third party website or network), you consent to our using the email address to send you marketing-related communications (e.g., newsletters, etc.), as well as Services-related emails (e.g., account/membership renewal, invoices, receipts, voting, and legal notices). For residents of countries outside of the US, by clicking on our website the option to receive such communications, you consent to our sending such communications.

If you prefer not to receive marketing-related communications from us, please let us know by clicking on the unsubscribe link within a marketing message or newsletter you receive, or by updating your email preferences under your profile, or by contacting us. Opting out may prevent you from receiving email messages regarding updates, improvements, special features, announcements, or offers. You cannot opt out of receiving Service-related notices by email.

Your Legal Rights – United States

Certain states in the U.S., e.g. Colorado, Delaware, Maryland, and New Jersey, may provide (now or in the future) their state residents with rights related to their Personal Information. Although some of these rights apply generally, certain rights will only apply to limited individuals or circumstances. To the extent that these laws apply, you may exercise the following rights:

Right to Know and Access Information

Note that much of the information you are entitled to know or access is disclosed in this Privacy Policy. With this said, you have the right to know about our information practices. You also have the right to access the categories of data we collect, with whom we share or sell that information, and, in some cases, what specific Personal Information we associate with you or your account.

Right to Data Portability

If you request a copy of your specific information then we will provide it in an easily accessible format.

Right to Deletion

You may request that we delete the information we have collected about you. Depending on the applicable law, in some cases we are required or permitted to retain your information, even if you validly request that we delete or erase it. Upon receipt of a verifiable request to delete, CHIME will delete Personal Information from our records and notify our service providers to delete the same Personal Information from their records. Please note, CHIME may delete some information and de-identify some information. In cases where CHIME de-identifies information, CHIME implements technical safeguards and business processes as outlined in “Security of Information”. CHIME may not be able to comply with a deletion request if it is necessary for CHIME to keep information in order to, among other things, provide goods or services requested, maintain an ongoing business relationship, comply with legal obligations, protect against fraudulent or illegal activity, or perform other necessary activities as permitted under applicable law.

Right to Correct Information

You may request we correct or rectify inaccurate information we have collected about you.

Right to Opt out of Targeting Advertising, Sales, or Profiling

You may opt-out of our use of your Personal Information for targeted advertising, sales, or profiling in furtherance of decisions that produce legal or similarly significant effects. At this time, we do not engage in profiling.CHIME will attempt to provide the requested information or confirm completion of a request to delete Personal Information within the time period required by law. CHIME will notify you within that time period if we will need additional time to process your request.

We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

If we deny your rights request, you may have the right to request an appeal of our decision. To initiate an appeal, follow the instructions provided in the communication denying your request, or contact us at the information provided in this Privacy Policy.

You have the right to not experience discrimination from us for exercising the rights listed in this Section. What we mean by discrimination is denying you access to our services or limiting the quality of our services. However, limiting use of, or deleting, your Personal Information may restrict the purposes or uses that rely on that information.

Your Legal Rights – EU/UK

The following provisions apply only if you are a citizen or resident of the UK, EEA, or Switzerland (collectively referred to in this section for convenience as the “EU Region”). For such citizens or residents, all processing of your Personal Information is performed in accordance with privacy rights and regulations, in particular, (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (“GDPR”, and which includes the UK’s and Switzerland’s similar laws), and our processing will take place in accordance with the GDPR. For purposes of the GDPR, we will be the “data controller” of Personal Information (defined in the GDPR (available here) as “Personal Data”, but still referred to herein as Personal Information) we collect through the Services, unless we collect such information on behalf of a “data controller” in which case we will be a “data processor.” This Privacy Policy does not apply to websites, applications or services that do not display or link to this Privacy Policy or that display or link to a different privacy policy. For EU Region residents and citizens only, to the extent any definition in this Privacy Policy conflicts with a definition under the GDPR, the GDPR definition shall control.

If you are a visitor using the Services from the UK, EEA, or Switzerland, our legal basis for collecting and using the Personal Information described above will depend on the Personal Information concerned and the specific context in which we collect it. However, we will normally collect Personal Information from you only where we need the Personal Information to provide Services for you for which you have contracted with us, or where the processing is in our legitimate interests or rely upon your consent where we are legally required to do so and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we also may have a legal obligation to collect Personal Information from you or may otherwise need the Personal Information to protect your vital interests or those of another person.

The collection and processing of your Personal Information may be necessary for the purposes of our legitimate interests. Such legitimate interest purposes may include:

  • fraud prevention;

  • ensuring network and information security;

  • indicating possible criminal acts or threats to public security, including enhancing protection of our community against spam, harassment, intellectual property infringement, crime, and security risks of all kind, and enforcing legal claims, including investigation of potential violations of our Terms of Use;

  • when we are complying with legal obligations;

  • processing employee or visitor, member, attendee, or registrant data;

  • performing the function or service you requested of us;

  • providing the CHIME Website and their functionality to you where such processing is necessary for the purposes of the legitimate interests pursued by us or by our service providers related to the CHIME Website;

  • direct marketing;

  • the relevant and appropriate relationship we have with you;

  • analytics (e.g., assess the number of visitors, page views, use of the CHIME Website, etc.), in order to understand how the CHIME Website, Products, Mobile App, and Services are being used, to optimize the CHIME Website and/or future communications, and to develop new services and Website features;

  • updating your information and preferences;

  • offering and improving the CHIME Website, Products, Mobile App, and Services; and

  • enforcing legal claims, including investigation of potential violations of our Terms.

Cross-Border Data Transfer

The CHIME Organizations are located in the United States. When you submit Personal Information to us, or when others provide Personal Information to us, we will receive it and process it in the United States. In order to provide the benefits, events, programs and services, we also may need to transfer your Personal Information to locations in other jurisdictions. If you are based in the European Economic Area (EEA), this will involve transferring your Personal Information to individuals and entities located in countries outside the EEA. CHIME Chapters located outside of the United States are owned, managed and/or operated by an association located in the particular country or region and are not owned, managed and/or operated by a CHIME Organization. Accordingly, Personal Information received by a CHIME Chapter located outside of the United States will be governed by the privacy policies of the association that owns and manages that CHIME Chapter.

You have the following rights in relation to the Personal Information we hold about you:

Your right of access

If you ask us, we will confirm whether we are processing your Personal Information and, if necessary, provide you with a copy of that Personal Information (along with certain other details). If you require additional copies, we may charge a reasonable fee.

Your right to correction (rectification)

If the Personal Information we hold about you is inaccurate or incomplete, you are entitled to request to have it corrected. If you are entitled to have information corrected and if we have shared your Personal Information with others, we will let them know about the rectification where possible. If you ask us, we will also tell you, where possible and lawful to do so, with whom we have shared your Personal Information so that you can contact them directly.

Your right to erasure

You can ask us to delete or remove your Personal Information in some circumstances, such as where we no longer need it or if you withdraw your consent (where applicable). If you are entitled to erasure and if we have shared your Personal Information with others, we will let them know about the erasure where possible. If you ask us, we will also tell you, where it is possible and lawful for us to do so, with whom we have shared your Personal Information with so that you can contact them directly.

Your right to restrict processing

You can ask us to restrict the processing of your Personal Information in certain circumstances, such as where you contest the accuracy of that Personal Information or you object to us. If you are entitled to restriction and if we have shared your Personal Information with others, we will let them know about the restriction where it is possible for us to do so. If you ask us, we will also tell you, where it is possible and lawful for us to do so, with whom we have shared your Personal Information so that you can contact them directly.

Your right to data portability

You have the right, in certain circumstances, to receive a copy of Personal Information we’ve obtained from you in a structured, commonly used and machine-readable format (Microsoft Word or Microsoft Excel), and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.

Your rights in relation to automated decision-making and profiling

You have the right not to be subject to a decision when it’s based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for entering into, or the performance of, a contract between you and us.

Your right to withdraw consent

If we rely on your consent (or explicit consent) as our legal basis for processing your Personal Information, you have the right to withdraw that consent at any time.

Your right to lodge a complaint with the supervisory authority

If you have a concern about any aspect of our privacy practices, including the way we’ve handled your Personal Information, you can report it to the relevant supervisory authority. Please note that some of these rights may be limited where we have an overriding legitimate interest or legal obligation to continue to process the Personal Information, or where the Personal Information may be exempt from disclosure due to applicable law.

Exercising Privacy Rights

Any individual wishing to exercise any rights under this section should submit a request to CHIME by either:

  • Emailing at privacyteam@chimecentral.org; or

  • Calling at: 1-734-665-0000

Contact Details

If you have any questions about this Privacy Policy or want to exercise your rights set out in this Privacy Notice, please contact us at privacyteam@chimecentral.org. Your request will be forwarded to the CHIME Organization Data Protection Manager.