Privacy

Forms. The reservation, briefing, contact, call-request and data-problem forms collect what you enter: name, work email, organization, role, an optional message, and the facility CCN(s) you name, plus the page you submitted from. Each submission is emailed to Matt. The hosting provider's log records only a receipt id, the form type, the facility id and the outcome (delivered, failed, dropped); it holds no name, email, phone or message text. If delivery fails, the form tells you so at once and shows the direct address, so nothing you typed is lost without your knowing. The newsletter form collects your email address only. Every free-text field carries a note asking you not to include patient information, credentials or confidential client material; please don't, since what you type travels by email.

Downloads. The facility CSV download is free and is a direct link. It asks for nothing and records nothing beyond the ordinary server log.

Client survey pages. Pages under /surveys exist only for a client engagement and are not linked from the site. Your name is not collected. Answers are stored in a database with no IP address, user agent, or cookie; they go to Astrelis, not to the organization's leadership, and are reported only in summary. Who sees raw answers: Matt alone reads the raw scale answers and free-text comments; the client receives counts, distributions and themes, never a verbatim comment that could identify its author. Retention and deletion: raw answers are kept in the database while the engagement is open and for ninety days after its summary is delivered, then deleted; responses entered while a survey is in preview are marked as test rows and deleted when the survey goes live. The deletion is a script in the site's repository (npm run purge), run with every site release and on the first business day of each month; each run writes a receipt naming the engagement and the row count, never a response. A survey accepts responses only while its engagement is active and surveys are switched on; otherwise the form is refused and nothing is stored. A participant who wants an answer removed sooner can write to the address below naming the survey and the approximate time of the response, and it will be deleted.

Page views, no tracking profile. The hosting provider's web analytics counts page views and the referring page without cookies and without a personal identifier; that count is how we know which pages are read. We do not run third-party advertising trackers and do not sell or share personal data for advertising. Standard web-server and hosting logs (IP address, request path, user agent) exist as part of operating the site.

Form submissions are used to answer you and to fulfill what you asked for: a reservation, a briefing, a call, a reply. They are retained as ordinary business correspondence (email) for as long as the engagement or conversation is live, and deleted on request. The hosting log's receipt lines (receipt id, form type, facility id, outcome) follow the hosting provider's standard log retention. Newsletter addresses are retained until you unsubscribe. Survey answers follow the retention rule stated above.

Four processors handle this data on our behalf: Vercel (site hosting, server logs, and the cookieless page-view count), Resend (form-submission email delivery), Beehiiv (newsletter delivery and unsubscribe handling), and Neon (the database that holds client survey answers). Each receives only what its function requires.

Every newsletter email carries a one-click unsubscribe link. For anything else — deletion of a form submission, a question about this page, or a correction — email mattborchardt@astrelis.co and it will be handled directly.

Facility data on this site is public-source information about organizations, not personal data; see the data philosophy for how it is handled.